&(0x7f0000501000-0xa)=@un=@file={0x1, './file0\x00'}, 0xa) [ 67.223840] netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. 2018/01/12 15:09:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000aca000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, r6, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) epoll_create(0x4000000010011) 2018/01/12 15:09:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xca4) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f00003bc000-0x38)={&(0x7f0000fdc000-0x80)=@generic={0x10000000001e, "02dd442a0000000000ffe800000007e77f00f86c48020002000500f1ffffff009a480075e6a50000de01030000710de4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356000000061c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000854000)=[], 0x0, &(0x7f000012e000)=[], 0x0, 0x0}, 0x0) close(r2) [ 67.278141] dccp_close: ABORT with 242 bytes unread 2018/01/12 15:09:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f000081f000-0x4)=0x0, &(0x7f0000049000)=0x4) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/access\x00', 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) [ 67.344723] binder: 10073:10078 BC_INCREFS_DONE uffffffffffffffff no match [ 67.344738] binder: 10073:10078 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 67.344767] binder: 10073:10078 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00005ae000-0x4)=0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$dsp(0xffffffffffffff9c, &(0x7f00003e6000-0x9)='/dev/dsp\x00', 0x400000, 0x0) [ 67.344789] binder: 10073:10078 got transaction to invalid handle 2018/01/12 15:09:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) socket$inet6(0xa, 0x4, 0x5) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000908000-0x400)={"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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000dcf000-0xa)='/dev/ptmx\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000fd1000)='/dev/ashmem\x00', 0x2, 0x0) ioctl$TIOCCONS(r1, 0x541d) close(r1) r2 = memfd_create(&(0x7f0000972000)='\x00', 0x4) fcntl$setstatus(r1, 0x4, 0x40000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f000063d000)={0x0, 0x7fff}, &(0x7f000041a000-0x4)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00003b3000)={r3, 0x3, 0x10}, &(0x7f00005bf000)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f000012c000)={r3, 0x9c, "55f1fe33a0c87e96ca6211e1a0ad218545fed4eb2c9bc09285ce73726ee7454990ce69d252a7df718bea7c3a5530ed20437ce34b066efb0e6ba8ad0a68ca9da1480e8c71edcf15a55f1bcb6b174360a839a3226d9505b930a58d439e5f7816c612f95e813430dbe4064b55e7c0a7f04e67b7ad195449adaf41838417d63d9322ad6d9dd0f9e62c37d94ef2501aed914014e17cf75da2be7975d65c76"}, &(0x7f0000c1c000)=0xa4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) 2018/01/12 15:09:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000aca000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, r6, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 67.344801] binder: 10073:10078 transaction failed 29201/-22, size 80-80 line 2842 [ 67.480752] binder: 10107:10109 BC_INCREFS_DONE uffffffffffffffff no match [ 67.480767] binder: 10107:10109 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 67.480838] binder: 10107:10109 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 67.480899] binder: 10107:10109 got transaction to invalid handle [ 67.480908] binder: 10107:10109 transaction failed 29201/-22, size 80-80 line 2842 [ 67.612700] audit: type=1326 audit(1515769745.386:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9910 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=72 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 67.612718] audit: type=1326 audit(1515769745.386:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9910 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 67.612736] audit: type=1326 audit(1515769745.386:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9910 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 67.612753] audit: type=1326 audit(1515769745.388:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9910 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=61 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 67.612778] audit: type=1326 audit(1515769745.388:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9910 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 67.656411] binder: 10129:10131 BC_INCREFS_DONE uffffffffffffffff no match [ 67.656423] binder: 10129:10131 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 67.656446] binder: 10129:10131 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 67.656464] binder: 10129:10131 got transaction to invalid handle [ 67.656472] binder: 10129:10131 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/01/12 15:09:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000d87000)='cgroupmd5sum\x00', 0x6e93ebbbcc0886f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2, 0x2000000000000, 0x0, 0x7ff, 0x0, 0x0}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x20d4671c, &(0x7f0000e6f000-0x8)={0x77359400, 0x0}) mq_timedsend(r0, &(0x7f00009b2000)="", 0x0, 0x0, &(0x7f000006e000-0x10)={0x0, 0x0}) r1 = dup2(r0, r0) accept$netrom(r1, &(0x7f0000172000-0x48)=@full={{0x0, {""/7}, 0x0}, [{""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}]}, &(0x7f000041c000-0x4)=0x48) 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x80000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ceb000-0xa)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000f82000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000f83000-0x8)={0x0, 0x0}) ioctl$int_in(r0, 0x541f, &(0x7f0000f85000-0x8)=0x0) 2018/01/12 15:09:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fc3000-0x8)={0x0, 0x0}, 0x800) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000eef000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000096e000-0x4)=0x0) syz_open_procfs(r1, &(0x7f0000e59000-0xb)='stack\x00') 2018/01/12 15:09:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000047d000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000843000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00008e7000+0x4ab)={{0x4, 0x0, 0x0, 0x0, "463dcda42e89d9eb942deb12594a6e52875f4f5473226d7c5152504ae5e07c7bb0ea3458a9355bd81695ad7e", 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], {0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f00004e3000/0x18000)=nil, &(0x7f0000b6b000-0x18)=[@textreal={0x8, &(0x7f0000e5e000-0x7)="642ef3e130670ffc360f3036660f3a0f047566673e3e0f300f01796a64f32e2e0fbf85b10066b9800000c00f326635000400000f3066b8000000000f23d80f21f86635800000b00f23f8ba430066b8a800000066ef", 0x55}], 0xaaaaaaaaaaaabd5, 0x14, &(0x7f0000554000)=[], 0xc1) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000fc2000-0x8)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000806000-0x9)='/dev/ppp\x00', 0x80200, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000ac0000-0x10)={0x3ff, 0x4000}) 2018/01/12 15:09:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:07 executing program 0: remap_file_pages(&(0x7f0000dc7000/0x9000)=nil, 0x9000, 0x1000009, 0x3, 0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000dc9000)='/dev/mixer\x00', 0x2000, 0x0) getpeername$ipx(r1, &(0x7f0000318000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f00009df000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000a8a000-0x4)=0x0, &(0x7f000078a000-0x4)=0x4) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f00001e6000/0x18000)=nil, &(0x7f000090e000)=[@textreal={0x8, &(0x7f0000bbc000-0x3d)="670f2014660f38dfd766b9810b00000f32440f20c0663503000000440f22c064f26f643e0fc76d006566670f00d3660ffb4490b800058ed00fc79c1900", 0x3d}], 0x1, 0x68, &(0x7f0000851000)=[], 0x0) setsockopt$inet_opts(r0, 0x0, 0x800000000000004, &(0x7f00009be000)="8908040000", 0x5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f000006b000-0x8)={0x0, 0x0, 0x0, 0x0}) 2018/01/12 15:09:07 executing program 4: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000006000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r1, r0) fallocate(r2, 0x0, 0x0, 0x400000000006) ioctl$KVM_NMI(r0, 0xae9a) 2018/01/12 15:09:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000475000-0x14)={0x1, 0x800000000000003b, 0x7, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000bc6000-0x2)={r0, &(0x7f0000307000)="", &(0x7f0000da1000)="", 0x0}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000cb9000+0xd1b)={r0, &(0x7f0000e28000)=""}, 0x10) 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xd18000)=nil, 0xd18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002e9000)={0x1, &(0x7f0000788000)=[{0x6, 0x0, 0x0, 0x0}]}, 0x10) mmap(&(0x7f0000d19000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00006da000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000045e000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000001000-0x38)={&(0x7f0000d16000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={&(0x7f0000001000-0x294)={0x294, 0xb, 0xb, 0x4, 0x0, 0x3, {0xa, 0x0, 0x2}, [@flag={0x4, 0x68}, @flag={0x4, 0x95}, @typed={0xdc, 0x77, @binary="a21036b16efa4b9c7b1f1df36aa39fc15d513c8ad8cf649d65e0e8ec92b428dfd47f7a1bb4ea21c2b54321b8d72ef2753a8b37aeeace4e5071a855d27b66e84422832735af3267b4a87fe1b6f8b14964b49efaa5468526fe3720540a8cbee97f8a3a087a0ad12de321f8c334438de1b3d153d4d493d7a66e7e5d96bae58f5f5268446d92e403d0719b5bfde2de828ada190d8fbdbcfa8be5b2445c148066b2f7f0a7e70d8a721ba09ad471bccc319339da768e4df03ad2aec4ca24a1fa1e57d7fbb3af1a06c5e6cd8e364c4b8db606c66abfbe"}, @typed={0x30, 0xd, @binary="e2b31aaa4108cd58c15fadf1393a90792f1b993337efec7ccbdec56731f69d3572dec97c0f2d71"}, @generic="b9c66af9aecae6a1eb329ad0d12035e3c8c75f4d202f30d49b5401d76de28cf9bfc5182b8a30aab3da6c1656a249a2b68ac6a9186e4dabef20a374c6d8ad516aa8fdd559bf0b7291a568501fb291e5745071a28d9441c9f9f38088dd677ac351cc06612fc26cd1d061d219be159b78d0c51ec7d7f97cb87ff4b625a690e5343f1eedf5a562c8b284c27874464cc47391ce6909e12af1168609d76a4609fcd2a3155b67506d18ef079299b0eef8040bbc", @generic="dc9c70ddd3cf95084806deecc538523748b3b5471efe0390024d3355a31ac28491595352c1423029e8db2846164f0e5ec31effc347cd863ee5393df1c3778332d96d3b48a0c35e8dc3de5b304a0c1e5c7adf4a7f02e2d9c119babece004197edc95a739cffb01ab25f1c7ab26d85d7d5e6182d6029689cd447b32fb2ed9d4b8a3ff621ff7a4af6918310212fc80813d96c23df559db8f5f69759a927d294db38d2ba5c154633b59e028eaddd81f0708e95f837e08b5645bd12b636"]}, 0x294}, 0x1, 0x0, 0x0, 0x2404c880}, 0x811) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000d1a000-0x1b)=""/27, &(0x7f000023e000)=0x1b) 2018/01/12 15:09:07 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00006b4000-0x15)='/proc/self/net/pfkey\x00', 0x40002, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000001000-0xfc)=""/252) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000d22000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @random="de895db1468d", [], {{0x86dd, @ipv6={0x0, 0x6, "a228af", 0x10, 0x21, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000003b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0619f2", 0x0, "200091"}, ""}}}}}}, 0x0) fanotify_init(0x10, 0x1) 2018/01/12 15:09:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000068f000-0x9)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) sched_rr_get_interval(0x0, &(0x7f0000a39000-0x10)={0x0, 0x0}) 2018/01/12 15:09:07 executing program 2: r0 = inotify_init1(0x0) fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) r2 = dup2(r0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000000)=0x0, &(0x7f0000a1c000)=0x4) [ 68.541639] binder: 10148:10152 BC_INCREFS_DONE uffffffffffffffff no match [ 68.577433] binder: 10148:10152 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) fsync(0xffffffffffffffff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000026000-0x20)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000465000)='/dev/qat_adf_ctl\x00', 0x200002, 0x0) accept4(r3, &(0x7f000010a000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, &(0x7f0000572000)=0xe, 0x800) r4 = eventfd2(0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000e63000-0x37)=""/55) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r4, 0x3f, 0x400000000000002, r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x8, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000fd1000)={0x0, 0x0, ""}, &(0x7f0000fd2000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000026e000-0x10)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) fanotify_init(0x3, 0x40000) 2018/01/12 15:09:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f73000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00001d9000)='/selinux/checkreqprot\x00', 0x280, 0x0) fstat(r0, &(0x7f00006bf000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, &(0x7f0000f4a000-0x4)=r2) accept$alg(r0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000a06000)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000)={0x0}, 0x8}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000e1000)=0x0) perf_event_open(&(0x7f0000ebc000-0x78)={0x7, 0x78, 0x9, 0x5, 0x400, 0x9, 0x0, 0x7, 0x80, 0x2, 0x80000001, 0x5, 0x0, 0x81, 0xfc39, 0x2, 0x761f, 0x401, 0x4, 0x4, 0x2, 0xfffffffffffffb93, 0x3ab, 0x7ff, 0x2, 0xe461, 0x43, 0x8, 0x308, 0x8, 0x800, 0x4, 0x5, 0x5, 0x3ff, 0x40, 0x7, 0x11a, 0x0, 0x5fb9fddb, 0x5, @perf_bp={&(0x7f000017a000-0x1)=0x0, 0x0}, 0x10000, 0x6, 0xdda1, 0x7, 0xffffffff, 0x100000000, 0x2, 0x0}, r4, 0x10001, r3, 0xe) 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xf8db, &(0x7f0000151000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00008ed000)={0x0, @in6={{0xa, 0x1, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7fff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000, 0xffffffff80000000, 0xf5f, 0x1ff, 0x3}, &(0x7f0000d4b000)=0xa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000097b000-0x98)={r1, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x100000000}, 0x98) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000242000)=0x0, &(0x7f0000dd2000-0x8)=0x0, 0xfffffffffffffff9, &(0x7f000094f000/0x3000)=nil, 0x4) r3 = semget(0x1, 0x0, 0x316) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f000030e000)=""/233) close(r2) syncfs(r2) [ 68.603940] binder: 10148:10152 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 68.611719] binder: 10148:10152 got transaction to invalid handle 2018/01/12 15:09:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e3000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f000000b000-0x38)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000a000)={&(0x7f000000c000)={0x14, 0x1f, 0xb27, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000d29000-0xb)='/dev/net/tun\x00', 0x0, 0x80000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8983, &(0x7f0000006000)={@generic="1b520310b564c42354e2d0b8a14e1ad7", @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000006000)={0x0, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f000093e000)=@generic={0xcaca, 0x10001, 0x1}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000bea000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000170000)={0x0, 0x7ff, 0x8}, &(0x7f00009d4000-0x4)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f000066c000)={r5, 0x10000, 0x3}, &(0x7f00002c5000-0x4)=0x8) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00002ad000-0x18)=@generic={0x1b, 0x1, 0x2}) dup2(r3, r0) [ 68.611732] binder: 10148:10152 transaction failed 29201/-22, size 80-80 line 2842 [ 68.688295] binder: 10185:10189 BC_INCREFS_DONE uffffffffffffffff no match [ 68.688308] binder: 10185:10189 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000000b000-0x9)='/dev/kvm\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() 2018/01/12 15:09:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000284000-0x8)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000c48000-0x14)={0x800000000006, 0x4, 0x84, 0xf, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000a5d000)=0x6, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000bf4000)={r1, &(0x7f0000cb5000)="c80585d155f687c15ff7270c3455ce89395b4e94fd730a4b9d196bc36fe21dc81f81af3cfc070acc1ea2fac1425b25894651a18859882a3379db7e83985909a75bde3e6411ef5cbed740728c5f4444b4965d5942360562ab1d9026bc134ac605516201e53b2cc3c50cca27ae87f9084af4876dbf4ae86aa90cde1e6a683c4990c6f86e6dc458b5b3336be55878c283ad3ae0290a293f93a09d0cfedcbf736cbbe7040c776edfa64cea6dcbca49b976ce45702c", &(0x7f000091e000-0xca)="ec3fbca2099d6a293e5c24ab1f1143e6950ddea74dacb377ed08ba40f0fadd4893f9cb687e79be929862caa9db76b5388bdcd13ae3e7dd2007859fa4aba967f5f50119bd98646f29e77e64d847bd0b2e1a0f6016fff5727245752237acf80256f25b4687e8056ec5e60b4abea9fa81b4642073def726ade86691c01f6a49016445eb3e3f70438d267a2ab9cd314a751dac6efd625224a9f3ae519ce2c02a636e97d96445b477a4a9e63fb9408e5af5ce266c5f4e17eec80cdefe5364cc66757508501e0f94ad1f19b734", 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000011f000)={r1, &(0x7f0000518000)="", &(0x7f0000a4e000)=""/0}, 0x18) 2018/01/12 15:09:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8000000000000003, 0xff) bind$inet(r0, &(0x7f0000dbc000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) connect$inet(r0, &(0x7f0000c71000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet(r0, &(0x7f000096b000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x296, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000e03000)={0x0, 0x0}) socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f000006f000)=0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000994000)='/dev/sg#\x00', 0x8, 0x309040) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000f72000-0xe8)={{{@in=@broadcast=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000049c000)=0xe8) ioprio_get$uid(0x3, r3) getpeername$inet6(r1, &(0x7f00009c7000)={0x0, 0xffffffffffffffff, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f000076d000)=0x1c) arch_prctl(0x1001, &(0x7f0000529000)="") 2018/01/12 15:09:07 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013000)=0x0, 0x4) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000011000)=0x0, &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/01/12 15:09:07 executing program 2: mmap(&(0x7f0000000000/0xaf0000)=nil, 0xaf0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ae5000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000aee000-0x8)={0x1, [0x4]}) pipe2(&(0x7f0000802000-0x8)={0x0, 0x0}, 0x4000) mmap(&(0x7f0000af0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$llc(r1, &(0x7f0000af0000)="ea990d702e325b4d43f56450fb68c035f08d6d606edb0f48fd75a26a8b9c3a94bda3cec1aab469b897d5dd23105a31a18eb0285a9c22b098dfb2fe7d3ad9cac2470db304f7166a8fa65aefb5d50e804fc4adb4038815e2d73949143de610b99df47b9d2569b351f5fcfe475fe3338870077379a0ca6b006102a494b1c924cecca6bdec39e9f5d1d475f49e6d1a93851bc24bb9b05919c31b8ea395ad7e807ead8a3fe5039c189dd62e17f18903a0be2de77943e19ed522084f3806ad608eb3722da8ea51c03b2cc3b0bfb0024d305a79343cb54e8b323546f5915b7b024c77d0569adb834a43071cc03f37f114cd7e9afc91c67f0f23f5bbabeae2577e73603f6b7e90c389cbb5ed24cee488a3af732a6510b47b7061d57951add0b1dd0e8da29cfb9b04ba24873e8f2f8cc2d542eecfb3b7cebdf4abb3298b6924a605444ba5dbbc68b50d353a7bd3e7525fcee737f9a0b86e024da6243eb53eacca8a47c9bfa03ccf5e80c2345505f42fc1df5fda7db990bc022b906ebc99c1f69f75394eebc8f63167cf38714543026e9dace4cb3a24f7d2bda493d87bd40a254ba8853a5d63f505d178adcf298f189c4144094497ecff23d9e4253bdf1f9121c3b541f1303bfd125f377b8214b069ad80419e9218a812099e51cc4eb7a9388082a0a49aabeab6c5ed0cc2dff95aec7b598c6bbedd1cd5e98fe2dc2341cfc6d98c53c6ec18cd0c1ae0cd0b201e5ee9cc8829b9ed7fb822f3f20bab74a790872720734255ca48c8d931324925287523ac3a5aee4ae872a7437ee035f75cb5d4f5cde2cb29b4c1b6495a46f98c7eb99a61ba36846a624c4f6cd6a41287cc0f4f9ecba995bc2293ad299c35a8f467331a8ea8334b7cb94d0d9d3d398f0a31cba85fbb5e19f49720885266b79548059276e506f9a6dbdc9cf151ce897fd051f74180a97677a61348d8fcc9d40f237ed6c3c0fa5a28d5ff0a18f98de75b850972a3568351fea738128a248d8d351a37de67f105f73eb1f8a3b49ddcca38dd84b9441a77a40f6a39d6944cf29323a0c3ab47a69b1525bf5df7a3661e06d0de6d9cf09afad90b18491d01d986a780b25259c150dc2d12f3d49111eeb9b6f0146f5664972c16dc2b1b27a373b32e376e246641897551cdbc8a06fe176563688f1ab9d09fae86d1bea0824d2b8ec1e752b79becc6099b616625468736587d3bb437689cf2e02d96c4d5e0dc12f6a25900ab9bf4d7427a1cbf223247299afe0a22451503cc6cb6c0ed19b5e9125862c1ce9961576b35fd4ce9a74fef4646126bbed46fb71ceb4b454cb69905a75f03c4faa4394aa14e90ae7046ccb6da4970f84dd9bd838e4b4223e8753cda76794f1bb08afda26535e22c7b61c9ce8d501dfbf2b3f9d406663e45297aeed51b6c153c7d208728e1c75b704a8f30a851f0866b9f74ced0934f2050832352fc75dfcbd6fa6d863931de031da2044941dbbeabe260d2e37b85061d1e422fd1a47026353804c4d903e5d8caa8f5d32d3041c57f7dee175de7c32a19ec78a640ccec24284361ea0635292c1945afda766bdd0e6ae429217e75791acf88793432606803649e59132134241b991b157cf7d3cf1da116009133c3154a85d0e708ea0c795ce323339768c23d265a01a960c1f867f28e591d836e56254d012701aa5e98498c3f9fe9786fd171536fb5a7990506db4b728a910af4d8154ae34cd103f4f5530ff2646081f34c2bc196bedd3683d917af095a4d7c335d5ec34fd7c39ce91b3545e56501852adedb000d1922c66c40a4a5ece68e746207d1583e018393672d722600aaea76388fcbed77f54f8d3b4b895c3a50df6d10dcbc83dcaa56b48f6ece69f3c51a3e39d4807c44cf16e6e46f803b5f12bcbe09f37a8ae835e1cc677923d5e920409a5f0382d950d94a6f49a7eaf3f406b0fedba12f0337328fccdc50f1848f1d3683e2cf51a62dc35d0a45211a1ef3780eb077b8613bf8c4363d1f6b87fd550f3b67d2bc386717415bee070172ddc4733dec670870c4f719a22caeec8629dae011b9703560c1af674c473294f0c7c7f4d6511462b19fea338a877517fc7ea472362dffcc1b9067a36e034b1d8f511a15aa7584c0b8e28284d7921f95327a70d7f4afd39e925b10387f128b2f6248b0a439713c47ca264559cfbccb139fa76ae78bc8bf03556107af47504a4176e21f4e83a8fac7da0d11606b8c68b1c5d977ebdbdd0f76129faf580b1f831cbfeb64e6791313403abfc26e4a05bc00dc9677dc3344e6ebbbd6fa33c51274b96aaa4189950f6af252a329d3fc9c6cbe87b6c9ee7437370c7f3220d937d80db70e9d67efef1afe68d56fc56ff32eaeb5484f56f83de7b35c912ce4ee97646d6130077a4327984f96e7515390e79cbaf3269a20255e442191348a09a7f318988bfbf00d04028f2eea4f2f49289b7fa89b9854652007f886397d4abbffb0825b44359d95a50469f01416a0614eac5910c57973754dac1338c2e613e32ce4988b8788c0d38e5b6206f9ec938311e3ddabd5bca1e7991ca942ae9a39dcedf2d5c2a75f1132fcf27fa1d54e39aed8b33c469e5169477fcf77f4258871cbef96ee667f61ce33c5670f3a6d39617772f4f53bb961a451666ba3f2ee4147d8e534b74660a6c97c0651954bb744f9d77ec72c3fe7e06b542cffce9e35e0ca99796137e8f61bc207a95b8513f48f5cdd778ec647db200263812e28ef7fe41a3fdc56d89e2ff0a76213b647db2ee77a62c6baffde91371a28bbdd869cd26f372a9d003143a5e61aa1d12339e651946bbd9873cf688a108a0d4488e45e80917cf3a633e0a1c2b98bcd73d07fb1e775760ef23cd0ede3428aadd10dd626287c2ee2bd3cb35b82a23ee7b23a141ba887de2c8558938512b063a1e447cb9766ba9bfbcf5916729b9d8396beeb310bf34e846d667568edbe2604846829f14bbc65b6dd1ddcfe5ad6ef6b7ef1f55437ac070bf5a382b68498fad2a628743badcdc94a99f68580259d0111498bd7a8eabc1586a1a8a100cbe60811b007cf1098a1194ba81fce116eb6caffb9d7d4f9957942f12b0405c9e9aecf92ade3866bfb25943fb4e89712e206c785e8dc9541692a3ea68989e113d87bc5688495579c329604e1ae27d82fb9493b78a3bdca4879ee76990b263a6cf0ca5bb00815085b466583b545f471808777277779fd5f864d34ef56ece6d5e296e9120f830b5b84db42145964a656aa311eeabdced56a5d6d0e7acfbfca59f7a7811dc36345f75ba64f3390851f9ef01e8002bd68a37476b5e79604c3964f01b10bf002a49db6716b893d09841de9d1ad225cbbaa88d21a06625dc7048976edc4d44964b92b042d171ebfeb37da3b0d3d0d59cd61018a7b349a604c5b7cd43055e13fe9ab6534195685f6f174947e64a72af83a0da28770e5e7dbc8245c5b15b0bf1f117e894ec81f1eea0ee0c1f36b494b7d035815f2c1d834870bb2a9ded2cb44ab18eb53808730aa72178cbe4128747f44426ed52aa3547690dc607553181699b48fa5a38c697d59b90f126c5e23620b8c6359639a1c50d5c2602cd3bab85ca7798af9a7264e05314e2e3243be7411869174233a5336b3c3bd761f1fa6353b68381278ac5c0630dc45a46dbffb9d9c8e9bbe95877fddac3abaf128f9ef077a2e0a1002f088d3f6466489aaf677f0c46a96be76751d6759e0ff4cfbc1eed7b4efac098db75ff84282904084413dd26f67123117f33f1fd69efdeb708f6ec01fed71fab2a9cd22e1ef355b1cb59346ccf265d5a796973f0ca4096358e9fc6b23cd2e7ca33694d22d4b9db8e5015bb5eba02a9e0273dd86752729e0b162777804431e232bcd50a08ea27e20013729036fcd56f4a3c3fc6b44453113c02dbe0c0e7c90f5493de6c3456ec239fb2f87c1cee0986d667a9c22e3c04be413183648d1329e3a47e0cf9542e4147749c4e59dbf232d61678ee98f7944d8d8b8145697efd7ee15097bd785cdb8a46b9ef74e5f7e76e1dbd043f4d5f5a67651cba82bec67f83ea4d49ee3c54330f000e59a7a767ea2a6830d6276d507e69d506f80d90ddad67a1acad1f9f8aa6e3964f2526b1ff59eac7bdff715cc07bd524f0ade38e4548d2a76760f4ee66e0a2e830b0f808c4122abd99e261f830977f3f9f26cb74451bdf509735e0802c84aae8e8141baa98e7f89d80575509a358b13a2415cee1f893505e3c906a1f4a4341361bbed70b4855d117f25b648853aefeeda9dd5687fe5afb6025ad7dc52f03a36a5a83e92653606b69d98d0aecbaa2036e79557443780eef117f6b543bc40cece2ba606847f944e36f64f39a1a7cac9f0c6202796b1e26a3b18b5e7161939eb5b6496f93cca1734195deb341e2bfc5d9405e1f11064f93306877e5cad722faeb589bd2acb8ef8f45b98086fba339a05911dd3a052d61ef72ca02b34b17c075615d0942ef5ea936c4b9e541d08adbb67e458849988a7882db025273bfe45a94c62bf0f067bd472f04bc0fdf6edfb2129fb577cfa16fabb4b33aec926f916ca6e009ef0695d7baee87c6c7e90c562e3c896a94f6f186e993b891790656e931cc5cb97e37e2e5e869c661dd609267793a12083f02aad90a2f658c328f2d92974704b0b8f301c35724a845e98f117e9f7fa9e8e8ea5aab53365835ad42ca3db1748d91be8f00d2fd7ab8cf48bd43cb8e46aaf808e1d7f88c2b27262c4a0da2f4a49eaf1fe4a2b067f385fdfdbb1525b5f6aff1b9254054b47a729639ad1f8649abe97903468b3de4591a16d011b7e90327a93c8a1f4739cc0962fa278d705fd18af7ddae1b93e12fa4b59932e15c32ac0e02ecee4eac6e4c2828154192ba3d56560d38350d2f8071e6a0980681c10f3eb1f9e2e673bf2e3cdb194205ee1bb312c1129e0f2f671949c62cf411040fc01fd68be701fc97637522903463e788970d01c2d89fcbb8f0d0d45b6680ea53175506f15d6751c6382ebb112dd2c25ef9582c2252b9270b7efb24dcff7ea4876e2a168693d7746746ef36853f8bca1f4e034a58820cf494e3834bd3d88cf25c7d8662aea1b77d7109664dc8f55fb2cc9e1edf7cb6b6dffd204e6d43197180c26141e382388c767c910b5363ab9b7b8044396950fa75924ba3c51fd45c134489da385d0a62ce779a034cd37a8982345d8bf5f01a639cf257307ebf78d7fdc197fd0c608769d01786b207c36640e7b452ffc151c44c4c821b5dd19dbdf6d8938579f33fa66b4756037f13a24f288dd168e3fa2a0a85c5833c9ebd828499c8f18145637bd2efd8145cd908cc902fb75c1bd03581238529f14b40aa49dc75764472545d7b575b1228462183bbd6adea30ceadbc2b22e25dcf0f1d572377110d31a2110be7d1aa126a96b723ae5fb981de45e4051a1065aa6d4c223576fd4d2898204d7a8cb4fd790e8b7e873bed4ceed3eb8e49e32c2ce99a6359633cbfa665f21a45c830d7bbc951b8f74fb3f975989f1359a856944b3b8e49d3b5a3a94d3abcfa1fc3d35249e4c03d9eea1d4581aeed724b4eb5eec8f1df4a978e0592b336c5ffdbc290e8134574eae36b95d59511fb749c919b1fa75e72d7eea59db1540bfcda18e671437d719ce6cfc84423f7a3e819cf25eca8a9b1c283f7c83db91f4a45ca7c1ba35694a50cccf8a8107cbc17495162d06b49710b7bf57c7dce55d311038eb7ee387e11d3d65f8768c26f2e083071c8ba6aa38c6831b8b8182453ed3fab4ffd5fa60e09660cfd4be860757cff18e4c4d21e85e0c97983d08d50a270bd91ae55ca80f1225231d0c14", 0x1000, 0x0, &(0x7f0000405000)={0x1a, 0x5, 0x4, 0x40, 0x80, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) 2018/01/12 15:09:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f000091f000)='./file0\x00', 0x8000, 0x1) getsockname$packet(r0, &(0x7f00005f8000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000bb0000)=0x14) [ 68.688333] binder: 10185:10189 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 68.688354] binder: 10185:10189 got transaction to invalid handle [ 68.688365] binder: 10185:10189 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000d02000)={0x20, @time={0x0, 0x1c9c380}, 0x8, {0x1, 0x0}, 0x9, 0x2, 0x57, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40000407ffc0003}]}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000ec2000)={0x0, 0x0}) r2 = request_key(&(0x7f0000b81000-0xa)='blacklist\x00', &(0x7f00005f4000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b67000-0x1)='\x00', 0xfffffffffffffffe) keyctl$invalidate(0x15, r2) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f000089e000-0x8)=0xb615) lgetxattr(&(0x7f0000c56000-0x8)='./file0\x00', &(0x7f0000027000-0x15)=@known='com.apple.FinderInfo\x00', &(0x7f0000f64000)=""/194, 0xc2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000d83000)=0x0, &(0x7f0000f91000)=0x4) chdir(&(0x7f00004c3000-0x8)='./file0\x00') 2018/01/12 15:09:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000d21000-0x8)=0x75) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c9b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs={0x0, 0x0, 0x0}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000b07000-0x4)=0x0, 0x4) r2 = dup3(r0, r0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000f98000)=0x0, 0x4) sendto$unix(r1, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) close(r0) 2018/01/12 15:09:07 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000d19000-0x79)="", 0x0, 0x0, &(0x7f000085f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c) process_vm_readv(0x0, &(0x7f0000a5d000)=[{&(0x7f0000ebc000)=""/181, 0xb5}, {&(0x7f0000d83000-0xed)=""/237, 0xed}], 0x2, &(0x7f0000950000-0x70)=[{&(0x7f00001f8000)=""/19, 0x13}, {&(0x7f0000ad6000)=""/0, 0x0}, {&(0x7f0000ba9000-0x39)=""/57, 0x39}], 0x3, 0x0) setsockopt$sock_void(r0, 0x29, 0x2000000004d, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f000000c000)=0x0) 2018/01/12 15:09:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f000077e000)=0x0, &(0x7f0000942000-0x4)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00008e0000)='/selinux/status\x00', 0x0, 0x0) getpeername$ipx(r1, &(0x7f000042d000+0x718)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f00005da000-0x4)=0x10) membarrier(0x800000000010, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x8, 0x0) r2 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00006e6000-0x4)=0x0, &(0x7f00005c4000)=0x4) 2018/01/12 15:09:07 executing program 6: keyctl$update(0x2, 0x0, &(0x7f00000e1000-0xca)="c3", 0x1) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000c5f000-0x10)={0x0, 0xffffffffffffffff, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00009f6000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x2}, &(0x7f0000acd000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001000-0x1)=@assoc_value={r1, 0x4}, 0x8) 2018/01/12 15:09:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000db9000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00009c2000-0x160)={{{{0x2, 0x1, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0xcc9, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xf8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x7, 0x1, 0xfffffffffffffffd, "62a70216b1368c631ee829ee7fb24f8d7eea59e88326a4c28283c8b22b9d61852e7e540d0d52c350b75db3dc3c24edc33939cd4c81171ca29ca2a86cbc96c2602156d3039653082f8d36fb3d450a82b3"}, 0x160) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00003ae000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00002ba000-0x14)={0x3, 0xc, [0x20, 0x0, 0x2]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000099000-0x28)={r0, 0x0, 0x8e, 0xbb, &(0x7f0000abf000)="31fd216105f361ce6fe5a330b244349c150f73faa6d665c884a6ce03cc2cb5fb2b0dd02f56eee5b63fd2b32002e3d770babd72e4c8fcd49b0fa3dac74376515f21001525d023153e178b157fa791b04bee8c21deae9c463834ce313ae4d910fda5637d2c1a76104a7e0beeaa9a679b675f8bad43935fda938dbf0cc0e372c14899f20bb21b0e2f6e3273e9213630", &(0x7f00004f1000)=""/187, 0x2ae, 0x1}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00005e2000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ce0000-0x4)="", 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f000064d000)=[{0x0, 0x0, &(0x7f0000162000)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x4008000) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2018/01/12 15:09:07 executing program 1: mmap(&(0x7f0000fce000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000fce000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001000-0xc)={@loopback=0x0, @rand_addr=0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000ec6000-0x28)={@common='yam0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000fcb000)={0x0, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}}) [ 68.840677] binder: 10215:10223 BC_INCREFS_DONE uffffffffffffffff no match [ 68.854997] binder: 10215:10223 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 68.866523] binder: 10215:10223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 68.873846] binder: 10215:10223 got transaction to invalid handle [ 68.880163] binder: 10215:10223 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2018/01/12 15:09:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r0, &(0x7f0000a5c000)="", 0x0, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) mq_timedsend(r0, &(0x7f000066c000)="", 0x0, 0x9, &(0x7f000058f000-0x10)={0x77359400, 0x0}) mq_timedreceive(r0, &(0x7f0000659000)=""/131, 0x83, 0x0, 0x0) [ 68.888266] kauditd_printk_skb: 45 callbacks suppressed 2018/01/12 15:09:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004ae000+0xb5c)=@generic={0x10000000001e, "bc07000000008d0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe00000003000000f8000007003f010039d8f986ff01000000000000af50d5fe32c419d67bcbc7e3ad316a198374edb9b7341c1fd4cb24281e27800000100076c3979ac40000bd837e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000448000-0x10)=[], 0x0, &(0x7f00002d4000)=[], 0x0, 0x0}, 0x0) pipe(&(0x7f00006cf000-0x8)={0x0, 0x0}) 2018/01/12 15:09:07 executing program 2: mmap(&(0x7f0000000000/0xaf7000)=nil, 0xaf7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ce000-0x9)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000af8000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000af8000-0x8)='./file0\x00', 0x0, 0x46) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresuid(&(0x7f0000169000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000af6000-0x4)=0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0}) 2018/01/12 15:09:07 executing program 6: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) poll(&(0x7f0000009000)=[{r1, 0x0, 0x0}], 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', 0x101000, 0x41) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r3, 0x5}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f000000c000)={0x0, 0xc4, "d82f260c138cb4e9c12197a0f8dbe0dc26da159b7787c92f5a39a0ae1b2b2da3e9d531167d1e36d6dc25537419b49fd05aa830cdeab00ece9b7de67566af3d470fadddbf5cda9c448d22f8d084c8c5a06fa8b55eb8bb59da5fe9d98e0bfefaf300185be4ed2772d316e22f2c73b8d53b7069b1979dc78826ea7460a1448de0fdb683ac21ff4d255c60da0462c5349f5b59f795cf698b015d156bd8701eb2a57e3e13821b1e7a0833c792019d8fd7552458074853fe38a2c1058ea21d12f5115c31816a45"}, &(0x7f0000007000)=0xcc) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f000000b000-0xa0)={r4, @in6={{0xa, 0x3, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000, 0x200, 0x5, 0x9, 0xffffffffffffffff}, &(0x7f000000c000)=0xa0) [ 68.888273] audit: type=1326 audit(1515769747.768:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.888904] audit: type=1326 audit(1515769747.769:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=53 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.889913] audit: type=1326 audit(1515769747.770:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.891946] audit: type=1326 audit(1515769747.772:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=249 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.892390] audit: type=1326 audit(1515769747.773:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.893273] audit: type=1326 audit(1515769747.773:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=250 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.893471] audit: type=1326 audit(1515769747.774:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.894888] audit: type=1326 audit(1515769747.775:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x452ac9 code=0x7ffc0000 2018/01/12 15:09:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:08 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="93a787d5a9183569520c734fbe54ec7ebb5a89bb2d8701e5c594309472624af2a9b45b2e73fe918d061546096ea5b63a8fb7c7e713cc3d91469691570e7879329e62a9218d397f51cdec857f4e455117f01515ffdc40ba4c140a1804f72ef744d974b984e631c663f141015b46ca64cab26fb1ca9e695147fe349c263777bc2fccbe02939e275ae20a5349a1e1be81e04f8aab97e08b5cf84dc5fd7bed5e272c5dd47d78e3e7d7d99e46808bbbc9bff5b6782b384227520b40c31c9c2f86eaff50fcb24a84ceb562127bc411e48ae75798e48223d087ec3341aeed6c31435ceaae1d034bf313ca402811418e6b2a1715f7b2", 0xf2) mmap(&(0x7f0000000000/0xc4000)=nil, 0xc4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000073000-0x8)={0x7fffffff}, &(0x7f00000c1000)={0x0}, 0x8) mmap(&(0x7f00000c4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000b8000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000c5000)=@generic={0x91e5, 0x40, 0x4}) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f000005c000)=0x0, 0x4) writev(r4, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) tee(r3, r2, 0x6, 0x0) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000099f000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$unix(r0, &(0x7f0000e49000)=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000970000)=0x8) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00005c5000)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x2000000000089f0, &(0x7f0000ef9000-0x28)={@common='gre0\x00', @ifru_data=&(0x7f0000ecd000)="14774ff30eb908000001ff523cf4f9dbc04de6cc18b4aa34c26f720c6cad005d"}) recvfrom$inet(r0, &(0x7f0000556000-0x57)=""/87, 0x57, 0xf3975866a57c31a7, 0x0, 0x0) 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000f6e000-0x440)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x86dd, @ipv6={0x0, 0x6, "334b8c", 0x8, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, ""}}}}}}, 0x0) mmap(&(0x7f0000f72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000f72000+0x7fa)=0x0) mmap(&(0x7f0000f72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f73000-0x9)='/dev/rtc\x00', 0x20000, 0x0) mmap(&(0x7f0000f72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000975000-0x8)={0x0, 0x0}, 0x4800) mmap(&(0x7f0000f72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000f72000)={0x0, 0x0, 0x0, 0xb, 0x0, r1, &(0x7f0000f73000-0x2)="07d225e038434e84bdb19103e9a918545430037cc064f8ad5196062b75b961236163a9b9a982dc1d58d7f0beda8948387e6069db4cb9629caaee16c1aeee25d5782c22221e502241670dd40e576d4805bbcc6f0f1fce91374ef3995dcb360c8f5058f2a598f8f129ee5743b60bdd016935d795f8fda7ec5f97b7481c7ef6bd49838388b0e9d9c296061c03be011823e5f10c0ead24ae524df556459c3bb956568445e8925e0d9e70c6a07d822eceab4790380d1f68060a863b", 0xb9, 0x4, 0x0, 0x0, r2}, &(0x7f0000ad0000-0x20)={0x0, 0x0, 0x0, 0x0}) 2018/01/12 15:09:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004f0000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000a6b000)='big_key\x00', &(0x7f00000fd000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000423000-0x6e)="b72bc4f8f7f0764566193fddd877c6008573eebfb0d4313cf6b3475ba3d47b5028c03c5191351a12b439e02014fd0f591754a3d0d164f07cca4af821a6895b43d026db8e193bba27d7dbd97924e4b931c02c02ed686089b35e1802c637b22dd2b1dac38aa158bdd6af51e3f0fa55", 0x6e, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000cba000-0x5)='user\x00', &(0x7f0000f18000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000839000-0xc5)="026c5eaeca908ffd1efa34caf83f4412ca449746cef69308f6357f7febd5a7a16e4e0dbad0828b909cfde9079cfabb18172610c1d5ff123c382501c68df28c62e22afed3ca934bb6aad9ecc5fbb1167cb2e9fa5b1a37aa9ab77aaa3a9badc69c11982b1dc5f3e536251471d66078c4e4ff66162c3ecfde385167496e5332c51ba84dcf8d552795e8349adfbc0e369475edba3fac99952d119fc0f58071b45bb285fe663fd52a331b81e7720d3a958c29fec143bcbe56b98207f1549ab373e6a058d8e8c2ba", 0xc5, 0xfffffffffffffffb) fadvise64(r0, 0x0, 0xd5, 0x3) r2 = add_key(&(0x7f000075b000-0xb)='asymmetric\x00', &(0x7f0000018000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000702000-0x73)="52fa4fac9117e7f2683f756546e7d24e544d2d66c2205dd762a180f630a6d2c22d3c1d7457909e5cd02c95825fed69196d29f189466759a7bac89d6a6dbfba254deea2d35769791a8bffd87975533cbcbabcfc9fef88e1cd33b9c80e11d335a5a1553503b3424cffe8f0636ecbe8f178da7b59", 0x73, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f000001c000-0xc)={r1, 0x0, r2}, &(0x7f0000041000-0x9)=""/46, 0x2e, &(0x7f0000231000-0x38)={&(0x7f00007fb000)={'digest_null-generic\x00'}, &(0x7f0000615000-0x23)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00007b7000)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00002b6000)=0x0, &(0x7f0000d76000-0x4)=0x4) 2018/01/12 15:09:08 executing program 6: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000bc8000-0x11)='/dev/vga_arbiter\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000000)=0x100000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000017d000)='net/ptype\x00') pread64(r1, &(0x7f00009f4000-0x1000)=""/0, 0x0, 0x0) 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x163, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x8864, @ipv6={0x0, 0x6, "a46466", 0x12d, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, {[@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}]}, @hopopts={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@jumbo={0xc2, 0x4, 0x0}, @enc_lim={0x4, 0x1, 0x0}]}], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0xad, 0x0, "0c9a73a5a7b01fae1eb721de79f944c707fe03d95b118f2ebe53b097fd4798f22ae928bb2f44e8d5c2b3e89d9f22572d4450ce21453b2cc2af5e5e4d14cae5e1c4cf45344f484ac3957ab29e7df73ac8a061e4c32b4efc67da8c653d7cc1e44fbcb3d1a888961f69b731ddb37912f17ea650d41f07b196fcf1580906f36bd4b7e6a5d2bd24ba80f2d77af85a1f6a45de9b98389a6fe1e656354a9f69b4bfc26a9a749c4d89"}}}}}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000001000)={0x0, 0x0}, 0x8, 0x3) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x62b9, 0x141000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x0}, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000001000)='/dev/amidi#\x00', 0x4, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000d7d000+0x176)='encrypted\x00', &(0x7f0000000000)='vboxnet0usersecuritynodevppp1\x00') setsockopt(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000)="", 0x0) [ 68.896180] audit: type=1326 audit(1515769747.775:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 68.896556] audit: type=1326 audit(1515769747.777:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10229 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=192 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 69.022790] binder: 10261:10263 transaction failed 29189/-22, size 0-0 line 2842 [ 69.044370] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80003, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000d86000)=@req={0x9, 0x80000001, 0x0, 0x0}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000cc8000-0xb)='/dev/midi#\x00', 0x4, 0x800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f000046e000-0x4)=""/4) 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003cd000-0xe)='attr/fscreate\x00') preadv(r0, &(0x7f0000008000)=[{&(0x7f00003bd000)=""/1, 0x1}], 0x1, 0x0) 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xac6000)=nil, 0xac6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ac6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0x5, &(0x7f0000ac6000)={0x0, 0x0}) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="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", 0x4d1, 0x0, &(0x7f0000ab8000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000ac4000)=0x9fd, 0x4) recvfrom$inet6(r0, &(0x7f0000aba000)=""/15, 0xf, 0x0, &(0x7f0000ac0000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) mmap(&(0x7f0000ac6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ac7000-0xf)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f000049a000)={0x0, 0xb8, "9017f31087377ec1c857985628551de492584a2e7df423ad671d356360f7f78a5707478574dfb634d9a8314b406c21ab2e6133076614b08ba118257c9b9ab2f10d51e9fa9595c258c511740f06e1247962417bae9816ca76eea120b9ef267ad7255094dce0bdb49005d11b8c1154fa3b0af2a03a1ae1e118a7231866099f61246da9a09262f31cd6f1e6b1b2479d62177ad72a511864e7647e6acfa5c809a65ef1166d9152b826c9b5dfe59175bfb6baa1754999774eba68"}, &(0x7f0000a45000-0x4)=0xc0) mmap(&(0x7f0000ac6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000ac7000-0x10)={r2, 0x43e, 0x0, 0x1000}, 0x10) mbind(&(0x7f00001e0000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000325000-0x8)=0x0, 0x1, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000abb000)={0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0xb) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000abd000)=0x47bc7b3a, 0x4) shutdown(r0, 0x1) 2018/01/12 15:09:08 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_getscheduler(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$bt_sco(r1, &(0x7f0000dbf000)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8) fchdir(r1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000881000)=0x0, &(0x7f0000da5000)=0x4) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00004c5000-0x10)='/selinux/access\x00', 0x2, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000664000-0x8)=0x0) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f00009a5000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f0000804000)="") mknod(&(0x7f00001c2000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) process_vm_readv(0x0, &(0x7f0000807000-0x20)=[{&(0x7f0000a80000-0x2d)=""/1, 0x1}], 0x1, &(0x7f0000bb2000-0x40)=[{&(0x7f0000ba4000)=""/1, 0x1}], 0x1, 0x0) clone(0x0, &(0x7f0000fd4000)="", &(0x7f0000cfa000)=0x0, &(0x7f0000838000-0x4)=0x0, &(0x7f000032b000)="") creat(&(0x7f0000586000-0x8)='./file0\x00', 0x0) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f000074c000)=[{0x0, 0xfffffffffffffff7, 0x0}, {0x0, 0x0, 0x0}], 0x2, &(0x7f000069f000)={0x77359400, 0x0}) semctl$IPC_RMID(r0, 0x0, 0x10) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000584000)=0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000568000)={0x0, 0x0, 0x6}, &(0x7f00009f6000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000037e000-0xc)=@sack_info={r2, 0x1dfb, 0x5}, 0xc) [ 69.324500] binder: 10278:10282 BC_INCREFS_DONE uffffffffffffffff no match [ 69.333299] binder: 10278:10282 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000f80000)='/selinux/create\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f00007a8000)='/dev/dsp#\x00', 0x100, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000e88000-0x4)={r1}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000a9000)={0x0, 0x7, 0x4, [0x1f3, 0x180000000, 0x3, 0x7]}, &(0x7f0000b95000)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f000093f000)={r4, 0x1, 0x80000001, 0xfffffffffffffffd, 0x2, 0x3}, &(0x7f00004e7000-0x4)=0x14) mmap$binder(&(0x7f000008f000/0x3000)=nil, 0x0, 0x0, 0x10, r0, 0x0) [ 69.370830] binder: 10278:10282 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 69.378195] binder: 10278:10282 got transaction to invalid handle [ 69.384508] binder: 10278:10282 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000000400) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) unshare(0x24020000) mount(&(0x7f0000a0e000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000084d000)="") 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x17, &(0x7f000039e000)={0x1, {0x0}, 0x0, 0x0}, &(0x7f0000e43000)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000d39000-0x8)={0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f00008dc000)='/dev/autofs\x00', 0x612100, 0x0) 2018/01/12 15:09:08 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000627000-0x8c)={0x40000, 0x9, 0xa79, 'queue0\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000139000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000921000)={0x0, @broadcast=0x0, @multicast2=0x0}, &(0x7f0000878000)=0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000007f000)=0x0, &(0x7f0000565000-0x4)=0x4) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00002c4000)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a45000-0x10)='/dev/sequencer2\x00', 0x8006, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000e03000-0x11)='/selinux/context\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000a75000-0x30)=[{0x5b94, 0x0, 0x1fff, 0x0, @tick=0xfffffffffffffffe, {0x0, 0x0}, {0x0, 0x0}, @raw32={[0x0, 0x0, 0x0]}}], 0x30) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000135000)='/selinux/member\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e54000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000008000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000008000-0x4)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/01/12 15:09:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000001000-0x4)=0x0) setsockopt(r0, 0x88, 0x0, &(0x7f0000003000-0x1)="", 0x0) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000a000-0xa)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000011000-0xc)={0x3, r0, 0x1}) ioctl$int_in(r0, 0x80000080045010, &(0x7f000000e000)=0x0) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0x2, &(0x7f00004e3000)={0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000eff000-0xc)='/dev/audio#\x00', 0x2, 0x101000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$inet(0x2, 0x4000000000000003, 0x2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000cc0000)={0x0, {0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x200, 0x0, 0x0, 0x0, 0x8173, &(0x7f0000422000)=@common='bpq0\x00', 0x0, 0x0, 0x0}) 2018/01/12 15:09:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) connect$netrom(r3, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000a95000-0x10)={0x1, &(0x7f0000cf9000-0x8)=[{0x6, 0x0, 0x0, 0x407ffc0007}]}) r0 = syz_open_dev$tun(&(0x7f0000883000-0xd)='/dev/net/tun\x00', 0x0, 0x100) socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$nfc_raw(0x27, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000d78000)='/dev/audio\x00', 0x801, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000c88000)={0x40000000, 0xc5, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000d9000)={0x8, 0x5, 0x100000001, 0x2, 0x6, 0x1, 0x100000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) clock_gettime(0x0, &(0x7f0000396000-0x10)={0x0, 0x0}) ppoll(&(0x7f0000213000)=[{r0, 0x100, 0x0}, {r1, 0x4, 0x0}, {r3, 0x260, 0x0}], 0x3, &(0x7f0000542000-0x10)={r4, r5+10000000}, &(0x7f0000255000)={0xbd0}, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000781000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f0000044000-0x10)={0x0, 0x0}) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000022e000)=""/246) r1 = socket(0x100000000000010, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000239000)={0xc5, 0x4, 0x1, 0x6}, 0x10) write(r1, &(0x7f00001e8000)="26000000420009fff15200f83a0000090000060001ffffff12000000fe00085b1ee9fb4b35ea", 0x26) socket$inet(0x2, 0x1, 0x1) 2018/01/12 15:09:08 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f000030f000-0x14)={0x2, 0x8, 0x3f, 0x200, 0x1000}, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x10000) ftruncate(r1, 0x8) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000cbb000-0x4)=0x7, 0x4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f000065f000)=0x2, &(0x7f0000739000)=0x2) recvmsg(r1, &(0x7f00000a1000)={&(0x7f00005e7000-0xe)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000f0c000)=[], 0x0, &(0x7f0000020000)=""/153, 0x99, 0x0}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000e26000-0x9)='/dev/rtc\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000675000-0x8c)={0x0, @in6={{0xa, 0x3, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000137000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000719000-0x8)=@assoc_value={r2, 0x5}, &(0x7f00001ba000)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f000005c000)={0x0, 0x0, &(0x7f000088c000)=[{&(0x7f0000e98000)="7d606e994e137700eebac80e122581aa5930772e7680232a5290289ca2ecbe9b6314ab83fb0876f862dac3b255e3beec7e0467c804bcac20af9282f41912a92ea4f78729b4a47ef7ae3519e0da9d331469e6667f92163bccf65e1549228b9a44cbf800f7083998121adc54e63b1c9bab4f674255cc7ead69bdaa6e66487c0fd0a523788b420fc9f5b2e4eb9edb7c59bb2d98d8642ee09b0c0fffa8ed924fbb18ccaa5d64902d164d8faac7aa037803fb9b2c01d950274b22486dea904b6eb95019e67e074efb36bc44a82504dc7b50236a88b8c10659eb7a10421a", 0xdb}, {&(0x7f0000152000-0x39)="9eef84c5dcd94136b9a71961f7e0eb62cc86e75356735772c80e6ec14325f94d70d1192012a9a8d48a446b006f1b7a6f9a3885bc87f1e7ce69", 0x39}, {&(0x7f00004af000-0x9f)="f7fe95ec31eb731f13b2335e5b556afad06f99b94cd8310b2a3baedaaba2b85189d56f7c42435d64d91f8819feedfe5a8a1d5370f3ff47442b05edc4b3d2e8f97a84fc622b8ba541bb33bd01efcb86c9ad29c0017b0b1e717402029fedee7ec1b24e1cbbe8853a434690968cd674bfa75c1c332a556e2925d3f1cdcba49ccad2ce4b4cb22abbfc70e3f51a52544f86b369aa7080d1e1faf9231520be4e5d7a", 0x9f}, {&(0x7f0000801000)="", 0x0}, {&(0x7f0000573000)="20398e7c53e7483474321ebfafb4690c596e4217", 0x14}, {&(0x7f00006e1000)="a6a7663f7eb01c36dd16fc500cca3bd190023caa", 0x14}], 0x6, &(0x7f0000b17000-0x1110)=[{0x90, 0x110, 0x1f, "d81b0560bc543554734d60eda379d644d910a3b409448ffa71e943f6e44d62ae01a1bc2e6f23990d600d6954b089be50888faef595b3102ff3697b3c2dc56922903bb98987593462d0814f9e642f970fefdad7ea8cedbf07764733e5cefbd7d9549352aafb2bd9acafcf944b5c59a3dc8a212dc2d444fd838217d34fc6b4f4"}, {0x70, 0x117, 0x9, "f2d9138ba5e91ded4c53a35cdef9ed20d3080aaea541d0df3cb4b2cb4441f6c966420a6375dfeaca7e62ab68880b790d14006a06fa6af8257cf2c3379069bf36e760537a68b69e4cf80ac0bfb741e7b4619855ab35ea9bd2ee0e"}, {0x1010, 0x10c, 0xf3, "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"}], 0x1110, 0x1}, 0x0) [ 69.532905] binder: 10326:10330 BC_INCREFS_DONE uffffffffffffffff no match [ 69.558181] binder: 10326:10330 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="97", 0x1, 0x0, &(0x7f0000ab8000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000e4b000)="b8", 0x1, 0x0, &(0x7f0000abf000)={0xa, 0x0, 0xffffffffffffffff, @loopback={0x0, 0x1}, 0x0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000f7e000-0xc)=@sack_info={0x0, 0x1, 0x0}, 0xc) 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000f33000)='/dev/input/mouse#\x00', 0x100, 0x105001) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00001ad000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000f11000-0x4)=0x8) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f000089a000)="") r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f00004b9000)="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", 0xfc) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000dc2000-0x4)=@assoc_id=0x0, &(0x7f0000794000-0x4)=0x4) setsockopt$ax25_buf(r2, 0x101, 0x0, &(0x7f0000a33000)="89dc87c9fe436dc30a8790bf8909f632681491919634c4be4b1d9354a48c396e00b4387eb1c36cda78d3234e85a48138ee5dff40e489d3cb8ff6b18e5f32f0f68cf0a66006a3c5e13b66bb6f4a4c71f69703190b0eb913c22176247a407b428dd4203e50772d0e08c07c2003ca50a83d8d603c5a3a2b9bc1dc2e3b3624844cd12199dfff57230a42470576fce473838c93e1886972efe929d004b80921db1291c0f6ca74a62ee5c6c9a24473fbe844386da4e80f0d756588de0861f852cb055812be27cc72f42b510649facc573bec784d7d3e1464f2cc54d516de86ec7091fa057a70383489db788af4aeb4d322caf408a4c5b5d11e", 0xf6) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000137000)={r3, 0x9}, 0xffffffffffffffc9) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000722000)={r1, 0x43, "434a85ab69723bad181299b1ea2259a9b2415b9e2ca8fca67b79c03567f8a86a7fb61e789472d1a1fbaa21a338675e73cd7589a7dd5bb738aea820f71d5c4526b0898c"}, &(0x7f0000430000-0x4)=0x4b) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000f3d000-0x8)={r3, 0x8}, &(0x7f0000140000-0x4)=0x8) ioctl$sock_bt(r2, 0xdd1f, &(0x7f0000bdc000-0x82)="da150a03c09d95a17d3767ba1a5d91eac1a1aa8e14e8644882053964118d45169656f98571815f9e501d58eff4956b1952a30ee371013c23ae73f35b9e7be09de3111efa003d537d5722f2923b72ee4c198de5912e3068549ff3aeca2cbd67ce436f2f8cde7677bbf0a18320ecaac1f1f471f7cb70e68ed777e69514e7b0c888c21f") 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f77000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00008a1000-0x28)={@common='bond0\x00', &(0x7f0000be6000-0x2c)=@ethtool_cmd={0x48, 0xffffffffffffebc0, 0x101, 0x1, 0x4, 0x80000000, 0xffffffff00000001, 0x1, 0x100000001, 0x80, 0xffffffffffffffc0, 0x2, 0x4, 0x7, 0x100, 0x7fff, [0xfff, 0xfffffffffffffffc]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000a58000)="2200000019000704e2933300090007000222020d00000800f00000ff00001000ff074f3e37000000000000009e2a49f289a0ef5bea55ae8900bb23ddf029c363c354e8ab8f9f78df38c4fcabdccc2545eedb24545fb060232a0008", 0x5b) r1 = syz_open_dev$midi(&(0x7f0000c6f000-0xb)='/dev/midi#\x00', 0x1, 0x101000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000a7000-0x48)={{0xffffffffffffffff, 0x0, 0x2, 0x3, 0xd2}, 0x5, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 69.588740] binder: 10326:10330 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 69.596061] binder: 10326:10330 got transaction to invalid handle [ 69.602363] binder: 10326:10330 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000de6000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000a1000/0x18000)=nil, &(0x7f00003f0000-0xc)=[@textreal={0x8, &(0x7f000056b000-0x40)="36660f5a3566b8330000000f23c00f21f86635000001000f23f8f20f3083612402f2ab0f01df440f20c066350c000000440f22c0ba4000edbaa100ed0fc76a00", 0x40}], 0x1, 0x0, &(0x7f000009c000)=[], 0x0) [ 69.646218] netlink: 40 bytes leftover after parsing attributes in process `syz-executor1'. 2018/01/12 15:09:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/32, 0x20) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000bf0000/0x2000)=nil, 0x2000}, 0x0, 0x0}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000901000)='/selinux/user\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000426000-0xc)={0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000488000)='/dev/ptmx\x00', 0x2000, 0x0) clone(0x0, &(0x7f0000002000-0xc9)="", &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="") write(r0, &(0x7f0000cfc000-0x1f)="1f0000000206ffde0000f49ff60f0000000600000900018006000000000000", 0x1f) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000881000-0x16)='/selinux/checkreqprot\x00', 0x80800, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000487000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x10, 0x2, 0x10) write(r1, &(0x7f0000a7a000-0x24)="240000001b00fbffeb030000f6fb017967b17d0b0800d00001000020f700000ff9161701", 0x24) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000988000-0x38)=[], 0x0, 0x0, &(0x7f0000001000)={0x9}, 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003ca000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f000000c000-0xc)={0x10000000, 0x0}) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000001000-0x1)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000da3000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f00004d2000-0xbf)="", 0x0, 0x0, &(0x7f000033d000)=@generic={0x1e, "e5226c70c61c20a788116278d1cb85b0640254a0e3b124121f0f3d51d6d93c1ce2adff62400b9e1918ec78528ea7b231cefd4aa00feda067f413a5076705782d585ca390671120c3c617639e417f6a55d996d01c23818f4e222f191a6d292de0892dc9c3b2df196ce64cadcf59f9658f02210339106af46197908cebe446"}, 0x80) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000815000)=0x2, 0x4) read(r2, &(0x7f0000d91000-0x34)=""/52, 0x34) 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000548000)={0x19980330, 0x0}, &(0x7f00005cd000-0x18)={0x0, 0x0, 0x81, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0}) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000eb7000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000c70000-0x8c)={0x2, 0x9, 0xffffffffffffffff, 'queue0\x00', 0x401, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = getpgrp(0x0) sched_getparam(r1, &(0x7f000056e000-0x4)=0x0) clone(0x20900, &(0x7f0000a94000-0x1)="", &(0x7f00002b8000-0x4)=0x0, &(0x7f000029e000)=0x0, &(0x7f000031d000)="") 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000603000-0x18)={0xaa, 0x40, 0x0}) read(r0, &(0x7f0000431000-0x9a)=""/154, 0x9a) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00003d1000-0x4)=0x0, 0x80800) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00006e4000)=0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000e79000-0x10)={&(0x7f0000f05000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000c20000)={{&(0x7f00004fc000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000014000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000c77000-0x4)=0x5, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000efb000)='/selinux/mls\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000624000-0x8)='./file0\x00', 0x8e400, 0x0) 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0xd5b000)=nil, 0xd5b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000d5c000-0x11)='/selinux/context\x00', 0x2, 0x0) mmap(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000d5b000)=0x20700) syz_emit_ethernet(0x66, &(0x7f0000d59000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @random="e8000900", [], {{0x86dd, @ipv6={0x0, 0x6, "aa471d", 0x30, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[], @icmpv6=@pkt_toobig={0xffffff88, 0x0, 0x0, 0x0, {0x0, 0x6, "19a500", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}}}, &(0x7f0000d0a000)={0x1, 0x1, [0x0]}) [ 69.699883] netlink: 40 bytes leftover after parsing attributes in process `syz-executor1'. [ 69.784948] binder: 10376:10382 BC_INCREFS_DONE uffffffffffffffff no match [ 69.808701] binder: 10376:10382 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 69.817965] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 69.820177] binder: 10376:10382 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x1) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x20000000001, 0x84) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x800000000000, 0x0, &(0x7f000061d000-0x8)={0x0, 0x0}) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000efe000)=0x7, &(0x7f0000a64000-0x4)=0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f000082a000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) listen(r2, 0x40000000010020) shutdown(r2, 0x0) r3 = fcntl$getown(r0, 0x9) syz_open_procfs(r3, &(0x7f000082d000-0x8)='net/arp\x00') accept4$ipx(r1, &(0x7f0000f01000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000832000)=0x10, 0x800) 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000001000-0xcb)=""/203) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000a2c000-0xc)='/dev/autofs\x00', 0x44180, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00006fa000-0x1c)={0x57, 0x5, 0x1, {0xf7e, 0x293}, {0x2, 0x6edf}, @ramp={0x92, 0x9, {0x100000000, 0x10001, 0x400, 0x7}}}) syz_open_pts(r0, 0x200002) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c3c000)={0xffffffffffffffff, &(0x7f0000cb1000-0x75)="", &(0x7f0000818000)=""/4096}, 0x18) prctl$setname(0xf, &(0x7f0000f3f000)='/dev/autofs\x00') 2018/01/12 15:09:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f00006a0000-0x80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938000001018f8401a3ff59829a2b200d7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x6a) r1 = socket$netlink(0x10, 0x3, 0x10) write(r1, &(0x7f0000172000-0x9a)="290000001f0007a7ff0000000000000010000600e00000000b4013000000000000000000000000106d", 0x29) 2018/01/12 15:09:08 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000001000-0x50)={0x7, 0x5, 0xffffffff, 0x0, &(0x7f0000002000-0x140)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002000)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x2, 0x2, 0x80000000, 0x10000, 0x0, 0x0, 0x2000, 0xf, 0x100000001, 0x81, 0x4, 0x7, 0x8, 0xe87, 0x3, 0xe86, 0x20, 0x19fc, 0x6, 0x4, 0x7fff, 0x401, 0xfffffffffffffff8, 0x8, 0x6, 0x7e6, 0xffffffffffffffff, 0x40, 0x5, 0x5, 0x0, 0xffffffffffff0dc7, 0x7, 0xfff, 0x4, 0x6, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000002000-0x1)=0x0, 0x3}, 0x2000, 0x3a1, 0x800000010, 0x3, 0x8, 0x9, 0x6, 0x0}, r1, 0x0, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001000-0x4)=0x9e1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x20000000053, &(0x7f0000583000)=""/0, &(0x7f0000002000-0x4)=0x14c) socket$inet_tcp(0x2, 0x1, 0x0) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000dd9000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000f5f000-0x9)='/dev/kvm\x00', 0x0, 0x0) unshare(0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f000008f000)=@un=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f00001da000-0x4)=0x8, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000942000-0x4)=0x0, &(0x7f0000d65000-0x4)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000005000)={0x4, 0xffffffffffffffff, 0x0}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000a5d000-0x4)=0x0, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000e51000)={0x0, 0x400100000001, 0x2, &(0x7f000060a000)=0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000876000-0x20)={@common='tunl0\x00', @ifru_flags=0x2200}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00003e0000-0x4)=0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0xc0145401, &(0x7f000067c000)=0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000185000)={0x0, 0x0}) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x75, &(0x7f0000bb9000)={0x0, 0x7}, 0x8) r2 = add_key$keyring(&(0x7f0000792000)='keyring\x00', &(0x7f000076c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r2, 0xa000000) renameat(r1, &(0x7f0000237000)='./file0\x00', r1, &(0x7f0000df1000)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000db9000-0x20)={@generic="26bdfd2f1c0b057d893558f2e8a83bc4", @ifru_addrs={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendto$inet6(r1, &(0x7f0000ff9000-0x1)="e1", 0x1, 0x0, &(0x7f00006a0000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00003f7000)={0x0, 0x6}, 0xfffffffffffffe96) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000617000-0x108)={0x3ff, {{0xa, 0x3, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x1f, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xfffffffffffffc65) socket(0x11, 0x806, 0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000800000-0x3)={0x0, 0x9, 0x0, []}, 0x8) [ 69.820200] binder: 10376:10382 got transaction to invalid handle [ 69.820211] binder: 10376:10382 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000360000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000fef000-0x9)='/dev/rtc\x00', 0x40000, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000963000-0x4)=0x3, &(0x7f0000c04000)=0x4) getpriority(0x2, 0x0) 2018/01/12 15:09:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000083000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000ac3000)={0x3000, 0x10f001, 0x80000001, 0xfffffffffffffffc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0xc, 0x0, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x8, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e41000-0x12)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = dup(r1) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, r2) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f000089d000)=""/0) 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000f000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)=0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f000000f000)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000f000-0xb)='/dev/hwrng\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000002000)=0x7) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000005000)={0x4, &(0x7f0000010000)=[{0x7, 0xd0}, {0x8, 0xbff}, {0x4, 0x4}, {0x44bd426c, 0x9}]}) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000011000)=@common='ip6_vti0\x00') ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000010000)=""/0, 0x0) 2018/01/12 15:09:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a4000-0x8)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c82000-0x2)="") rename(&(0x7f0000f05000-0x8)='./file0\x00', &(0x7f0000792000-0x8)='./file0\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c1c000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000dcd000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008be000)=0xe8) getgroups(0x3, &(0x7f0000043000-0xc)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000784000)={0x0, 0x0}) fchownat(r0, &(0x7f0000255000)='./file1\x00', r1, r2, 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000662000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x4181) fchown(r3, 0x0, 0x0) 2018/01/12 15:09:08 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000001000-0x3b)="ce6a15e86dfb91421ea5cc9a9683a822d49f171a2f7a039f8418ea47a081ae7500139035cf710d749be68f70370994d35aebcbd92a0fffc0a3c60d", 0x3b, 0x20000800, &(0x7f0000c57000)=@llc={0x1a, 0xff, 0xfffffffffffffffb, 0x4, 0x3, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80000000000003, 0xff) bind$inet6(r1, &(0x7f00007d8000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00001d7000)='/selinux/context\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f000037e000-0x4)=0x0) [ 69.920962] binder: 10408:10415 BC_INCREFS_DONE uffffffffffffffff no match [ 69.928666] binder: 10408:10415 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 69.940690] binder: 10408:10415 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 69.947973] binder: 10408:10415 got transaction to invalid handle [ 69.954295] binder: 10408:10415 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:08 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00003ad000)={{&(0x7f0000d49000/0x3000)=nil, 0x3000}, 0x2, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00002e9000)='\x00\x00\x00\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0, 0x0, 0x0}, &(0x7f000044c000)=0xc) r4 = syz_open_procfs(r2, &(0x7f0000ad9000)='attr/current\x00') setfsgid(r3) set_mempolicy(0x2, &(0x7f0000f80000-0x8)=0x9, 0x7fff) sendfile(r4, r4, &(0x7f00006c7000)=0x0, 0x2a) fcntl$notify(r1, 0x402, 0x80000004) getdents(r1, &(0x7f0000825000-0xa7)=""/167, 0xa7) 2018/01/12 15:09:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000ed2000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000850000)=0x4, 0x4) unlink(&(0x7f00006bb000-0x8)='./file0\x00') mkdir(&(0x7f00005d4000)='./file0\x00', 0x32) prctl$setmm(0x23, 0x5, &(0x7f0000051000/0x2000)=nil) 2018/01/12 15:09:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x96c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00007fb000)=0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00007b8000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000ad2000-0x8)=0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000cd000-0x8)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000efb000)=0x0) prlimit64(0x0, 0x0, &(0x7f0000d37000-0x10)={0x0, 0x0}, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00006f7000-0xd8)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x0, &(0x7f0000619000)="", &(0x7f0000b66000-0x4)=0x0, &(0x7f00001a2000-0x4)=0x0, &(0x7f0000c02000-0x6f)="") r3 = add_key(&(0x7f0000b32000)='pkcs7_test\x00', &(0x7f0000416000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000522000-0x60)="", 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000d8c000-0x8)=0x0) capset(&(0x7f00001e9000-0x8)={0x0, 0x0}, &(0x7f0000033000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000df5000-0x9)='/dev/kvm\x00', 0x10000, 0x0) syz_open_dev$usbmon(&(0x7f0000b5e000)='/dev/usbmon#\x00', 0x0, 0x10000) r4 = perf_event_open(&(0x7f0000b96000)={0x2, 0x78, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f000000b000-0x9)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000071000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r4, r6) prlimit64(r2, 0x0, &(0x7f0000448000-0x10)={0x8, 0x2}, &(0x7f0000395000-0x10)={0x0, 0x0}) 2018/01/12 15:09:08 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00009ff000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000172000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000a67000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00005c6000)={0x0, 0x989680}, &(0x7f0000e20000-0x10)={&(0x7f0000a5b000-0x8)={0x0}, 0x8}) 2018/01/12 15:09:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000ece000-0x290)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x800400000001, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x110) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00007bb000)={@rand_addr=0x0, @multicast2=0x0, 0x0}, &(0x7f0000612000)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000042f000)={@loopback={0x0, 0x1}, r1}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000fd5000-0x108)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) 2018/01/12 15:09:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000bad000)=""/76) r3 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r4 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, r0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r4, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, r5, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 2: syslog(0xa, &(0x7f0000004000-0x4)=""/4, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f000060b000-0x8)={0x0, 0x0}) recvfrom$inet(r0, &(0x7f00001e6000)=""/76, 0x4c, 0x10000, &(0x7f0000b25000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009b1000)='/selinux/mls\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f0000742000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000f67000)=0x14, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000f35000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00007d2000-0x18)={0x5, 0xfffffffffffffffd, 0xfffffffffffffff9, 0xba0, 0x6f327c14, 0x149}) r2 = socket(0x1000000010, 0x802, 0x0) write(r2, &(0x7f0000ca6000-0x25)="1f0000003a00079f0000d209bd007fff0a3f0216f7ffffdc00000028000000", 0x1f) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e01000)='./file0\x00', 0xfffffffffffffffd) mount(&(0x7f00000d1000-0x8)='./file0\x00', &(0x7f000027a000-0x8)='./file0\x00', &(0x7f0000284000-0x6)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f000015a000-0xe)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[&(0x7f0000000000)='ramfs\x00']) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00006ae000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x58) uselib(&(0x7f00009e5000)='./file0\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000ac000-0x1)='y', 0x1) [ 70.175577] binder: 10454:10460 BC_INCREFS_DONE uffffffffffffffff no match [ 70.186968] binder: 10454:10460 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 70.204119] binder: 10454:10460 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 70.211508] binder: 10454:10460 got transaction to invalid handle [ 70.217818] binder: 10454:10460 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:09 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000077d000-0xc)='/dev/rfkill\x00', 0x4103, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/77) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000002000-0xda)=""/218, 0xda}, {&(0x7f0000002000-0xd9)=""/217, 0xd9}, {&(0x7f0000001000)=""/164, 0xa4}], 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff82, &(0x7f0000728000-0xc7)={@random="9b2780b0ed39", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x40000000000001e4, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x40, 0x8, 0x8, 0x0, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @udp={0x0, 0x0, 0xffffffffffffff43, 0x0, ""}}}}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000320000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000df4000)=[{&(0x7f0000b8b000-0x5a)=""/90, 0x5a}, {&(0x7f0000b4e000-0x2b)=""/43, 0x2b}, {&(0x7f00005c8000-0x25)=""/37, 0x25}, {&(0x7f00000b5000)=""/113, 0x71}, {&(0x7f0000ec3000)=""/50, 0x32}], 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00007bb000)=0x0, &(0x7f000008b000-0x4)=0x4) 2018/01/12 15:09:09 executing program 3: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f000000d000-0xa)='./control\x00', &(0x7f000000b000)=[&(0x7f000000c000)='#\x00', &(0x7f0000006000-0x4)='(lo\x00'], &(0x7f000000d000-0x20)=[&(0x7f0000003000-0x22)='^\'&]keyring&vboxnet0yem0eth0nodev\x00', &(0x7f000000c000-0x1)='\x00', &(0x7f000000d000-0xd)='wlan0keyring\x00', &(0x7f000000d000-0x1)='\x00']) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000007000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mmap(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000afa000-0x12)='/dev/snd/midiC#D#\x00', 0xff, 0x20400) recvfrom(r1, &(0x7f0000616000)=""/190, 0xbe, 0x40002121, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000af8000)='./bus\x00', 0x10) inotify_add_watch(r0, &(0x7f000082a000)='./control\x00', 0x800) inotify_add_watch(r0, &(0x7f00002b0000-0x6)='./bus\x00', 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000740000-0x6)='./bus\x00', r2, &(0x7f00007fa000)='./control\x00', 0x2) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000110000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00002d7000-0xd9)="f6c1738683ce1da42cb87dc8f64cc52a0ba2b57fcd1c58cc2d6fa6ccce2a5f3397ed6440ecf2d3b95b0b527a4c5da821e4e295bc25c741146f74bd7f3c4aea7b0a3c2bdfefebf5602982b42fb2f9b08c95dd59b0f871397e6fcd20aecd2c552dc442356011f69cb9a96b66e4bb9feba8a52d4a1d8d8f45e301534878cf93abc2a0633a5f83d95dc8441f6876bdb2a4bc5a295255b9587075226bbd1cfb4c4ee414cacda197ff9e9fdc9cfb3831cccaf1adca529d965773b8db456290c4e8a211b39100e6f0e515d4e5b2775e3645d09242fb6a2687e461d7f3") r2 = accept$alg(r1, 0x0, 0x0) r3 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x9) sendmmsg$nfc_llcp(r3, &(0x7f0000303000-0x118)=[{&(0x7f00003b1000-0x60)={0x27, 0x9, 0x9, 0x2, 0x3f, 0x200, "cb882ed306807c2c5bb47997a9208e7054a99f07f7b521de81cac496f1da5b93be7dc676b2ee55d84254a94cf9d2bf2cd6d2ac6578b5ed3ef3ff786c170113", 0x3}, 0x60, &(0x7f0000dd3000)=[{&(0x7f0000be0000)="09e337966a39d6df1ab5e06b3bfbc1fb2cd4b627fa31da7663db593444a070e493c2b22a692bec6e9af8f6c18807af42bc406c932b931be4b605d9cb69025365db8de40345b0de9575f27e888e044b47883b1bc54448e67a7650f607651ceb3298528a32e048a71103d5a22d12c5e092a4024a6bba29b597726dd93c53fcb3bed1ebc551d88ec56af02ef48a2b279c30af60aba97c480fb8de91c1648cb213e78b504934d3d06ae7c8f507e7698c65248de2a4aa", 0xb4}], 0x1, &(0x7f0000e25000-0x80)={0x80, 0x10a, 0x9, "266f437d72512db032bd88f9e12194509c0830891198af6234d7fcf95e376793d505b462b52dd425bbcb62e93104033180674ccdef08aa9f6577cac1c0d190421bd74296120e7f44f3e7665070cb7367058b051247d926308dd2cf61601688e8dfd4326eeeeb75c22c4cd8c7476268"}, 0x80, 0x40000}, {&(0x7f0000bdb000)={0x27, 0x3, 0xfffffffffffffffc, 0x1, 0x6, 0x6, "10bbc49ff930d29ab3f2432605e34edb16564d4897a07f8ca51e9a94d62b2250e1344cac5ff87736c0a4a0bc796f903f416369e070faf5a89b936794d09307", 0x4}, 0x60, &(0x7f0000dea000-0x30)=[{&(0x7f00004b4000)="5bff83a6aa7e38b67c271d01930da89cfc11f8825ded2440f17d77f207ebb3df2846db8b9f6c697e2d952cfcc071054413dc8b5829f7bd2d4a506473fbb3cecc38523ef84d1a8db8210d367561c5d80d42ca6f8e80ea687c87c0fdcff242caf81dc458124ae2c376744bfbc54431835883", 0x71}, {&(0x7f0000700000)="fe83dfedece65f7169198efb714e9be0e719eb02d75a35a4193f8e470e0e9c94f852f1e37c9e52f8e4a0d9ca9b6fa1811340352700c85570f53e8daff8690ab4fb9b9e281c5607475ff17593b2e2836bdd47a626fd76d94b887b1e2d3ee8001022913e507f220e035be5da633a05babee4030c9e7898cd926f2c822ca76bbb2bd0acd48efdfc55b1fb8166fc6ae8366e", 0x90}, {&(0x7f0000c32000)="018d142388f9e904cfed33b9547bc06f047b095e9ea4612d", 0x18}], 0x3, &(0x7f0000115000)={0xf8, 0x101, 0xa272, "bee29432dfde8067d83e17fbe2837f22df2addece1c256637ada28fc7a39629d56462e3f579a71cf7c82750c3ab2b05b9168b7bb38d2e08650bd37d8c567216174787b40a0180440a61abb0dc877f2055d2f64d2c397c9c0b9fa487c027c6a880a08e3463cc8a2c31f0a08facb5fe5c7e830000826b9c69595fd58d2851672b68f4d964579a0def326c32bcb868cdeb9ff5fed1a55de36697a1932f33750aeacb103882124aeacabff0e496026ab7a1e25b191fcefd0a707af13cc02214dd7ff213c28936a31e6f738e3fb3fc8e6488e10e435e109b7c558cacce2467e50ded38848d328c816cc"}, 0xf8, 0x4000}, {&(0x7f0000fe5000-0x60)={0x27, 0x5, 0x7, 0x7, 0x173, 0xfffffffffffffffa, "c9b47b4c5d85d11dca58b9d73cce724615376c464d2b2beaa11a7e5ae85d3cc2da0a255961b2f7607f9fe953d6dc53ac6a52da6f994d2c2f284d98536b9a61", 0x0}, 0x60, &(0x7f00000c9000-0x30)=[{&(0x7f00008f6000)="35ea8085b4f49099d011783b13c8577858e3329ffbea08b90615d6352489a1fd6ccdbc547f931151a0f571775320e296db73cb01437d1ea8e0df1c49f9626e7cd37f199dfc24f8adb454294e667acaa05fd15633e4daa7b715f91a0d2352", 0x5e}, {&(0x7f0000aa4000-0xa1)="60b3f5baba9ca241b2178ff6bc77aa769cc89b43765194df425775d8c776ad1ed1f8e1df604298f6db670f65e5172c94d27e4a773a4d38bf8d2576dc4961935ba4e6430b08eff8415b886020e66613dfed89e0733df218eb09e51173b7fe5007674d929d3570a71d09595f1bc6ae6bd3bd346eb0fd6edadc675eb902a3a8937e715726c6aaf85913b52eb8cf841bf2b27580b5d94f07d0af48c0fff44851a414c1", 0xa1}, {&(0x7f0000cd6000)="", 0x0}], 0x3, &(0x7f0000489000)={0xd0, 0x10c, 0x8, "35a7815645c4f4f55f64e3e1038f0f97c2e0e72cab2557c64e0f93c7ac302327aeb14b4e96ab9de1cacedbdfb8a4846a5bd7e7f7141f31a23dca1269c21da0416cd7fa043194eefda493a20092fb9677ab5d8eea2de46a037615c5c2966ea198df7826bd80d030625e3140cf231af6b50d04265dbc26bfafeb08a28b0e1f83b9200fc4d231827308e7c5906c416f0f3cd128dfd183b8095092431952501fedd6a685d2786202af9591908609f43939e0e433afe092bb384e45ca"}, 0xd0, 0x20008804}, {&(0x7f0000b01000)={0x27, 0x1, 0x8000, 0x2, 0x8, 0x1, "df0823a12fadb9ec32560da92243de30b2df8b6f7ab77151a0c58cb86a720b3375082f353ba51a533816fdf71fe65c5026dc3fa301b6d0698a3c43b5876f17", 0x3}, 0x60, &(0x7f000089c000)=[{&(0x7f0000ee3000-0xea)="0361fa5d5350fc4a9fb9310cb69ddbbe06800f9780b9ba0cd17899d32532d69b24e2fe306899e530dd36d18fd8055d9ab7d7c71f1f19a8c95ca78163fd14c7b5ba330ec1c27a755399898114ae81071120ec6c13592489d8a5775923e3a899bdf6b55c85fd84c06e952865664eb09fda8a864e9262c3d70e8773e46bff0a4ddfbb9303377ccc63fd7ceeffcb4bd807e11be93791afb9aca95cff63b31a2da50d19278bd713b6cd872c9062f2d5fac787b59e427ea3227ba3ded27542d8498005a70a1d2b8478d876f3e7102b1021f6df4b42168e34b6962f02e6f3bd0c54a6c147e39612c98dd1e1e0db", 0xea}, {&(0x7f00004a6000-0xc1)="13f26556d9e8fff8b95bb0fa287d7b62e350f9e43f3f9b7dbced78082ddd80a7bbb2a9ba5c48984deeb47bd8a9db160bf29ed54f713ce9ad749ad79eeef202876718deb866101a3b76a12ac7ee3de83f9d47e65fe20000d47581fe47b20da78f62eb57357074c6c4ea452662de7c5ce6cac570d76f300b81ecc5a9fc60aebb027f13569ef1d57ec5a02917620be252a06d861cc63dbf51c13c6bdde7e114d00f762a359b16f4f3217d4c1f622a7c19d70535dfec9eb4df0a6583bf139f22d0311b", 0xc1}], 0x2, &(0x7f0000dcf000-0xe0)={0xe0, 0x10e, 0x10001, "014c2696dcc6d51c62d255c6f8f3d20a4a50d9f697a6bca0a800d4857cf773676677c1bd1f4102d7d5d671b7e7e7fa398dcd71546670f7e3d1f7766c1fab881b3376c914efee723d2b4424867450d6501fa3a15e1d26c11a0fd7b564d5ed998dfa78d95e2e324afa7cdb98ab08475aa4b1f1dda9d67cb9412b18855e38c415b636f77b19a3e19758c7258353ce567643ca3bd7fdfa027853f7aaf05c48ab866cbe667e1b51ddffb93a6267d95cf190293ddcfa8598cf2f3649dfe57d44bf37d6065bfb71b9ef67687c0a77"}, 0xe0, 0x10}, {&(0x7f0000e02000-0x60)={0x27, 0xfffffffffffffff7, 0xff, 0x2, 0x7fff, 0x6, "3811288c8582bfa6a2bc38e0c7e778bda8c8b99110c81d14521c7a7516bb17b7104227da89bf0b01dcd022fc1e6658fd74c03607c63fd9c2e27ec482c3e90b", 0xfffffffffffff497}, 0x60, &(0x7f0000df9000-0x30)=[{&(0x7f000049b000-0xfd)="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", 0xfd}, {&(0x7f0000244000-0xb5)="df902a77463539105c3fda0027a841871d1a667968623f22d6f6f433ab44383b8ed04fe6a825052ce59ac598994836840212ffa008225845ceefb8cee095c366710aa67eba7e0e1f115dc72d7ba716b80c62faf7e6333b0c64a3c979ab2a953d2de08a7904421a87098a58df32eacd0d5eb4b662e64676c742eed0af173287b032ee96930c482c3ef535f15ed80a848372df6cb45b4d4eddc9ed4a430f30884b6106498d95a007d000f4752c6e1fb40bcc081b93fb", 0xb5}, {&(0x7f00001d9000)="2889be4641c92b42ce4f24af61f885a37f315b24dae2a6f9a3fee3faea3d9b5620dd1ffd4e8583a279a3f4cee788b17993184215bddb594351d5c379ed8cbb2c75f83593099fb2420284732c1e", 0x4d}], 0x3, 0x0, 0x0, 0x0}], 0x5, 0x854) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000125000)=@req={0x7f, 0x4, 0x9, 0x1}, 0x10) sendfile(r2, r3, &(0x7f0000e65000-0x8)=0x0, 0x8) exit(0x200) socketpair$inet(0x2, 0x3, 0x2, &(0x7f00008d8000)={0x0, 0x0}) 2018/01/12 15:09:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) close(r0) fcntl$getownex(r1, 0x10, &(0x7f0000714000)={0x0, 0x0}) lstat(&(0x7f0000345000)='./file0\x00', &(0x7f0000337000-0x26)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00009c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000f7d000-0x4)=0xc) r5 = getpgid(0x0) r6 = geteuid() getresgid(&(0x7f0000a5b000-0x4)=0x0, &(0x7f0000274000-0x4)=0x0, &(0x7f0000ea4000-0x4)=0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000afb000-0x1000)=""/4096, &(0x7f0000e9c000)=0x1000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000020e000)={0x0, 0x0, 0x0}, &(0x7f0000c6c000)=0xc) r9 = geteuid() stat(&(0x7f00009d7000)='./file0\x00', &(0x7f00007e9000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() r12 = getuid() fstat(r1, &(0x7f00001f1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000b22000)={&(0x7f0000e91000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00006e1000-0x10)=[{&(0x7f00005d5000)="b2ba820065c40e3284caeecba8701c9bb00917063577a58397e34fe414c211907bb3f5bdaf412fe21fef73f47ca2db5fc9af1d859a23ef6282561501f2053b7b4511ec3af40113f3db69df49750baae66cf669b5ba7a5bda8496e2d2dd7a143f727b92b8abadcb78889070e909f6db8726d737c01f022d7085d0822d6b5b3484b6dd7154e3f6f6ec6c634c5ed7391e087e399010ba26b0cbcd93f4fc82e37c7c", 0xa0}], 0x1, &(0x7f0000dbd000-0xb8)=[@rights={0x38, 0x1, 0x1, [r0, r1, r0, r1, r1, r1, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xb8, 0x4000000}, 0x20000090) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000085000-0x11)='/selinux/enforce\x00', 0x8000, 0x0) fchmod(r1, 0x0) fsetxattr(r1, &(0x7f00007a9000-0xd)=@random={'os2.\x00', 'proclo}\x00'}, &(0x7f00002de000-0x19)='/selinux/avc/cache_stats\x00', 0x19, 0x0) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) sysfs$2(0x2, 0x10000, &(0x7f0000e6b000-0xcf)=""/207) 2018/01/12 15:09:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000299000)=0x9, 0x4) sigaltstack(&(0x7f00006b2000/0x1000)=nil, &(0x7f0000326000-0x8)=0x0) 2018/01/12 15:09:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000039d000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004ae000)={@generic="1f00c83c159db8e5188756000000ff67", @ifru_names=@generic="c246a511631bc37753c023e1c28a1c96"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f000026b000)={0x0, r0, 0x7, 0x1, 0x0}, 0x14) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000fb5000+0xcb5)=0x0) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xaf2000)=nil, 0xaf2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005000-0x70)=[{0x0, 0x0, &(0x7f0000005000-0x30)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x0) close(r1) r2 = syz_open_dev$mouse(&(0x7f000010a000-0x12)='/dev/input/mouse#\x00', 0x6, 0x40) mmap(&(0x7f0000af2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000af3000-0xd)='net/mcfilter\x00') mmap(&(0x7f0000af2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) linkat(r2, &(0x7f0000af3000-0x8)='./file0\x00', r3, &(0x7f0000af2000)='./file0\x00', 0x1000) 2018/01/12 15:09:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000106000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f000089a000)={@common='ip6gre0\x00', @ifru_addrs={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r2 = syz_open_dev$mouse(&(0x7f0000174000-0x12)='/dev/input/mouse#\x00', 0x8f4, 0x400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000d2a000)={r2, &(0x7f0000f6f000-0x21)="236f795d9646fed2cb262afa851f8385f7fcc67150b15270fd78b4361c61a7257a", &(0x7f0000907000)="b49c0d84965ad7e79aaeff258fd92c40d457c1e094ce2761355343dd1a75a6e04baa1c5b5fa6802e97b65a4c2719a1cb924c174dc697ffce", 0x2}, 0x20) r3 = syz_open_dev$dmmidi(&(0x7f0000656000-0xd)='/dev/dmmidi#\x00', 0x8, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f000048f000)=0x100, 0x4) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00009ed000-0x9)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00004ae000-0x38)={0x1, 0x0, [{0x40000073, 0x0, 0x101}]}) 2018/01/12 15:09:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000e43000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x20000000800, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x10, 0x0, 0xaa}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @icmp=@redirect={0x5, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @broadcast=0xffffffff, {[]}}, ""}}}}}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000035f000-0xb)='/dev/mixer\x00', 0x400801, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000f7000)={0x80000000, 0x6, 0x100, 0x0, 0x800000000000000, 0x1000, 0x599f, 0x1ff, 0xfff, 0x7, 0x1, 0xfffffffffffffffc, 0x0, 0xffffffffffff7d20, 0x9, 0x7f, 0xa71c, 0x1, 0x6}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000df3000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000ad000)=0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000725000-0x1c)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00007f3000-0x4)=0x1c) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2018/01/12 15:09:09 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x78, 0x4, 0x10001, 0x81, 0x100, 0x0, 0x7, 0x841, 0x8, 0x7, 0x80000000, 0x0, 0x100, 0xad29, 0x6d04, 0x14, 0xd9, 0x80000000, 0x100000001, 0x7, 0x8, 0x80000001, 0x3, 0x100000000, 0x6, 0x8, 0x3, 0x1, 0x1, 0x2, 0x5, 0x81, 0xffffffff, 0x7fff, 0xffff, 0x2, 0xfd, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000001000-0x1)=0x0, 0x4}, 0x88, 0x6, 0xffff, 0x5, 0xff, 0x0, 0x2, 0x0}, r0, 0xffffffffffffffa4, r1, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000b23000-0x18)={0xaa, 0x0, 0x0}) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000d000+0x379)={&(0x7f0000009000-0x9c)={0x14, 0x24, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000e83000)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) r5 = getpid() ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f000056e000-0x40)={0x800, 0x5, 0x8, 0x40, &(0x7f000078d000)=""/64, 0x89, &(0x7f0000f0d000-0x89)=""/137, 0xde, &(0x7f0000552000-0xde)=""/222}) sched_setaffinity(r5, 0x8, &(0x7f0000b83000)=0x5) rename(&(0x7f0000adc000-0x8)='./file0\x00', &(0x7f0000cfa000-0x10)='./file1\x00') utime(&(0x7f0000e74000)='./file0\x00', &(0x7f0000efa000)={0x0, 0x0}) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) listxattr(&(0x7f00003d4000-0x8)='./file1\x00', &(0x7f0000fc7000-0x6b)=""/107, 0x6b) [ 70.325387] binder: 10492:10497 BC_INCREFS_DONE uffffffffffffffff no match [ 70.344137] binder: 10492:10497 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 70.352139] binder: 10492:10497 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 70.359541] binder: 10492:10497 got transaction to invalid handle [ 70.365873] binder: 10492:10497 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0x70f000)=nil, 0x70f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x14) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000557000-0x10)={0x8, 0x1, 0xffffffffffffff7f, 0x9, 0x0}, &(0x7f000070e000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000d2000-0x8)={r3, 0xffffffffffffff7f}, 0x8) mmap(&(0x7f000070f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000710000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000710000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000711000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000710000)=0x14) mmap(&(0x7f000070f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000711000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00001f5000)={0xa3, 0x9, 0x208, 0xfffffffffffffffd, 0xfff, 0xffffffff, 0x101, 0x7db, r3}, &(0x7f0000711000)=0x20) mmap(&(0x7f0000711000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000711000)={r4, 0x34, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000710000-0x8)={r3, 0x7}, &(0x7f0000710000-0x4)=0x8) connect$inet6(r2, &(0x7f000070d000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00005da000-0x14)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r1}, 0x14) 2018/01/12 15:09:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x800, 0x8000, &(0x7f00002fd000)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00002ac000-0x1c)={0x79b, 0x7, 0x1a, 0x0, 0x7ff, 0x59, 0xdc000000, 0xffffffff, 0x3, 0x0, 0x7, 0xffffffffffffff06, 0x0, 0x3, 0x4, 0x25, 0xf4, 0x1f, 0x4}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f000008e000-0x26)="26000000130047f1076ec1b00e000000000000000100000009ef18ffff00f132050027000135", 0x26) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) mmap(&(0x7f0000da6000/0x4000)=nil, 0x4000, 0x8, 0x10, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000047000)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000002000)=[{0x0, 0x3, 0x0, 0x0, @time={r3, 0x989680}, {0x0, 0x0}, {0x0, 0x0}, @ext={0x0, &(0x7f0000044000)=""}}], 0x30) r4 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, r4) write$sndseq(r4, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) 2018/01/12 15:09:09 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000b8f000)=""/4096, &(0x7f0000489000)=0x1000) 2018/01/12 15:09:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000328000)=0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000fc7000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000d71000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x8c62, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) clock_settime(0x0, &(0x7f0000625000-0x10)={0x77359400, 0x0}) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000b2d000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00002f9000-0x8)='./file0\x00', 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1000) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df3000-0x3)='\x00v\t', 0x1001, &(0x7f0000a06000)="") unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) 2018/01/12 15:09:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x8, &(0x7f0000f84000-0x8)=0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c69000-0xf)='/dev/sequencer\x00', 0x22000, 0x0) io_cancel(r1, &(0x7f00002bc000)={0x0, 0x0, 0x0, 0x3, 0xffffffffffffb59b, r0, &(0x7f0000d5f000)="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", 0x1000, 0x0, 0x0, 0x1, r2}, &(0x7f0000499000-0x20)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000c85000)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000f01000)={@common='ip_vti0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f000075a000-0x14)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, r4}, 0x14) dup2(r3, r0) 2018/01/12 15:09:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000086000)='net/wireless\x00') ioctl$VT_RELDISP(r0, 0xb701) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000520000-0x4)=0x0, &(0x7f0000691000)=0x4) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xb6d000)=nil, 0xb6d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={&(0x7f0000b6d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000005000-0x10)={&(0x7f0000b6c000)=@newsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0}, {@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0x0, 0x33}, @in=@multicast2=0xe0000002, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffff9e}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, []}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}, 0x0, ""}}]}, 0x154}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00002ad000)=0x7, 0x4) mmap(&(0x7f0000b6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000b6d000)='/selinux/create\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000222000-0x4)=0x0) mmap(&(0x7f0000b6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00002ab000)={0x0, 0x9}, &(0x7f0000b6e000)=0x8) mmap(&(0x7f0000b6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000b6f000-0x8c)={r4, @in6={{0xa, 0x1, 0xfff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x22f2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) fstat(r0, &(0x7f0000b6d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) mmap(&(0x7f0000b6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x7, &(0x7f000030a000)="", &(0x7f0000894000)=0x0, &(0x7f0000895000-0x4)=0x0, &(0x7f000065a000-0x2)="") r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x7fffffff}, 0x8, 0x0) read(r6, &(0x7f0000527000-0x80)=""/128, 0x80) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000290000-0x8)=[0x4, 0xfffffffffffffffe]) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000b6e000-0x28)={0x5, 0x6, r3, 0x3, r5, 0x100000001, 0xfe34, 0x100}) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000017a000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000f35000)=0x0) clock_gettime(0x0, &(0x7f0000105000-0x10)={0x0, 0x0}) futex(&(0x7f000036c000-0x4)=0x0, 0x5, 0x0, &(0x7f0000fd7000-0x10)={0x0, 0x0}, &(0x7f0000000000)=0x0, 0x32ac7807) [ 70.481544] binder: 10524:10532 BC_INCREFS_DONE uffffffffffffffff no match [ 70.508886] binder: 10524:10532 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 70.518404] binder: 10524:10532 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f000071d000-0x4b)="6264657624001412de3e9f10c1e99732c617e643d375034b73591376554b8360ef5cddd11c0d66972d80b0147ae39072c90db8733186e20b7d38cca74b3e0cb222ff4824c2e10ff3204a9c") r0 = creat(&(0x7f000090f000-0x8)='./file0\x00', 0x0) pread64(r0, &(0x7f00006b1000)=""/185, 0xb9, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) sendto$unix(r0, &(0x7f00002a4000-0x1000)="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", 0x1000, 0x40000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) mount(&(0x7f0000d85000)='./file0\x00', &(0x7f0000d6d000-0x8)='./file0\x00', &(0x7f00003dd000-0x8)='cgroup2\x00', 0x0, &(0x7f000078d000)="") 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) r1 = msgget(0x2, 0x78a) msgsnd(r1, &(0x7f0000b09000-0x1008)={0x3, "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"}, 0x1008, 0x800) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000e1000)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000177000)=0x4) 2018/01/12 15:09:09 executing program 3: r0 = syz_open_dev$random(&(0x7f00007a5000-0xc)='/dev/random\x00', 0x0, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000001000-0xc)={0x2, r0, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)=0x0) msgrcv(0x0, &(0x7f000001d000-0xc4)={0x0, ""/188}, 0xc4, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$ax25(r1, &(0x7f0000001000)={0x0, {""/7}, 0x0}, &(0x7f0000002000-0x4)=0x10) [ 70.525784] binder: 10524:10532 got transaction to invalid handle [ 70.532088] binder: 10524:10532 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:09 executing program 7: r0 = getpgrp(0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00007eb000)='/dev/vga_arbiter\x00', 0x8000000003ffc, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00001fb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003000-0x8)={0x0, 0x49}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002000)={r2, 0x6b, "366333ec46e4ec69d4e3866b77589820a8e63953c5ddbf20805261af19e95ef2cc0f9fb55455a0f1edd7eebdedd42a616e232a4a4af5cd44718040e63946d76eca2a8730dead42fe2af413ceb541812b808465bbe4dcc1a9f2856ac561dd01b8550d84b541bb2e4ff66104"}, &(0x7f0000001000)=0x73) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002000-0x20)={"5de12ef86ca6ed57911e40affbcdca2d", {0x4, 0x100000001, 0xfffffffffffff752, "795359bdae3e", 0x1, 0x0}}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffffffffffff0000}, &(0x7f0000909000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001000)={r3, 0x1}, 0xfffffffffffffe6b) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000-0xf)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000001000-0x4)=0x0, &(0x7f0000002000)=0x4) sched_getaffinity(r0, 0x3, &(0x7f00000cf000-0x8)=0x0) 2018/01/12 15:09:09 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000811000)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f000083c000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000+0x308)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000f45000-0x10)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000001000-0x40)={&(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000-0x8)=[0x0, 0x0], &(0x7f0000001000-0xa)=[0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000002000-0x8)='./file0\x00', 0x8, 0x1) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000-0xf)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000002000-0x38)={0x7, 0x6b0, &(0x7f0000000000)="d50f2ef83a79b0e7a72bbf20223449de7b0551c4d67ff56a698f513ba998353d0185fb65c28740f01880b2bd063b10d36c9a49ea33fa0d0fdca98fc725b2bcf61f235af45c61fbed740b525a9c7e80559470168dfde7e773c2668ae115ad51de67f8df6649ff3b9743a03c6cf05a2daa99b2d3067add16d95a892c292760a8e9626cf36caf490bfbc3243b582bff10bdb94dee9e9fc2f8956cbeb1b56fbea9166465b9e34e53d2f546f59c15b2b14bd645a12381aa200318846a1305636f6afc3cfb94ddfbf7d2cffaeb39a1a7d8e786b83ea3bdbcd7715e12c29f22e088583f", &(0x7f0000002000)="67d5d629be5d559965681b979d6d474a1dbee7bfd4525ee0d5299443f6b686224bad1367bf63b4fbec1a878eb05f2fab26805eb8cf52fdb9e3", 0xe0, 0x39, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000002000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000002000)={0x0, 0x7}, &(0x7f0000003000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000004000-0x14)={r9, 0xfff, 0x40, 0x2, 0x7ff, 0x1}, &(0x7f0000003000)=0x14) write$evdev(r0, &(0x7f0000966000)=[{{0x77359400, 0x0}, 0x10000, 0x1, 0x6}, {{r1, r8}, 0x40, 0x0, 0x6}, {{r2, r3/1000+30000}, 0x7ff, 0xffff, 0x0}, {{0x0, 0x2710}, 0x7, 0x800, 0x100}, {{r4, r5/1000+30000}, 0x5, 0x7fff, 0x40}, {{0x0, 0x2710}, 0x5, 0x80000000, 0x81}, {{0x0, 0x7530}, 0xffffffffffffffff, 0x1, 0xd66b}], 0xa8) ioctl$int_in(r0, 0x5452, &(0x7f000058f000-0x8)=0x8) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0x28e000)=nil, 0x28e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000276000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000280000)={@generic="375e0f271b4adc52d361c4f877a9aab5", @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) mmap(&(0x7f000028e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000028f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x8000f, 0x1, &(0x7f0000290000-0x8)={0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f00001ef000-0xc)='/dev/autofs\x00', 0x10000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000028f000-0x10)={0x0, 0x2, [@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]]}) 2018/01/12 15:09:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000c22000-0x24)=[{0x0, 0x0}], 0x1, 0xcc, &(0x7f00007bc000-0x8)={0x0}, 0x8) epoll_pwait(r0, &(0x7f0000cc7000-0x18)=[{0x0, 0x0}], 0x1, 0x81, &(0x7f000056e000-0x8)={0x0}, 0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000568000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000ea0000)={0x0, 0x0}) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000b4f000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x40000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f000084d000-0xf8)={{0x3, 0x3, 0x20, 0x3, 0x9}, 0x8, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0x3, 0x0, 0x4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) futex(&(0x7f0000000000)=0x2, 0x2, 0x0, &(0x7f0000000000)={0x77359400, 0x0}, &(0x7f0000003000-0x4)=0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000a3c000-0x4)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:09 executing program 0: clock_gettime(0x0, &(0x7f0000954000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000cad000-0x40)={0x0, 0x0, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x4}, &(0x7f000053e000-0x40)={0x7fff, 0x2, 0x6, 0x4, 0x10000, 0x6, 0x8, 0x55}, &(0x7f00003e6000-0x40)={0xfffffffffffffffd, 0xffffffffffff0000, 0x6, 0x401, 0xfffffffffffff001, 0x9, 0x1ff, 0xd3}, &(0x7f0000001000-0x10)={r0, r1+30000000}, &(0x7f0000000000)={&(0x7f0000fee000)={0x7f}, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000fe8000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c26000-0x10)="68fe88aedcbfc5d55fd79178ff341da4", 0x10) readv(r3, &(0x7f0000f61000-0x30)=[{&(0x7f0000032000-0x97)=""/151, 0x97}], 0x1) 2018/01/12 15:09:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e41000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000ad9000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x9) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000df2000)=0x5397, &(0x7f0000ecb000-0x8)=0x2) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f000054b000-0x13)=""/19, &(0x7f0000b9b000)=0x13) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00004a9000-0x8)={0x0, 0x0}, &(0x7f0000233000-0x4)=0x8) sendfile(r0, r2, &(0x7f0000e65000-0x8)=0x0, 0x8) getrandom(&(0x7f000011a000-0x3a)=""/58, 0x3a, 0x1) pwritev(r0, &(0x7f0000bff000-0x50)=[{&(0x7f0000a53000)="a4626c129d58280a305cf492cdec69cf1d918db165ab6d37d124bece4550a2855b46d1071c08e14cd01f16eddd0be7cd94aa715b4af329cb177b090741a0e0d8c4659af97c3eb6799e7e861b82b5f194a5e610c0abd50e63", 0x58}, {&(0x7f0000b1e000-0x39)="7e856ad86249bc125793dbc99534ffb695004a35af3934514a4e22ca371f4a0b9a2bf2f4c54341abe539bf35a26a6c3833a777a314b9885b83", 0x39}, {&(0x7f0000584000-0xd6)="1b30c54b442e5210ae5120ef4a0903edf13b9bf4128902ca84241f76dbf9caf2226e2d22e4b7781272fd2e868eaec062f5e8407265168d46815d4b26d85816914191565de36312c1ec3ba6440818e3505f17008ca3b3d0e557585992d5ce97b5e7031884c06757d0d3d7b2203d98712981ab9a33b5fc592a0f99f488c5b1c24a4e7f303a02e27267ba1c77f2c9664ccf5bbf31fc8efbdb9dc723634da5d4a4d6bcde8c91426503311d9811c47e9f70f38b006f5503de19789d2a2fd5bc1639245011d65fabec0248fa7e0e59eb040648668060a8acc6", 0xd6}, {&(0x7f00004b8000)="3dab2866307ddc04f3a288cd29acdfd53482d03b67db613d8303559e41cfae8f0c65087798a9901628d9b6ecd2353fc0f1d7b57d0c45e6316796211ddccf88ca9d2a06d4624510b85c78af9a4ac2cf", 0x4f}, {&(0x7f000053d000)="b091eec51743474c36296db9fb8214d63390493f8944fb7dfa26ae55a6d90c2d084b982637bf252602ca70b57f1ddabea4a89333ac15eb114ac5733e98414cdca0170ae81b733c69c3aa87b610450bb9af54562fb6986f661a64ffc9b9bece6c715ecbb52eab61", 0x67}], 0x5, 0x0) [ 70.573186] cgroup: cgroup2: unknown option "" [ 70.599088] cgroup: cgroup2: unknown option "" 2018/01/12 15:09:09 executing program 7: sync() clone(0x0, &(0x7f0000ce2000)="", &(0x7f00003c7000-0x4)=0x0, &(0x7f0000b5d000)=0x0, &(0x7f00007c4000)="") ioprio_set$pid(0x2, 0x0, 0x4000) sync() socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_open_dev$midi(&(0x7f0000c25000-0xb)='/dev/midi#\x00', 0x7, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001000-0x8)=0x1000) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000bd8000)={0x2, &(0x7f0000f65000-0x48)=[{0x0, 0x0, 0x0, 0x0}, {0x9, 0x0, 0x0, 0x0}]}, 0x10) mmap(&(0x7f0000f68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) syz_open_dev$mice(&(0x7f0000ac7000-0x10)='/dev/input/mice\x00', 0x0, 0x400002) r2 = syz_open_dev$usbmon(&(0x7f0000f69000-0xd)='/dev/usbmon#\x00', 0x4f27, 0x420800) mmap(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000f69000)={&(0x7f0000c15000-0x8)='./file0\x00', r2}, 0xc) mmap(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000e1e000)=0x2, 0x4) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00002de000)={0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000053000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/64, ""/32, [0x0, 0x0]}) r1 = perf_event_open(&(0x7f00004f0000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000d2c000)='/dev/rtc\x00', 0x0, 0x0) poll(&(0x7f0000ea6000)=[{r1, 0x8, 0x0}], 0x1, 0x6) ioctl$LOOP_CLR_FD(r2, 0x7001) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00006cb000-0x4)=0x5) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000216000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000364000)={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @random="e536d11c07ce", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, {0x2, 0x1, @rand_addr=0xd4c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f9, &(0x7f0000f4f000)={@common='sit0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0101090700070c0000fa000011040100df000000001009000000ff000004eb00"}) 2018/01/12 15:09:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000ddf000)='/dev/audio#\x00', 0xf0, 0x200000) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00008a1000-0x10)={0x7, &(0x7f0000725000-0x1c)=[{0x9, 0x5}, {0x6, 0x0}, {0x4, 0x80000000}, {0x9, 0x81}, {0x2, 0x80c}, {0x6, 0x81}, {0x80, 0x2}]}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00006af000-0x4)=0x80000001, 0x4) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000032b000-0x48)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0xfffffffffffffffd, 0x2000003, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000cca000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) [ 70.686464] binder: 10571:10576 BC_INCREFS_DONE uffffffffffffffff no match [ 70.694261] binder: 10571:10576 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 70.702993] binder: 10571:10576 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 70.710289] binder: 10571:10576 got transaction to invalid handle [ 70.716606] binder: 10571:10576 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00008ab000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0}}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000a45000)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @multicast1=0x0}, 0x0}, &(0x7f0000e8b000-0x4)=0x1c, 0x80800) getsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000866000)=""/144, &(0x7f0000411000)=0x90) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x18e1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) exit_group(0x3f) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000653000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) modify_ldt$read_default(0x2, &(0x7f00004c1000)=""/210, 0xd2) r3 = syz_open_dev$usbmon(&(0x7f0000048000-0xd)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000cc4000)={0x0, 0x0, 0x6, [0x100, 0x7, 0x9, 0x3, 0x100000000, 0x9]}, &(0x7f00007cb000)=0x14) open_by_handle_at(r0, &(0x7f000020c000)={0xcd, 0x80000001, "01cbc5cd60238d6482582530aca1693534d68dd00797d44e428083033c68fee38096b01704cf4f2d9752dd3a30cbc78f5907a5885e30485ae30efb01628e5ee01eda532c0ebcb115c439280ef3d9f3cdc85ccb1b9e5686498f4acb0f2830677e17182c053868e3894377f8a573417d96f89fd6d94babc2523eb045d39da0dac528a4471dde3c70f7282ff8a29c110329e08186de23444ab58ac8191a0aca98aac248d0a9fbc08391b43a7fb0579ed8018982f84ac7ce6212ff2cd87d4c902d73028e68eb5d"}, 0x410000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000619000-0x8)={r4, 0x3}, 0x8) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00005a6000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000af5000-0xe8)={0x0, 0x0, 0x0, 0x1f, 0x7fffffff, 0x0, 0x7, 0x16, 0x8, "fbf78641f4e2d663a057856c5a8047cb792e0aca0493b6c91a945e3cbe0998132955e4fea98dd7b3961b6cd317f595c13215114b9db604bc979bfd0bcc066446", "04eae921ff8293e1d13a8392f74e7d6e5c3a5c84b181e24b69bfe8fd87375a3a476783e9f164d6adc36f191b6bb79ee5621a08e6e0f9c6c3e0fff50864dd88f7", "c50b309f8c4000b8943f32bb6e43fffe7375a7aca300ed57e4c6576d110af9f9", [0x7, 0x8]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x0, 0x0}}], 0x1c) poll(&(0x7f00006ea000)=[{r2, 0x2100, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x0) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfd9000)=nil, 0xfd9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) timer_gettime(0x0, &(0x7f000089b000)={{0x0, 0x0}, {0x0, 0x0}}) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000004a000-0x10)={0x67, r0}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x400000000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000008000-0x10)={0x3f6, 0x546, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044160, &(0x7f0000008000-0xd9)="8a8fcbc980b05192d960f5d83756680f3cf6b6f182c9d6c65531578961dc96460800c85bd43bbe03e9fa1142320c96119613ebd70110f17b3425f6553f0aefa464ffed8cc893506023f69d5b32a5c353fa74901ef67f65da4da7d0ec0c5826a733b939d4fa377f6d99f552cbb1646a0e45b6cde1b7a82c1af7f00f41a8b482d2297714ba28b3ff5ebfc8d623fd0902c57ce641e95bd12ea2b602e0da14eba545d514209db42c7797786f9b43c480ddabb33a28c8acb7f3bb60e658bdbaa9a80e714c6e77563a85fc67a6a0bda82649af3b2f2131b9aac8c666") mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000)={0x0, @in6={{0xa, 0x3, 0x10001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xceb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000008000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000007000-0xa)={r1, 0x7ff, 0x80d0, [0x4]}, &(0x7f0000003000)=0xa) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) clock_gettime(0x2, &(0x7f0000659000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000c87000)={0x0, r1}, &(0x7f0000a2c000-0x10)={0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(r2, 0x15) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r3, 0x10d, 0x91, &(0x7f0000c9f000)=""/4, &(0x7f0000d5f000)=0x4) [ 70.830695] binder: 10601:10605 BC_INCREFS_DONE uffffffffffffffff no match [ 70.863142] binder: 10601:10605 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 70.872406] binder: 10601:10605 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 70.879875] binder: 10601:10605 got transaction to invalid handle [ 70.886190] binder: 10601:10605 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:09 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000001000-0x4)=0x6) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00007ec000)={r1, 0x8, 0x2, [0x100000001, 0x0]}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000fd5000)="", 0x0) 2018/01/12 15:09:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) sendmmsg$inet_sctp(r0, &(0x7f0000cc0000-0x70)=[{&(0x7f0000c0a000)=@in6={0xa, 0xffffffffffffffff, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c, &(0x7f00001db000-0x50)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00008c0000)={{0x1, 0x1, 0x1ff, 0x0, 0x100000000}, 0x8000, 0x10000, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0x1, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000d94000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00007f1000)='/dev/ppp\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000219000)={{{@in=@rand_addr=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @multicast1=0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f50000-0x4)=0xffffff1a) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000cf5000-0xf)='/dev/sequencer\x00', 0x800000400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000680000-0x50)={{0x27, 0x8}, {0x1fffffe, 0x100000001}, 0x80, 0x6, 0xbf66, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000f1b000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, r2}, 0xc) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000c1d000-0x4)=0x7fff, &(0x7f0000a00000-0x4)=0x4) 2018/01/12 15:09:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000df6000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000695000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x40000000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000e49000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001d000-0x50)={0x0, 0x1, 0x3ff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$int_in(r0, 0x5421, &(0x7f0000ffd000-0x8)=0xffffffffffffffc1) r2 = syz_open_dev$mouse(&(0x7f000027b000-0x12)='/dev/input/mouse#\x00', 0x7, 0x2100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000271000-0x8)={0x0, 0x7}, &(0x7f0000645000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000e39000)={r3, 0x64, "026569a7d09ae72c5f6f0ba1ebf190b4d741af63e0022701600de9b7c6534fdaf0bc7977838676d831a6a8b5909ccca55ef906cf8c577742845461ac41159b5c771a2ea7fbeac25c5886cc7d705594f4ef415108743a41c5147dbf349ad0334435e23ad2"}, &(0x7f000058c000-0x4)=0x6c) 2018/01/12 15:09:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfe0000)=nil, 0xfe0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000fe1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000fe1000-0x8)={0x0, 0x4b89, 0x8000}, &(0x7f0000aae000-0x4)=0x8) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000fe0000)={r1, @in6={{0xa, 0x1, 0x8000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x18fe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) close(r0) vmsplice(r0, &(0x7f0000647000-0x40)=[{&(0x7f0000e98000-0x1000)="9a", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f000047c000-0xc)={0x4000000, 0x3ff, 0x2f}) 2018/01/12 15:09:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000ed2000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) msgget$private(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000028000-0x3b)=""/59) pipe2(&(0x7f000072c000)={0x0, 0x0}, 0x80000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000529000)={0x11, 0xde, &(0x7f0000e55000)="06debccdd4bafff6c2f777f00b3f985ac39d491cbbec7578e99ab04f73de8ea884ade84c93cc65c9281bf2683afeb29256edd1045f1d22c495936b19f22ce8eee82a23c9de5f3030c3b6a77a4ffe76cd75cee871f2e6b197b7acba567ad48262458c3527b732dfb25ad6265bc1cdf4ec1ff9b15c068e8cd169481865b38f6ba53b2f2f3d42824406e8be98fec41ea857638dc2690c1e50da1bdf4cb2af1927870456b6c016478b7e675a224f6539816e95e0d0376df95324ae37233f2d59e34e3f86df2ef341d949b4e8111cd78e539aae3568f2b3267b8d9eeb5780ba82"}) setuid(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) remap_file_pages(&(0x7f0000ce3000/0x4000)=nil, 0x4000, 0xc, 0x10001, 0x800) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000802000-0x4)=0x0, &(0x7f00005ee000-0x4)=0x4) r2 = shmget(0x0, 0x1000, 0x78000008, &(0x7f0000908000/0x1000)=nil) shmat(r2, &(0x7f0000131000/0x1000)=nil, 0x5000) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000064f000-0x8)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000dcf000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c60000-0x4)=0xe8) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000eed000-0x11)='/selinux/relabel\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000365000-0x12)='/dev/snd/pcmC#D#p\x00', 0xcd36, 0x410200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00003df000)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x81, 0x6}, &(0x7f0000841000)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000e43000-0x98)={r2, @in6={{0xa, 0x3, 0x80000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xf37b}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fff, 0x8}, 0x98) clock_gettime(0x0, &(0x7f0000228000)={0x0, 0x0}) clock_settime(0x7, &(0x7f000035c000)={r3, r4+30000000}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00007c9000)={@common='dummy0\x00', &(0x7f00007b7000)=@ethtool_channels={0x3c, 0x9, 0x3, 0x4, 0x4, 0xfffffffffffffff9, 0x2, 0x5, 0x8a6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00001cd000-0x9)='/dev/sg#\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$void(r0, 0x1) dup2(r1, r0) 2018/01/12 15:09:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00005f1000-0x4)=0xb18) ioctl(r0, 0x227e, &(0x7f0000920000)="") 2018/01/12 15:09:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008ab000-0x8)=0x8000000075) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00008c4000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006f3000)="e513b5a378aa9141fb0007ff00000cfc", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000851000-0xb)='/dev/mixer\x00', 0x12000, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00006b6000)=""/82, 0x52) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000bef000)=0x0, 0x4) sendmsg$alg(r1, &(0x7f0000f00000-0x38)={0x0, 0x0, &(0x7f00006cd000)=[{&(0x7f0000eaf000)="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", 0x1001}], 0x1, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, &(0x7f0000540000-0xe9)="e8c4252925bac058a57c93e69888bd26e4b3d5bd0c2e0c8889ef0a1235cfee695e6ef27f24cef1beab2e2d4d1e0293afc5a91c1c4e524d290e83c1d0a251618fca6e2dc4169e68147340cbc1851c1facb7db122dc278089289c7b1b697d78494cc98c318df3045e660565a26f272427d3e11de93d33065c0dac2db2199613f9422213aa78bf2378ffdfd478729ce45a2fdce74f2268a105686c2fa06ae6ccbb484713c19f128b2d808ef5c3612010f63fb8634da8de08bbea791051714c2a31a9572d2422a97f0668360bb8ab32a5b983599b3cfe662a8e1973bcb4553796f66c0f7c42faf2d7cf1b3", 0xe9, 0x4000014, &(0x7f0000983000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x1c) recvmsg(r1, &(0x7f000033f000)={&(0x7f00003f8000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, 0x14, &(0x7f000074b000)=[{&(0x7f0000de7000-0x1000)=""/4096, 0x1000}], 0x1, &(0x7f0000fd1000)=""/0, 0xfffffffffffffcc2, 0x6}, 0x0) 2018/01/12 15:09:09 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000899000)={[0xd001, 0x100000, 0xf000, 0x3002], 0x9, 0x50, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap$binder(&(0x7f00002cd000/0x2000)=nil, 0x2000, 0x1000004, 0x8001f, r1, 0x2000000000000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000a9c000+0xa61)='/dev/cuse\x00', 0x4002, 0x0) 2018/01/12 15:09:09 executing program 6: lookup_dcookie(0x7, &(0x7f000002f000-0xda)=""/218, 0xda) mmap(&(0x7f0000000000/0x9b0000)=nil, 0x9b0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000669000-0x38)={&(0x7f000000e000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000d000)={&(0x7f00009af000-0x105c)=@delpolicy={0x5c, 0x14, 0xa21933e0cb560ea3, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x0, ""}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f00009b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f00009b1000-0xb)='/dev/midi#\x00', 0x2, 0x80000) mmap(&(0x7f00009b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009b1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009b1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009b1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f00005ed000-0x8)='./file0\x00', &(0x7f00009b2000-0x18)=[&(0x7f00009b1000)='system/\x00', &(0x7f0000769000-0xe)='vmnet1trusted\x00', &(0x7f000017c000)='nodev@\x00'], &(0x7f00009b1000)=[&(0x7f00007b6000-0x19)='^%.nodev#\\md5sumtrusted@\x00'], 0xc00) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00009b0000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000875000-0x14)={0x0, 0x8, 0x4, 0x0, 0xa9, 0x3}, &(0x7f00003be000)=0x14) mmap(&(0x7f00009b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00009b0000)=@sack_info={r2, 0x7fff, 0x8}, &(0x7f000036a000)=0xc) [ 71.018436] binder: 10632:10644 BC_INCREFS_DONE uffffffffffffffff no match [ 71.030190] binder: 10632:10644 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 71.038381] binder: 10632:10644 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.045797] binder: 10632:10644 got transaction to invalid handle [ 71.052106] binder: 10632:10644 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000001000)='./file0\x00', 0x20000000) write$sndseq(r0, &(0x7f0000001000-0x60)=[{0xffffffff, 0x5, 0x8001, 0x100000000, @time={r1, r2+30000000}, {0xffffffffffff994c, 0x80}, {0x7, 0xfffffffffffffffd}, @connect={{0x9, 0x7}, {0x5, 0x7f}}}, {0x3, 0x7, 0x7, 0x9, @time={0x0, 0x1c9c380}, {0x1000, 0x5}, {0x1, 0x2}, @connect={{0x97, 0x4}, {0x54b, 0x6}}}], 0x60) timer_settime(0x0, 0x0, &(0x7f000066c000)={{0x0, 0x0}, {0x0, 0x0}}, &(0x7f0000001000-0x14)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/12 15:09:10 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000df5000)='/dev/input/mice\x00', 0x0, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000845000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000ea4000)={0x0, 0x0, 0x0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000245000-0x10)={0x0, 0x200, 0x0}) 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000fec000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000ae000+0x709)={@common='bcsf0\x00', @ifru_flags=0x1}) accept$alg(r0, 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000092000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000023000)=0x14) bind$alg(r0, &(0x7f0000181000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) munlock(&(0x7f0000d31000/0x2000)=nil, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x2, 0xd, &(0x7f0000f45000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6b}, [@generic={0x9, 0x3, 0x1000, 0x10906583}, @alu={0x4, 0x7f9, 0x3, 0x0, 0x3, 0x4, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x6, 0x7, 0x5, 0xfffffffe, 0x11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x9}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000ea9000-0xa)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], r1}, 0x48) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000ecd000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f000069c000)=0x5, &(0x7f000072f000)=0x4) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$audion(&(0x7f0000773000-0xc)='/dev/audio#\x00', 0x8, 0x8000) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f000027b000-0x4)=0x5, &(0x7f0000236000-0x8)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000154000)={r3, r2}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f000078c000)='/dev/autofs\x00', 0x800, 0x0) name_to_handle_at(r6, &(0x7f00006b6000)='./file0\x00', &(0x7f0000c09000-0xaf)={0xaf, 0xffff, "fc34b203fe4de98a9467de4d38851378049f830f7df21a74b67c7a84ecd5fd8b636879fb74c48f94c3f533c3bf99b79da40fd26289340d565d7c0ba3c1ac85aa64bf4034a1789ad5a3c726cb53f79ece791ecbeb8e2ba326ceef2f8efd0b586704f1c15d7aaa5f91b335bb64200efe2bef07849287c339c43c30cd4d3886e2ce43e737ce02a061491b4dd48b98535211de57e031b079c75ba4790cdb9599e196f2da32c05807af"}, &(0x7f000046a000)=0x0, 0x1400) sendmsg$key(r4, &(0x7f00001fd000-0x38)={0x0, 0x0, &(0x7f00000d0000-0x10)={&(0x7f0000e91000-0x10)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000850000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) r2 = socket(0x0, 0xa, 0x5) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00007ad000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f000023d000-0xc)=""/12) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r1, &(0x7f0000143000)=@random={'system.\x00', '/selinux/member\x00'}) delete_module(&(0x7f0000099000)='eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xa00) recvfrom$unix(r2, &(0x7f000055d000)=""/122, 0x7a, 0x0, &(0x7f000048f000-0xa)=@file={0x0, './file0\x00'}, 0xa) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r3 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r2, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r3, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0, 0x0, 0x0}], 0x1, &(0x7f0000001000)={0x77359400, 0x0}, &(0x7f000000d000)={0x0}, 0x8) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000015000)=0x80) r1 = dup2(r0, r0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f000001a000-0x8)='selinux\x00') ioctl$int_in(r1, 0x5421, &(0x7f000000a000-0x8)=0x43) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f000001a000)=0x0, &(0x7f0000018000)=0x4) openat$autofs(0xffffffffffffff9c, &(0x7f000001a000-0xc)='/dev/autofs\x00', 0x100, 0x0) readv(r0, &(0x7f000000d000-0x10)=[{&(0x7f000000c000-0xef)=""/239, 0xef}], 0x1) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f000001b000-0x60)={0x0, 0x2c, 0x5, @thr={&(0x7f0000006000)="967226f6c487136e632dab8d1c2b0157151b4b91b93b", &(0x7f000000b000)="bd27f409b1cda3603fd8ed3290f086602d72bc4b60187bccf1ce4980e9b519368cdf276e0fd2f0cea4a50e543d8076c91736fe2a870ff8e0a32a6fa9ab3225738844f15b507ffcce73f5fbb6359e13f9e0badf0599957cabd858dabd2784b78b7abd6cff59feb11412659f3d53cfe4b44ccdec1323964bce9df5c80abb9973896966f955993db662c94cc12ed8cf307e1861c806bb652678cd3ec3ee769c3851d590a3cc67455824a7bdde7256dcdd5f6d685898352c620305cc45f20447188e66ac12357745278a14ce9567ea431d27779cf1b200d4a4afaca8a917fb"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000001a000)=0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(r2, &(0x7f000001b000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000038f000)={&(0x7f00003f5000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000012b000)={&(0x7f00004ad000-0x578)=@newpolicy={0xb8, 0x19, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, []}, 0xb8}, 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000a35000)=0x1, 0x4) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000b82000)=@generic={0x0, ""/126}, &(0x7f000022b000-0x4)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00006a2000)={0x0, @in6={{0xa, 0x0, 0x87c, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x18}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x85, 0x3, 0x153b392, 0x7c, 0x80}, &(0x7f0000f55000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000387000-0xa0)={r1, @in={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x8000, 0x7, 0x225, 0xfff}, &(0x7f0000804000)=0xa0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00008c4000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000444000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000956000-0x8)=0x2000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000eb4000-0x94)={{0x3, 0x3f, 0x3, 0x20, 0x880, 0xdc}, 0x0, 0x0, 0x3, 0x3, 0x4, "798fe8cd6fea8d7d5f0f4014d6b4533f7e0719d350e4f53e92dafab846136bb3d16e847aed916350f615d06d97d7b295ec1df8f1a85f717c1c25312b2cf8abbc4aa2aab92d1aa158cd8d20f5fe08cd0bf2081dc075d3469436febf983fd4467b287ffbe2279b11b50f45b52aa8e6004ff244fc5cc9c08f7164464c73b22f46fb"}) r4 = accept4(r2, &(0x7f0000495000-0x11)=@in6={0x0, 0xffffffffffffffff, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f00005a8000-0x4)=0x1c, 0x0) setsockopt$llc_int(r3, 0x10c, 0xf, &(0x7f0000f45000)=0x1ff, 0x4) ioctl$int_out(r2, 0x5460, &(0x7f0000528000)=0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000847000)={0x300, 0x200, 0x400, 0x10000, 0x40}, 0xfffffffffffffff3) bind$llc(r0, &(0x7f0000b90000)={0x1a, 0x1f, 0x3f, 0x2b0, 0x0, 0x91a, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) r5 = request_key(&(0x7f000029d000-0xd)='dns_resolver\x00', &(0x7f0000dc9000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000fe6000)='aead\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r5) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x743002) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001000-0x4)=0x1) r1 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000001000-0x44)={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x3, @rand_addr=0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='yam0\x00'}) 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000fc2000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00009bd000-0x63)="fa399b66dbc5c929eae89b23391b286e172dd1220963283c8f1a4649c401b6eee32b083c952a705df7055f2d7fdab40235473ea810d6a64d4258e2f38776132f245be45813c7af042afe5f74cfdeea24d1daa75fd6ea4d6a22831ed4b89829e9826b56", 0x63) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000c77000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000cb0000-0x4)=0x1e, 0x4) [ 71.173644] binder: 10675:10679 BC_INCREFS_DONE uffffffffffffffff no match [ 71.204006] binder: 10675:10679 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001000-0xde)=""/222) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000b3f000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffc6) finit_module(r1, &(0x7f00004b5000-0x25)='vboxnet1user:.^)#posx_acl_access@em0\x00', 0x3) sendto$inet(r1, &(0x7f0000423000-0x5d)="", 0x0, 0x20008000, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = dup2(r1, r1) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00006cf000)=@req={0x28, &(0x7f0000f31000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@generic="27eda77de96f570ea4fc687db89f49d4"}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f000014c000-0xa0)={0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000001, 0x0, 0x0, 0xa7, 0x8}, &(0x7f000043d000-0x4)=0xa0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00003e9000)={0x0, 0x8, 0xfffffffffffffffe, &(0x7f0000a9b000)=0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00008a0000)={r3, 0x7a, "df1802584752d9c80da7368315707f7967bc591bd5da082dd102fbc6bbb3e88d6702908f837ebb3fdcda58fd22e74afbb189f26a94ab67c5a60c98db06726fb9a391f8296c0cdd599e2c5c4075b84393102009ad5ebe0d921a39e6abef34c8ddcbfaef4a29f2bfaac7db273034bafb1df27a30633ecb6de74c4a"}, &(0x7f0000cc2000-0x4)=0x82) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, 0x0, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 71.217812] binder: 10675:10679 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.221797] device eql entered promiscuous mode [ 71.229869] binder: 10675:10679 got transaction to invalid handle [ 71.236160] binder: 10675:10679 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000c09000-0x13)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000aa8000-0x110)={{0x4, 0x0, 0x0, 0x0, "e5d8ae06f65ffacf712f5939471f983586003b3f12597fa445cf888a59bede29043e31b0a6e87132e811719c", 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c78f85e8e5b9da0fc3b2f7ad63cb7aca6a5a641b21b19a89f1b472477c542de15b2b73c0c1bdb460885328789b740197167688bd0f2f6917ebd88f3a4e7699a3", &(0x7f0000d80000)='/dev/snd/controlC#\x00', 0x13, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000074f000-0x9)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f000097c000)={0x0, 0x0, ""}, &(0x7f00002d8000)=0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000389000)={0x0, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c23000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f00000c4000-0x1b)={&(0x7f00000ab000-0x80)=@nfc={0x27, 0x0, 0x0, 0x0}, 0x10, &(0x7f00002fc000)=[{&(0x7f00001d2000-0x2f)='O', 0x1}, {&(0x7f000074b000-0xe)="6e27cab3f021f21281ad7ba1ef76b9", 0xf}], 0x2, &(0x7f0000074000)=[{0xf0, 0x104, 0x41, "5123b23dbe46133a4649b75b1a9419de21fff0fa0231c6b06d87856de5461085d2521a25a46c26dfb32ce82945c62d4186c1af00632164c16f8b2e69869ba41f26574f0726a12480acccefde32b9e0411bcd6969618a454337cef8c51e5ef1cc74efb75f4e5f7a33a4c49544f5be7b354c271926204d7f5021a427a8c5b34c83e583308dd2493667cfbc9b5fa2831e60f559a63af50b6591cac3f96b1d8ec452257911d3d34ce11aeade41c63e9bc6294313155db111ac48fd229571863d43653ebaf2ad24b052d6db461f04a0a8c6791fd9e98f0dd9b19036545e8d"}, {0x1010, 0x19f, 0x304, "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"}, {0x100, 0x10f, 0x800, "5818bae915ac31485d1f52924d0d351798df9eff115d8974bed247c31a08194b03c7d84bee18c1c5ae16a899bc8a984b6ebcec20671b9c10804923366ba5c0248fb0d217cb824ed258c45caa2508972e180bf480c67dd53f294ab30e99443a96df3639b2a496081b6f512b2d40557f2da7ae806e699cbba625e04faaa018e14e713c96ffa139b8da3996455e616c86c118f9c2b060293dddbe9d54181f7f52d5996495e2d27e91bfc0157c74e83b4578e13229f8e0726912c188a9759043db54d6e71613bef4f9789532ef8328c6d48251491bb3a38205b857b8b4800e341477dbd6479de40f0c44c0a4ef6bf0"}], 0x1200, 0x44880}, 0x11) r2 = syz_open_dev$amidi(&(0x7f0000343000)='/dev/amidi#\x00', 0x4, 0x400) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000453000)=0x0, &(0x7f00004b4000)=0x4) 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000001000-0x10)={0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x10, 0x80000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000268000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000279000-0x11)='/selinux/context\x00', 0x2, 0x0) bind$llc(r1, &(0x7f0000b22000)={0x1a, 0xd, 0x5673, 0x4, 0xfffffffffffffff7, 0x8, @random="b8aaa65e175a", [0x0, 0x0]}, 0x10) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f000020f000)={0x40009, 0x0, 0x0, "7175657565310000000000000000000000000000000023000000000000000000000000008d4d00000000000000000000000000000000008000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:10 executing program 4: times(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000003000-0x8)={0xfffffffffffffffa}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000003000-0x10)={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x10, 0x800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = getpgid(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in=@loopback=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) r7 = getegid() socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000002000-0x8)={0x0, 0x0}) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$adsp(&(0x7f0000003000-0xb)='/dev/adsp#\x00', 0xde9, 0x4000) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000-0x4)=0xffffffff, 0x4) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r13 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000003000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000003000)=0xfffffffffffffc34, 0x80800) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000003000-0x8)={0x0, 0x0}) r17 = inotify_init() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000002000-0x38)={&(0x7f0000003000-0xc)=@proc={0x10, 0x0, 0x3, 0x10000}, 0xc, &(0x7f0000002000)=[{&(0x7f0000000000)=[{0x270, 0x10, 0x0, 0x6, 0x3, [@nested={0x248, 0x7a, [@generic="133b034c75162ea3bce4e2fc923f281f3a9e74acd872bb2eaed2", @generic="ceb20374b0060f2b838f365519763d8b03098f070f804cdf0542b5650e07d0d271d3a4cb80ca95a5a2b9fa813e8dc5f32879f392bd1032cae9a13573", @generic="2f752f31a88ee086dad10cb065ddb386eeaef7400b2297dd654256981ae64d6d9826ad6e7a378f992815e3e9dce68f9b7cd30c3e84b98699df549fad5e90bc97b6bc77b63c980d2874eb0331ac0e50fa72ddf12346f5e57379e94828338a7eb5e37198e2526490e39c69d2d31f75963ae3635ae45b963d6956c277698fd7bc3b6198128d6858f4eda0975a66768707acbfae7cdda2139842862e90490923af7a53c636c5096d5df620f7c6f0866729d28f0a58647be026a20ac0ff72f9d7995183b097e2743cc1e400c8e817a237fdb9a175ecfc5404f6743a1b4b076313e18ad36f0a", @typed={0xc, 0x73, @pid=r1}, @generic="c4f9261da5c9bd2bf079a5a5edb62b5c57231362a25c66394229f1fbe670d83fee9e7a1141d70cfb2534ce9f0bec6e1d5d264fa26b7a7eb7fba7890f753a909ad87f02036627a5194c5c8e33302dce6a24440647bae088603526410e2a99f3393fdc83f4c3307736406e73334dc7a963cab4263754243f979f1b16312b2eff78495b2425421b0b0215e2f07ac70d163e7e0d4fe07e8807173ae072bd192cc45608f8e960839a72fcdab497a67a342062956d0f32dec4673bf8ad6a1b9c1859127b21b9e322399e1f803d8378eeab7f497b355321bb7371370031bc58bd1788b36e7716ec7d4b64fd4ba1981a", @typed={0xc, 0x3c, @ipv4=@empty=0x0}, @flag={0x4, 0x25}]}, @nested={0x14, 0x3, [@typed={0x10, 0x2b, @u64=0x2}]}, @flag={0x4, 0x6a}]}, {0x134c, 0x38, 0x2, 0x3, 0x1, [@nested={0x4c, 0x92, [@flag={0x4, 0x55}, @flag={0x4, 0x7c}, @typed={0xc, 0x48, @u32=0x8e}, @typed={0xc, 0x1e, @fd=r2}, @flag={0x4, 0x24}, @typed={0xc, 0x33, @pid=r3}, @flag={0x4, 0x80}, @generic="0229aaa77ee9ef2fff8093b01ed3", @flag={0x4, 0x5c}]}, @flag={0x4, 0x44}, @generic="6c6eb7a5baec6f1a93db7fb5376569431c1f69464d6d00a83cafe4f48d0297d0d902e49868d484e8e99f3eadbdb1922fad9998444ac0150c765406d17c62055211bcfa1d75bcd6ce55f4b3ec73467cfb076831d6c441715571271690d380a3803b221f6c25324dbe98fe23da99c3b123fd3d6fc6843a1c4d10d8fdb2f5e449725902ebfdd74a738eeb2286bd35147a3cd91ef6333f6ae6a043262080d5862cf68a2727c6d72082e1c91e6698ddc542d0a5e4b31ac338f14a95244871889820bfc09582a73de38ef768198e222b0b679c0832f38e719fad8dbcac19af7639d0f36d53bad43ebf3cfe9618a3", @typed={0x28, 0x74, @binary="5dceebb8f5241b67dec76f7bc50f0582c2eeeb79c94de8bf4a84c82bdae1ebf3"}, @typed={0xc, 0x6e, @u32=0x1}, @typed={0x18, 0x4e, @binary="99e5bcf35e6075eac367f6ef1e2c"}, @typed={0xc, 0x8d, @fd=r4}, @nested={0x10f8, 0x80, [@generic="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", @flag={0x4, 0xa}, @generic="f4dcbea372316abb6c7635d93f3da891250395e8830a8ea3070e5d8cd1f8eab7b3d4414c6c9e9da9929babc6e29f90877251f32d67e8bc482f4e2f4eb73665eba6fa1eaf9deb36cbbf728a64b084f16b7893e66593c3545b7df0b73ff7de31493b050d4c87c5ef9d5075e6df2727d5de0ecc8489be51ea5a03172212dbd8ac01c25ec5c77c2867f48a34f93a25b95feef8384b4e49ec61848bebd226bacef5", @typed={0x10, 0x21, @u64=0x1}, @typed={0x24, 0xd, @str='systemsecurityvmnet1+)eth0+\x00'}, @flag={0x4, 0x87}, @flag={0x4, 0x63}, @typed={0x10, 0x15, @u64=0x5}, @flag={0x4, 0x16}]}, @flag={0x4, 0x91}, @typed={0xac, 0x47, @binary="2943ca4031cbf0d3a53427e3e3ac08090afb7a8fc759f9e9c347008e16669a3322fc5df5648e4a74ce0bc6004286adf6257193b98c06d674b62d61fb46a1d81f69af7d8f7bf57f7a1e0f6023ade2e2557804086afcad57580595e09340642750888526f9e18a841e5fa3bbf24bf1c3ed4dd4de7586044e2f0a75b4e14a79482f85b02352af8b1f8b773ea1c979c3cdbe826ff52f833650229d54a73b16c7e8d25132"}]}], 0x15bc}], 0x1, &(0x7f0000003000-0x68)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r8, r9, r10, r11, r12, r13, r14, r15]}, @rights={0x18, 0x1, 0x1, [r16, r17]}], 0x68, 0x0}, 0x80c0) socketpair(0x1f, 0x0, 0x200, &(0x7f0000001000)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) exit(0x6) setsockopt$netlink_NETLINK_PKTINFO(r18, 0x10e, 0x3, &(0x7f0000001000-0x4)=0x0, 0x4) [ 71.326877] binder: 10712:10720 BC_INCREFS_DONE u0000000000000000 no match [ 71.365524] binder: 10712:10720 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 71.390742] binder: 10712:10720 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.397957] binder: 10712:10720 got transaction to invalid handle [ 71.404235] binder: 10712:10720 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002000-0xc6)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00008c9000)={0x0, 0x0, &(0x7f0000e85000)=[], 0x0, &(0x7f0000671000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x0}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000031000-0x60)=[{&(0x7f0000589000-0x8d)=""/1, 0x1}], 0x1, &(0x7f0000590000)=""/0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00008c8000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x103000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f00003b2000)={0x910, 0x80000000, 0xe54, 0x1, 0x86}) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000784000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000457000-0x8)=0x1, 0x9, 0x7) setgroups(0x0, &(0x7f00002cc000)=[]) 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b33000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000d09000-0xc)={0x7, 0x0}) epoll_wait(r0, &(0x7f0000f22000-0x9)=[{0x0, 0x0}], 0x1, 0x0) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0xf763, 0x2) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000004000-0x8)=0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f000000f000)='/selinux/status\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f000000f000-0x9)='/dev/ion\x00', 0x0, 0x0) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000458000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = memfd_create(&(0x7f0000648000)='rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xdf37cd7dd7d80eb3) mq_timedreceive(r1, &(0x7f0000f86000)=""/4096, 0x1000, 0x92c, &(0x7f0000ccc000)={0x77359400, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00009fc000-0x10)="0a0775b0", 0x4) 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000600000-0xd)='/dev/usbmon#\x00', 0x0, 0x450000) getpid() r1 = socket(0x0, 0x0, 0x7) r2 = syz_open_dev$mouse(&(0x7f0000db7000)='/dev/input/mouse#\x00', 0x0, 0x60000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006f4000-0x9)='/dev/kvm\x00', 0x0, 0x0) accept$unix(r2, &(0x7f000066b000-0x6e)=@file={0x0, ""/108}, &(0x7f00000ea000)=0x6e) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000534000-0x6b)="f91354747f0c8f27fc14a8bc9d94250f65fa1d99055cde562ed04f8c841abb7aca509ff74d08d63c44fd0de3a31faa4e09d75a0be0218b27a74ecb65d5d1074d71803cf9bd56f3ea37c65d6602b648a8ae94557f800d5e9f1ef587e8a6100a1472e48c4941851779c4db16", 0x6b) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00007c5000)={0x2, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000707000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00007c5000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, 0x0, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00006f4000-0x1c)={0x400000000000005, 0x7, 0xdf8, 0x1, 0x1, 0x0, 0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00009c3000)={r0, &(0x7f0000ae2000)="", &(0x7f0000565000-0x1)="", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000f31000)={r0, &(0x7f0000436000)="", &(0x7f000017a000)=""/205}, 0x18) 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000fae000-0x8)={0x0, 0x5}, &(0x7f0000f0c000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000605000)={r2, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x0}, &(0x7f0000afd000)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000473000)={0x0, 0x31}, &(0x7f00006ea000-0x4)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f000074e000-0x1b)={r3, 0xffffffffffffffff, 0x13, "87f2dd25e1185b473303ccf5f15d1c98cf1f2e"}, 0x1b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setrlimit(0x7, &(0x7f0000c42000-0x10)={0x0, 0x0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00008ce000/0x18000)=nil, &(0x7f0000328000)=[@textreal={0x8, &(0x7f0000e35000-0x3d)="0f095fbaf80c66b8b8fdea8666efbafc0cb80080eff0838400000a260f09baf80c66b84c85288966efbafc0c66ed0fb0ecf2abf3f2f78f26474c6f3eaf", 0x3d}], 0x1, 0x0, &(0x7f00002a4000)=[], 0x0) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00006e0000)=0x0) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="97", 0x1, 0x0, &(0x7f0000ab8000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000ab0000-0xf7)="b8", 0x1, 0x0, &(0x7f0000abf000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000f7e000-0xc)=@sack_info={0x0, 0x7, 0x0}, 0xc) 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, 'port0\x00', 0x14, 0x4, 0x6, 0x10000, 0xffffffffffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000a00000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000d3b000-0x10)={0x0, 0x200000014004, 0x0}) r3 = syz_open_dev$dmmidi(&(0x7f0000818000)='/dev/dmmidi#\x00', 0x400000000000000, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00007ea000)=""/20) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000150000-0x4)=0x0) creat(&(0x7f0000e17000-0x8)='./file0\x00', 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000071a000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f000080c000)={[0x9, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000f39000)={0x7f, 0x20}) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00006bf000-0xc)={0x3f, 0x250a2e68}) r4 = dup2(r3, r0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 71.520157] binder: 10746:10753 BC_INCREFS_DONE u0000000000000000 no match [ 71.538289] binder: 10746:10753 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f000001b000-0x5c)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, {0xa, 0x2, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x0, [0x0, 0x0, 0x1000, 0x80000000000, 0x20000000000, 0x0, 0x81, 0x5]}, 0x5c) r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000def000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000df1000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f000000a000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000def000)={r2, 0x80000, r1}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00002e9000-0x4f)={0x0, 0x47, "999fa6f524e9b940d01122c29e028dc20ddf6cdbab24da81bdd2cb55f0109a04bcae084ba720ee4c084cc7b3ad4bfe906460139464bfa5e3c3fd241590fe7a2e43072ec794ba93"}, &(0x7f0000701000)=0x4f) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00004c1000-0x8)={r5, 0x200}, &(0x7f0000234000-0x4)=0x8) fcntl$setlease(r0, 0x400, 0x0) r6 = socket$inet(0x2, 0x80001, 0x0) uselib(&(0x7f0000e47000-0x8)='./file0\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet(r7, &(0x7f0000df1000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f000090a000-0x38)={0x6, [0x4, 0x1, 0x80000000, 0xffffffffffffffff, 0x40, 0x255b]}) getsockopt$sock_buf(r6, 0x1, 0x19, &(0x7f0000910000)=""/0, &(0x7f0000dee000)=0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x200000000000a, &(0x7f0000425000)=0x1004, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00003d1000)=0x0, &(0x7f00002f4000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000440000-0x8)=@assoc_value={0x0, 0x8}, &(0x7f0000c5f000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00007ee000)={0x8000, 0x204, 0xffffff7ffffffff8, 0x3, r8}, 0x10) sendto$inet(r7, &(0x7f0000de2000-0x1)='U', 0x1, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000de9000-0x18)=@generic={0x6, 0x3, 0x4}) setsockopt$sock_int(r7, 0x1, 0x100000000c, &(0x7f0000df2000)=0x9, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000df0000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000de9000)=0xe8) setsockopt$inet_tcp_buf(r7, 0x6, 0xa, &(0x7f000071d000)="1f0000000000000000f9fffc8f36f800000733f1a5a78631df491525c301040008000000004fa607", 0x28) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00009ec000)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000793000-0x20)=[@in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x20) pipe(&(0x7f0000df2000-0x8)={0x0, 0x0}) getsockname(r9, &(0x7f0000deb000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000deb000-0x4)=0x14) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000004000-0xd)='/dev/dmmidi#\x00', 0x1, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000009000-0x4c8)={{0x6e8, 0x7, 0x0, 0x9, "993a16604f4e4500c3ddd9357d07265ebf8833d340809c487a97f7f713d2fd0bfaed30b7400432d586f49ef2", 0x8000}, 0x6, [0xbf0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x200, 0x5, 0x2, 0xca, 0x81, 0x9, 0x3ff, 0x9, 0x8000, 0xffff, 0x0, 0x0, 0x229d, 0x9, 0x5, 0x100000001, 0x3, 0x7, 0x2, 0xf486, 0xffffffffffffffe1, 0x5, 0x6, 0x800, 0x3, 0x2, 0x7, 0x2, 0x0, 0x9f8e, 0x9, 0xea4, 0x2, 0x9, 0x1, 0x9, 0x3c, 0x40, 0x3, 0xffffffffffffffe1, 0x800, 0x100, 0xffff, 0x1, 0x0, 0x80000001, 0x0, 0x20, 0x5, 0xa9, 0x20, 0x4, 0x5, 0x2, 0x5, 0x9, 0x7185f9da, 0x8000, 0xffffffffffffffe0, 0x7, 0xffffffff, 0x78911925, 0x0, 0x2, 0x5, 0xfff, 0x7ff, 0x7, 0x8, 0x3, 0xffffffffffff0001, 0x1, 0x10000, 0x1000000000, 0xfff, 0x7, 0x1ff, 0x5, 0x3, 0xfffffffffffeffff, 0x8, 0x2, 0x2de8, 0x1, 0x7fff, 0x5c6, 0x8, 0x10001, 0x5, 0x20, 0x5, 0x6, 0x81, 0x8001, 0x0, 0x4, 0x7, 0x1, 0x8, 0x5, 0x4, 0x8, 0x80000001, 0x401, 0xfd5, 0x401, 0x0, 0x10000, 0x1, 0xbe, 0x80000001, 0x5, 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, 0x1, 0x6, 0x2, 0xff], {0x77359400, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000006000-0xf)='/dev/sequencer\x00', 0x8000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f000000a000)=""/249) r2 = syz_open_dev$loop(&(0x7f0000006000-0xb)='/dev/loop#\x00', 0x6fb8af7a, 0x60040) fchmod(r2, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000076a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000f9d000-0x70)=[{&(0x7f00000f6000)="f1", 0x1}], 0x1, 0x0) clone(0x0, &(0x7f0000494000-0x5c)="", &(0x7f0000000000)=0x0, &(0x7f0000d8d000-0x4)=0x0, &(0x7f0000001000-0x1b)="") fcntl$setflags(r0, 0x2, 0x1) faccessat(0xffffffffffffffff, &(0x7f00002ea000-0x8)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00004dc000)=0x0, &(0x7f0000cb7000-0x4)=0x4) sched_rr_get_interval(0x0, &(0x7f000041d000)={0x0, 0x0}) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x0}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00007af000-0x38)={0x0, 0x0, &(0x7f0000fc5000)=[{&(0x7f0000f9d000-0xb4)="", 0x0}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 71.586372] binder: 10746:10753 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.593620] binder: 10746:10753 got transaction to invalid handle [ 71.599929] binder: 10746:10753 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000425000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r2) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, 0x0, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000bc4000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000135000-0xae)=""/174) 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000161000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00007ba000-0x9f)=@hdr={0x2, 0x87, 0x1931, 0xfffffffffffffff9, 0x3, 0x0, @ipv4={{0xb, 0x4, 0x7fffffff, 0x3ff, 0x95, 0x1, 0x0, 0x380000, 0x17, 0x0, @loopback=0x7f000001, @rand_addr=0x80000001, {[@ssrr={0x89, 0x17, 0x7fff, [@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, @multicast2=0xe0000002, @multicast2=0xe0000002, @loopback=0x7f000001]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x100, 0x0, 0x0, 0xc, 0x0, "dc4475", 0xfffffffffffffff8, "c6df85"}, "9046c065c719bfe7e079254ed6e91f6505852e4d35b5bc79adb6825493e57d8806e2dde33bac244dafa72199699b118778ba8d91faa0491b68c4efff3aa9cf913b5ad2a1331668c89ab6995f86682cef31ce3aa56e688f5006"}}}, 0x9f) pipe(&(0x7f000088f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000620000)=[{&(0x7f0000d25000-0x1)='F', 0x1}], 0x1, 0x0) writev(r2, &(0x7f0000003000-0x30)=[{&(0x7f000000a000-0x4d)="81", 0x1}], 0x1) fcntl$setpipe(r0, 0x407, 0x0) tee(r1, r0, 0x7, 0x0) pipe2(&(0x7f00004f0000)={0x0, 0x0}, 0x4000) 2018/01/12 15:09:10 executing program 3: fanotify_init(0x10, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000c09000-0x13)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000aa8000-0x110)={{0x6, 0x0, 0x0, 0x0, "e5d8ae06f65ffacf712f5939471f983586003b3f12597fa445cf888a59bede29043e31b0a6e87132e811719c", 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c78f85e8e5b9da0fc3b2f7ad63cb7aca6a5a641b21b19a89f1b472477c542de15b2b73c0c1bdb460885328789b740197167688bd0f2f6917ebd88f3a4e7699a3", &(0x7f0000d80000)='/dev/snd/controlC#\x00', 0x13, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 71.698524] binder: 10788:10791 BC_INCREFS_DONE u0000000000000000 no match [ 71.706532] binder: 10788:10791 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = creat(&(0x7f00003c6000)='./file0\x00', 0x11) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000953000-0x28)={@common='bcsf0\x00', @ifru_data=&(0x7f0000e55000)="eed013e744e7e7709cc6caf14eb1b4aefeaef414f5e1d6ab885f77adbd765d12"}) r2 = syz_open_dev$tun(&(0x7f0000ad0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000c69000-0x14)={{0x8d, 0x8, 0x2, 0xc0, 0x1, 0x5}, 0x5, 0x6, 0xfc}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00002ac000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x2, 0x0, @sync=&(0x7f0000c15000)={0x0, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x20301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000405000)={0x0, 0x2, [@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000b13000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r4, &(0x7f0000c85000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) dup2(r4, r2) write$tun(r3, &(0x7f0000b70000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @udp={0x0, 0x0, 0x8, 0x0, ""}}}, 0x26) 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000b08000-0xc)='id_resolver\x00', &(0x7f0000963000)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000ee5000)='net/icmp6\x00') ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00008df000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00005e5000-0x5)='user\x00', &(0x7f000033c000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000033000-0x1)='F', 0x1, r0) keyctl$update(0x2, r2, &(0x7f0000141000)='^', 0x1) 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xf5a000)=nil, 0xf5a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f59000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000f5c000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000f5b000)={0x2, 0x0, 0x2, 0x401, 0xb53, 0x20}) getxattr(&(0x7f00001cc000-0x8)='./file0\x00', &(0x7f0000f5a000)=@known='system.posix_acl_default\x00', &(0x7f0000f5b000-0x61)=""/97, 0x61) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x10) write(r0, &(0x7f0000b86000-0xd9)="260000002500f3f80000fe06000036e602fffbe8000000010e0009050adfff37000000000000", 0x26) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f7c000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) symlinkat(&(0x7f00001dc000)='./file0\x00', r1, &(0x7f0000fbf000-0x8)='./file0\x00') 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000093d000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000f79000-0x8)='./file0\x00', 0x80) mkdir(&(0x7f000002a000-0xa)='./control\x00', 0x0) lsetxattr(&(0x7f0000ee8000)='./control\x00', &(0x7f00007b9000)=@known='system.posix_acl_default\x00', &(0x7f0000f75000)='\x00', 0x1, 0x0) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d47000-0x13)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffff9, 0xfffffffffffffffe) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x88) write(r0, &(0x7f0000008000)="f136f60000", 0x5) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xb2e000)=nil, 0xb2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00009a0000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, &(0x7f0000b1c000-0x4)=0x98) r1 = syz_open_dev$sndpcmp(&(0x7f0000513000-0x12)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) mmap(&(0x7f0000b2e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000534000)=""/4096, &(0x7f0000b2f000-0x4)=0x1000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r0, 0x1, '6'}, &(0x7f0000d81000-0x4)=0xffffffffffffffa0) syz_emit_ethernet(0x1d8, &(0x7f0000b2e000-0x2b8)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {{0x8000000020086dd, @ipv6={0x0, 0x6, "b93904", 0x1a2, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[@fragment={0x3b, 0x0, 0x38, 0x7, 0x0, 0x9256, 0x2}, @dstopts={0x88, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}]}, @fragment={0x33, 0x0, 0x8, 0xfffffffffffff000, 0x0, 0x8, 0x3}, @hopopts={0x0, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@jumbo={0xc2, 0x4, 0x7}, @generic={0x80000001, 0x4, "de0f8f2e"}, @ra={0x5, 0x2, 0x8000}, @pad1={0x0, 0x1, 0x0}, @pad1={0x0, 0x1, 0x0}, @calipso={0x7, 0x50, {0x1ff, 0x12, 0x3, 0x38b, [0xfffffffffffffff9, 0x1, 0x1, 0x2, 0x0, 0x6, 0x100000000, 0x0, 0x3c00000000]}}, @generic={0xc4c, 0xd9, "036d6983e1ee21521e637d9b01500c3c71d4aed358b763154d7be25ed4e52b8a0932577b5d24368af7e2d0c6fced297d22f9a7e7668ab7bbd5abca451de9d7318b991ddab6b0c8e99e6eb7a3f80cd5687e4071b6f526bbea7b7844daa8f116176e6a6d7af84ffc1a7089a1c254e7c3f64afb1856e48d72a5f20217ded3408baface0e7321f8f2d99ac590c467f2c98200f1fddc140ebc9ff643da7dbace23d96773c06f607dcf59410630278781d50d4bedd71533545912724036fb90b7c94206e8ea119c0aa0dfc4a4271c2268620137446b89fdcfba43fda"}]}, @hopopts={0xaf, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}}, 0x0) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 71.766604] binder: 10788:10791 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.774157] binder: 10788:10791 got transaction to invalid handle [ 71.780460] binder: 10788:10791 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000054c000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) accept4(r0, &(0x7f0000a3c000-0x6)=@hci={0x0, 0x0, 0x0}, &(0x7f0000d88000)=0x6, 0x80000) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000ce9000)='/selinux/validatetrans\x00', 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000d0b000-0xaa)=""/170, &(0x7f00008fb000-0x4)=0xaa) r2 = syz_open_procfs(0x0, &(0x7f0000c24000-0xd)='net/icmp\x00') getsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f000073b000)=""/139, &(0x7f0000df4000-0x4)=0x8b) getsockname(r2, &(0x7f0000304000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, &(0x7f000084d000-0x4)=0xe) preadv(r2, &(0x7f0000176000)=[], 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000a97000-0x20)={@common='tunl0\x00', @ifru_flags=0x800}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000b68000)=0xd75e, 0x4) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xe69000)=nil, 0xe69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000e6a000-0x4)=0x0, &(0x7f0000e69000)=0x4) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000e6b000-0x4)=0xfffffffffffffffe, 0xfef0) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000e6b000-0xb)='/dev/adsp#\x00', 0xfff, 0x24000) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000e6b000-0x4)=0x0) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000b15000)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000023000)='/dev/midi#\x00', 0x0, 0x2000) r0 = socket(0x10000000010, 0x2, 0xc) write(r0, &(0x7f0000069000)="1f0000000601fffafd21ebbb070000000000000009000100011679ff080600", 0x1f) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000257000-0x8)='syscall\x00') ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00006f2000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000ea6000-0x8)=0x4, 0x2) 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000068c000-0x16)='/selinux/checkreqprot\x00', 0x0, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f00008db000)=0x0, &(0x7f0000fec000-0x4)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000a5b000+0xc90)=[{&(0x7f000050e000)="2900000018003109da00000000000002021300000000ff0680000c000c00080004000c00000005ff01", 0x29}], 0x1) [ 71.862428] binder: 10818:10825 BC_INCREFS_DONE uffffffffffffffff no match [ 71.866468] device syz0 entered promiscuous mode [ 71.878345] binder: 10818:10825 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 71.897506] binder: 10818:10825 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.904858] binder: 10818:10825 got transaction to invalid handle 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x80, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x6, 0x29, 0x0, 0x800000, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000e4f000)='/selinux/context\x00', 0x2, 0x0) r1 = socket$nfc_llcp(0x27, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000ba2000-0xc)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000867000-0x8)=0x80000001) sendmmsg$unix(r3, &(0x7f00000bd000)=[], 0x80, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000ebe000-0xc)={0xa48f3798a56e60b, 0x0}) close(r2) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 71.911155] binder: 10818:10825 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x3c4) sendto$inet6(r0, &(0x7f0000d2a000-0x43)="8e", 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) accept$inet6(r0, &(0x7f0000d42000)={0x0, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000ba3000-0x4)=0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f000043b000)="af", 0x1}], 0x1) 2018/01/12 15:09:10 executing program 1: r0 = socket(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8e0, 0x81, 0x8204, 0x81, 0x8, 0x6, 0xffffffffffffff7f, 0x1, 0x0}, &(0x7f00005f8000)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r1, 0x1a, "a731fdd1efa3ff5341cd62c05dd888c6ef45966e5085d43b7896"}, &(0x7f00007be000)=0x22) setsockopt(r0, 0x0, 0xc8, &(0x7f0000000000)="d105071e", 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="0fec927875042fe387fb4b87fcaf5263e7d1bdbf544ef5e073e2a6c65bbb281b6a8cbfc82d4483f798d77baeca70882d35895b3ea657ce62c94bafb408f26b0f26eb04bb1cdc67237dcd1d07847c9109fa77cdc6701542e67f83d1ec77ba0d7ff22105ce4c5f6a4c223d4f25c3001a9ba76588646ba7915fe75762d2bab72c01bcfadc88f2017fa0f6d0b1aacf4700b1d648cae5783d66a25c6223bcc3bf713be8bd6ebf68717985395f8eb7e213e10c2359127fedec4a7807e15be8d5ae3513d9f7ee6f829cbd091ef3196cc8a9ec463300414c72c84c850701380090ec2109044d586a1c31a396e27cb6c9cf016a77d1384a4e0539e87e65945637178d430133e024d55ac125d9784a7dfe3ef45aac50be661fa6e1aa8e2aca574b4b90e0bc72a92b02fc1c5b4c05fbc0253451e6db149afb0ac5df43eba40d6fd972d2b8f2af0a8947d0dc0b7410873438651e5c0694c267bc10393840ace59fdfea75979604bfd1b93f47246cc931df1df65a104bf84a710238f45c4a34618b503b4d62041f66ebef956c5c363965210831175a5a6a2f724eb46f6861015307db64402efea9cb609c63ea0fb03d7efcec6349717a135ad3d6a87f2df567897ba98123f78cc5f6f3c1acb1f18b15a936046df28a9ab7ec7cdd8edf00206721c35c76d795c7f06703aba545c60faddb10539793396c32f26475e94d9abe9160de0389097a3109fde7f346648d382aa12f8a8f0e854cfc64ab78b4e1d17d9b416c87c694db5add95ce63a730636a1f77d05049f5c3f697b637b58fa37d6576e3763e7ec92a5c4d720d56477cf3f7ac08c5acf44cc254fd70729c7d2f8da1330c194d7b149f6cf3273bddc1401dbf3cf76c9b8f3dd87f67c27e26083528984f70f73ad81e767ad8b8139f47bcebf521b00f56c0c47a978e7aa4914763ce2582e91a2afa9d2680466eeb8f2a1b92e52e1e5b8c57f54a29757791d1b1a6d08e330e6a73a671c9649c18291f3513cc5033b6ae3fa99cbf9ef14e5a5f693d10d8e3787cf1bc9af4469494746fdf0d7ff7f019cb93a376896c10bb4c7ce80ce72372d198d31309ce212aa0b1cce663d2d41e1f18c0176a159d8a1c7dd5e091dc951986890439c5215f43ebd32d1472ebef70b4ae3531b3db0e5a1fe1402bf4b56a6b5777603c6affc743f02154e7333a5fe22cad463fe940fb9597c0138f2ffb598b033fdc39374ef5342145cd5ea20905ecb10a5842d5c1ef2b5947e1bf6bce478a9343b72c70f94b2893c47b4264822d9310952c8cbffa8a15d3c2d87e8ba890039189822878b62aa217c2756d52d8dfacb622804957a3bb43ad2bfcc8635c3fcacdfd4501ef8b4ee94630d118d6139ac0122c60ceb7bcc1ae0d1b6114925d00b1be06ea8c0ba0de04dc3df0cbc6744a3e0480ad0816f45e7607e328de476e804af8f52fd3d27432377157b066f7bc25a16ebdfc1d8484e17cfe76594b14583a5d99c89ae40ef6db947ede2a86d11cf13e508bf7f7c35fd94bbfc9620c159253103410250dc77bcb755eca8786f20463467bab0ff475d731baa7650aa181f1cbc0c030364fb91a49f97c8b06771d6726fabb8ecfeabf834b5ae09afaaf2f1fa4475839d1ec1d309f85f9bcef1122d5edbe5ae48cadf06690016048541fc0caf8100a4e13f5b61c47fd2229095472825598c83d7dcfebccb49a15b340a4faf40cebc6049d94e8c397e37e8aed3ce523983637698c82da6ef311676c3907406e620bb74d057f44319579c1ac631e00887fb0c115c7ae07a32f59a96d84539aebf634582f7b4b2e973bcd62960d44712c9d9fa6844c251efceaa9c94308573786f0340ce2636ee6e920faa51eac6c18648cf00cd87236a4ace829eedd486897aaff69ba414791eb0af46dc02ea86f8c0c826cdcc7b49c96348b86c2dab2946e157634df4fbe19c29702d16b744b6d74550febd98147a06457a46677526b9753b281ac84bfc7940c1ec7372e0daf6c9a1e9059f58e6b85c82c8abe673ae8e3c78d404536bb20f7acb8a98022b43087591fad25bd508dfc35b2b2dfbd35b93950cb0e58d8a477b51de101d6e0e311e2ae00e0bef61e477356d7eff02a5f4a580b2dad2c79ef95fd7b259786d5e3af9d896e0272a0e3dac57acf47683b9a2beec6908b103a433e3f653146461c1edbd72c7a98ad56d878d2eeeadae8f85e5f71a1b0f76b9ceb853cb16de530d99a5bde6ad24603616db01b2ba7982e1607323fca19164af7f6657ed783b1c467dea90edce2e804ea684a5d864a81fb50e80defde0d577a610c9b8611c86bfddd7241a95194b6e4f1db6d439ea4130048c4bf60c5aeb3a9b4736556973fec2344a1d83db445f0d1377cb78af4e56a8600901ac4ffed2fc5691b9b320094a2e889eec0dae82ad3bcf146af96cede7251e62c55b17824e06e55f49f47177fac2f6bc4acd6a076c6c9e6a88f3638683be270da924102534739f7c80b65a3f55ce8ad19716c2df9eb0810059c86630c26f8cf29026f67817f0cc0b4d890e1c2cc699245ef9d701b29534db813290c1acc5cfa5cc3d6cb38665eb2f46d609685cd5973e69b459539e62ed4296e5faba57e4c9d12a19c4dcdddfd5067ecf54dc0215adb792533c749cad860bea56d2206dd5a32ec3244fad316403365b379f4c117e3915e2d7e1c7bacfdfeae32b982fb713540e6c9783041c9c3c6554a532dbe9fb81ef530d7c5519fbf8226a90a027f69da008d0a70e7b4afab137e0da395e8522ab5a8ffa7d1815a0c8c1db731668c1a65c33b832fef5e5eb30cb05f722dd0b0ddc5329aca07880fb9ef9d95039fbce52481d75c008822224a89ad3c9b55ff9f6aef1f472d6093ac3dc7634dd3912eb4c32395fd38f96e3f22c331fd493e0d8d49acffb05b8f15a73d5c4eb10e4393a28a9e4b7e3f697e7401f8c56d300a0ef0ac3f0c3f72d6abf65c7dfa68c3388676f7b9bd3ea7724266601d6a26ea84422c53304cb02b0a4f407ee12b2c67c594285df40668ecc3525a041c9efe0b9f694dfa790ec35ebe92816d19ab38a263cfaa1042f0d0ce2e14e749e984eae326682c4bcf9cc5344b76442a30777075fbc5edb6bf5134faf1dc9c97b6e7a5818db444d0b9aa9be652cfb999135ddc94ed16e3a313c398ddb529fcbb1927a4c9f9d28af8d704e5d4c3a643508f79f4fd1641d1f8a185925f78ba31c42c55f32c438bdf2ac55914104679f45ac740383180bf869ffa0ae4461b8f58155863954e6734173db2e36fe562cd2a316873c8cb27b05e737602b129807083fc31fb96c98defc20d4e4b221fb62f485aa988fca69845f06187d24d41c51de5ee24885f0cb9956e23112a2a6ba05e4b7666baf08af7ab3afc7c32bc18ad8a5c0033b9bb0d2992fdbba2e4a4d807eda6a8bd2fc70a256bc548573ce48e9724f03362860ccf2830281ef6dd3665081442bb7358e39588a4b5ca5e71381201297395911d6cbd351c1fc92fe584fb44bbb4fc555c54c8886a0f76bcebee95b96910ecffc7d7d05605fa75024141b5596127fb6a4be127c56b07cadfa17d15158c6909a5d9cc21bcb6faefedd25d57b1187ab3ead65ff6acac66e0b7d0cafbc5f52407d9d4e4ce19d3ea3c48fab1b6c8759ce4331094fcda8299da7936135f43c18036e1c7e5f69cd78d24a510ccb8b190297299c6ff3585731343e4aa4baa42d97ad108e62351a638afdf81ce00add5715aad51725cf13a6e5992b80e6223dae0800ea863032f9784f5e7fb2d8e4c2d54c7b84fe5c8fea1cb1c9b0621230d577cef9f6d2b5fd1181618055596aeba3a8e816e2dca4944559e28e1dc3485a8a86e756026994367d8b5f7e5160f9d436241a754c0bd8431525e7914cf97d1484d9ebfd19a5468f331d66588847f4aad273bd72998386a3a9f01153c66d2106fc940ab117f542f078ff1b7d766a4d6c88c5ab79a81164ec8e7aa6cb94121cd4e334eaf319a9058edaaf07d1f8b53b61ccb7e8f3865b569d2e5fd77feffe1d866dfc431b60cd7d98ecf657b71de5f0ad60687110fb0d6c5fc376dd02faa38704573e25456c78df343c1659dd99df9bb9123363341124117a4112dd8aaea65141b3d2d87b310e7c0c42551ac0c7528f4c5f10411e882702e2adff6f86beaad570ebcb051f8b4e5ae55ee63d96ae72941d93d9fd6982769d1f81709779fd8a2d874d81f7da6f68dd603d9c4c2390b07a02507f3e5db1a17233a1313b17417d3274acdbe42db0e7ccbadc34f191cf87470d935f4467d00625e8e5ff71ebcc4690ee1d2186e39afa407936ac8200b1a9c3718840cfc1e6962eab8ab44bc16499fb7d7f200f048b8edd483e407739c9ec51d1209e84b048eef58e058b967390b79e87086dc6a8e003c86c0d7df72793f419631c806c09b01edfe9efad72f5a135c7520637091b7e97df882b2315cbe02088f225dee963f2d2783a0f0274555a967f58087483e0d16f60f3178fc6a20a49c1cdc91da12bbc3a5e49b46bf2c254289883887723bf2b06767cb026d1b9e7bb766089ee622ebbfb41b34c901a7be1532d383b2b770df7f4abb7830c7e9f96ed850ade632cdce18527e117132567b486e2b7a0587028e3e1e46bbbf08faada2a51f549f957792c0d77b6c79dfeb203e1c81c7552493b4a8603377a478fc73537323487053869c04f9e95d3193a9fd409f45df87f96c23b7adcac26da329d225e6e319199954b0063c1f26e15e1c43346f0d6bb0c9b9e658f6e389b6bd41ecb8552710ab5d0503c76a7626c1ec1cd94b4fb0607273173ff030f58d90b1ae96fee925027b1a0a12cd3745df2c1eeb9de0cf57c2700c1f30cf85152e916d47d0a86084c0ff1680a3c280c8f52feffa69027d03fba1c3901e929d33b300c2310b854c5f8fbf9982ebc976639e38d29cc5d6ecfcd9ebf23dea78b3f7dc9967db45b7d0c4f7bae6f9832097efcca50971d35f82f48eda6de6ddb6d917a4631d3ecca43d341c7f177084ff6d4826b1b773e55af9b4dc05f18e2b776f2c69d0524ad24980f6bf672bbdba1d79584b801c17d4162be7fb68edfa7d2adafdc221f4ccb504e1c54cd26dd5873adbe7ded51e1841a64d31b1d85c75632dd2eae375fb7b15b7a449435ff746b948b7854281d5790655c637f9291a96b5a8cffde1eee2f836758368356c6e9281a2dae9a0d14cc8f736b6c117026b63c3ffa2bb2ae7a0ba8a63fde160abbc11ae2028666de7f9a6524a91d00a9d6aa581e049409fd4a2693aaa98afcb01625e920c913c2d8a301c4467fb6dc3ff50506b69c1f815d095909fce660e5ac781316a12fc54e704dfbc84acac514c40f8f30f7930c967c80f2a166f7b5f8569ec29a9829b745e638f4381552c75bb8ebb0921eb66384b93cc56ef9cc00253c327dc4edf92a3f66b78105f051d04a976d80b3d05d8f189126a1686ad67d9cd2e35bc13d0a8ec6ef5786f15242f5bcbd3d5fb14a58196a6e6d0cbbae7c6a2d1464fee363aa83e64c3611bba31396c9e67f3abee197c2f2abb7d48cc7a790fa84db0b79baf912c2f7498df38d6ba62ef2fd892492e6d9d5644fb1feede19cfdbb1561c69ff1fc89c8904e3eefa7168922a64a26aa504b21d2a29e65fa872a27c67a36d6ceb576f028cf07bb58a5bf8213f19a24ec3011fcddf39c71b2e8cfde8dd0a621ea2aea12534bb33706e25297f67e7b201f0272ae5544baf65e4316d5062c19bb68f4225f857c3792c9372760148f90bbb46b64f7520949ac9ceb5bb355411a7d3974f04711d2f922cdb999aed4600125501d76f3d5d46bd", 0x1000) setsockopt(r0, 0x0, 0xc8, &(0x7f0000006000-0x4)="d105071e", 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000002000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, &(0x7f0000001000)=""/151, 0x97, 0x20, &(0x7f0000002000-0x14)={0x11, 0x1e, r2, 0x1, 0xc000000000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000017000-0xb)='/dev/mixer\x00', 0x2, 0x0) recvfrom$ax25(r0, &(0x7f00008fb000)=""/231, 0xe7, 0x0, &(0x7f00006a0000)={0x3, {"73d5c62bf5ae10"}, 0x7}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000d86000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000891000-0x4)=0x5, 0x4) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00009f6000)='/selinux/relabel\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000ca2000-0x10)={r3, 0x50, &(0x7f0000d80000-0x50)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) sendmsg$inet_sctp(r2, &(0x7f000095a000-0x38)={&(0x7f0000d68000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f71000)=[{&(0x7f0000f70000-0x65)="470a3747e4d6c6dc7e519c8cfa37b13380c40d870100010000000000a6fa401ca8969a47542c8e2cb000000b0000000000dbf1eedf91d955a9e84c62af9fc4452b9c97c651", 0x45}], 0x1, 0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000ec0000-0x18)=[{r2, 0x0, 0x0}], 0x1, &(0x7f0000ffc000-0x8)={0x0, 0x0}, &(0x7f00008ff000)={0x0}, 0x8) 2018/01/12 15:09:10 executing program 6: exit_group(0x4000007) unshare(0x80000002) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000002b000)='/dev/rfkill\x00', 0x8040, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000510000-0x4)=0x0, &(0x7f000070c000+0x5da)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000005000-0x10)={&(0x7f0000003000)=@delpolicy={0x50, 0x0, 0x0, 0x0, 0x0, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, []}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={@common='ip6gre0\x00', @ifru_data=&(0x7f0000003000-0x20)="e9347ffd7c96a7092c954b7b94daf259a86ea6fe01fea2544f52d30faba2821c"}) [ 71.986292] binder: 10854:10855 BC_INCREFS_DONE uffffffffffffffff no match [ 71.995744] binder: 10854:10855 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 72.004320] binder: 10854:10855 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.011574] binder: 10854:10855 got transaction to invalid handle [ 72.017872] binder: 10854:10855 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:10 executing program 1: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$setopts(0x4200, 0x0, 0x2, 0x8000010000b) sendmsg$nl_xfrm(r0, &(0x7f0000002000-0x38)={&(0x7f0000003000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000004000-0x10)={&(0x7f0000003000)=@delpolicy={0x50, 0x15, 0x11, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x3}, []}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000bad000)=""/76) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c55000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x2000000011, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000102000)=@assoc_value={0x0, 0x3ff}, &(0x7f0000a5a000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00004b2000-0x14)={r4, 0x7fffffff, 0x2, 0x8001, 0xfffffffffffff001, 0x8}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f0000918000-0xc)={0x0, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x20301}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000bdd000)=0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000344000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r3, &(0x7f0000c85000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) r6 = dup2(r3, r2) write$eventfd(r6, &(0x7f000087e000-0x8)=0x0, 0x8) 2018/01/12 15:09:10 executing program 0: mmap(&(0x7f0000000000/0xf86000)=nil, 0xf86000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000f79000)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000483000-0x1c)={0xa, 0xffffffffffffffff, 0x10001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendmsg(r0, &(0x7f0000f85000)={0x0, 0x0, &(0x7f00003c8000)=[], 0x0, &(0x7f0000b86000-0x2e8)=[{0x10, 0x0, 0x0, ""}], 0x10, 0x0}, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000762000-0x4)=0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000f87000-0x8)='net/raw\x00') 2018/01/12 15:09:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000e23000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000154000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000d2f000-0x80)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000b8f000-0x4c8)={{0xb, 0x0, 0x0, 0x0, "c7e4f9ecd7fc5367d571f77fe620a25ed456723ee8a6dabc048a9e0bf4f8491a15242cc6513f78936cdba402", 0x0}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], {0x77359400, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000082e000-0x6)='./bus\x00', 0x141042, 0x100) ftruncate(r0, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008ae000)='/dev/ptmx\x00', 0x40002, 0x0) sendfile(r1, r0, &(0x7f0000b4c000-0x8)=0x100000000, 0x100000002) poll(&(0x7f0000afa000)=[{r1, 0x0, 0x0}], 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000fb6000)='/selinux/load\x00', 0x2, 0x0) 2018/01/12 15:09:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000704000)='/dev/ptmx\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b48000)={0xfffffffffffffffe, 0x0}) 2018/01/12 15:09:10 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002000-0x4)=0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000001000-0x8c)={0x4, 0x2, 0x4c, 'queue0\x00', 0xffffffffffff6069, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000006000-0xb)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00007ee000)={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000083a000)='&!\\\x00', 0x3) r1 = syz_open_dev$sndseq(&(0x7f00000bc000-0xd)='/dev/snd/seq\x00', 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000c03000)={{0x80, 0x0}, "000000000000000300000102a1569b3fd4cec307d5ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a2a800f0000080000000009fb42e876589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000deb000-0xce)=""/206, &(0x7f000064f000-0x4)=0xce) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000771000-0x8)='./file0\x00', 0x100) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000767000-0x4)={0x15, 0x0, 0xfff, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00006a7000-0x8)='./file0\x00', 0x4) symlinkat(&(0x7f0000c1c000-0x1)='/', r1, &(0x7f0000d07000-0x8)='./file0\x00') renameat2(r1, &(0x7f00006b7000)='./file0/file1\x00', 0xffffffffffffffff, &(0x7f0000633000-0x8)='/', 0x1) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00003b9000)=0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/context\x00', 0x2, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0xffffffff, 0x8}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)="6e65742f6966000000087436004e697ae55d7baa0007e475629e8a1a27b5b248c3c82c33b3d1e89677a4610000000000000064ae576d260f17e98da18875fddeaf2bc7668784a333") fcntl$dupfd(r2, 0x10, 0xffffffffffffffff) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000fe9000)={0x0}, 0x8, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00006b6000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x5) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000fa1000)=0x4c31) readv(r0, &(0x7f000006f000-0x10)=[{&(0x7f00007c1000)=""/128, 0x80}], 0x1) unshare(0x400) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000a9c000-0x8)={0x0}, 0x8, 0x0) signalfd(r2, &(0x7f0000beb000)={0x0}, 0x8) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xef4000)=nil, 0xef4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001e3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000d8e000)={0x0, 0xffffffff80000001, 0x7a6, 0x6d, &(0x7f00005d2000-0x6d)=""/109, 0x38, &(0x7f0000ef4000)=""/56, 0x0, &(0x7f0000ef4000)=""/0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000ef2000-0x4)=0x0, 0x4) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000002000)='/dev/input/mouse#\x00', 0x4, 0x48000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@assoc_value={0x0, 0x0}, &(0x7f0000001000-0x4)=0x8) keyctl$dh_compute(0x17, &(0x7f0000583000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000d1f000)=""/37, 0x25, &(0x7f0000000000)={&(0x7f0000000000)={'rmd320\x00'}, &(0x7f0000000000)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 72.127893] binder: 10878:10890 BC_INCREFS_DONE uffffffffffffffff no match [ 72.140293] device syz3 entered promiscuous mode 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00008b8000-0x31)=@random={'user.\x00', "47504c2d405e1870707030766d6e6574306d643573756d776c616e316d696d655f747970655d73656c6600"}, &(0x7f0000e1c000-0xd)='/dev/binder#\x00', 0xd, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0xfffffe71, 0x0, &(0x7f000078a000-0x8)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000c42000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f000072a000)=""}) [ 72.176625] binder: 10878:10890 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 72.192987] binder: 10878:10890 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.200274] binder: 10878:10890 got transaction to invalid handle [ 72.206597] binder: 10878:10890 transaction failed 29201/-22, size 80-80 line 2842 [ 72.214973] binder: 10912:10915 Acquire 1 refcount change on invalid ref 0 ret -22 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f10000)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00008f0000)={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000b6a000)="ea", 0x1, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330, 0x0}, &(0x7f0000db9000)={0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000c1a000-0xe8)={{{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000065c000-0x4)=0xe8) quotactl(0x496, &(0x7f00004c0000-0x8)='./file0\x00', r0, &(0x7f0000deb000-0x48)="e5b930478177541d63c9b96c99a3f0eff5c0f47ed2b9cb2970fc1c06e50b9ef4c6a7403374305acb46556640f1f6a4a9309508c5396e04d4824672f3595185b00641131ea52c2220") 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000063a000-0x8)={0x0, 0x0}, 0x0) write$fuse(r0, &(0x7f00006ae000)={0x28, 0x1, 0x1, @fuse_notify_inval_inode_out={0x2, 0xeac, 0x2040}}, 0x28) unshare(0x40600) timerfd_settime(r0, 0x0, &(0x7f00009a8000)={{0x0, 0x0}, {0x0, 0x1c9c380}}, &(0x7f0000a92000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe5000)='/dev/ptmx\x00', 0x10000000, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) fcntl$notify(r1, 0x402, 0xa) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000fe5000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000b36000)={0x0, 0x6, 0x9, 0xffffffffffffff2d, 0x8000, 0x6}) ioctl$TCXONC(r0, 0x540a, 0x2) readv(r1, &(0x7f0000941000-0x40)=[{&(0x7f0000fe8000)=""/23, 0x17}], 0x1) 2018/01/12 15:09:11 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000000)={{0x2, 0x7, 0xfffffffffffffffa, 0x7ff, "d3edde066fd2768cde3c2e394ca73ba0d2213e193dadfe6470760e758c29dbda5e6815b2a71faf5b1eb9985a", 0x0}, 0x0, 0x0, 0x0, r1, 0x1, 0x6, "42afce0525df26fa5c36db390b30c199ddf77b7f4be06f750bb7ff0e82ce8554394e39a2eb87d3334abffd4f9bb0dde53f08115bfe2caf28761fb6daeacfcc7d", &(0x7f0000000000)='user[,eth1+keyringprocsystem\x00', 0x1d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x8, 0x3ff, 0x3, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000004000-0xb)='/dev/midi#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000004000-0x4d)=""/77) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) splice(r2, &(0x7f0000010000-0x8)=0x0, r2, &(0x7f000000f000)=0x0, 0x1ff, 0x6) mlock2(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000008000)={0x8000, 0x4, [0x0]}) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00002c1000)="75736572aa736563757269747900", 0x2000000005) read(r0, &(0x7f0000145000-0x8b)=""/0, 0x2d0dffaa) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000dcf000)='/dev/vcs#\x00', 0x200, 0x0) getpeername$unix(r1, &(0x7f0000eb1000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000577000-0x4)=0x8) execve(&(0x7f0000992000-0x8)='./file0\x00', &(0x7f0000c49000-0x10)=[&(0x7f0000031000)='&]eth0wlan0\x00', &(0x7f000065c000-0x1)='\x00'], &(0x7f00002ea000)=[&(0x7f0000c76000-0x1)='\x00', &(0x7f0000016000-0x1)='\x00', &(0x7f00008b4000-0x1)='\x00', &(0x7f00002a7000-0x4)='}})\x00']) sendto$inet(r1, &(0x7f0000c6f000-0xb2)="af8b116892270a8e8d344b293e626c56d95fd41f0e34c1a6f13efc011981e6da4ac1ddcd8ff69d16e981c82a3686299a35410d6264fffeb1e947cc2f47fa4228e9dbf00c7c774dca95bfbff2aba22523ed973ca0df6aa16c94ca4b63926c713cc59769cff3739c7973ce9f60fb87e640db42cd0d479e1b190a97e7c6aa9c82459ff82e5658b54eafb112282152d6df987fbaf994a54bea48558feac31547fdc079ba5aad788fe1e69a57f139e7ff379c3a56", 0xb2, 0x4000, &(0x7f0000882000)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = epoll_create(0x202ffff) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000ac1000-0x4)=0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000352000-0xc)={0xb0000008, 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00009a4000)=0x0) [ 72.240490] binder: 10912:10917 Acquire 1 refcount change on invalid ref 0 ret -22 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace(0x4208, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80040000048f, &(0x7f00000fb000-0x2c)="0600008f0000000000424242000000000f4074708d6db86078032ea94addbcc1de84084400ed43ffb02bf212", 0x2c) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x4000800, &(0x7f0000288000-0x27)="d5bcdea6e730ef961ba1107b5dfde2678dfe5c61ba16e8b685494f0543ffbed06856cd340d20ce4d86fc63573109af3cbcd550a3e2a98fa889976a168e57bc14d74bb5e1", &(0x7f0000532000)=0x0, &(0x7f00001cd000-0x4)=0x0, &(0x7f0000653000-0xc8)="0f7f3b95f8f4bc4f00762a6d48a5045d0ed403eeba76248a7aca0d09f3ad84dc9ef0d53bb5fdc3b2d3cd7a7f8c17a67e3533d2b40807b2f223eb2cc72f4a290081b885216d83d0a487d284d4842cdfeea40e899d5ca5e5680d5ec11ebbd19b19b42bdba2e05a918d0d4f39b307a98899d8a255326158d9716d6c712292a0490240d2e6c4044f80464fd8e48489453610808b3400122e7f30a003e5bc0569900030c757c5aa765d2e339f4dbf28029804734a56cfbb9d5df66846d6b98c6f5b849c0b19a8d7ebb232") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000fe0000-0xb)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00005cb000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f0000773000-0xa2)=""/162, &(0x7f000052e000-0x4)=0xa2) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000f4b000)=@add_del={0x2, &(0x7f00003f0000)=@generic="c562cff48925d0a44a94cbebac535883", 0x0}) [ 72.303788] binder: 10922:10928 BC_INCREFS_DONE uffffffffffffffff no match [ 72.315918] binder: 10922:10928 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 72.325929] binder: 10922:10928 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.333217] binder: 10922:10928 got transaction to invalid handle [ 72.339543] binder: 10922:10928 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f00003c8000-0x10)={0x60, 0x20001000, 0xffffffff, 0xfffffffffffffffc, 0x3, 0x2, 0x8, 0xffe3, 0x0, 0x12}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000726000-0x90)={0x0, {{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xfffffffffffffd32) accept$packet(0xffffffffffffff9c, &(0x7f0000024000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000a04000-0x4)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00005dd000-0x48)={0xf, 0x0, &(0x7f00000bc000)=@raw=[], &(0x7f0000463000)='GPL\x00', 0x80000001, 0x7c, &(0x7f0000e20000)=""/124, 0x41000, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], r1}, 0x48) mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000)={0x0, @broadcast=0x0, @broadcast=0x0}, &(0x7f0000008000)=0xc) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000afa000-0xa4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f000025c000)={0xfffffffffffffff7, 0x155}, 0x8) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000041000-0x5)='/dev/input/event#\x00', 0xfffffffffffffc01, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000300000-0x4)=0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00007d8000-0xa)='/dev/cuse\x00', 0x100000210000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000751000)={{0x0, 0x2, 0x100, 0x3, 0x100}, 0x80000001, 0xffffffff00000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSBRK(r1, 0x40044591) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f000083f000-0x4)=0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000b93000)={0x8, 0x1, 0x4a8}) fchdir(r0) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) times(&(0x7f0000fa5000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x109, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000df6000-0xa)='vegas\x00', 0x6) 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a99000)='net/fib_trie\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000800000-0xc)='/dev/rfkill\x00', 0x13fb42, 0x0) sendfile(r0, r0, &(0x7f0000a48000)=0x2, 0x40000000000054) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0x418000)=nil, 0x418000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000306000)={&(0x7f00003d8000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00003b3000)={&(0x7f000017c000)=@newsa={0xfc, 0x1a, 0x811, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in=@rand_addr=0x0, 0x0, 0x2b}, @in=@multicast1=0xe0000001, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x0, ""}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) kexec_load(0x81, 0x2, &(0x7f000041a000-0x40)=[{&(0x7f0000419000)="3cbaa59a59d7aa500701845bd6261afff3993a2475801a93983732e1763a8136a51253b99b6f586ad80fc64fa3f0ef5b865967b307697dbf8dd3367ffdf347376f539b1d8271ed5aa24489a86342a1c0a8873d5018e1fec22b0da646064cd892db0ddeb2bb56e499dc6fb5f9edaa43ced1e3bd03924339df142873e671553faabe5ca4214f6f714eac7fb14a44057aae8e30e18c3c63beb58a36657bce5312d9dc49850bb3e9cb691543365e1b27", 0xae, 0x80000000, 0x3}, {&(0x7f0000337000)="ed050f3a843fd484e96e3c62db9aa9d06c7919963c206f01116f9cee3adc73a74ef7b8f375a674158ddd9274b9fa040ea0ba7153d054b85637526859f1160899c7168f8a6d9b4c96647a718e78d2a5831d7ec5979c5f7b6aa64281d0d65851bd16b16471417c55c707cc59b318ccd09da5c49e8eeaeef3f56bea44c189c6dfd937e7d7d7cb221f32a4561b326e8c822b94f3d41ee2f8b213cb40e74a6d1e68a3a0dba99c5f65d54711f3b383d693dcb8a9735dacd2c72fb2051023f233da7e23cd1188a4529723cfc6e53279553b0f1050645033ae04d2374fe5d0f0", 0xdc, 0x6, 0x401}], 0x1e0000) syz_open_dev$sndmidi(&(0x7f0000419000-0x12)='/dev/snd/midiC#D#\x00', 0x769, 0x518ff3fca6b7431d) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfcb000)=nil, 0xfcb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c87000)={0x0, 0x0, 0x0}, &(0x7f0000fc4000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fb4000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000d0a000-0x60)={0x0, 0x0, 0x4, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000207000-0x4)=0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000b74000-0x12)='/dev/snd/midiC#D#\x00', 0x2, 0x40000) mmap(&(0x7f0000fcb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000fcc000-0x28)={@common='bond0\x00', @ifru_flags=0x1202}) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000c61000-0x10)={&(0x7f00009cf000-0x8)='./file0\x00', 0x0, 0x18}, 0x10) fchmod(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt(r1, 0x2, 0x20, &(0x7f0000d2c000)=""/246, &(0x7f00000bf000-0x4)=0xf6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000574000-0x4)=0x0, 0xfffffffffffffe97) recvmsg(r1, &(0x7f0000be1000-0x38)={&(0x7f00006c8000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f00005ce000-0x10)=[{&(0x7f0000258000)=""/145, 0x91}], 0x1, &(0x7f0000cae000)=""/198, 0xc6, 0x63676514}, 0x40000140) r2 = syz_open_dev$vcsn(&(0x7f0000ce8000-0xa)='/dev/vcs#\x00', 0x5c, 0x101800) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00003b5000)=0x0) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0x942000)=nil, 0x942000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r0, &(0x7f0000002000-0x6)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffff17) read(r0, &(0x7f0000746000-0x20)=""/32, 0x20) recvfrom$inet(r0, &(0x7f0000522000-0x1000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000825000-0x2)="d352", 0xfffffffffffffeb0, 0x11, &(0x7f0000938000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000941000)=0x100000) sendto$inet(r0, &(0x7f0000939000-0xcb)="97", 0x1, 0x0, &(0x7f0000938000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9) getsockname(r0, &(0x7f000018f000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000dfc000)=0x9) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002c000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00005ad000)=0x40, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000026000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) poll(&(0x7f0000ed9000-0x10)=[{r2, 0x0, 0x0}], 0x1, 0x8001) write$eventfd(r2, &(0x7f0000c02000)=0x0, 0x8) r3 = syz_open_dev$amidi(&(0x7f00008a5000-0xc)='/dev/amidi#\x00', 0x1f, 0xa240) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f000019f000-0xa0)={0x0, @in6={{0xa, 0x1, 0x8001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xd3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x4, 0xbe16, 0x3550, 0x1c}, &(0x7f0000dcc000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f000095f000)=r4, 0x4) r5 = semget(0x3, 0x3, 0x3c0) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f000081d000-0x63)=""/99) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x0, 0x0, 0x4, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x800) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x40000, 0x100000000}, 0xff03) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000a49000-0xa)='/dev/dsp#\x00', 0x1, 0x189000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000746000-0x98)={0x0, @in6={{0xa, 0x2, 0x45, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x5}, &(0x7f00009ae000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000f10000-0x8)={r2, 0x8}, 0x8) syz_open_dev$tun(&(0x7f0000e9e000-0xd)='/dev/net/tun\x00', 0x0, 0x10100) mq_getsetattr(r0, &(0x7f0000fb2000)={0x5, 0x6b96, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0}, &(0x7f0000ded000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 72.430044] binder: 10952:10961 BC_INCREFS_DONE uffffffffffffffff no match [ 72.446147] binder: 10952:10961 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 72.455584] binder: 10952:10961 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.462873] binder: 10952:10961 got transaction to invalid handle [ 72.469194] binder: 10952:10961 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000bb5000-0x4)=r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000a54000-0x11)='/selinux/context\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000ef2000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x7ff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00008bd000-0x18)=@get={0x1, &(0x7f0000065000-0x1b)=""/27, 0x8}) r3 = socket(0x11, 0x4000000000080003, 0x0) getresgid(&(0x7f000018f000-0x4)=0x0, &(0x7f000037f000-0x4)=0x0, &(0x7f0000781000-0x4)=0x0) mmap(&(0x7f0000408000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6(0xa, 0x0, 0x7) getpeername$unix(r3, &(0x7f00007c2000)=@file={0x0, ""/4096}, &(0x7f00002f1000-0x3)=0x1002) getsockname(r4, &(0x7f0000456000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000691000)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00003a4000)={0x0, 0x4d, "1a4a2a95b742b3edd75872c809f9a29bb559671356841dc21e366211435396007f78e14900bfa77b5f5af93e8938d9746105f5b53abf2e41c3d2a3ad3914e1a32b9f4f2936f053a339135fd9e3"}, &(0x7f0000446000)=0x55) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000c76000)={r5, 0xa9d5}, 0x8) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet_sctp(r0, &(0x7f0000afa000)={&(0x7f0000aa4000-0x1c)=@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000213000)=[{&(0x7f00009d3000-0xb8)='t', 0x1}], 0x1, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000bb5000)="e0", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00007e9000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f00000-0x2)=0x18) 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmget(0x3, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001000-0x4)=0x1d, 0x4) r1 = syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000064000-0xc)={0x1, r1, 0x1}) perf_event_open(&(0x7f0000483000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x80000040fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r3, 0x8) getpid() r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b09000)='/dev/rtc\x00', 0xbfffc, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f000016a000-0x4)=0x0) fcntl$lock(r1, 0x800000000000000b, &(0x7f0000002000)={0x5, 0x4, 0xd6ff, 0x0, r5}) fcntl$lock(r1, 0x7, &(0x7f000082b000)={0x0, 0x0, 0x0, 0x9, 0x0}) close(r0) r6 = socket$inet6(0xa, 0x1000000000003, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000669000-0x4)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00009dd000-0x4)=0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f000006a000-0xc)={0x0, @remote={0x0, 0x0, 0x0, 0x0}, @loopback=0x0}, &(0x7f00005b9000)=0xc) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00005da000)={0x4, {{0xa, 0x1, 0x5, @loopback={0x0, 0x1}, 0x20}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x800}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00002bf000)={@common='sit0\x00', r7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000e78000)=0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000194000-0x28)={@common='rose0\x00', r7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) writev(r8, &(0x7f000033b000-0x10)=[{&(0x7f00000f1000-0x3a)="390000001300199800e256e2c305000040000200020000000000000080000900130002000800ff00280fe5000000000000000287000d0001a263", 0x3a}], 0x1) 2018/01/12 15:09:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(r1, 0x1, &(0x7f0000012000)=[&(0x7f000020b000/0x4000)=nil], &(0x7f0000000000)=[0x1, 0x6, 0x0, 0x6, 0x2, 0x1, 0x1, 0x10000], &(0x7f0000395000-0x20)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) fcntl$lock(r0, 0x7, &(0x7f0000ffd000)={0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x8010000000000084) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000d88000)={0x0, @empty=0x0, @broadcast=0x0}, &(0x7f00009cd000)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000056b000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2, 0xf8, 0x10001, 0x500, 0x2, 0xa00000, r1}) sendto$inet6(r0, &(0x7f00000ac000-0x2)="d4", 0x1, 0x0, &(0x7f0000c51000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000f1b000-0x8)='./file0\x00', 0x28042, 0x0) bind$alg(r0, &(0x7f000050e000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b79000-0x10)="a23364fd5e580ef24d71a19dd93fc727", 0x10) write$sndseq(r1, &(0x7f0000c9b000-0x30)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @ext={0x0, &(0x7f0000c6d000)=""}}], 0x30) r3 = syz_open_dev$mouse(&(0x7f0000119000-0x12)='/dev/input/mouse#\x00', 0xbf, 0x180) r4 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000a3000)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00003c3000)={0x0, 0xffff, 0x0}, &(0x7f0000534000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000be000-0x6)={r5, 0x0}, 0x6) sendfile(r2, r4, &(0x7f0000ff9000)=0x0, 0x7) recvmsg(r0, &(0x7f000083a000-0x38)={&(0x7f0000013000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000f52000)=[{&(0x7f0000175000)=""/4096, 0x1000}, {&(0x7f000041e000)=""/186, 0xba}], 0x2, 0x0, 0x0, 0x6}, 0x140) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003000-0x11)='/selinux/enforce\x00', 0x101480, 0x0) accept$alg(r0, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001000)=@get={0x1, &(0x7f0000002000-0x49)=""/73, 0x80000000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000001000-0x4)=0x0, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003000)='/dev/mixer\x00', 0x40000, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000004000-0x4)=0x0, &(0x7f0000002000)=0x4) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x0, 0x0, 0x4, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x0, 0x0}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f000059b000-0xb)='/dev/audio\x00', 0x610000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00005c1000-0x28)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000353000-0x4)=0x28) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000b5000)={0xffffffff, 0x2, 0x8206, 0x0, 0x3, 0x8, 0x9, 0xd584, r2}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, &(0x7f0000fb2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ded000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000011e000-0x7)='net\x00') exit(0x0) perf_event_open(&(0x7f0000955000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000b5b000-0xd6)={0x0, 0xce, "83346022a9fd27a525897a1aa8b1fbf0479baa664f65f263c3d8a3a6ded0d02fe7bbac4daee6790d6e2884a7cc5c8410e8892e09598b524f19088856c387d4b53d432b4421f7b9f1a1ba58676cc6931a6ed8199a52a18600f618d02adceeb956ef00e86d796d8fdd5312e9da001e84408c8147bf292b7da29d860f12440faab2ab0504808cde237018ffe62f6fd80b9814ede9bd01b9f93eb4f0b55c6dd39a2f8c907e785649e77473ece841fb7aa57f4eae199b3fe0e355714261bc41f33e05526b5e75d8bfe26633602b088be7"}, &(0x7f0000c83000-0x4)=0xd6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000c27000)={r2, 0x79, "5d868d2034b3e2d307c8edccac5f1b0c5d97c7fccb749b41d88dd9d98f9de9a90f674b2c44c60310dbe7bbd6894cbce178e417e14b6b0a9d50b126f02f5e5971270e922160339e06c970b538a5bcf82030c7856329eb81fbf9a90baebacfb7bddac79f5fb243fdb3b0a50d7191393cf83df39e2bdf33123839"}, &(0x7f0000c9b000-0x4)=0x81) semget$private(0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e39000)='/selinux/policy\x00', 0x0, 0x0) mbind(&(0x7f00009aa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000c20000-0x8)=0x0, 0x0, 0x0) mknodat(r1, &(0x7f0000ac4000)='./file0\x00', 0x0, 0x0) [ 72.570757] binder: 10988:10990 BC_INCREFS_DONE uffffffffffffffff no match [ 72.571455] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 72.612794] binder: 10988:10990 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000e56000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000e09000-0x20)={@generic="a1bc01507ff819cd96fc0bc910d7a609", @ifru_addrs={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) perf_event_open(&(0x7f0000807000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f000015a000-0xc)='/dev/amidi#\x00', 0x2, 0x20000) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000e8000-0xa7)=""/167) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) setxattr(&(0x7f0000dda000)='./file0\x00', &(0x7f0000f40000-0x19)=@known='system.posix_acl_default\x00', &(0x7f00007bb000)='md5sum\x00', 0x7, 0x0) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000978000-0xb)='/dev/adsp#\x00', 0x2, 0x2000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f000068d000-0x4)=0x0, &(0x7f00009d0000-0x4)=0x4) bind$alg(r0, &(0x7f0000bed000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00009a1000)={0x0, 0x83, "7eb1e59e8af2d0b379a9bfd010c4d45d050bfaaf3eac14107063d30adc2157d89d3a57e9379b322f457bfebe3f3591de77f3e1a079c4efc3c57e1ab6f3c61f8496876db66e7ae24ea0b56c64a283f96c12c6eb983f818af533090ea166fecfd0f0afc13f58dcd0366b742aa76feea51d3859223ede3e7df007410f6596769b1e09cf4d"}, &(0x7f000037f000-0x4)=0x8b) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000aa4000-0x10)={r2, 0x5, 0xe566, 0x8}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000db5000)='/dev/cuse\x00', 0x100ffc, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000a84000)={0x0, @in6={{0xa, 0x1, 0x5, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x8001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffff8000, 0x7fff}, &(0x7f00001ae000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000ad9000-0x10)={r4, 0x20, 0xffffffff7fffffff, 0xfff}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00003c5000-0x6)={r4, 0x1}, &(0x7f000055a000-0x4)=0x6) r5 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r5, 0x0, 0x0, 0x9) sendfile(r0, r0, &(0x7f00006b1000)=0x0, 0xfffffffffffffffa) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00002b8000-0x8)={r4, 0x6}, &(0x7f0000767000)=0x8) 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f00000d1000)={&(0x7f0000fdc000-0x80)=@generic={0x10000000001e, "02010000000020df000000400000e800805bf86c56020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4004000000000000000008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000954000000000b0000db000004da36"}, 0x80, &(0x7f0000145000-0x60)=[], 0x0, &(0x7f0000d19000)=[], 0x0, 0x0}, 0x0) dup2(r0, r1) ioctl$int_in(r1, 0x5421, &(0x7f0000331000-0x8)=0x200) [ 72.651131] binder: 10988:10990 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.658355] binder: 10988:10990 got transaction to invalid handle [ 72.664803] binder: 10988:10990 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000922000-0x58)={0x26, 'skcipher\x00', 0x20, 0x0, 'ctr-cast5-avx\x00'}, 0xffffffffffffff9e) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000f64000)={@common='lo\x00', @ifru_names=@generic="19c59b67b78f66f0385a1bcecf23a359"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000a88000-0x4)="e517b5bf91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004ae000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$netrom(r2, &(0x7f0000855000)={&(0x7f0000df4000)=@ax25={0x3, {"5707e7c5ef66f3"}, 0xffffffffffffffc1}, 0x10, &(0x7f0000bef000-0x10)=[{&(0x7f0000694000)="ee7dc2abf4182ec802cdbaac3eae721d642c2e4326b29a10dbb6800b01cd52ded0d857b57478e531036588707676df5324f59bcd5a91f07e83836cdd92882318521648b99fe2c6c02bb01ac5cd72307a84e68f4cc5b26c1847ffd1f66b139ba6c891551e16862a74636d1a844cf8b76afbe3abe6206936274aa58769fca97b76e024f25b221f2b9013dec58055f6e0c550a710b7ef8df2c21830c92f041260c524492ab5eb33365bd3531cca2b3fcd033e1f98ee30545fc1573ab7a9df79d1e94d9ad1c315e385cbf8da63b7ff8f8b162358340ae6da9c44a6a98dfb1c99", 0xde}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$alg(r1, &(0x7f0000916000-0x38)={0x0, 0x0, &(0x7f000036e000-0x10)=[{&(0x7f000098b000-0x92)="ffff772ec8f09d8ee7d2bc0000004068e7a682bf6a27d6b342736a2bc626e57104bdcea90f899ef9f66365208e12988fee0445883b816e81f8ca93238fab378ee5d2a2490ed9892c2673a2ade4f65318d2571b053870f38cc353bce845d0fac37f995df6492e343fe8e9b429c1bd7ceeb4bc72fe00000006be02f94c0cb7475956af27f96464ebb6f0dc5ccda52bc88302fc", 0x92}], 0x1, &(0x7f0000b07000)=[], 0x0, 0x0}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f000011e000-0x8)={0x0, 0x0}) migrate_pages(r3, 0xfffffffffffffff7, &(0x7f000093d000)=0xfff, &(0x7f0000b00000-0x8)=0x9) remap_file_pages(&(0x7f000067e000/0x2000)=nil, 0x2000, 0x3, 0xffffffff, 0x1000) readv(r0, &(0x7f0000f28000)=[{&(0x7f0000226000-0x1000)=""/4096, 0x10e}], 0x1) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ead000-0xa)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) write(r1, &(0x7f0000fbc000-0x6)="f3", 0x1) syz_open_dev$dspn(&(0x7f0000b13000)='/dev/dsp#\x00', 0x8, 0x400000) sendfile(r1, r0, &(0x7f00004db000)=0x0, 0x2) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000b3d000)={0x0, 0x32, 0x0, @thr={&(0x7f000022f000)="", &(0x7f0000298000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a7e000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000052000)={{0x0, 0x3}, {0x7ff, 0x4}}, &(0x7f00002a4000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) r0 = syz_open_dev$adsp(&(0x7f00001f9000)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x20480) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000fc000)={@generic="8672ca41bd15b503a3ea4ca92cc96eaa", @ifru_flags=0x8000}) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f5e000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$TCFLSH(r1, 0x80047456, 0x0) fchdir(r0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00003e1000-0x10)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000b55000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000848000)=0x8) 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000afd000-0xc)={0x2, 0xffffffffffffffff, 0xfffffffffffffffe}) ioctl$TIOCCBRK(r0, 0x5428) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00001e0000)='/dev/cuse\x00', 0x80, 0x0) syz_open_dev$admmidi(&(0x7f0000fd9000-0xe)='/dev/admmidi#\x00', 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000730000)=[@in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1cd8}, @in6={0xa, 0x1, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x800}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0xffffffffffffff01, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1000}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in=@loopback=0x7f000001, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0xff}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000980000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x7bd5292a, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xf6, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) 2018/01/12 15:09:11 executing program 2: syz_open_dev$random(&(0x7f0000ac6000-0xc)='/dev/random\x00', 0x0, 0x140ffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00009d8000)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000a52000-0x2c)=[@in6={0xa, 0x2, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x2c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000d4a000)="b439e79fbc4bcd4eef8ac99847a29581", 0x262) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000777000-0x8)={0x0, 0x2}, &(0x7f0000756000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000eb1000-0x14)={r2, 0x4, 0x7ff, 0x80000001, 0x2, 0xd5df}, &(0x7f00007e7000)=0x14) modify_ldt$write2(0x11, &(0x7f0000d64000-0x10)={0x5, 0x101000, 0x2000, 0xcc, 0x400, 0x3, 0x5, 0x80, 0x1, 0x0}, 0x10) 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00005f1000-0xa)='/dev/dsp#\x00', 0x1, 0x80200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000e0a000-0x14)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000139000-0x4)=0x14) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000a01000-0x77)=""/119, &(0x7f0000ba2000-0x2)=0x77) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000017e000)=0x2, 0x4) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000adb000-0x25)=""/37) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000fc1000)=@assoc_value={r1, 0x3}, &(0x7f0000435000)=0x8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000032e000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000093e000)={r2, 0x8, 0x3, [0x1, 0x0, 0xf09]}, &(0x7f0000a7f000-0x4)=0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1d, &(0x7f00009ae000)=""/4096, &(0x7f0000000000)=0x1000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xace000)=nil, 0xace000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x4000000000001, 0x84) sendto$inet(r0, &(0x7f0000ac1000-0x45)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet6(r0, &(0x7f00002c4000)=""/15, 0xffffffffffffff82, 0x0, &(0x7f0000ab1000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000284000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80000000000001, 0x0) setsockopt(r1, 0x6, 0x20, &(0x7f00005b3000)="020000126c3b172917e25462fa01a15eb90d2cf653f13cc379ede465f40f4a95bbff850a82633574f0b30000800099b397e69501f03d3b3d54436fc71cbcdc6e30ac10369300aff67d076348320700c0a94c470502e90000009398fc74e81b105fd02f9b14732017e2466a9fc43aea71263335960415800020ffffffff7fffffff00020006d1b0e6ebcb12c7291871363e9700004a4c939f5c0c14f1659ce8c8bed2e97e60a3649f2eea0c8263f845802ad72fa698807ef14a6a1813e900bf1d113b514dbdc05ea1309163d6a40de8391f2e98b7bbfbcbea", 0xd8) bind$inet(r1, &(0x7f00000f5000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) accept4(r1, &(0x7f00008bf000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f000030b000-0x4)=0x58, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00002f0000)=[{&(0x7f00003df000-0x10)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000085a000)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x20008843) sendmsg$inet_sctp(r1, &(0x7f00004f8000)={&(0x7f0000910000-0x1c)=@in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000038a000-0xa0)=[{&(0x7f00001f8000-0xf8)="376dbee215e454d641921e5b1b60edd50c6bed39fe3e8c1d37c0e7b611bcd1b9e092395f35f8b88a1bfedb623939c59741ebbd51a244fe8fc98e5f1db48014c7ff499fae8ac32084a13a082b88f1000000000000001f983480c7f3bc149034ea3d9daa4eba6e7b3e7a5bc08cac4a087e35b5da8eb69b5a914e41a2489d9f310b3a86732067c2a48bb28b578511f8e08af026f9392b0d9564f0eae1aa94e0d17561702d5dbaf6af8d7feebcd5493e8961dd935365ea81aadaeb144a2fc33eb4729a37ba474731a5afd451580fe64423ce5474c5a8042707469d5ff35f683e710cb00255ff42b8acfcf1b387f779cbc754859c76d9991d1c3c", 0xf8}], 0x1, 0x0, 0x0, 0x0}, 0x40850) [ 72.857887] binder: 11051:11057 BC_INCREFS_DONE uffffffffffffffff no match [ 72.877399] binder: 11051:11057 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 72.887735] binder: 11051:11057 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.895167] binder: 11051:11057 got transaction to invalid handle 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000632000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000c2b000-0x11)='/selinux/enforce\x00', 0x2102, 0x0) rt_sigsuspend(&(0x7f0000db0000-0x8)={0xffffffffffffffff}, 0x8) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0xfffffdf0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000728000)='encrypted\x00', &(0x7f0000257000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000adc000)='+\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r0) lookup_dcookie(0x8, &(0x7f0000b4b000-0xee)=""/238, 0xee) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000a2e000-0xa)='encrypted\x00', &(0x7f0000d36000)='keyring\x00') 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x100083ff8) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041c000-0xc)={0x10000011, 0x0}) prctl$setendian(0x14, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000077d000)={0x0, 0x0}) 2018/01/12 15:09:11 executing program 6: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000a96000-0x20)={0x3, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000b82000-0x20)={0x14, r1, 0x10003, 0x9}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$nfc_raw(0x27, 0x1, 0x0) socket(0x10, 0x802, 0x0) mincore(&(0x7f0000826000/0x2000)=nil, 0x2000, &(0x7f000012d000)=""/4096) write(r2, &(0x7f0000aeb000)="24007b001a0025fa0018300000ed030e02f50000070800000000f60000000000000000e03bc76a00d31562b76948a6b2a6f0703eb7b71a2a08a93a998a22af3a00b6088ec94a3445", 0x48) socket(0x11, 0x4, 0x1ff) 2018/01/12 15:09:11 executing program 1: r0 = shmget(0x0, 0x2000, 0x201, &(0x7f000020a000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x4, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00008f5000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f000082f000-0xf6)=""/246) 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c9b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00007d7000)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000c7a000)='/selinux/enforce\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000e2d000-0x4)='cdg\x00', 0x4) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00002d2000-0x4)=0x0, 0x4) sendto$unix(r1, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) close(r0) 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0xa) write(r0, &(0x7f000037b000-0x1f)="1f0000000206fdde2d03000000ffff0003002000090001826cd9a900000017", 0x1f) [ 72.901682] binder: 11051:11057 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:11 executing program 1: mmap(&(0x7f0000000000/0x52c000)=nil, 0x52c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000527000-0xd)='/dev/snd/seq\x00', 0x0, 0xc04) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000528000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00002b4000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000004a000)={0x0, 0x0}) msgget(0x2, 0x107) get_thread_area(&(0x7f000051a000)={0x8, 0x2, 0x4000009, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000052a000-0xbc)={0x7c, 0x3, 'client1\x00', 0x1, "0000000000000001", "02e0cd799594cc43be707303074dd4c45fd46586eb625c2c6383b9c0ad0949f7", 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getpeername$unix(r1, &(0x7f0000526000)=@file={0x0, ""/4096}, &(0x7f0000527000-0x4)=0x1002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000339000-0x10)='/dev/sequencer2\x00', 0x208200, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000105000)={0x0, 0x3000, 0x0}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f000021f000-0x4)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000006000)={0x101, 0x1, 0xffffffff, 'queue1\x00', 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 72.971726] binder: 11075:11077 BC_INCREFS_DONE uffffffffffffffff no match [ 72.986872] binder: 11075:11077 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.000926] binder: 11075:11077 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.008311] binder: 11075:11077 got transaction to invalid handle 2018/01/12 15:09:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00003b3000-0x9)='/dev/vcs\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000c46000)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00007ac000-0x103)="260000001200810004ff050d42fff900fffffffdc200ffff0000070009227ffee60019000007", 0x26) 2018/01/12 15:09:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000015e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000968000)='/selinux/context\x00', 0x2, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000c0b000-0x4)=0x1d) madvise(&(0x7f00003aa000/0x3000)=nil, 0x3000, 0x0) 2018/01/12 15:09:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000022f000-0x10)='coredump_filter\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e8a000+0x560)={{&(0x7f0000256000/0x4000)=nil, 0x4000}, 0x3, 0x0}) sendfile(r0, r1, &(0x7f0000493000)=0x0, 0xff) 2018/01/12 15:09:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000807000)='/selinux/member\x00', 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000bef000)={&(0x7f0000a67000-0x8)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000f57000-0x4)=r1, 0x4) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000080000-0x54)="1f0000005600056d00ed00000100000800000080003f07faff00050301004c5b02a98b204394aead9b98e50d3e07e495b1282880fee8f63cd354435d9ab287520e78aeb6e20302f409e1aae3fc86468af53b8903", 0xfffffffffffffeca) readv(r2, &(0x7f0000be1000)=[{&(0x7f0000c7f000)=""/122, 0x7a}], 0x1) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002000-0xf)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00006b5000)=0x5, 0xfffffffffffffe81) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgid(0x0) seccomp(0x0, 0x0, &(0x7f0000a95000-0x10)={0x0, &(0x7f00006d0000-0x8)=[{0x6, 0x0, 0xfffffffffffffffe, 0x407ffc0007}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000822000-0x28)={@generic="28200b5b2ece027400bceecbed8984ce", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00001e3000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r1}, 0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000946000-0x8)=@assoc_value={0x0, 0xe716}, &(0x7f0000eeb000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000fec000-0x8)={r2, 0x2, 0x80}, 0x8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000a03000)=""/61) [ 73.014628] binder: 11075:11077 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000275000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000fe5000-0x4)=0x10, 0x800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000f4e000-0x44)={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, {0x2, 0x0, @rand_addr=0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000006f000-0x4)=0x0) syz_open_procfs(r1, &(0x7f00002b8000)='net/ip6_tables_targets\x00') r2 = syz_open_procfs(0x0, &(0x7f00000ec000)='net/ip_mr_vif\x00') getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000ca4000)=0x7, &(0x7f0000279000+0x4f8)=0x4) preadv(r2, &(0x7f00007ce000-0x20)=[{&(0x7f0000986000-0x35)=""/1, 0x1}], 0x1, 0x400000000) 2018/01/12 15:09:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e6a000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f000040e000)={0x101ff, 0x2, 0x2000, 0x1000, &(0x7f00005dd000/0x1000)=nil}) seccomp(0x1, 0x1, &(0x7f0000029000-0x10)={0x1, &(0x7f0000840000)=[{0x6, 0x0, 0x0, 0x0}]}) [ 73.072353] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 73.098581] binder: 11110:11114 BC_INCREFS_DONE uffffffffffffffff no match [ 73.109416] binder: 11110:11114 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:12 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000237000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000238000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000002000-0x20)={0x6, 0x0, 0x10000, 0x3}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000002000-0x10)={0x200, r2}) mmap(&(0x7f0000238000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000239000-0x50)={0x0, 0x1, 0x0, 0x0, &(0x7f00000c9000-0x200)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000001000-0xa9)=""/169, 0xa9) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)=0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x34, &(0x7f0000003000-0xc)="b3e63987386425579d515c14", 0x8) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r2 = syz_open_dev$mouse(&(0x7f0000001000-0x12)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x101040) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000003000)=0x8000, &(0x7f0000001000-0x8)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$llc(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000001000)=0x10) futex(&(0x7f000000d000-0x4)=0x0, 0x7, 0x0, &(0x7f0000cc4000-0x10)={0x0, r1}, &(0x7f000044b000)=0x0, 0x0) 2018/01/12 15:09:12 executing program 4: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00001da000+0xb11)={0x0, 0x0}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000001000-0x50)={0x0, 0x2, 0x3ff, 0x6, &(0x7f0000002000-0x80)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000007f000)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) r4 = accept(r0, 0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = accept4$ipx(r4, 0x0, &(0x7f0000002000-0x4)=0x0, 0x7fe) getresgid(&(0x7f0000b9c000-0x4)=0x0, &(0x7f0000bc3000)=0x0, &(0x7f0000a19000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000003000-0xc)={r1, r3, r6}, 0xc) syslog(0x3, &(0x7f0000173000-0xb9)=""/185, 0x9f7fd789) 2018/01/12 15:09:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00007ae000)={{{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f10000-0x4)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000032d000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bf9000-0x4)=0xe8) r3 = getuid() setresuid(r1, r2, r3) r4 = userfaultfd(0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000088e000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000b55000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f000014d000)=0x0) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f000038c000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r6, &(0x7f0000241000-0x89)=""/137, 0x89, 0x0) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r0 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r1 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r0, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r1, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 7: r0 = socket(0x18, 0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f000087c000-0x8)={0x0, 0x0}, &(0x7f0000fd5000)=0x226) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xac9000)=nil, 0xac9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ac9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000aca000-0x4)=0x1fc, 0x38) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="97", 0x1, 0x0, &(0x7f0000ab8000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}, 0x1c) mmap(&(0x7f0000ac9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000aca000-0x8)='./file0\x00', 0x20000, 0x90) r2 = syz_open_dev$dmmidi(&(0x7f0000436000-0xd)='/dev/dmmidi#\x00', 0x3f, 0x206001) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) recvfrom$inet6(r0, &(0x7f0000aba000)=""/15, 0xf, 0x0, &(0x7f0000ac0000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000abb000)={0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) shutdown(r0, 0x1) 2018/01/12 15:09:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000f42000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x440) fcntl$setpipe(r0, 0x407, 0x70000000000000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d4d000-0x158)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8, 0x0, 0x0, ""}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1000000000000, @loopback={0x0, 0x1}, 0x0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 73.118089] binder: 11110:11114 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.118113] binder: 11110:11114 got transaction to invalid handle [ 73.118134] binder: 11110:11114 transaction failed 29201/-22, size 80-80 line 2842 [ 73.134375] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x2) bind(r0, &(0x7f0000004000-0x58)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) 2018/01/12 15:09:12 executing program 2: pipe2(&(0x7f0000e4a000)={0x0, 0x0}, 0x4800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000f7f000)={0x0, 0x5}, &(0x7f0000eac000)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001000-0x8)={r2, 0x0}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001000-0x20)={0x0, 0x5, 0x204, 0x7, 0x6, 0x9, 0x2, 0x23, r2}, &(0x7f0000001000-0x4)=0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) ioprio_get$uid(0x0, r3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000621000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000d6b000)=r4) bpf$MAP_CREATE(0x0, &(0x7f0000323000-0x2c)={0x1, 0x4, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x20000000000000, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r0 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r1 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r0, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r1, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) r0 = shmget$private(0x0, 0x1000, 0x1040, &(0x7f0000d67000/0x1000)=nil) r1 = getuid() r2 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000c48000-0xe8)={{{@in=@loopback=0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ee5000-0x4)=0xe8) fstat(0xffffffffffffffff, &(0x7f00001fd000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00003dd000-0x4)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000a24000)={{0xffffffffffffae3a, r1, r2, r3, r4, 0x191, 0x7fffffff, 0x0, 0x0, 0x0}, 0x5, 0x6, 0x1, 0x2, r5, r6, 0x9, 0x0, 0x0, 0x0}) time(&(0x7f0000604000)=0x0) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) uselib(&(0x7f0000a3b000)='./file0\x00') mkdir(&(0x7f0000dea000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c67000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000883000-0x8)='./file0\x00', &(0x7f0000c4b000)='./file0\x00', &(0x7f000041b000-0x6)='sysfs\x00', 0x1000000, &(0x7f00008ba000)="") 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0x416000)=nil, 0x416000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000223000-0x4)=0x47, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000417000-0xc)='/dev/autofs\x00', 0x40002, 0x0) mmap(&(0x7f0000417000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000418000-0xe)='/selinux/user\x00', 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00001f6000)={@multicast2=0xe0000002, @empty=0x0}, 0x8) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000164000)={0x0, 0x81, 0x30}, &(0x7f0000418000)=0xc) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000418000)={r4, @in6={{0xa, 0x1, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x101, 0x56a4, 0x8, 0x70a}, &(0x7f0000317000)=0xa0) sendmsg$nl_xfrm(r0, &(0x7f0000306000)={&(0x7f00003d8000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00003b3000)={&(0x7f00001b8000+0x7b0)=@newsa={0x104, 0x1a, 0x811, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2b}, @in=@multicast1=0xe0000001, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x0, 0xaa}}]}, 0x104}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r0 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r1 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r0, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r1, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0x0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0xfffffffffffffff7}, 0x10) sendmmsg$alg(r1, &(0x7f0000f40000-0xa8)=[{0x0, 0x0, &(0x7f0000511000)=[], 0x0, &(0x7f0000131000)=[], 0x0, 0x0}], 0x1, 0x0) getresuid(&(0x7f000042a000-0x4)=0x0, &(0x7f0000982000)=0x0, &(0x7f0000770000-0x4)=0x0) ioprio_get$uid(0x3, r2) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) request_key(&(0x7f0000b87000)="796b018000000000737400", &(0x7f0000e22000)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f00001ff000)='posix_acl_accesstrustedwlan0user.selinux\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x4000, &(0x7f00009d9000-0x8)=0x5, 0xffffffff7fffffff) fdatasync(r0) r1 = syz_open_dev$sg(&(0x7f00004b3000-0x9)='/dev/sg#\x00', 0x8, 0x2000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00006e5000)={0x57, 0xff, 0x0, {0x3, 0x2}, {0x4, 0x20}, @period={0x5f, 0xa00000, 0x1000, 0xfffffffffffffffb, 0x0, {0x8, 0xff6, 0x8, 0xffffffffdffffffa}, 0x6, [0x1, 0x80000001, 0x800, 0x9a6, 0x3, 0x800]}}) 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000994000)=[{&(0x7f0000fcf000-0x3b)="390000001100094701bb61e1c30500ff070000000200000045efffff08009b0019001a000f000000050000000000000004e9ff0006000d0005", 0x39}], 0x1) pipe(&(0x7f000036b000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000074a000-0x14)={0x0, 0xea3, 0x5, [0x1, 0x7, 0x8003, 0xffffffffffff8001, 0x7, 0x5]}, &(0x7f0000dc6000)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f000070d000-0x6)={r2, 0xfffffffffffffffe}, &(0x7f00009d5000-0x4)=0x3) r3 = openat(r1, &(0x7f0000579000)='./file0\x00', 0x800, 0x8000002) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x7) 2018/01/12 15:09:12 executing program 1: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$adsp(&(0x7f0000007000)='/dev/adsp#\x00', 0x9, 0x44240) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000004000)=0x4, 0x4) fchmodat(r1, &(0x7f0000011000)='./file0\x00', 0x3f) sendmsg$nl_xfrm(r0, &(0x7f0000001000-0x38)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000b000)={&(0x7f000000f000)=@newsa={0x10c, 0x1a, 0x721, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in=@multicast2=0xe0000002, 0x0, 0x2b}, @in=@local={0xac, 0x14, 0x0, 0xaa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast=0xffffffff}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:12 executing program 3: r0 = semget$private(0x0, 0x0, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000693000-0x1)='rxrpc_s\x00', &(0x7f0000480000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000ca5000-0xb)='^wlan0eth1\x00', 0xfffffffffffffffe) r2 = syz_open_dev$mouse(&(0x7f0000cd6000+0x1c0)='/dev/input/mouse#\x00', 0x2, 0x800) r3 = gettid() r4 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f000047d000-0x28)={0x44, 0x0, r3, 0x100, r4, 0x6, 0x1c1d, 0x74a}) r5 = syz_open_dev$tun(&(0x7f0000514000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00002ae000-0x11)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000a80000-0x58)={0x0, 0x50, "2ecf854ce1aa323a83d302797bc7148714f916d9aa501c61dc328d1d7f52c4744727dcbfeb0ac6001ee620b7cf930278297b0d953a0a1c225ce38cdc6c2da347af2f85762fa6db4ae797ad71d7c4fbb9"}, &(0x7f0000811000-0x4)=0x58) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000be3000)={0x0, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000, 0x5, 0x6, 0x4, 0x2}, &(0x7f0000621000+0xfb1)=0xa0) r7 = add_key$keyring(&(0x7f0000a86000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000ea4000)=0x9d4, 0x4) r8 = add_key$user(&(0x7f0000948000-0x5)='user\x00', &(0x7f0000a2e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000730000)='D', 0x1, r7) r9 = add_key$user(&(0x7f0000bdd000-0x5)='user\x00', &(0x7f0000d08000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000b1b000-0x142)="b33a00000000000000009cd653e520c19ad7597fe21769e7c4db44c249b544230ba287fb8bd6ed3d6ccf59ef70995bdae8e0ecd3fff35a537424f222d2818d08ca27e0ec82165fe365a0e6b9485f2d9254a0f60c01e33e208c7eba67fc19a9497f5b07e5849d2e875b0081d640b336616fe0f3c3002813b4627ee7597689525e8e81f70001000000000000ea527e6bd3d32b1a91f944edbc4b1f50050000000000000098b600579f3af3f864e1c32407928f6672f98f7e149be31bd78b506e8b77d4b9ffffffff8c5a44", 0xca, r1) keyctl$dh_compute(0x17, &(0x7f0000abf000-0xc)={r8, r9, r9}, &(0x7f0000742000)=""/3, 0x3, &(0x7f00008fd000)={&(0x7f00001f9000-0x11)={'poly1305\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000528000-0x4)=0x0) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000d3b000-0xe)='net/netfilter\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00007fd000)={{0x6, 0x5}, 'port1\x00', 0x1, 0x40406, 0xa5a0, 0x4, 0x10001, 0x80000001, 0x9, 0x0, 0x5, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000002000-0x26)={0x0, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0}) fcntl$setpipe(r4, 0x407, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00002d5000)=@sack_info={0x0, 0x6, 0x81}, &(0x7f0000f85000)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000f6a000-0x10)={r5, 0x2, 0x1ff, 0x3ff}, &(0x7f0000c05000-0x4)=0x10) socket$inet_dccp(0x2, 0x6, 0x0) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000bac000-0xc)='/dev/rfkill\x00', 0x101000, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000438000)={0x0, 0x0}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000753000)='/dev/rfkill\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000354000-0x8)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x400) readahead(r1, 0x0, 0x0) memfd_create(&(0x7f0000aa2000)='/dev/rfkill\x00', 0x1) 2018/01/12 15:09:12 executing program 2: msgctl$MSG_STAT(0x0, 0xb, &(0x7f00005bd000)=""/237) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f000047d000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/1) 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x4747e630a668ed7d, &(0x7f0000d18000)="", &(0x7f0000b4a000)=0x0, &(0x7f0000588000)=0x0, &(0x7f00000a6000)="") socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000fa3000)={0x0, 0x0}) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000c9a000-0x9)='/dev/sg#\x00', 0x72, 0xffffffffffffffff) write$tun(r0, &(0x7f00006f8000-0x32)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty=0x0, @multicast1=0xe0000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}, 0x32) ioctl$fiemap(r0, 0xc020660b, &(0x7f00004e9000-0x170)={0x177, 0x4c, 0x5, 0x4, 0x6, [{0x3a, 0x7, 0x600000000, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0}, {0x1000, 0xffffffffffffff81, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}, {0x6, 0xc7, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}, {0x5, 0x9, 0xffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, {0x8, 0x3, 0x7, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0}, {0x964, 0x5, 0x8, 0x0, 0x0, 0x288a, 0x0, 0x0, 0x0}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000b2a000-0x44)={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="aa0f8084d788ab51cf7795aa4dc5e790"}) ioctl(r0, 0x227c, &(0x7f0000939000)="") 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00004f0000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e1b000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f000028f000)=0x400) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f0000308000)=""/1, 0x1}], 0x1000000000000083, &(0x7f0000155000-0xa2)=""/0, 0x0, 0xfa}, 0x0) 2018/01/12 15:09:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000d62000-0x11)='/dev/vga_arbiter\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000106000-0x8)={0x0, 0x4}, &(0x7f0000a99000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000815000-0xe)={r3, 0x8000, 0x3, [0x800, 0x2, 0x10001]}, 0xe) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x2a6, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xdc7000)=nil, 0xdc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dc7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000dc8000-0x9)='/dev/sg#\x00', 0x2, 0x40101) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f000046e000-0x10)={0x4, &(0x7f00002b4000-0x20)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000408000-0x8)={r1, 0x8}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000dbe000)=0x8c6, 0x4) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000b67000)=0x0, &(0x7f00004d4000-0x4)=0x4) [ 73.439934] binder: 11192:11195 BC_INCREFS_DONE uffffffffffffffff no match [ 73.465326] binder: 11192:11195 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.480207] binder: 11192:11195 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xaf7000)=nil, 0xaf7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1b, 0x80006, 0x8, &(0x7f0000af7000)={0x0, 0x0}) accept$alg(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000af9000-0x18)={0x3, 0x1, 0x6}) bind$alg(r2, &(0x7f0000af6000)={0x26, 'rng\x00', 0x0, 0xfffffffffffffffc, 'ansi_cprng\x00'}, 0x58) 2018/01/12 15:09:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000090d000)='wchan\x00') ioctl$KDSETMODE(r0, 0x4b3a, 0x4) r1 = socket(0x10, 0x80800, 0x20000000010) write(r1, &(0x7f000078e000)="260000002400190bfeffffff00008d4003000025010008fc0e000300c1000500000000000035", 0x26) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a66000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000ca8000)='children\x00') ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000298000-0x8)=0x1) r3 = dup(r2) write(r1, &(0x7f000024d000)="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", 0xfc) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000f51000-0x8)=0x4) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000f4f000-0x2)=0x3, 0x2) 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80002, 0x2) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000000)={@common='ip6gre0\x00', @ifru_ivalue=0x80000001}) r2 = dup3(r0, r1, 0x80000) flistxattr(r1, &(0x7f0000f16000)=""/34, 0x22) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000293000-0x20)={0x7fe, 0x20, 0x7ff, 0x5, 0x8, 0x9}) [ 73.487523] binder: 11192:11195 got transaction to invalid handle [ 73.493984] binder: 11192:11195 transaction failed 29201/-22, size 80-80 line 2842 [ 73.524078] netlink: 40 bytes leftover after parsing attributes in process `syz-executor6'. [ 73.544441] netlink: 40 bytes leftover after parsing attributes in process `syz-executor6'. 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000097d000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb1a000)=nil, 0xb1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000026000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000b09000)={0x81, 0x0, [0x1, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000e6000-0x38)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000485000)={{0x0, 0x0}, {0x8, 0x0}, 0xffffffffffffffff, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0x8b9000)=nil, 0x8b9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000616000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f00008b8000)=0x0) mmap(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00008b9000)={&(0x7f00000d7000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f00003fa000-0x10)=[{&(0x7f00008ba000-0xd5)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x9}, 0x40000000) 2018/01/12 15:09:12 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000-0x2c)={0x0, 0xffffffffffffffff, 0x79, 0x5, 0x5, r0, 0x47b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000a38000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00007b4000)={0x1, 0x0, 'client0\x00', 0xffffffff80000000, "8341c8ce069e902d", "a5eb5c5b3fbe42bc5eb5205791e27705127c371b826a504039c6c398c19b9bb1", 0xf0e6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdir(&(0x7f0000724000-0x8)='./file0\x00', 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000473000-0x38)={0x0, 0x0, &(0x7f0000452000)=[{&(0x7f0000789000)="", 0x0}], 0x1, &(0x7f0000a3d000-0x90)=[@op={0x18, 0x117, 0x3, 0x0}, @assoc={0x18, 0x117, 0x4, 0x0}], 0x30, 0x4}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00005e0000-0xc)={&(0x7f0000f2d000-0x8)='./file0\x00', 0xffffffffffffffff}, 0xc) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00001bc000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000d13000-0x8)={0x0, 0x0}, &(0x7f0000cf1000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00001cb000-0x8f)={r3, 0x87, "09f70f4797a2c04db91cfcafc38ccc52b3b5bd2d8ea68433de7ec8820ce5bab4059887e0d3be1a8ad76c2fc3d0ad2e67352ca00fb70cff71e23d08de790a7f94606a84901efc5971e063397928055e6a53273eeb43206063e39613a9bda9d31cef9fc9af08f87c9bc76e2bc60de2816dbf957253d5a5a63074e0a8de833eea91ddc3c6a373d15f"}, &(0x7f0000388000)=0x8f) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f00000ca000-0x7)='cpuset\x00', 0x0, &(0x7f0000452000)="") 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x3, 0xfffffffffffffff9, @loopback={0x0, 0x1}, 0xc3}, 0xfffffffffffffe2b) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000ffe000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000fff000-0x37)={0x4, 0x1, 'client1\x00', 0x2, "ac44fbfc71118b4d", "2cb31e8d17cb3199f054549b322911dc5aaba52129d9f61804708f074966780a", 0x0, 0x100000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, 0x0}, 0x1c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000ffe000)="187134e88bf76358bdcd2356a1638139a097c5aef9c17de6f6b1ddbd4bb2a627a4bcbce2dadb75b2a5cde89ae12ef30da7e8c8c1e019473e6b6fd1a0581abec779b4f99ce1729e1d4761a0ba24c3dc4917cf7ff55f3312b2e35e0caae196ff6b59fdecb8aa73e355243149cb2a8fd00861835944478d93b79506dd4a18f75f109cb8c1", 0x83, 0x8000, &(0x7f0000ffe000)={0xa, 0x3, 0x7, @loopback={0x0, 0x1}, 0xda}, 0x1c) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000693000-0x1)='rxrpc_s\x00', &(0x7f0000480000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000ca5000-0xb)='^wlan0eth1\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000a86000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) io_setup(0x71a4b0fd, &(0x7f0000d73000-0x8)=0x0) io_destroy(r2) r3 = creat(&(0x7f0000033000)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00008cf000)=@int=0x0, &(0x7f0000008000)=0x4) r4 = add_key$user(&(0x7f0000165000)='user\x00', &(0x7f0000a2e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000073c000)='D', 0x1, r1) r5 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f000091b000/0x2000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000864000-0x79)=""/121) r6 = add_key$user(&(0x7f0000bdd000-0x5)='user\x00', &(0x7f0000d08000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000bc2000-0x140)="b33ab70079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed3d6ccf59ef70995bdae8e0ecd3fff35a537424f222d2818d08ca27e0ec82165fe365a0e6b9485f2d925493f60c01e33e208c7eba67fc19a9497f5b07e5849d2e875b0081d640b336616fe0f3c3002813b4627ee7597689525e8e81f750a86eb580fb4690ea527e6bd3d32b1a91f944edbc4b1f50050000000000000098b600579f3af3f864e1c32407928f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000abf000-0xc)={r4, r6, r6}, &(0x7f0000742000)=""/3, 0x3, &(0x7f0000aef000)={&(0x7f00003b7000)={'sha384-avx2\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x3, 0x9) setsockopt(0xffffffffffffffff, 0x114, 0x0, &(0x7f000056e000)="", 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f000010a000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000002000-0x10)={&(0x7f0000002000)=@newsa={0x104, 0x1a, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x3c}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x2, 0x0, 0x0}, [@coaddr={0x14, 0xe, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dc000-0x4)=0x0, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a89000-0xb)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x1) bind$inet(r0, &(0x7f00008a6000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000469000)="a5", 0x1, 0x0, &(0x7f0000dfd000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000)="ba671368d1434e64c449605bdbbfca6d2b9f8be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdbd150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69613f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344984ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b", 0x480, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000074000)="", 0x0, 0x0, &(0x7f00002b4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f000075c000-0xf)='/selinux/context\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="", 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000647000-0x8e)="ac92a015539e76e495d9743389e1c108d3f50173dfbcee4f626e31eb9148f767cd22076047323b0254117aeae0718edf9c12a19ec3b5a3eafb5129a1d577c7b6476f131298a279aefa00ae2a7fc6560e0e5d3445ef6082ef00f63048c7e239daff14b3ed1cf44b7e44955c284731ebdab994dffb304d4ec01c523de85b830bdba6f5b89b7110edf0a7590cb61a13", 0x8e) bind$alg(0xffffffffffffffff, &(0x7f0000f7b000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) [ 73.663797] QAT: Invalid ioctl [ 73.666283] binder: 11239:11246 BC_INCREFS_DONE uffffffffffffffff no match 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f0000bd2000)='/dev/sg#\x00', 0xb67, 0x400100) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000036a000-0xc)={0x0, 0x0, 0x0}, &(0x7f00009ca000-0x4)=0xc) r4 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00007aa000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000a70000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000652000-0x4)=0xe8) openat$ashmem(0xffffffffffffff9c, &(0x7f00007b3000-0xc)='/dev/ashmem\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000c46000)={0x7f, 0x0, 0x2, 0x80}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f000033b000-0x10)={0x4, r7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000d3a000)={0x0, 0x0, 0x0}, &(0x7f000012c000-0x4)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000390000-0x4)=0x0) r10 = getuid() stat(&(0x7f0000724000)='./file0\x00', &(0x7f00006c3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00003c7000-0xe8)={{{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @empty=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c81000)=0xe8) getgroups(0x3, &(0x7f0000b41000+0x97c)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r15 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000256000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000478000)=0xe8) getgroups(0x4, &(0x7f00003cf000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r18 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f00006db000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000c97000-0x68)={0x7b, 0x0, [0x8, 0x7, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) stat(&(0x7f00001ff000)='./file0\x00', &(0x7f0000ce8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000542000)={&(0x7f0000e6a000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f000037d000-0x20)=[{&(0x7f000034b000)="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", 0x1000}, {&(0x7f0000544000)="d0c99a95e6948268979882506f815330808b9225f87fbfe231b7258bc924c8ce56af7d6f6b5e68a763f6224be2fdacbc71b6f87ac9b5c0805386d23d8ad1d53dd1915558e19b9b22920ce7ce51b47f76236718bbfe9c345c8674c216da8b563d064a6fea8b4f59c731816f5ad12c8eb1647d5a44b604c9ad0888df31971ac08084dfc399a5464e707657d6dfe2881fcf2763cbe331db0ba354a0f0f4fa885f9b3ebd967b0fa187baec660c68b268f665cddb2f63c637228f1f9b158f7a01a26dc11ce166708ec009550127252462d89c89", 0xd1}], 0x2, &(0x7f0000f28000-0x108)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r8}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0x108, 0x4000040}, 0x4000000) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000413000-0x8)="3665a1ab415b7ac7", 0x8) r21 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r21, &(0x7f00005d4000)={0x0, 0x0, &(0x7f0000ae9000-0x60)=[{&(0x7f0000b95000-0x3b)="2a1b59d5", 0x4}], 0x1, &(0x7f0000427000)=[], 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000c1a000-0xc)='/dev/rfkill\x00', 0x40000, 0x0) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d50000)="bf", 0x1, 0x0, &(0x7f0000c3d000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000a61000-0x20)={r0, 0x2, 0x0, 0xffffffffffffff00, &(0x7f0000d8e000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000965000-0x44)={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='lo\x00'}) 2018/01/12 15:09:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000962000-0x1c)=[@in6={0xa, 0x1, 0x10000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000001}], 0xd) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000038f000-0xc0)={0x0, 0x0, ""}, &(0x7f0000c27000)=0x8) clock_getres(0x3, &(0x7f0000e6a000-0x10)={0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000dcb000)='/dev/usbmon#\x00', 0xdbb5, 0x2000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000c46000-0x48)={0x1, 0x0, [0x2, 0x2, 0x9, 0x5, 0x80000001, 0x0, 0x20, 0x7]}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000dec000)=0x101) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000820000-0x8)={r1, 0x2}, &(0x7f00008f3000+0x93d)=0x8) [ 73.666295] binder: 11239:11246 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.666320] binder: 11239:11246 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.666339] binder: 11239:11246 got transaction to invalid handle [ 73.666348] binder: 11239:11246 transaction failed 29201/-22, size 80-80 line 2842 [ 73.737239] binder: 11262:11264 BC_INCREFS_DONE uffffffffffffffff no match [ 73.737249] binder: 11262:11264 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.737269] binder: 11262:11264 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.737284] binder: 11262:11264 got transaction to invalid handle [ 73.737293] binder: 11262:11264 transaction failed 29201/-22, size 80-80 line 2842 [ 73.807726] binder: 11269:11274 BC_INCREFS_DONE uffffffffffffffff no match [ 73.807736] binder: 11269:11274 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.807752] binder: 11269:11274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) write(r0, &(0x7f0000baf000)="2400000052001f0014f9f426000904000a00071008000100080000000800000000000000", 0xc) 2018/01/12 15:09:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000075e000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000960000)='/dev/mixer\x00', 0x20c02, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00004f3000-0x160)={{{{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x5, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x7fffffff, 0xfff, 0xfffffffffffffff9, "16690a16d1b5623665813353a7aa87340370e2d75fa1259b8daf9c95c56aa6f0cddeba6893967b24ca9d8051bef54a4c968507bce6a0d7dcc814b75d482af1895e198f71e7c61316c0ef7fa4e9db8a57"}, 0x160) r2 = creat(&(0x7f00009f7000-0x8)='./file0\x00', 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000f51000-0x4)=""/4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$void(r0, 0xc0045c79) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000605000)=@pic={0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f000045c000)=""/147) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000dc5000)={0x0, 0x101}, &(0x7f0000e3a000)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00002fa000-0xa0)={r4, @in6={{0xa, 0x3, 0x10001, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x8, 0x6, 0x82d7, 0x9}, &(0x7f0000932000-0x4)=0xa0) 2018/01/12 15:09:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x200, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000584000-0x4)=0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r2, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25={0x0, {""/7}, 0x0}, 0x10, &(0x7f00002d3000+0x491)=[], 0x0, &(0x7f0000a38000)=""/221, 0xdd, 0x0}, 0x0}], 0x1, 0x0, &(0x7f0000f16000-0x10)={0x77359400, 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000b3f000)={0x0, 0x16e}, &(0x7f0000462000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00005e5000)={0x10000, 0x201, 0x6d27, 0x3, r3}, 0x10) r4 = memfd_create(&(0x7f0000664000)='proc:\x00', 0x3) r5 = request_key(&(0x7f000086d000)='cifs.spnego\x00', &(0x7f0000ac6000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000041d000-0x6)='proc:\x00', 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x101) sched_setscheduler(0x0, 0x0, &(0x7f00007a9000)=0x0) sched_rr_get_interval(r1, &(0x7f0000a50000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {r6, 0x9}}, &(0x7f0000e60000)={{0x0, 0x0}, {0x0, 0x0}}) write(r4, &(0x7f0000934000-0x66)="d06ec001691827cd906deb95c37f3d4eb84b9bdeb02479211ebb314eccd4119324794744a7b3689c7a7bfd790150f4987edb8ad792eb6179ab4d27de8771accfb812535ddc4cd8767be695d90213967e37521d46ae3dbaa3251df874e577f2ced8c9a40361fa", 0x693a04b6288c5125) vmsplice(r4, &(0x7f0000a55000)=[{&(0x7f0000be1000-0xc7)="76b593291a811b211813ebc5586253f117aa60e5947fdec793321154196bb17d1573d381c3023b431ebfb69a5c9e1923c093f60253c87df0a0c47dcf417627e1dcca020b1bbabf6410ffd3d6a860a315e4032c1ff8a4be7be56fe144659141864c77d9c2aff05078c527982f64a60fdbeb217a35557de178a79603e4041548a151f96fd025c5b5fddfc7b484dab40e83423b0b1991d4dbb42a7a001fc2ab00ef98559d4906650fc24ae1e024d70091c72bcb882113b96409e3df8108fcec6ede5ef86eaa9130ed", 0xc7}, {&(0x7f0000f4a000-0xb4)="bfb7d18f5e929c5931afa77778d88467dba7521478da8f537394e2e922c2b7992d12de10a70916b806745791ae55c2cd3b9a9b35d01725ac0f9beb4bf6088e260646128973f98d9aa0e697beacfa6f806a79cc47a050260b89c7e59eade593ed8147e81d7fabdf663a033e99e4a6d16b1aef83843a69538fc8035aba53a6ace2ce0882bef42c2d22998b1232321c822300b72d68be6ee21c89e71e7644548153bdd53445706684ae05b070ff498952b3035ea082", 0xb4}], 0x2, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r4, &(0x7f0000283000-0x8)='./file0\x00', &(0x7f0000360000)={0x5a, 0x4c7, "da6bb6fd914260fb5ee4a00f5844f3bf23eeaaec56bf20878361b9839fb790a7aabb68791a39ca49e3bd05b02341d5ab7ca972b12aba4c4800de3a94fd35cb9c50bb24148620fa95725a32415a2c8e4e454c"}, &(0x7f00001b7000-0x4)=0x0, 0x400) fcntl$getown(r2, 0x9) inotify_init1(0x800) r7 = getpgid(0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000065000-0x20)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x2, 0x2, 0x2, 0x1, 0x401, 0x929, 0x20}, &(0x7f00007aa000-0x4)=0x20) tkill(r7, 0x15) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000f39000)=""/90) socket$bt_rfcomm(0x1f, 0x3, 0x3) 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x7) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000df5000-0x8)={0x0, 0x8}, &(0x7f0000e51000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f000023f000)={r1, @in6={{0xa, 0x1, 0xce2b, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000d89000-0x4)=0x8c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000541000-0x10)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) accept$alg(r0, 0x0, 0x0) 2018/01/12 15:09:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f00001c2000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000b67000-0x4)=0x0) sendto$inet6(r0, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000ec000)=0x3f9, 0x4) bind$inet6(r1, &(0x7f0000fe9000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f000056f000)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/12 15:09:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000344000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_settings={0x6, 0x0, @sync=&(0x7f00001ee000-0xc)={0x0, 0x0, 0x0}}}) r1 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000198000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000a1000-0x9)='/dev/ppp\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00006b2000)=@int=0xfffffffffffffcaf, 0x4) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x7ff) r1 = accept4$llc(0xffffffffffffff9c, 0x0, &(0x7f0000f87000)=0x0, 0x80800) bind$netrom(r1, &(0x7f0000680000)=@full={{0x3, {"e7e13a569898f6"}, 0x3}, [{"9d7e411d17c821"}, {"cf813b3747fdea"}, {"286855d4ea48a1"}, {"c204bad94ac329"}, {"0992935bcc4202"}, {"eb5db898df4184"}, {"4771e6cfb0a747"}, {"e8d05e00fe05cd"}]}, 0x48) connect$llc(r0, &(0x7f000092d000)={0x1a, 0xd, 0x2, 0x8, 0x3f, 0xd8, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) timer_create(0x0, &(0x7f000099b000)={0x0, 0x3f, 0x1, @thr={&(0x7f000058c000-0x33)="557a0273704442f3ae71e923ef7fd61c150e803d0017b09b5123557724eadd189d47fedbf398bfb102bd671bed61435a2724e4", &(0x7f0000a87000)="77f9bbf1eb422651a6173899df4ec579f2d2c1e3996b0ac23ae469522749ed6f3f5492bb105bdef8c0f9c1c9b0326b1b9f047dff5fdfd7fe6d0b83b3893e1e8e2ca2917f3db40a63da47ef35c55782cf85242060d7f8"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f8c000)=0x0) timer_delete(r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00003b9000-0x24)={@common='lo\x00', &(0x7f00001be000)=@ethtool_link_settings={0x4d, 0x6, 0x101b, 0x4, 0x9, 0x7, 0x4, 0x8778000000000, 0xfd6, 0x800, [0x80000000, 0x1, 0x7ea, 0x2, 0x20, 0x20, 0x7f, 0x800], [0xfffffffffffffff8, 0x0, 0x8001, 0xfffffffffffffffa, 0xb9, 0x7, 0x5, 0x3f, 0x2]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00003b7000)=0x110, 0x4) [ 73.807765] binder: 11269:11274 got transaction to invalid handle [ 73.807775] binder: 11269:11274 transaction failed 29201/-22, size 80-80 line 2842 [ 73.926378] binder: 11285:11290 BC_INCREFS_DONE uffffffffffffffff no match 2018/01/12 15:09:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000660000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75000-0x38)={0x0, 0x0, &(0x7f0000f74000)=[{&(0x7f000004c000-0x1000)="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", 0x285}], 0x1, &(0x7f0000714000-0x60)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x0}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000bf7000-0x9)='/dev/sg#\x00', 0x80000001, 0xa480) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000a9c000-0x20)={0x10003, 0x1, 0x20654f9059affa3a, 0x2000, &(0x7f0000a60000/0x2000)=nil}) recvmsg(r1, &(0x7f0000b2e000-0x38)={&(0x7f00007ec000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000f75000)=[{&(0x7f000074b000)=""/149, 0x95}, {&(0x7f0000f12000-0x1000)=""/4096, 0x1000}], 0x2, &(0x7f0000ec7000)=""/107, 0x6b, 0x0}, 0x0) 2018/01/12 15:09:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00001b3000)={0x0, 0x0}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000f2c000-0xc)={0x40000001, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000dc0000)={0xffffffff80000013, 0x0}) epoll_pwait(r1, &(0x7f0000dc8000-0x3c)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000dc7000)={0x0}, 0x8) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000831000-0xc)={0x0, 0x0}) removexattr(&(0x7f0000c60000-0x8)='./file0\x00', &(0x7f0000cdd000)=@known='system.posix_acl_access\x00') 2018/01/12 15:09:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000ca2000-0x38)={&(0x7f00008dd000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000032f000-0x10)=[], 0x0, &(0x7f0000734000-0x30)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x0}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(r0) 2018/01/12 15:09:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xe, 0x5) mknod(&(0x7f0000001000-0x6)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r2 = dup3(r1, r0, 0x0) r3 = epoll_create(0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) connect$inet6(r4, &(0x7f0000d3d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) fallocate(r5, 0x0, 0xffff, 0x9) sendfile(r4, r5, &(0x7f0000d02000)=0x39, 0xfffd) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00003d7000-0xc)={0x0, 0x0}) creat(&(0x7f0000942000)='./bus\x00', 0x0) [ 73.941708] binder: 11285:11290 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 73.949904] binder: 11285:11290 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.957160] binder: 11285:11290 got transaction to invalid handle [ 73.963446] binder: 11285:11290 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:12 executing program 3: socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) chown(&(0x7f0000f00000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000934000-0x8)='./file0\x00', &(0x7f0000b31000-0x8)='./file0\x00', &(0x7f0000ec2000)='ramfs\x00', 0x0, &(0x7f0000f58000)="") 2018/01/12 15:09:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80000000000001, 0x0) setsockopt(r0, 0x6, 0x20, &(0x7f00005b3000)="020000126c3b172917e25462fa01a15eb90d2cf653f13cc379ede465f40f4a95bbff850a82633574f0b30000800099b397e69501f03d3b3d54436fc71cbcdc6e30ac10369300aff67d076348320700c0a94c470502e90000009398fc74e81b105fd02f9b14732017e2466a9fc43aea71263335960415800020ffffffff7fffffff00020006d1b0e6ebcb12c7291871363e9700004a4c939f5c0c14f1659ce8c8bed2e97e60a3649f2eea0c8263f845802ad72fa698807ef14a6a1813e900bf1d113b514dbdc05ea1309163d6a40de8391f2e98b7bbfbcbea", 0xd8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000cfe000-0x18)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000071000-0x4)=0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000c3d000)={0x0, 0x7530}, 0xffffffffffffff8b) bind$inet(r0, &(0x7f00000f5000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f000019d000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0}) sendmmsg$inet_sctp(r0, &(0x7f00002f0000)=[{&(0x7f00003df000-0x10)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000085a000)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x20008843) sendmsg$inet_sctp(r0, &(0x7f00004f8000)={&(0x7f0000910000-0x1c)=@in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfea2, &(0x7f000038a000-0xa0)=[{&(0x7f00001f8000-0xf8)="376dbee215e454d641921e5b1b60edd50c6bed39fe3e8c1d37c0e7b611bcd1b9e092395f35f8b88a1bfedb623939c59741ebbd51a244fe8fc98e5f1db48014c7ff499fae8ac32084a13a082b88f164f98cc6054d1bcb983480c7f3bc149034ea3d9daa4eba6e7b3e7a5bc08cac4a087e35b5da8eb69b5a914e41a2489d9f310b3a86732067c2a48bb28b578511f8e08af026f9392b0d9564f0eae1aa94e0d17561702d5dbaf6af8d7feebcd5493e8961dd935365ea81aadaeb144a2fc33eb4729a37ba474731a5afd451580fe64423ce5474c5a8042707469d5ff35f683e710cb00255ff42b8acfcf1b387f779cbc754859c76d9991d1c3c", 0x334}], 0x1, 0x0, 0x0, 0x0}, 0x40850) r1 = getpgid(0xffffffffffffffff) ptrace(0x19, r1) ptrace$getenv(0x4201, r1, 0x10001, &(0x7f000003b000)=0x0) 2018/01/12 15:09:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f000030d000)=0x0, &(0x7f00002f1000)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000c44000-0xb)='/dev/audio\x00', 0xc0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000ec1000-0x8c)={0x401, 0x5, 0x3, 'queue1\x00', 0x5b803107, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x6, 0x0, &(0x7f000071e000)=""/0, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f000072d000)=[], 0x0) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00009b1000-0x4)=0x0, &(0x7f0000f59000)=0x3) 2018/01/12 15:09:13 executing program 6: mmap(&(0x7f0000000000/0xcf9000)=nil, 0xcf9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20020000) mkdir(&(0x7f0000ccd000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000019000-0x6)='Qamfs\x00', 0x105400, &(0x7f000000a000)="") poll(&(0x7f0000cf4000)=[], 0x0, 0x7f) rename(&(0x7f0000cf7000)='./file0\x00', &(0x7f0000b76000)='./file1\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4b, &(0x7f0000000000)="", 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000037e000)='/selinux/member\x00', 0x2, 0x0) mknodat(r1, &(0x7f0000beb000)='./file1\x00', 0xf185, 0x4) 2018/01/12 15:09:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:13 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000c99000)='/selinux/status\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000bed000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00005ce000-0x10)=@generic="2e2e000000e26366e9760808c56145af") 2018/01/12 15:09:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000a92000)="", 0x42ca, 0x800000020000000, &(0x7f0000bb9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000a73000)={0x0, 0x852b, 0xfffd, 0x0, 0x0}, 0x14) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00009e2000-0x4)=0xfffffffffffffffb, 0x4) sendmmsg(r0, &(0x7f0000a81000)=[{{&(0x7f00002c5000)=@in={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00006e7000-0x90)=[{&(0x7f0000563000)="e8", 0x1}], 0x1, &(0x7f000048b000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000f69000)='/dev/usbmon#\x00', 0x1, 0x20502) 2018/01/12 15:09:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000a36000)=""/83, &(0x7f000018b000-0x4)=0x53) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000e7c000)=0x0, &(0x7f000027b000)=0x8) 2018/01/12 15:09:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000c5000)='/proc/self/net/pfkey\x00', 0x22a40, 0x0) bind$ax25(r0, &(0x7f00007a5000)={0x3, {"c636d3554041ed"}, 0x1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e13000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4f000-0x4)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000f4b000)=0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000562000-0xc)={0x6, 0x2, 0x7, 0x6e5f1ae2, 0xedea, 0x4}) sched_getscheduler(r2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000d29000-0x30)={0x2, 0x8, 0x0, 0x0, 0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$inet(r1, &(0x7f0000607000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f000087a000)='{', 0x1, 0x4008000, &(0x7f0000de6000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000318000-0x1000)="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", 0x3e8, 0x100000000000, &(0x7f0000b15000)={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00003e5000)='/dev/audio#\x00', 0x40, 0x20000) ioctl$KVM_RUN(r0, 0xae80, 0x0) migrate_pages(0x0, 0x3, &(0x7f000088e000-0x8)=0x6, &(0x7f00008a8000-0x8)=0x101) 2018/01/12 15:09:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00005b1000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) timer_getoverrun(0x0) getresgid(&(0x7f0000bce000-0x4)=0x0, &(0x7f0000e42000-0x4)=0x0, &(0x7f0000dbf000)=0x0) lstat(&(0x7f0000dfb000)='./file0\x00', &(0x7f0000dd1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00006ad000)='./file0\x00', &(0x7f0000730000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000a16000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00001a7000)={0x0, 0x0, 0x0}, &(0x7f0000842000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00004e9000)={0x0, 0x0, 0x0}, &(0x7f0000947000)=0xc) stat(&(0x7f0000fb2000)='./file0\x00', &(0x7f0000e15000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000b87000)='./file0\x00', &(0x7f0000c52000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000b5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000c19000)=[r0, r1, r2, r3, r4, r5, r6, r7, r8]) 2018/01/12 15:09:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xc000800000000005, 0x10000, 0x5}, 0x10) r0 = socket(0x11, 0x803, 0x0) bind$packet(r0, &(0x7f000098f000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="06004ee72211", [0x0, 0x0]}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000922000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000ab0000-0xf7)="b8", 0x1, 0x0, &(0x7f0000abf000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x8010000000000084) sendto$inet6(r2, &(0x7f00000ac000-0x2)="d4", 0x1, 0x0, &(0x7f0000c51000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000380000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/01/12 15:09:13 executing program 4: r0 = msgget(0x3, 0x220) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1, "3623e696abee9b2244c673d36c576cf31b3f58745d89b991f801e3611c395240135e523b38dc27c98c95682835771dcae3ba730d890c77d321c8adac7ef8a867b74f85d1acec67da6e1c46ba6f1c6b9e7ea1723b7a2e410bf0a5cb3872be9064b5b855c2b31f54ddc2de1a579052eee6030c0aa9796bbf6bcbafe5748ae2f1a6fc0a2549318815e0162599c1ca3ff03948a2385aa748b47ea4615af305949655e6ea647fb2a1592541d1d6d437a1da32b844df44e0e7748f5b8aedc2445a85abf86f39"}, 0xcb, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x4) 2018/01/12 15:09:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000470000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000b82000)='devpts\x00', 0x0, &(0x7f000000a000)="") r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x88040, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f000051c000)=@req={0x9, 0x3, 0xffffffffffffc04b, 0x200}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000b9c000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000562000-0x104)={0x0, 0xfc, "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"}, &(0x7f00000e8000)=0x104) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000d70000)={r2, 0xc0, 0x5, [0x10001, 0x7, 0x40, 0x200, 0x1f]}, 0x12) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)="") [ 74.635632] kauditd_printk_skb: 225 callbacks suppressed [ 74.635641] audit: type=1326 audit(1515769753.516:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.679321] audit: type=1326 audit(1515769753.516:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.706685] audit: type=1326 audit(1515769753.516:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=225 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.732058] audit: type=1326 audit(1515769753.516:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.756598] audit: type=1326 audit(1515769753.516:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=120 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.781125] audit: type=1326 audit(1515769753.523:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.805631] audit: type=1326 audit(1515769753.523:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=6 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.830568] audit: type=1326 audit(1515769753.523:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 [ 74.855257] audit: type=1326 audit(1515769753.523:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=4 compat=0 ip=0x452ac9 code=0x7ffc0000 2018/01/12 15:09:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000254000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="66880367bd1a", [], {{0x40086dd, @ipv6={0x0, 0x6, "a228af", 0x8, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {[], @udp={0x0, 0x0, 0x8, 0x0, ""}}}}}}, 0x0) 2018/01/12 15:09:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f000024d000-0x5e)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x8, @x25={0x5347d1768d122c42, 0x42, 0x3, "00050ff8f8"}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000fd3000)='/dev/input/mouse#\x00', 0x69, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000dd8000-0x10)={0x0, 0x1c, &(0x7f00001bd000-0x1c)=[@in6={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xb80}]}, &(0x7f0000dc8000)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000950000)={r1, 0xffff}, 0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000029f000-0x4)=0x0) 2018/01/12 15:09:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x123319f3cd85f1e3, &(0x7f0000286000)={0x0, 0x0}) syz_open_dev$tun(&(0x7f0000f4b000-0xd)='/dev/net/tun\x00', 0x0, 0x400) 2018/01/12 15:09:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00005d3000-0xe)='/selinux/user\x00', 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000d3e000)={0x9ba, 0x6, 0x9, 0x2, 0x5, 0xff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x400000484, &(0x7f0000137000)="0600000000000000ed18b86c09bb2e83c68174708d6db96078032ea94addbcc1de84de4442ed43ffb02bf212", 0x2c) 2018/01/12 15:09:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x202000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000b5000)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00003f2000-0x8)='./file0\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x100000000000c8, &(0x7f00005b9000-0x4)=0x0, 0x4) dup2(r1, r2) 2018/01/12 15:09:13 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) shmat(r0, &(0x7f000025f000/0x1000)=nil, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000797000-0x28)={&(0x7f000063e000/0x4000)=nil, 0xcabc, 0x5, 0x8, &(0x7f0000560000/0x1000)=nil, 0x5}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000002000-0x4)=0x6, 0x4) shmctl$IPC_RMID(r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x2, 0x8, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x401, 0xb8, 0x7, 0x40, 0x8, 0x1, 0xbd7b, 0xc0000, 0x0, 0x8, 0x5, 0x5, 0x6, 0x2]}, &(0x7f0000003000-0x4)=0x108) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001000-0x108)={r2, @in6={{0xa, 0x2, 0xfffffffffffffff9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x63, 0xba7, 0xffff, 0x200, 0x4, 0x3a, 0x0, 0x6, 0xfff, 0x3, 0x2, 0x3, 0x2, 0x3, 0x53]}, &(0x7f0000002000)=0x108) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001000-0x3c)=""/60) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r3 = gettid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000004000)={0x0, 0x3}, &(0x7f0000005000-0x4)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001000-0x8)={r4, 0xff}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000004000-0x8)='./file0\x00', 0xa0401, 0x47) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000+0xeb8)='./file0\x00', &(0x7f0000002000+0xe28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002000)={r3, r5, r6}, 0xc) 2018/01/12 15:09:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000281000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00008c6000-0x10)={0x0, 0x30, &(0x7f0000e3d000-0x30)=[@in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00002bf000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000-0x8c)={r1, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000358000)={0x0, 0xffffffffffffffff, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000ff9000)=0x1c, 0x80004) setsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000b40000)=0x1, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000c9b000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad40", 0x18) r4 = accept$alg(r3, 0x0, 0x0) sendto(r4, &(0x7f0000199000)="9cef382c0333f7d319be1ac9021a3dfe", 0x10, 0x0, &(0x7f0000aee000-0x58)=@sco={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8) recvfrom(r4, &(0x7f00009e9000)=""/225, 0xe1, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00005c4000-0xa)='/dev/cuse\x00', 0x20002, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f000054d000-0x4)=0x1) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f000022c000)={0x2000000000000000, 0xa, 0x493f, 0x1, "3b4b49efdd4ac3fa20e587f992cf7a3cde26b7aea42316a8d46127ae10f33bb7"}) [ 74.879615] audit: type=1326 audit(1515769753.523:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11352 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 2018/01/12 15:09:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000670000)='/dev/sequencer2\x00', 0x2081, 0x0) connect$ax25(r0, &(0x7f0000006000-0x5)={0x3, {"816e5a2000f268"}, 0x3}, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0xd2, &(0x7f0000974000)="", 0x0) accept$packet(r0, &(0x7f0000785000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000f97000-0x4)=0x14) connect$packet(r0, &(0x7f0000752000)={0x11, 0xfc, r2, 0x1, 0x100000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) 2018/01/12 15:09:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = msgget$private(0x0, 0x218) msgrcv(r1, &(0x7f0000485000-0x1008)={0x0, ""/4096}, 0x1008, 0x2, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b16000)=0x3, 0x4) connect$inet6(r0, &(0x7f000030c000)={0xa, 0x0, 0x803, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000bd3000)='/dev/vcs\x00', 0x0, 0x0) sendto$llc(r2, &(0x7f000021d000)="61948d474b15eeb371eec29331b80756c2eba8f431e848f2fa903931f53f6e8887908f2354b616d928aafd03e37e", 0x2e, 0x0, &(0x7f0000422000)={0x1a, 0xfd, 0x6, 0x8, 0x80000001, 0xfffffffffffffffe, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) 2018/01/12 15:09:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000e88000)={0x0, ""/170}, 0xb2, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f0000173000-0x38)={&(0x7f0000b3b000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b36000)=""/0, 0x0, 0x0}, 0x0) r4 = dup2(r2, r3) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000be8000)=""/29) r5 = gettid() tkill(r5, 0x16) msgctl$IPC_RMID(r0, 0x0) 2018/01/12 15:09:13 executing program 3: mmap(&(0x7f0000000000/0xa12000)=nil, 0xa12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) mmap(&(0x7f0000a12000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet(r0, &(0x7f0000481000-0x10)={0x0, 0xffffffffffffffff, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a13000-0x4)=0x10, 0x800) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x60, &(0x7f0000a0c000)={{{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x9, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0}, 0x0, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) 2018/01/12 15:09:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000040b000-0xb)='/dev/loop#\x00', 0x0, 0x1) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00007cb000-0x4)=0x9) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/01/12 15:09:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x4) 2018/01/12 15:09:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 2: io_setup(0x1, &(0x7f0000a08000-0x8)=0x0) io_destroy(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) name_to_handle_at(r0, &(0x7f0000883000)='./file0\x00', &(0x7f0000863000-0x31)={0x31, 0x2, "4cd52a92c1db5b584a010a74f1120ae1bd28fa4e116b22394d9050c7a2a672e02e78ef5a201aeb6715"}, &(0x7f00002be000)=0x0, 0x1000) socket$inet(0x2, 0x80a, 0xfffffffffffffff8) r1 = syz_open_procfs(0x0, &(0x7f0000ab5000)='net/ptype\x00') r2 = gettid() ptrace$setregs(0xf, r2, 0x7ff, &(0x7f0000212000-0x12)="cda1176da0b6eab12bc711bff57a7dd4c104") sendmsg$nl_crypto(r0, &(0x7f00000a3000-0x38)={&(0x7f0000e03000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00002a4000-0x10)={&(0x7f0000395000-0x10)=@delrng={0x10, 0x14, 0x400, 0x4, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendfile(r1, r1, &(0x7f00003c9000-0x8)=0x1, 0x400000ff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00001f7000-0x1008)={0x0, 0x1000, "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"}, &(0x7f0000fd9000-0x4)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000b64000)={0x1, 0x8001, 0x4, 0x400, r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00007bd000)={0x1ff, 0x8, 0x9, 0x9, &(0x7f0000114000)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000fc6000-0xe)='/dev/admmidi#\x00', 0x8, 0x6000) syz_open_pts(r0, 0x40) r1 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) r2 = creat(&(0x7f0000e0a000)='./file0\x00', 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) 2018/01/12 15:09:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000863000)={0xfffffffffffffffd, 0xfffffffffffffffd}) r0 = memfd_create(&(0x7f0000ef1000)='ppp1\'\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000ad9000)={0x426c15, {0x400003ffffffc}, 0x0, 0x0}, &(0x7f0000b4b000-0x20)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000237000)={0x0}) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f000068a000-0x4c8)={{0x8001, 0x3, 0x5, 0x8, "b94eda56ca2f92cdb5f94eb22b05a510f5b53629aaa7d6a74843b15fb4582570d7dc4670d81841566e5f4e5c", 0x7}, 0x1f, [0x5, 0x6, 0xff, 0x27b0, 0xb8, 0x0, 0x51, 0xfff, 0x8, 0x4, 0x8, 0xe000000000000000, 0x200, 0x1, 0xfffffffffffffeff, 0x100, 0x5, 0x31, 0x1ff, 0x0, 0x200, 0xfff, 0xffffffff00000000, 0xa9d, 0x9b1d, 0x2, 0x1ff, 0x5, 0xff, 0x6, 0x0, 0xfff, 0x2, 0x8, 0x0, 0x9, 0x56ed120e, 0x1, 0x8000, 0x1, 0x7f, 0x0, 0x3f, 0x7, 0x40e4, 0xb0, 0x1, 0x9, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x1ff, 0x0, 0xffff, 0x40000, 0x9, 0x4, 0x7a7, 0x1, 0x101, 0x80000001, 0xfffffffffffffff9, 0x8, 0x2, 0x68, 0x0, 0x80000000, 0x1, 0xfffffffffffffffe, 0x10001, 0x16e, 0x1, 0xfffffffffffffffc, 0x325, 0x8, 0x0, 0x6, 0x740, 0x6, 0x8, 0x80000001, 0x8, 0x0, 0x1, 0x8000, 0x6, 0x9, 0x9, 0x3, 0x828, 0x3, 0x0, 0x81, 0x101, 0x6, 0x9, 0xffffffff, 0x733, 0x8, 0x6, 0x8, 0x8, 0x4, 0x1f, 0x0, 0x6, 0x6f, 0x101, 0x7, 0x783, 0x8, 0x8, 0x1, 0x80000000, 0x81, 0x303, 0x4, 0x7, 0x3, 0x9, 0x0, 0x8f, 0xfffffffffffffffa, 0x5, 0x2, 0x3], {r1, r2+30000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$evdev(&(0x7f0000002000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/01/12 15:09:13 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000008000-0x10)="2e8f73797374656d000000006e6700") openat$audio(0xffffffffffffff9c, &(0x7f0000007000-0xb)='/dev/audio\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000005000-0x10)={0x0, 0x20000000, 0x400, 0x8a5, 0x2, 0xfffffffffffffffd, 0x9, 0x2, 0x8, 0xc0}, 0x10) 2018/01/12 15:09:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000865000-0xa)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000472000-0x4)=0xc) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x3, 0x0) 2018/01/12 15:09:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:13 executing program 6: mmap(&(0x7f0000000000/0xfcf000)=nil, 0xfcf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f000014a000-0x1c)={0x5, 0x101, 0x4000000000080, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000b9c000-0x1d)={r0, &(0x7f0000fcd000)="", &(0x7f0000ca0000)="", 0x0}, 0xffffffffffffff79) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000341000)={@random="cd4808e0ac55", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {{0x86dd, @ipv6={0x0, 0x6, "f07007", 0x18, 0x3c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000579000)={0xffffffffffffffff}) connect$ipx(r0, &(0x7f00001ca000)={0x4, 0x1, 0xfa0a, "cd8609c2a8b4", 0x8, 0x0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000038e000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents64(r1, &(0x7f00006a0000)=""/4096, 0x1000) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009fb000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00002ac000-0x10)="ad56b60400003cb989299592ea54c7be", 0x7) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000c9a000-0xe)='/selinux/load\x00', 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000cec000-0x4)=0x80000001, 0x4) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000cf4000)=[{0x0, 0x0, &(0x7f0000258000)=[{&(0x7f0000873000-0x5e)='?', 0x1}], 0x1, &(0x7f00000c1000-0x18)=[], 0x0, 0x0}], 0x1, 0x0) 2018/01/12 15:09:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000792000)={0x0, 0x1c, &(0x7f00004fa000)=[@in6={0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}]}, &(0x7f0000a73000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000150000-0x10)={0xff, 0x8200, 0x1ff, 0x3ff, r3}, &(0x7f00003b5000-0x4)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000394000)='/dev/snd/controlC#\x00', 0x0, 0x101002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000785000)={0x2, 0x0, 0x0, 0x0, "6a49e990f1053030af3a2a74bafc25acce0b1898ce832fe7f03e46db5d5df9fdb4931ce43b50d84d757399c6", 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000dcb000-0x110)={{0x2, 0x0, 0x0, 0x0, "164da7949bacf54e1228341e54bf71f98af276316f65e764ba689ca5540cc922b0fe967baf5ede162bce4177", 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6be3d6c698b85a2c30b185d90d4829967a01ff20463d62ddc7741e8b34eb3919b88eb5ad53414d31b4f7db24a751bbe2242527c266d9630e29f6e84e9317bd8e", &(0x7f0000000000)='/dev/snd/controlC#\x00', 0x13, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000036000)='\x00', 0x3) r1 = syz_open_dev$sndseq(&(0x7f000045b000)='/dev/snd/seq\x00', 0x0, 0x1fffd) dup2(r1, r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000115000-0x4)=0xf64, 0x4) write$sndseq(r0, &(0x7f0000040000)=[{0x5, 0x0, 0x0, 0xfffffffffffffffa, @tick=0x438, {0x80000001, 0x0}, {0x3, 0x800000000000}, @control={0x0, 0x0, 0x0}}], 0x30) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000824000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000049c000-0x4)=0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000081b000)=@common=""/16, 0x10) 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00005a9000)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00003a1000)="fa", 0x1, 0x0) r1 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000753000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f29000-0x1000)="b33ab76079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000e5e000)={r0, r1, r0}, &(0x7f0000b1d000-0x30)=""/1, 0x1, &(0x7f0000550000)={&(0x7f0000aa3000)={'tgr160-generic\x00'}, &(0x7f000084d000)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000810000-0x11)='/selinux/context\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000dbf000)=0x6, 0x4) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000e4f000-0x4)=0x2, 0x4) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto(r0, &(0x7f00009f0000)="", 0x0, 0x0, &(0x7f00008ba000-0x80)=@generic={0xa, "76fbd55a2db46c995f779cdc5d1f2125ceea110e7cf7dc63b092b3f5bad7df4ce950fdbf5170e323ee99f2b0f753ff41e0b82bd50007f88a53310e0a628e524e5ff691b19cb228d800bc9e8e641dfc433ecd1cec3a8974992d8b9258b7eb6dd299346d3aa698e7d468057ffe4ddef5dbcd96b8901f99ac74455b42734ba4"}, 0x80) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000eba000-0x9)='/dev/rtc\x00', 0x10000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f000077e000-0x28)={@common=""/16, @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f00005ef000)={0xfffffffffffffffa, @generic="b5f232a406fb54c270b2e3e62f6f73da"}}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000e11000-0x4)=0x20, 0x4) 2018/01/12 15:09:14 executing program 1: clone(0x0, &(0x7f0000c49000)="", &(0x7f0000fda000)=0x0, &(0x7f00008ff000)=0x0, &(0x7f00004ac000-0x1000)="") semtimedop(0x0, &(0x7f0000d3f000)=[], 0x0, &(0x7f0000305000)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1ffc000000000000}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000a1b000-0x10)={r1, 0x312a, 0x7f, 0x3}, &(0x7f0000001000-0x4)=0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) 2018/01/12 15:09:14 executing program 6: r0 = semget$private(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$GETVAL(r0, 0x7, 0xc, &(0x7f0000000000)=""/77) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000024f000)='/dev/ppp\x00', 0x401, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f000059b000)=0x2, 0x4) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000e8000)={0x9, &(0x7f0000479000-0x48)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000a1e000-0x40)={r2, 0x9, &(0x7f0000c44000-0x24)=[0x8, 0x9, 0x7, 0x1, 0x9, 0x7, 0x100, 0x0, 0x4], &(0x7f00003e2000)=[0x9, 0x400, 0xfffffffffffffff7, 0x10001], 0x40, 0x6, 0x20, &(0x7f0000a51000+0x324)=[0xa016, 0x1, 0xb26e, 0x0, 0x0, 0x8], &(0x7f0000fa1000)=[0x6], 0x0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000232000-0x70)=""/112) socketpair$inet6(0xa, 0x5, 0x20, &(0x7f000014c000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000f38000-0x10)={0x0, 0x0}) io_setup(0x6e2c, &(0x7f0000a52000-0x8)=0x0) io_destroy(r3) openat$cuse(0xffffffffffffff9c, &(0x7f00006fc000-0xa)='/dev/cuse\x00', 0x121000, 0x0) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005f4000)={0x26, 'skcipher\x00', 0x0, 0x88, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="e5fcb5bf91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000726000)=0x0) sched_setattr(r2, &(0x7f0000f56000-0x30)={0x30, 0x5, 0x1, 0x1, 0x800, 0xfffffffffffffffd, 0x1ff, 0x3}, 0x0) sendmsg$alg(r1, &(0x7f0000b2e000-0x38)={0x0, 0x0, &(0x7f00008e7000-0x40)=[{&(0x7f00006a3000)="1ed55c60d251b3eedbb81cd509614bcc", 0x10}], 0x1, &(0x7f0000698000-0x48)=[], 0x0, 0x0}, 0x0) readv(r1, &(0x7f0000b35000)=[{&(0x7f0000f21000-0xb2)=""/178, 0xb2}], 0x1) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00001b1000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000799000)=0x4, 0x4) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 75.194193] binder: 11458:11472 BC_FREE_BUFFER u0000000000000000 no match [ 75.195859] binder: 11465:11471 BC_INCREFS_DONE uffffffffffffffff no match 2018/01/12 15:09:14 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000922000)="", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000001000-0x8)='./file0\x00') ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000ea8000)={0x6, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknodat(r0, &(0x7f0000001000)='./file0\x00', 0x1, 0x5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000003000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)=0xb) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00002fd000)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000001000)={0x9, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffff8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lstat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 75.195868] binder: 11465:11471 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 75.195887] binder: 11465:11471 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.195901] binder: 11465:11471 got transaction to invalid handle [ 75.195910] binder: 11465:11471 transaction failed 29201/-22, size 80-80 line 2842 [ 75.259988] binder: 11458:11491 BC_FREE_BUFFER u0000000000000000 no match [ 75.285584] binder: 11485:11490 BC_INCREFS_DONE uffffffffffffffff no match 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0xa972, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000a95000)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000a93000)={{0x7, 0x4}, 'port0\x00', 0x6, 0x20000, 0xb84, 0x7, 0x0, 0x0, 0x3f, 0x0, 0x2, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f00009da000/0xa000)=nil, 0xa000, 0x1000008) getsockopt$netlink(r1, 0x10e, 0xd, &(0x7f0000a96000-0x3d)=""/0, &(0x7f0000a93000)=0x0) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x8001}) write$tun(r1, &(0x7f0000c97000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x32f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @icmp=@echo={0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, "b17908ca"}}}, 0x2a) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0xd53000)=nil, 0xd53000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d53000)='/dev/sequencer2\x00', 0x43, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000c89000-0x4)=0x3, 0x4) socket(0x0, 0x807, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000d51000)={0x0, 0x0, &(0x7f0000d51000)={&(0x7f0000d52000-0xc0)={0x2, 0x13, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17, 0x0, 0x0}, @sadb_x_sec_ctx={0xa, 0x18, 0x0, 0x0, 0x41, "810fb55badd0e15eef144e23329ad38a1cd143c20348528b54682f8afc9004029e0e49748ebdccca7b37b0b559737e719da99509d3445d8fe53c02e14f2ad9a870"}]}, 0x68}, 0x1, 0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00002c1000)="75736572aa736563757269747900", 0x2000000005) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000051000)={0x0, @in6={{0xa, 0x2, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb, 0x2000000008, 0xffff, 0xffffffffffffffc4, 0x40000200000004}, &(0x7f0000be6000)=0xffffff5f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000482000)={r1, 0xc2, "d08f33bef569b09779a3c0b1416d3b4c708bc7b90c160886812535d4af94c7afef4bbae5cebd96f55bd930d5cfde480e5902e43c00cf91a9be2db540664ea6c346f7e2d50c3ebf12a162dae21282ef29e2cafc6abc965121284f6c7304e6761b4d5666d3de2dcab9c3377eda68ccaa58522515e6a73cf1e66c4f9edf54d2ca9bff1ffd1af5e72cdc1498e26a90cffc8efb5d8f808281691e9bda4edf33f4b2833291edbef640f2d4663481ff1c9618ce25b55096c125deeb31fab7cfdedc1e6d2a27"}, &(0x7f00004b6000)=0xca) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000fd1000)=0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000c2c000-0x8)={r2, 0x2}, &(0x7f000029a000)=0x8) ptrace$setsig(0x4203, r3, 0x9, &(0x7f0000c6d000)={0x1d, 0x9, 0x100000000, 0x7fffffff}) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000023000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000e5c000)={0x1, 0x40000, [{0x400000b5, 0x0, 0x0}]}) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00005ab000-0xa)='/dev/cuse\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000e26000-0x4)=0x0) fcntl$setown(r1, 0x8, r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) bind$alg(r3, &(0x7f00005c3000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x31f, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xbeed, 0x10f, 0x0, ""}], 0xfffffffffffffe68, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f000053b000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40) ioctl(r3, 0xc0184900, &(0x7f0000002000)="") ppoll(&(0x7f0000e7d000-0x30)=[{r0, 0x1, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f000049f000)={0x0, 0x0}, &(0x7f0000040000)={0x0}, 0x8) 2018/01/12 15:09:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000025000-0xa)='./control\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000ac0000-0xa)='/dev/dsp#\x00', 0x9, 0x20100) sendmsg$kcm(r0, &(0x7f0000b21000-0x38)={&(0x7f00002ab000)=@hci={0x1f, 0x80, 0x3}, 0x6, &(0x7f00000be000-0x70)=[{&(0x7f0000671000-0x64)="96f0b352d91f342bee185111a9b670390dd8b483b47486ea3454022c7ad1f597a0553d925d880c7f5fe051cdcc0a353a74b899b1ae1ba1d7e7731f5e354006c8be413a9d45e77016a107235d85c636f1151fe67de4bf5b90c8c06ea85d07708c698fd589", 0x64}, {&(0x7f000074e000-0x19)="cbc5f469c4af875f6cff28a2430f08fe745455f4c45a916772", 0x19}, {&(0x7f00009d3000-0x98)="1701f26d7bb1e4547591a643330bdad10dfb6ef409c91679e303ad1f248a02ff4228f1b1a523275019040fda2d132e916fc2641a625e913cc6336182b23933ab6194502be7603d20b77b7d6c0fe36656bfc6d7667f95deda9c07ac91f7d701c1f72af1163d324a7b27ba4372d1dc3c9c98b8a2b4168b76ccaa1aa19cb7b42822cc975153789d299d7385dd98c657c143e6890b5c6403c5fc", 0x98}, {&(0x7f0000250000-0xf0)="187ba086c57f72348c53ead4e8e03d13f2c92ff658d24e4ef1eaa4c84d803cc2250ccfe7f4ce8bff0862c0e3576e0387ef55b13a3dd8b0767d3d0a3326e317a0c02611a32c62cc4c155fedaff460968d70ec430c17500816cc7b163d0113224501bb07ea6d4317a41ff50a93ef39a31e0ef328810a9a0379cf0db8da9d0dbb3853280f14a29bfa7e55577816d68fd07c1f4eab622d5ad75775a98d2c59aca61743f42a899f301577770d50e22c8ecd9b8e9079817b09bfa14b47ebf956b61f397532d21b3bc381c3f21dc01cd10852682115b8e35923e447471e66f05bbb880e2c1cae239878c3d58553d8e552d9cfa4", 0xf0}, {&(0x7f000029d000-0x99)="6014f03d308c47efadd3ec7ecbeabcae6092fef6c19dedd2330cb6d74fb79f4e2dc411c15d1669d54a12ee0baca0c4393dfc9b5de62e0515d0b0e36a6892610642f095f91613bc76a32f7607a7c3e4f348e98456f18de79a6901d514293d1dfe5864ec6a9d7f0c7c6d15ec513d10d82286438b8415c7ec1cb5f92d74da651fae49df62602fa7d8d7aababf15168606d1d1f58feef335bf5c69", 0x99}, {&(0x7f00004d1000-0x71)="a90b87e7e52c0273f64aa39438197156961f87ded5168c54fbefb51f41697ede94f56f09df7fd6da03fc6433a6916beff6bba3f5c1d9923d8ac1fa0a832e410f448c973cd5216e3bf6935567643da994ff470c97602375ca88cfb7a09cdf133dfbd654124c863a680513024f7126cdc027", 0x71}, {&(0x7f0000ece000)="f857d2132aab44a2513c443e6c9bfd6d2fe4a935cdad0141cedd817840387ca1893ab286af86c34f55dbc4b4c9467887cbbdc9f8d2af02b9e5d9a36c8e097ef4ab82ce65735c91b21f48f70de648e47f771a8a827d759aefbd9033e4b7d73f856049905fdf1b4796e22770782e2f4d634729dedb05fd5ccf34abad514222438616dc5e99107050545eb6474e3299211919d6fd297212b6c31b3df620e7d59420630984ba8fd74431c25faceb03f4", 0xae}], 0x7, &(0x7f0000ede000-0x90)=[{0x90, 0x11f, 0x1, "210a575c279b06f2708ab1ae9c76a0f8c214231a97d0dc0ac2e2efb5ecf7fd0c72b2a313c76a046c56bcb6248c7c21719f12acca257e4452734e61622eb3c835a0a292c9f2a2d680c945e520a10f6418904746fdc67f65d2ff365c2db8cf76814ccb4a85905b64b324c896a629d75c1249dfa35daa5cc718b04a07a12cca"}], 0x90, 0x10}, 0x4000000) mkdirat(0xffffffffffffffff, &(0x7f0000b71000+0xdeb)='./control\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f90000)='/dev/vcsa#\x00', 0x1, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000f86000-0x3c)=[@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x1000}], 0x3c) faccessat(r0, &(0x7f00009d0000-0x8)='./file0\x00', 0x0, 0x100) r2 = openat(0xffffffffffffffff, &(0x7f000001b000-0x8)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000ca7000+0x3d1)=""/128) mkdirat(r2, &(0x7f0000017000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00007d1000)=0x6, 0x4) unlinkat(0xffffffffffffffff, &(0x7f0000a63000)='./file0/file0\x00', 0x200) [ 75.285595] binder: 11485:11490 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 75.285615] binder: 11485:11490 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.285630] binder: 11485:11490 got transaction to invalid handle [ 75.285640] binder: 11485:11490 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 7: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000464000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x5c, 0x6, 0x27cff163, 0x0, 0xff, 0x3e68, 0x4000, 0x7, 0xa44, 0x6, 0x8, 0x3f77, 0x0, 0x9, 0x370791cd, 0x8, 0x9, 0x100000005, 0x5}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000000000)=@known="73656375726974792e73656c696e757800c1", &(0x7f0000001000)=""/118, 0x76) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001000-0x44)={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="e24a2f600c99fbdf0dc57fe818049d0f"}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000d3c000-0x50)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) setsockopt(r1, 0x80000001, 0x3, &(0x7f0000001000-0xc3)="3c5e2ebd92686a4bbe44e4eddbb5484810f5da5629dc4c9f8b4bda4fe3557b209fb3c4280b9603ca64ce17e3f8a0f8045a4efe90936d916c6f1f6551779ff98a69dccfc5f9b1396fca91432db79ecab8e4eb4b78f4f8f3fbb0e847a56dddb7fb406bc4200b74253e4d0c6b7c8a0f720ad032997e5d53e64a10b536b3e0a419b75aa5975f5bff945cf69c7736ce28767d3810a0f4368ca060407be8cd22cf3315ad80c9d116948fa681fa11e38a3903f2c28492eb6dcac912adc36e73e1b4554963da99", 0xc3) [ 75.451642] binder: 11513:11518 BC_INCREFS_DONE uffffffffffffffff no match [ 75.460619] binder: 11513:11518 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 75.483112] binder: 11513:11518 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.490337] binder: 11513:11518 got transaction to invalid handle [ 75.496656] binder: 11513:11518 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 7: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="24b38b20d0ef3254115223ef6cf758327575c041e002c7089496079b1b45009349041ec9724fdec73fab9b06e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c000000000000000064adab9fef855d72abb637d460fc6fb5a9eec5535b309c9d0000000000000c5234e4235a33d57e456460104ca0def02b0e8365cd43d106c41d009975ec4d6557bf8917cad630598f6e35fd177001a878a5bb64ffffffed00004c", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x0, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00005ed000-0xd)='/dev/dmmidi#\x00', 0x100000000, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000001000+0xfde)=0x0, 0x4) 2018/01/12 15:09:14 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r0 = msgget$private(0x0, 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2, "9adb88d8359d89a834544dd1c003d651773747de941806f92443c7b386927136a01b6904608470ebc70da37bbc9e9129c91cc433d3c09157ff946e15660dc0efe8000e4717c0bf5ca4aa8af81cf7e200a2d2b8723053f29d2371714a6f1eb3ae42805e83718197886560c4802eccd34f0585bf845fe3996f"}, 0x80, 0x800) 2018/01/12 15:09:14 executing program 3: msgget(0x1, 0x102) mmap(&(0x7f0000000000/0xa60000)=nil, 0xa60000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00003a4000)='/selinux/context\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f00000d5000-0x1000)="d8d23e9c50d4c273a1e28b8455a19dd01e700bcde71d5348a2377018bcff3355706f654c8c4a840bd59b7494bc4b46b938e1206ee32e6dd7e8ff78a4e45bd30a44c328bad3087ae791aac71bb75fee48af06ebbd851e0023f33591ccb1e1781127be541549031239c27d2de13909b7c59ad4482435e1999123bf06bfb2de9926129bcb743ed6c4f26a3c0c7d9bf4c609d7b430872f255babc0bc29ba1bf3602cc9ea7b8371e7589e6dc3978edb94d0759db14ab11b066a4ce4223c626c8e1db66c806628e0988ba4bf4791011515b6fbe0f3ee5b0efc17bf63957c22b676e30d320b062fdb12e794d4ec524e9c2a104110ab724927759679e3294bc94de181cb1e7e31326a547d3fb4871489a49e233e055648d98b0e65f55859b9cb0ab6eb2e2ffe8c5363ca45c4c1d067bd7b04291231766cc11bc0f6315c17beb71bd228a552485270c241e5b5261b999abdfd32d033b7d6df7eee45700879805c3b1a6872023fde30ef477dad0ef72aa4e45157b90198e580ec0bf94b4e2891a0504887d8cff23170c03bd4091bd46ea23653d65c3b35b562451be087d559f1f874990038bc7ac7f7f13391b26876e1b6363d65003f76b4a101b53acbeccf25c642a4c97017307a3d54f2863392c942dd72d1a6aefeb27d2ca7466a8adb1b744ad18c9703c72a797fb772b03c88fa3ca5fa13882decd568b08ca22b98dfdc8e7e19fdc4721b9bfab78c7abb840e8ce8e08f313bd78502bd7881cbd45835b82ffa5bf54a4a7f5f237513c9f9ba3aff6ea773656147ad9b8a496033ea68d198e4c611f41c02d478e4fc7ff2379174a770f4b7198c337af30086a50ae88681cb3fc1a471800ba2725327b44062e75394fdd5fdd9eb87e20e0cc54d429020e57e10e6a417a7c82867e471cb7116cee6c2bc4dec9702bfbaf060149e2d13bc09947952fe095d1b2063f0896abf0372319c74a95763e1af3fa8384c15f25685e7f9439297ae4e8cbf938bfda414effd491ab05ecff96964456054b01fed84aaf29989f5bc0cf7b949c927bc036c39d5c7e799103e97966eb7f7b1a8a5131e70f8b2b457995b3f52176859da97e440985c776a6913e9736223654d16bef6c69fa74bee546eade7a758eb2a9e110c7094a0c7ba451012f12a3d6ebb31722b895c50b622251e57739352b3ca655b48c7be5524e680f021362dae46c10b71156c1abbbf70bed639e4abb2ac266ada22499d0d9655e45fc8b08661ea4bdf351936bb400d5f078be8071a856f62708f930751f14d3c8cebcd2ad93e95280032c1a272e6a47ad820143d55080c60235583e23ad7a32f365031d991d2f6436f77b0300bebb2f9b0c4c0d5e4ee1dd82794939f647c129e27e4ef685024a41378089e603d25daba01a757d2395676d014ebf3f7a07f603cbf49926832efff2b6cd7e3f30e2eb9df0da93ed052e97feea3db36c586e6da68eb95fe5b7fc8cc095b8fd2b02c68823dad0edd5a8b929ea3a109442a5969ea286026155be65ad618d2e47c974bb015118cd1a715b854b7ee73a4226711568c5c1d39a7846069bb63560787e1a79ae4a3007eb59451c8a9fe4d852c9a7aa7a3a000f011106aae7025a735af7b7f563d91b1daa9122fe685605ea92ed470baafb4d36ded2fb4b610b8c2a37afcd9e9d5134d8007cfff512291a7f269521719579832f2ac48b8480892062e3e0964051764d3a8d13d7c03261df8afda97839fe987f689af47b8f3fbe3266a24b385e38df9423f8bb791b70915dee91f6c4600e227a798a9168c2ab78b6e41ffb00034f8b33ac9a6ae8896e088962cda5625aba36237708bee0ffa21cc049532bbad7f296c0099e48b1a1254c9ae6f7fcff94719e00da778419febe64ec28f8dee1cf2f2dfe56c1dcfa4af81921b3e1d515e3249264f236715ccaf065f9386c29260c30be4f67879fa9cc8c295fb3b481f3d1e054eb6eaf117b8b716bfbc434ccb42c595f80fadd8b86956d80e37b3a5431c461082a1c3cbd4509ea2b6d289328b2527ddd4d32ae08081688075140a6b3851fdd056046fb6347e45122e02bd5f840ed78a166f6bd758fb646f736d2878db17fa5bfbc49c58589e664e065211e695d791fff113df90c9cd27556b73b97276a4d21f1ae40f6964f626e009479f8b9153eb7bbb47bcd5ff1f998adbe1f2243988a3632f046ca237807fda4f00465ce642d7a45326f7466fdd2dd3496097349638bf1e5050f00234afbe25ccd24ccfbcf4d3011a886479b29716bbfa3ab5862d6d7d2eb22878d550bea3dbed6aff312c80171257cf8ef3baff4b9ea93bca4c48793b2cf67af5d3f8c368d11d25cdeb7588bf5bb25c93447ca9575ab7c8016ea5342ceef61e2508be133f6faaf2b34af1f331579c5448d88428078d155bf5f144e2b284fa0e7aaf40e93ccbd77d9bec12d336a0d1d5b90308fd27445fb32e58d92bb1778a06807c41066b8a16a81da4f731548b0cd66eae883e23c6adaf81e6574f8745d25e000e4580dde0180eedb54b607ae66c9aecdf68b518b888fcb1f2a3abaa84adadf4058d48282c91091ffc883f9f0837d7d6a91e3aa79dd2ffdadde0862b5f9bddd53ffe63d811f9b4844bb97ac5b96090dca893ecb8d404b5f1b916bdd6fba9b3327a06dc4fa1293c3a6686626631697bcf265ee79e2c711a455657d723794ac85b7c03b52018a23e6d85f9c8a3a72c905e80ed0a1732808da49ce5bca1a06959d4d5e46790a51c4756f08a98260cd4633bf4ad6e94d18ae81004a8243d57a7c0bb5ea5342e67219c1d875207ed967b7287744c08acd2c712c6bb2931d88457bbc7d1bbbf13e701a300fa9a9fc1a98737df39e598df7ac1c94e60c03d42d72dd0a142ff27e0da9937e20c0b7e2c5c19fd3f8190ad0053f4237926074830d1eadb51215daec846ba465b36007a35c0f318844d01f2b79b99b982fb13829a9bccd32f2e488589adf0e4e56fb571851d727a6e9f0d26b84484b226fbf08c9adf9e70f9409ebacdc21ca341830c013891436588319a9f672a831c6073ee2ac69535d51e06a7ddc1ed2cb7762b982e7b77a0420ecb5a31886a783a7304beb9e6f4f81d929330ac30e405cc5d6190b8bebb28cdd3876dfa238be0d2cd845d08c6d9344c388cb35149813c8a1a3c84c036942735b3765df1d2d8a3ebe866018d33e31171457f38b4dac9f795fd3b43e98d8be0ebff437b121acbb00212a62ec68eb7c7ac409d4c2407896d74144054f295df2b76a8266a07b4f6358e2827eebd03276a93ac7f6bcd79d8d0900f8cf93de902a6a4df591f84f228fae99f3562b2f2bfc77394c5546d7dce44b65e792d680ea7723a82b86c6b4c375d71cb3cbf3cb7577b7389b31fea06d1537168715b6a72067a8a4f62f6b67255bfce96e42eb786e53e386b1679c2ccf834a318e8b38e32fd6c0b7f3d414e7a94ec069557b2c38e165475810c2e3342811efd852c7e84734784d4c5257fe980349af686731e67b4676f5a47da63bc9c4cc71a3853e6c439305404729673527dba9b81e07213a83a815c82b2b72b7e0975161071e22fa43560736ff133894fe65a579b31e3f7e489f6e5b5c0e4ab0bb8361206f29c3e55d2621b03a1ed0ce0f692727d79bd6492493c9fe7d44e5a996fd59353167b2edb547e99f108f888179f40ea974b38bdd1c141bd6d759b19336cf4ccfbe339d5235b79f7a6ad795e33e73e9792171eb770403c77137c82df4d46e66e407dd7bbec98d054bbf41960203efbf4cc976fba8c3b5de2ccacac10befd2c9c1b04975f647779fec2856c09315e65b2b69e2c6b4e2affd19c39c7c2cbfc6a78d2764ac937e10090c3148e32e777c63445f875b9186411b77d1563e04cac9cd8dc7a927556f8f7cdf88ce27acae72068288e267eac596f06730b19743540aa7112ad78a08f1fdac36a4d0ce8b3e982af89142f9c15982d7e050221dfba34eb27b4fdc29cb6a0b1c3b83c2ddece979909df8a50a5052e07af5390543f5562321c8dbafe7d9a267172535d323f2c7112c17cba170862bf65efde7040ad62e197d6e8d28f214b5da22cbdb1f1ad33fe1cf6dea1120064db23253744f99e65bc54b3acd26c114d4f6cb22039e78993447c7497676c94be130264013a5fe7daf80f8b035991aca48ee202c125cb3103e6f8163b51664951243eed9388d9d986ffa21c102fcc947af69c395454a6320f025adc430f3587808f5c741976347939b8ca389cb654e02b1fdf9b07df0b1a52a26b6a6fc0a94afb3c372f380e05a546c21bc3811041b5b1aac57a85b04c68efc92db0076a5f3c2ea5744f45777c402a34078034b693b40f5d1c02432b810b5feecee2ad281b2a501d0f0c0b93a0e97b1b5eb441337014df35830c21ea03a6bc0ffeb4fdffcea6b71c83f4240b89b149a18822325fe9bb3dc332d5e112fa9094bd383307cbca73ab414257eca15dfc66691123e87adf67d3c7f627c72550da94f72fd22d6936fe5b89ef53876e9481f869d7d08a129648e93dacf46dfac277871be3a6d73c17626ee54b4f785c3efe9df7b2f3fa75268aa5ca1be59a0de60cc0c59734342fe73dd5b66db0b6d633f479f5709a5a1aca212051e4186833d755b734ac97cf0b71e01c8902ab48b3f0ca187f3e866f06200ec1753bfab5a4183703ac75d162ad7c90dfb07b62b44c7318645a41ff275133971d2f363764d4aa63b7f0694c79aa6fac1821159a17a70cceb7fcc7aa5d409d722248eb0798ed0d6ad09b84874268b21d6d4e3bf6173b5e39e66781116276a05ec691dfed4230f33c9acb51113762fbff546b4138d703f1b4c580e4ec30ca6780145d04fb9419802c930072f1ae3920e596db764ab81b64a63cc714bc8d2be7d125ccfb43b1baaec0f30b2a538aa21bf8074f2d8b64aea725581ef1cb78665e62c010110901690a71fdbaed90940c768a65c9f0532a94ab4bc915784307a040348d41698eea9d60c739f5690802c6af893423b6e652c81ab14dc7c0b0f160b8156efe8bc4d013e5f3b010967ad7d64f71320062ce828f7e9e36a5c885012f42f6867bead0b65b7f821abf36850e5cd9b4277aa34fae994de31b82290503cd8a9bccf7bd1c7a23c15e712267366b068a99af5a7823169e92532dec5f0698841d63c733c9c1a663a34d021317887cc1b3cf033ae12465be711e71a24c86c8cb160b5c706d8464590e51a3936391154cf4b89e23690f8e3403fb47f2b4b4251f4dff1b19e79734bcc221b53b7c11bc5cd29eeda8c0204e3a6bf7627b2d5db3735e59bb3a240f9d5f3f3ce29051f99742da09a30268feaa5e6671db0fddd60b747449515cf0b7797a6e4043f8e7a6ad3e9f9bbe7c95f0fd7e1f593011c5f41a980f99c7e11724e0153fa1cc316d98ed08c327fbba4d03210f1283eb630390effe60f43c4ee6fddb699b3e63cddafcb5e96c17adf42ba0a6ea50f8778b5990a0d97ef9060b920c8285ee0518c81af91175ada624cea205cf6aeed9ddb0a9d63c8b144c0eeb542dc72ed59500a2bec1b31414fd1443957e0d197c08a744133edaaf59d1ff397246f81021280fdaeec53038782e2d710b852b7028c54d6b3ec0d2b3be1700892b02fd9c9fd497cc79f61dd73cbb4e560ffed392f5a888374cde885cba9830cd960251417705c3b48d65bfae73b2c4fc73fc128f1304bcc77d81c3ffc3ef66a8fefc182a8af9714e008b102c590a25c8a6a8d3dd20ab0857b575d29410c468babf46aaab3f12645b655097359117e8f56c7cd2883b97bfbdfde5ff4b6b84380cc34f6c2b810f3d", 0x1000, 0x40000, &(0x7f000065e000-0x1c)={0xa, 0x0, 0x2, @loopback={0x0, 0x1}, 0x6}, 0x1c) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00005c9000)=0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00008c8000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a60000)=0xe8) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000a61000-0x4)=0x0) r4 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000a60000)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a60000)=0xe8) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000a60000)=0x0) r7 = fcntl$getown(r0, 0x9) r8 = gettid() mmap(&(0x7f0000a60000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = getuid() mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = getpgrp(0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000a61000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000296000-0x4)=0xe8) r12 = geteuid() mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000875000)={0x0, 0x0}) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000a60000)=0x0, &(0x7f00001f1000-0x4)=0x0, &(0x7f0000a61000-0x4)=0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000a60000)='./file0\x00', &(0x7f0000a60000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpid() mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000722000)={{{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @local={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a60000)=0xe8) r18 = getegid() mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000697000-0x38)={&(0x7f0000a60000)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000a61000-0x70)=[{&(0x7f0000a2b000-0x11b8)=[{0x14, 0x39, 0x0, 0x1, 0x1, [@flag={0x4, 0x8c}]}, {0x140, 0x23, 0x10, 0x3, 0x3, [@typed={0x1c, 0x8b, @str='/selinux/context\x00'}, @nested={0x114, 0x8f, [@flag={0x4, 0x5a}, @flag={0x4, 0x74}, @typed={0xc, 0x67, @fd=r0}, @generic="cdc0f6d2127b3a3b04ee1717b66277e0f7bca0bfc8a03b2cbdd311f1fcc1c260e8a70f3a5531d5bacf233281d85521e0b7981f5992ceb8b76113d0b78d311b26d2ec250325aa5d2b74240d60da6495ffd6e6846971d1a432fe6d29da0e8116a3a28d92b818c4f58e4d520d040adb11c41e2811b79428da550e87a00a6eadd29d5d1e1aafff0c11afdb22aee41b8affc7f95d3c83be203d92dc75ee077f945d60e29bb3d6aef567e92b9434e1d2fb143e036d3a7165141df185d7f2b3b3822b384902ed041a800d803995326e9541588430d915c5dea85c0eb98fa49fba352a851422216e6bfc19ad6b8cdeb00ca5cd4c", @typed={0xc, 0x1a, @pid=r1}]}]}, {0x90, 0x12, 0x0, 0x0, 0x2, [@generic="b8862690384f47849525d0de7f883bcfdf9a78f90d2bf74658ea0ce3eb6fc396d46a8da904e7412eb8ad497ee72d22d7e02b468dd0b7eb3ed3b529d0f0bd9e661c20fde71979cb330b336d5a3e870e3363f1ce8b3d63cb032b2b50f81c66561af778c737a7534ac6091699ef1681e5a5937a93ecc9bcb7859d239837cc0f"]}, {0x438, 0x27, 0x200, 0x3, 0x3, [@generic="55523102fa963535b22ad36fc43e00046de4867ed22001b0b35b36acfec16a1f70b17fa229929b4120df043b7521f686a17f09d43e653742ff1cf6bdd90deaf763d4c65567cf11baddc1e7b473f5b67ec6bb5fccca287ec485a9dc0919e57ed28bbcf25c06a8a63c08134d36b2207413386a3323f6cc139d62ba3c8261b9983ea87c322bb14e5bd06fb26c76476606f17a4edd7a59ce80663731002096a7a389672661ee2bd1cfb4619b1818cfe2c481a7", @generic="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", @flag={0x4, 0x6f}, @nested={0x168, 0x6a, [@generic="08d60cf0ea6b0a0e306cf79f279288328c2708bb4d2ad58dca076874fd3a264057cda80bd0d91fa45a4bfbfdd2526948fa3e79e7dd1fa7c985816a7fee0302391b5f233c9f2f7ca92051ce433836d1a674ed361016", @typed={0xc, 0x27, @fd=r0}, @generic="35cb184f6fe0ff0bc61e97e93ba57adca23a7aa2f3923413c345ae67c0a227c08c0d79379122f8ce0488be44024b79aab4402fc6e5fa4aa36039018c88bc22abe708502b3a48faac78ab63aebdadf546e6a1e173c695664bd80acf3b7d39c36ec1b83026c60e9d1a2ad2f16b3ac5d579187a466ee34bad5af2bacd10cbd7ed4fab764fe79b2d4d61c67185fc0436e90f98f1a32e6451e3048e02a730c940f12f15e6d675a70deba728bb68a638c62d6dccc3a66e1474d15344d78e5c97ba27c3723b93bc81b7527893f5c1be04da0bf06fc747e4b2215ec07d3b18aea014fff5ee898d07", @generic="e94532d09cd469563de0301a98e9297b233e", @typed={0xc, 0x94, @u32=0x8}]}, @nested={0x110, 0x5e, [@flag={0x4, 0x37}, @generic="731f218a4279b30326de82f04fb4c136ff603179c1bcbe88ae7ad30ee68b61004f43fc3b09fab449df7f7a1284aa4543518a97a83efe69f49dbcce7d58d06f3a83cd4a1bf61ae0bc", @flag={0x4, 0x2d}, @typed={0x20, 0x32, @binary="1c443939aac5952e0bee8784b1502649915e5f06f9b79f"}, @typed={0xc, 0x85, @uid=r2}, @generic="6051f61185f4069bc943431d5619ffbc0e99c4a36231f2a95cdb1104aa16b39b7fcb744dca0a581816cca0dcd55aa9b8c272fc45529977c45750f730bfac25013e4e08dc8cbfd4614b119d123711bc0456ca899219a90c", @typed={0x34, 0x13, @binary="627e0d64643503f658854a10cb4fd08b631d2692c6ea10c4e432f12ae0bc0cafd8fed62eddda9a128b01"}, @flag={0x4, 0x93}]}]}, {0x3d8, 0x24, 0x300, 0x1, 0x3, [@nested={0x6c, 0x8f, [@flag={0x4, 0x2c}, @flag={0x4, 0x3a}, @typed={0xc, 0x19, @pid=r3}, @typed={0xc, 0x80, @fd=r0}, @typed={0xc, 0x3b, @u32=0x4}, @generic="84b1e5046a685f0f1d7c59d86508c4dc3ab46c4c4199dbd172a708242a51bc30d75b6d1f160fb226690474f277dbaa907b50819d1fabc3ac31"]}, @nested={0xf8, 0x90, [@generic="fb052eb85e38bb69a3c68543c98caa2dc69e3eaa534dbca7f441a3ba2ca125f280b286096400dbe427214d416c7e6f880c2f7e8730a76a595e2f3c89fdd42b7ce7a879e40b8e07677f2b781c1c81507718ecd744db70138ca8844155130f0ef532fbb47de423ae03e130a4d07e6069eac17b7f56af5fc630f810d31d84de6bc048052bacfa7fcfd749897f35d5eab2fe4a9c34517316aff0e44168dc84ab04ee0011c9c484562896315c6ed3af1f6700783ed0684b3a97346d18", @flag={0x4, 0x3d}, @generic="f3a35495adbd52fc01fa85481b20b972cd7a0ee1ef4df1d9349ecbbf934ab02a193b46", @flag={0x4, 0x3c}, @typed={0xc, 0x65, @pid=r4}]}, @typed={0xc, 0xac, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}}, @nested={0x248, 0x4e, [@typed={0xc, 0x2a, @u32=0x1f}, @typed={0xc, 0x73, @fd=r0}, @typed={0x10, 0x5b, @u64=0x0}, @generic="a213a1cc59bc02239ccd0003add1c5f0e173d248a8d799fd461abe1c69354316b75f20ab076a0c71823aed3895fad9b00373b017b2f63493cb47fff193761d3881b9e26118ce503b774a4f5b3b66b012fcbffb76e37c8e5f3230225fc8e31797b95e45167902d2ae10fed8fd59a37348953c1f28a67f96e7d1c2bf6a7d460ba2657d1bac2ca4e6c33c1007e460ab621cc281979392", @typed={0x1c, 0x89, @str='/selinux/context\x00'}, @typed={0xc, 0x9, @uid=r5}, @typed={0xc, 0x1e, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}}, @generic="e8083b615f8e6c06799f85f7a5472f5e0dcb1d870478955c2c065be390d5a4c96b05978f79da40793d4f453003dad4dd0a741d2dbeaebdab2fb53b562bdd5386abce9dd18875615c5737a3ca32148e7d8ca199e7e682ec4b02c2b35e0def6fb7dc52a05d8e7371725e1f1559e23c462e73fbbc47307d643b35a05d20d0001a0cad36ca0a92b25bc97fb2ce87b483cc944c371363bbc16acf46bccbe30a392ba7c75377122e80", @flag={0x4, 0x4e}, @generic="ff27e0a425d6464797f2b77b50639080d03d64b25850e1420ce8506ee0e037067480e12fc70c805cc79ed5c6df38c62a38fb7739b0cdc9e81bcc1bf3d3f8596d48263f81e34f560bc414302a8ffba6a375856b61fc1696dff3aaf7607fb331fda16d50568218003a8187817445972164fcd88bb1d2b4a3ae97739c524d11f5a7168c02d0399530dcb5468950c879e2f44d6dd43ba4c37ff8eab792bf6dcd5af462fe10afe5b688f81d"]}, @typed={0xc, 0x63, @pid=r6}, @flag={0x4, 0x22}]}, {0x84, 0x1f, 0x400, 0x6, 0x3, [@generic="8d619f15ae1447875a65a22eae798f870db54f28c9825fa04ca465406695e0ebfcb807848e6226012621f08ac8735be21fa002f1bff796b407ad77655917d9d7d8b9a18d4688862e9888e549623155320293c82c926723b71ef2dcf701eb635ebe263fb07e2667b9dd77f2256f4e74790b5edd"]}, {0x5fc, 0x2f, 0x100, 0x4, 0x1, [@nested={0xd4, 0x38, [@flag={0x4, 0x15}, @generic="a7e6d70aa2c29b76b39534000c63c830ae2b06fedeb7c4cb2ddb24bf94f664a7d8972fd9c1fd9bf21b6e599fe9db0bc30f9fc76adfdd11cfaa05bc4f31ae9012d4599d79f4f46a7443fc9e5f6f3d52bd0198", @flag={0x4, 0x31}, @typed={0xc, 0x8a, @pid=r7}, @generic="8e7734522fab7980ff3184a62247214b0dcecaea6a7364aeeb4efc4b4b17fc6f11a65f6d4d92b5da21f1e1ff7dc66de9040a4641c134f095d9ccdc69d1e95691126010d45179f14edceb61165e09543df4d62ea4a9562eb395927f2d3ce7e55d5d47de61eed83beb8729"]}, @nested={0x134, 0x61, [@typed={0x10, 0x93, @u64=0x9d0e}, @flag={0x4, 0x4f}, @flag={0x4, 0x43}, @generic="b2306123d40a6129025e8f3746eb82faa2eb337764c719e324f84d01cdde177dee0328525d6f62c04cc2a4b323adba56083a42adda833931178723d0f1fada83b54530711e4b48456f057e50fef8a8256815b04df5e2873e8c3f891a17aedfa1229fc7178d9cec86b712244499e71cf8e0973d6d040e71824643bdbea2f7245c754d9f59e1c60aa043f7865da9d840bea24e4c0cfb30ce84672e1801a5dbd6969be1341569f1e5f18befc0c16e56ec35fb76113fe0fbfe90761f5fb873fe9b175d65dfe989eb", @generic="a2ea762b03bbd0e2440c0fb4499d348627ca3d013a7ca02bedbe0f004cd727ad84e7934b3093e294e72dd4c98043fcb4ef945f2f4dd0a9be1fa59644edab37eb594191b1436ac00f1562b756d79e2a5595c6"]}, @nested={0x154, 0x3c, [@generic="93a31fb4baab5609a25d519dcb68cd40880ddbca718ac949ed95ac0e6df14f5a4ae2b7b447272c3aa87467e281660a9bed56dd89f2c0941ed9fd49b15a58aab8edb84688f8ce72aacffdc386ab8400945e4f41fd0696820f", @generic="dd56df193491e50a289e7f09f4067b09ee8a90571d759d95ff519d42b4029eedac7c38838c8600d182492499798427bdfe4d4cfa5fa2333559cd718f6de666aae61b32658c07ab728f64ed7f9a49e20b0131ab3778c21c8d55e98fb2a71fdf905727b0b8aedae59417cfb6159e910ded3bd66e35dc31f4c5a9c83cc66daf7050ffbe2012565cc5c3e6d8209bac941f35039f992b9f0d1afeeae7dff600528f429e9f3b35fb7134f7b48b2a50658822b926b6f64be4dd00ed2926acb475c31b44b341c52bfddc518821eca4e38fd6aa03c101034f62125665629622eede6b09973cede2900df97d8d247575bb36090d75ae", @flag={0x4, 0x12}]}, @nested={0x110, 0x7f, [@generic="64aa", @flag={0x4, 0x79}, @generic="30bcb5b5fc227803be3936ec2839d3d6c7", @typed={0xc, 0x64, @u32=0x7}, @typed={0xc, 0x2f, @ipv4=@empty=0x0}, @generic="9a3ad2b272c677cf41e9696f0523d3aff48db4acd0c56915878849f4e7e83bedc83b4c7a70487a362e2a4e54f66cec8b88f63520ddf3e73af2a64db07fc522562cbc5fc0cbf1b634ffb472", @typed={0x80, 0x92, @binary="bc7d36e47338f9117409bfef0a8d7d42f89029eea3b0d8445f9ff6e83c6fbb233c71f8ef08ca7b534632ba728e1df868c5943959ba8f485cf1ef0e3485c1dfec71b1b76fbc4ea1af7c4047afac3a3bbc54e816a501e2fef4cdc1ed138c0ce6a2c0307d8953d4aedae0a44bd067cbcf72d0ef73bebd"}, @flag={0x4, 0x19}, @typed={0xc, 0x76, @str='-(N\x00'}]}, @typed={0xc, 0x30, @u32=0x100000000}, @generic="463a39bc65c8119713b7a3d294b9dcd2eacf9ace3102b3c47d65c3f87dbdf6002a8f0dc24692dbed0895907d5070f1d7c67e1f58c1170548cbd471de50f3e31868c40b82bb21ae75315e8c1fd1d73dc470a3271c02f3014b83a68f2258278ea7cc625f", @generic="e84be123640e81db1d763a6a26824f9acf4e7ab9a04bcfb7d5b6c6a7a1eb4aa1b85441af04a75c8940820928a86b4eec2e6e5c", @flag={0x4, 0x45}, @flag={0x4, 0x49}, @nested={0xd4, 0x42, [@flag={0x4, 0x5c}, @flag={0x4, 0x13}, @flag={0x4, 0xa}, @typed={0xc, 0x53, @pid=r8}, @generic="c12b1fe254ba18d104e08422b7666d0d12fcb278d6001f112d1eb5cadd07511f526840ab24f25610c221aa1ec2dcb976086ea08124fe2302047f8c0afdc8f814e7253505176e3e534d42d3bac161baa03e7efb48d70f80984fb6865d19109954e77bb5059940c4981ca803dfc6a76c3b1b4dcb3c97a65a2447381d16885eaa76d98ec96bd08c6d0ffe277cfb3d9b59170b197d9dfdd36a6d58f56a160b3f76b6a1f39814067da408f5413ba4603fbcdcc1c83d88f2"]}]}, {0x144, 0x3e, 0x400, 0x6, 0x0, [@nested={0xbc, 0x4a, [@generic="dfce51da22e63cfe10057b57cba46feb6e578e40e6e42d73a77446942d2d549d9804abbb8b9364c472550ca3034e79e95f14b46e649953cfb0bb8fcef911e65ca294ae9cd09ac4776673b35cc56a6613a748cf519a8f7c02020f21ec77b8f1935e05f4287128ad452abe", @generic="6a934485467a3e8ff5e3bb3cf1c27e2226878b46e14158027905e2472d6d3838247f12a4fd51f26545fb5e34448158a0cba8550718057b32e6edccdc35c5bc672501e029a0e35f62504e492db901", @generic=""]}, @generic="a8dc418de8364f668dbc1e7d25cca91b5d9df46aa69263e8bdc9e741dd895ecf78b8f8e0dfdbee8259e825540c254b3f97e377b3ba50d308cf8d64e61b3ad6e18a5c388c2609fd33400998a635404ab397023926040aa00c92e198cd060f966dbdf15e8f609ecebe772c1b4bf3d4f588e2a56310cd43696b"]}], 0x11b8}, {&(0x7f0000068000)=[{0x2e8, 0x11, 0x308, 0x6, 0x0, [@nested={0x278, 0x58, [@typed={0x98, 0x7fff, @binary="6a861804379d5858d7e1391bdd1f8f9d2dd087ff87903208aaacae8f2e15da38a51656ee1afac531fa073c4d720024acbd92d7e728b290f09f918c24a0afcac966640d8b53fa4c35a71dc7a77059b0a0243cfd8ffddfe37e44df77e8974065836173514dad460b11b8f86ce19edde158fb26899da96076dfdedf6de89a59e6cb7a272bb29f4426005276de464a2dbe91"}, @generic="0a2b5dc7ebfb7860668c62200e5914751b40eca3ec45c6b1b06f54c809189319fb5abc04d5428f5756cc14a037f96e77f902fdf8a30c7cc637605605640c04a6c300b3d07c8ab0b1b751202e5557b6401e92f08ae3d5d2ff8a8beea4464cd2f65401edde19aa101ffb899b5b44315983d55ba1", @generic="90ba98ed30846ebedd2d8d4accca86ac747a3ec799ab2201f242dd0b2b938181930bc3439d7a748c74c6117ee8f3d71756aad0fb0ed1be7134f94b9a8478fa56b238d5f4f24a5a4568661d", @typed={0x58, 0x8c, @binary="6a67bc2dfe2e4e118865bd63d6d05a661db042102b683199443f4e23f6e05a5ede6eb70ae1999b5ff0836a3a8dbe2bc6d85b7034f7e5f2a8a77ef74bc65fa47fed80a9d0e7c4edecdca1014aebc5"}, @generic="412f1c55dda4453f3f598cb1e1b04068f9a6b878392aa2ecabb5f4c07f46c95d5635c2e93ed52d6b4c3ef05936e540fb8700ac2507dda1d6ef489ac9d3e8a62bbe0facf7d7a61eabb38ae6c47aca4f4905375d9a941459f4c4b6fec2c15f4ed16615b6f46f064ce1fe77894cbfe50d8c9ca4b96617be5ba1fd5de32ba978656a5e10bc5751a0f8a2e8b9c4267b3b83ff6bb586baa89a17448e6a0959032d30411442", @typed={0x10, 0x41, @u64=0x10001}, @flag={0x4, 0x15}, @generic="", @flag={0x4, 0x11}, @typed={0xc, 0x1d, @fd=r0}]}, @generic="6339d591b14f47a39ded36c5966a9ad2382ceb1524190556248fd464ae6a812c8c0f704fee50fc6784e07d7d7e88b46609cd64c53942af6f26e4aef0ee752867959db220dd366d0addd7ca06a3062f5818090fd4450eda8cf96df510f5"]}], 0x2e8}, {&(0x7f0000a61000-0x10c8)=[{0x109c, 0x22, 0x202, 0x2, 0x1, [@flag={0x4, 0x41}, @nested={0x6c, 0x5, [@generic="23deafcd935e684560f3626fd7a4b14b90cb9ff9bacec6cb6912ae977c8313185fce8fb1cce9b4509c578ae3a26f0c584e7e1280012ea589f101473b2673f82c74a7686cc70d7a536da365d352ab363f1705659d3487b31670e3816f", @generic="", @flag={0x4, 0x5c}, @flag={0x4, 0x3a}, @flag={0x4, 0x21}]}, @flag={0x4, 0x64}, @generic="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", @typed={0xc, 0x71, @str=',\x00'}, @flag={0x4, 0x11}, @flag={0x4, 0x53}, @flag={0x4, 0x55}]}, {0x2c, 0x36, 0x10, 0x5, 0x2, [@flag={0x4, 0x1e}, @flag={0x4, 0x4f}, @flag={0x4, 0x3}, @flag={0x4, 0xb}, @typed={0xc, 0x89, @fd=r0}]}], 0x10c8}, {&(0x7f000019e000)=[{0x14, 0x39, 0x800, 0x0, 0x2, [@flag={0x4, 0x6c}]}, {0x70, 0x2a, 0x800, 0x5, 0x2, [@generic="5bf8d43372dbaad999515379113e26c0601fe9f3d2109fcd49", @generic="9dcce80e89d17288d46ca63633c84c4c0b8d88a264d9e199dcf66ac18e5c792964da2ad37e6cda95499753eaadb9795e31a24ae5ecab9c", @flag={0x4, 0x77}, @flag={0x4, 0x8f}, @flag={0x4, 0x84}, @flag={0x4, 0x7a}]}, {0x6c, 0x0, 0x800, 0x3, 0x1, [@nested={0x5c, 0x4b, [@generic="4ed5b2b572ea1c0cb9d82297b17ca441cb2794c79b07831b0a9dfdae445afb02a7703c01fb2a0351850147b5a3da51244021edc2cb3c577409af3eabb7e146a576ce2b1a43c537a2655d764af23049705e67c63625d2cb62"]}]}, {0x158, 0x2d, 0x400, 0x4, 0x1, [@nested={0x13c, 0x5e, [@typed={0xc, 0x5b, @u32=0x6849}, @flag={0x4, 0x2f}, @generic="42fef65531ea981ca06fb78acf0cfe6985c6c552962cea9e2250fbbc743cf5f456f89edc4d10e58e5a5a3666c1cafdb9bb830b1f1a519a455a4d4968", @generic="ac1c6bc513a6ec0088351e4d646bd57fc3a6c77d1e5ad5ab98fbed3732b18177d6461ac9dd26acb9b89339ab46001fb96c23b134c68de07f038bc7c17ce413d107ddce53f8b3c404881d3a0c3313ce91b7441d9dc935bb", @generic="5ad8d9c9bce27be8e540b6c188f5e32c263b8a2821367b8c2baeab3977cdb7909f0a9dfe09197031f86753f174e8661a27b3997199a159849fa25213d17d93311533d6161e50d090f5af6bc8730c604fcfb4083a27788ff7190d2c4210232a9a37ca09e7e9f2adbf34ad0d7fe07121f42af3e24e541fb1568e15eeffda871f8fbaa3c2a50b94438d7748c1b13a2979f83a5e8f7d"]}, @typed={0xc, 0x5, @u32=0x5}]}], 0x248}, {&(0x7f0000a60000)=[{0x350, 0x1e, 0x400, 0x4, 0x2, [@generic="", @typed={0x14, 0x4d, @str="27de26747275737465643a00"}, @nested={0x13c, 0x4a, [@flag={0x4, 0x74}, @typed={0xc, 0x1f, @fd=r0}, @generic="813bfff54298b0b02506fdecae2c59f69814254998cc93bd04f12f4846c3824c4225fb37ed252766f1ea264dd641c62999fbe6660fd0aac2f677a10a51da2ea0f92fd1bfa1c7269ed90443bf534abb390b0144e41d3b65452e38984fe0b31cfe14ebf0b21339b00e5c7ad2058e3c6e2d32d26a316c64fde5f6d68f3e1396289d64a17b52834d0b8c65ba", @flag={0x4, 0x28}, @generic="4d66a0be456286060e3bd03394600ca6f65984533646865502fe8e43b8938a932c66850c621ea370202ce5c9991cc5867c3b755080763726ba186447a8f6ecafeed382ed902ab4c06b01a2a442af31fa77f00680cd064136dfcddb0b38c16e74664b576bedd093d76cae7a6a99f06c30608aa6b93926895fc4277cdef6464fa6e24321e6cf", @typed={0xc, 0x93, @uid=r9}, @typed={0x8, 0x62, @binary=""}]}, @typed={0xc, 0x14, @fd=r0}, @typed={0xc, 0x22, @fd=r0}, @nested={0xa0, 0x83, [@flag={0x4, 0x8}, @typed={0xc, 0x2, @fd=r0}, @generic="", @generic="a2b23a081cdc349704fb26c4b7fb59e07da4a93a1c8d8500748e472d075996ccf46cc66bb425b31954d42fea05500946d9eb56caf9d1d379389c255e0c602844cbd51a03bad323ea4fc17c7a8d865cc5bfcda45091", @generic="288b5a13d9a5fe46294566ee5d6a7a7359867bdac9bbd5bde5eb8976f312a833ec5accff442f1b8a70e235a0", @flag={0x4, 0x3a}, @flag={0x4, 0x34}]}, @nested={0x68, 0x8f, [@generic="32640c1dc047fa4b9b87c9d07c74744b8a0c2f649310c0d06ea2e0a9d9de216139e77dc270136ddffdc87ffebd5a8d6269eaf43978e8b53ee0e71ba59336f0ddb2d5a57bb1579b11c356dfad63476f426a1d3555744ad6d2e684e8db9a147cf2634632f6"]}, @generic="4f58268e0f722adf8c8fd7626e0dc75ae5db3decee51f73f478d7453fd1305260bc56875cd0088678c9534ed0a8d2af7d9a81eeb2310514e2af626bc10280a6cc81950415d214c19f7df0eca11164ef6f0ddfdeba8c058c7f72c32a13587f6d36a3b2282b13e467998ad92727ac324dd0aa13247446d42ad4332512a3439742e3afa959c33d9902831663cb9f4a146418198bd3747271fa3741d8226350c6e5bc5b89cda06f57dfd2fe16eda5c9d377f2106b4ec10787360233a5d8e1df4bdc4803b6f4484eb88101cd829eefd9076"]}, {0xec, 0x42, 0x300, 0x2, 0x0, [@typed={0x10, 0x8, @u64=0xfffffffffffffff8}, @generic="7b5fb5d8e0fbd5ebd2bea4aa971525ae3e1c24e6b53f941374e898b147fb11a8abc1a20410b01916c056767e2e017036b41d0eaaf781536bebd5c920", @generic="1c478a87cbf9ad29e84a813c4db0ec103a8330e274624f688d20ec7ab91cc8ca2feab6b1301ccfd4dc7f464176eecb32e72ba745ae52f217a2b5e701a1d66ba0664e2fbb886a61b26929db470a3ae65f1947972edc78b1398b38974eb31b9999fd4bfb08b2adcb5f59a1fc5c1e5cfd4b6af68d188c9503fe124abda4eddf71196d13467a3996e620cc767f043c"]}], 0x43c}, {&(0x7f0000406000-0x1b8)=[{0x44, 0x11, 0x400, 0x5, 0x3, [@typed={0xc, 0x49, @pid=r10}, @flag={0x4, 0x76}, @nested={0x24, 0x7f, [@flag={0x4, 0x7e}, @typed={0xc, 0x8f, @uid=r11}, @flag={0x4, 0x6c}, @flag={0x4, 0x78}, @flag={0x4, 0xb}, @flag={0x4, 0xe}]}]}, {0x10, 0x31, 0xc, 0x0, 0x3, [@generic=""]}, {0x164, 0x37, 0x2, 0x7, 0x0, [@typed={0xc, 0x6a, @ipv4=@multicast1=0xe0000001}, @typed={0x10, 0x6c, @u64=0x9}, @nested={0x5c, 0xf, [@generic="2964ae96cf1a4c23d5c226b620d025af49e89cde11bf560e7406757ac61ba0b6c34875153b0c157b0cdb0e7c7301eabb0b166be40ba3", @typed={0xc, 0x44, @u32=0x7}, @flag={0x4, 0x17}, @flag={0x4, 0x5}, @flag={0x4, 0x2d}, @flag={0x4, 0x5d}, @flag={0x4, 0x4c}]}, @flag={0x4, 0x88}, @typed={0x68, 0x82, @binary="eee141bb18ca445fa7f77327d02a306eaf34c1933b2f7fb071078ff165f39326faa7d6d7d6eaaad28cfb932ab5a1d81c244bfd7906a94c2ec5987681519467cbf55002afd93ba704934dd1c21db2a8d5c7395760c1b5c84762b5de30f8"}, @nested={0x34, 0xb, [@typed={0xc, 0x88, @ipv4=@local={0xac, 0x14, 0x0, 0xaa}}, @typed={0xc, 0x67, @uid=r12}, @flag={0x4, 0x35}, @typed={0xc, 0x12, @u32=0x81}, @flag={0x4, 0x8b}, @flag={0x4, 0x16}]}, @flag={0x4, 0x32}, @generic="bdc1bb2e019315b6d1bcacecd68572f1ea5e23a6ae563b327ec5c00064336f1da0786be16655be717b739e042d1288e9d2ed3cc3bfc1fd"]}], 0x1b8}, {&(0x7f000009d000)=[{0x18, 0x3f, 0x400, 0x3, 0x3, [@nested={0x8, 0x47, [@flag={0x4, 0x68}]}]}], 0x18}], 0x7, &(0x7f0000a60000)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x60, 0x0}, 0x40800) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r19 = socket(0xa, 0x3, 0x4) mmap(&(0x7f0000238000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r19, &(0x7f0000237000)=[{&(0x7f0000003000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0fcca4bb22f2892559edddba1a892f216c6adb6dac3291add84e7dd1b9b1e1043844071c4d783ef83c7baa707bef6850ccd339c111743913f1b7601256cf03", 0x0}, 0x60, &(0x7f0000006000)=[], 0x0, &(0x7f0000239000-0x1010)={0x28, 0x29, 0x2, "f1eb437ee62fa89f7006e4a66ee67f3490"}, 0x28, 0x0}], 0x1, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r19, 0x894b, &(0x7f0000a60000)=0x0) 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00007d4000)=0x10000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffff9c, 0x29, 0x20, &(0x7f0000b41000-0x20)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x10001, 0x3, 0x3, 0x2, 0x7fff, 0x9, 0x9}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00002b4000-0x4)=0x3, 0x2f) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000851000-0x9)='/dev/vcs\x00', 0x10200, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000dbc000)={0x0, 0x0}, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f64000-0x4)=0x20) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/01/12 15:09:14 executing program 6: socket$kcm(0x29, 0x2, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000a89000/0x2000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sync() timer_create(0xfffffffffffffffd, &(0x7f0000044000)={0x0, 0x14, 0x0, @thr={&(0x7f0000a86000-0x98)="", &(0x7f00009d0000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000454000)=0x0) pselect6(0x40, &(0x7f00000a2000)={0x5, 0x58, 0x400, 0x200, 0x1f, 0x10001, 0x80000001, 0x401}, &(0x7f0000e80000-0x40)={0x100000000, 0xff, 0x20, 0x7, 0x20, 0x6b90, 0x1, 0x4}, &(0x7f0000206000-0x40)={0xba2, 0x5, 0x0, 0x10001, 0x2, 0x1, 0x4, 0xfff}, &(0x7f0000f06000)={0x0, 0x0}, &(0x7f0000bfb000-0x10)={&(0x7f0000d81000-0x8)={0xe6}, 0x8}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{r0, 0x0}, {0x0, 0x989680}}, &(0x7f0000046000)={{0x0, 0x0}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f00007af000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2018/01/12 15:09:14 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000675000-0xc)={@rand_addr=0x0, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x4)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x3f, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x1, [{{0x2, 0x0, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x120) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000001000)="92f7caef9a1d6e3ea160dd60ce347ff9f7b6673e584795eed407bdbe26c1c97fc510eb377d8a48b5f295c86de066058abb9757c91718ac3cac5b6f7f1dce5502d085fbc543dc9526d2a11c704dcaf5526e8ed56e2ef3da2ba272df70b1ff639bbf5fb394eb83d35a4f9c58be058b1369f05b4dc2792281d12c6631a3741ab30f0b3ff9c098adb45daf5aaea9d26f3d15a85b12fcbdde35316ee72e9d808205b7e6c6e4fc7054a0b9642be889bc07a508d04f471945152f393970e383041e8377e2513dee87767083c3252a72b20ed78a1d5dde492674ee97fb67c4c5e31d1a2a72", 0xe1, 0x890, &(0x7f0000001000)={0xa, 0x0, 0x80000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, 0x1c) sync_file_range(r1, 0x0, 0x0, 0x5) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00002ec000)={0x1ff, 0x1000, 0x400, 0xd484, 0x4, 0x400, 0x9, 0x8}, &(0x7f0000bfb000-0x40)={0x10001, 0x5, 0x1, 0x7ff, 0x3, 0x0, 0x1, 0x4}, &(0x7f0000244000-0x40)={0xffffffff, 0x100, 0xfffffffffffffff9, 0x4, 0x10001, 0x8, 0x8, 0xfffffffffffffffe}, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f0000e09000)={0xffd}, 0x8}) mmap(&(0x7f0000000000/0xf7e000)=nil, 0xf7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000f7e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f80000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f80000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f80000)='/dev/rtc\x00', 0x200900, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000f7f000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000f7e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000f7f000-0x50)={0x200, @time={0x77359400, 0x0}, 0x0, {0x100, 0x5fb}, 0x1a0000000000, 0x3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000f7e000-0x44)={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x18, {0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f000086e000)=0x16, 0x4) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00008a1000)='/selinux/status\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f00006b9000)="1f00000002031900000007000000068100ed3b8509000100030000003ffe58", 0x1f}], 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000e13000)={0x0, 0x0}) accept$inet6(r0, &(0x7f00006c9000)={0x0, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f000076c000-0x4)=0x1c) 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000001000-0x28)={0x5, 0x4, 0x7f, 0x81, 0x7fff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r1, &(0x7f0000a5c000)="", 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mq_timedsend(r1, &(0x7f000066c000)="", 0x0, 0x0, &(0x7f000066d000-0x10)={0x0, 0x0}) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000ad000)='veno\x00', 0x5) bind$inet(r0, &(0x7f00008f0000)={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1)="", 0xffffffffffffff41, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000b43000)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000c16000-0x8)={0x0, 0x401}, &(0x7f000001a000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00002f0000-0x98)={r2, @in6={{0xa, 0x0, 0x3ff, @loopback={0x0, 0x1}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000, 0x1000}, &(0x7f000048e000)=0x98) [ 75.609518] binder: 11542:11553 BC_INCREFS_DONE uffffffffffffffff no match [ 75.631010] binder: 11542:11553 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x20001) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00007ff000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1000}) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000240000)=0x5, 0x4) r3 = socket$inet(0x2, 0x8000000000000003, 0x2) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000939000-0xc)={@multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000baa000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @icmp=@address_request={0x11, 0x0, 0x0, 0x0}}}, 0x26) openat$ptmx(0xffffffffffffff9c, &(0x7f00003bf000)='/dev/ptmx\x00', 0x800, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00001ff000)=""/154) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000e3e000)={@common='gre0\x00', @ifru_flags=0x0}) r4 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) [ 75.657386] binder: 11542:11553 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.664644] binder: 11542:11553 got transaction to invalid handle [ 75.670951] binder: 11542:11553 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 1: eventfd(0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000001000-0x8)='./file0\x00', &(0x7f000072c000-0xeb)={0xeb, 0x9, "4bbdaf8395711c992f0e3c7e173acc79b6c1842036c8b25aff771827029998519960bcf72058035d75b114190f57aab0656b45b64db87c8c6c3cb7fab4d1a1831e1eaf3463e537a242e053507a9fdc1c37526152cdb8b14f8cb6e29c5e3680893d286fe9c90d94496fa7a74b66c891f4fca7941cd8ec02b24696516c24bca86a5d8b8df3be1e844b90475df4e401197b981c6bcaaaeeb109e59f8bc9ce5372adc7c963a31b81a9088d21fe1cea52f7bb09b623b9624a3a3556df1325114421073e72f836585901d4188e703257c24597a1fe5680970791918309a4dfdc67f3d1782284"}, &(0x7f00004f5000)=0x0, 0x400) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x80044100, &(0x7f0000006000-0x1f5)="") 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00005d9000-0x80)=@generic={0x1e, "0103000000000000e1ffffffffffffff09a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2030077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00007e6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cd1000)=0xb) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000)=[], 0x0, &(0x7f00002d4000)=[], 0x0, 0x0}, 0x0) 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000000e000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000011000)={&(0x7f0000011000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000011000)=[{&(0x7f0000011000)="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", 0x1000}], 0x1, &(0x7f000000b000-0x48)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x48, 0x10}, 0x8000) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0x90, &(0x7f000000c000-0x10)={&(0x7f0000013000-0x24)={0x24, 0x2e, 0x410, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@typed={0x7, 0x0, @fd=0xffffffffffffffff}, @flag={0x4, 0xfffffffffffffffe}]}, 0xffffffffffffff53}, 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000005000-0x4)=0x7, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000005000-0xc)={0x12, 0x0}) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001fc000-0x12)='net/ip6_flowlabel\x00') ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000081000)=0x0) sendfile(r0, r0, &(0x7f00009d8000)=0x0, 0xff) 2018/01/12 15:09:14 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x2000000000000114, 0x0, &(0x7f0000392000)=""/13, &(0x7f00001d7000)=0xd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00006ea000-0xa1)={0x0, 0x99, "e51325037ea91820600e0aeb93c7adc1721f072fa4ed9b96f7be906c496e15ac1220af8672a5675cb03f23963ab28e8d58183db5e3dd79702c624f5d3097a6bdb1fd944fb679d6531f41b6d6787e725ce27457d07f8092f2629e2101377a6eba640f7c16ec69975dd863b78adb62b4192e40c19dd308453274953f3dff257227591a333a5b609f144def496a6205e4b5a371f23fd4b7e39e0c"}, &(0x7f0000001000-0x4)=0xa1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001000-0x8)={r1, 0x43f4aa96}, &(0x7f00005ae000)=0x8) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x10) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000231000-0x58)={0x26, 'aead\x00', 0x0, 0xae, 'rfc4106(gcm(aes))\x00'}, 0x58) recvmsg(r0, &(0x7f000064f000)={&(0x7f0000b66000)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000c49000-0x50)=[{&(0x7f0000d6c000-0xd)=""/13, 0xd}, {&(0x7f0000632000)=""/112, 0x70}, {&(0x7f0000e3c000)=""/109, 0x6d}, {&(0x7f000022e000)=""/124, 0x7c}, {&(0x7f000011e000-0xf1)=""/241, 0xf1}], 0x5, &(0x7f0000f51000-0xcf)=""/207, 0xcf, 0x5}, 0x1) r1 = syz_open_dev$midi(&(0x7f0000448000)='/dev/midi#\x00', 0x5, 0x418100) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000478000)={0x1c, &(0x7f00000ee000)=""/28}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000823000-0x50)={{0x0, 0x3, 0x2, 0x2, 0x9}, 0x4, 0xa5c5, 0x82, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) accept$alg(r1, 0x0, 0x0) bind$alg(r0, &(0x7f00008b0000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)='/dev/usbmon#\x00', 0x7, 0x305000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/249) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000439000)={0x1, 0x5, &(0x7f0000a37000-0x68)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000a84000-0xb)="77796c6b5a7a6c657200f9", 0x200, 0xfa, &(0x7f0000000000)=""/250, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) syz_open_dev$sg(&(0x7f000015b000-0x9)='/dev/sg#\x00', 0x0, 0x8400) exit_group(0x400) [ 75.700912] device gre0 entered promiscuous mode [ 75.707727] device gre0 left promiscuous mode [ 75.710912] device gre0 entered promiscuous mode [ 75.740589] device gre0 left promiscuous mode 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000717000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000410000)=0x6) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000871000)={"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"}) msgrcv(0x0, &(0x7f0000e88000)={0x0, ""/170}, 0xb2, 0x0, 0x0) msgsnd(0x0, &(0x7f000064c000)={0x3, "2c9f569f8e928a961fcd1c0717541db6213368f5ab2d281e1cedc4357eb0593fb644bedb1fdaf50a2bc1a5b033e7ebcf61214645f8a945d5456aa7e2630709f698fba075a13c1a80075c316da8877b456a4ea07ad82c7bfaf9e8eedeac11a7ed3292c6a8bba7e4f8588d897fd9535cd4bbffdf7257981475ae471ddbea67e9c213dae388a59bd027ee808db29f40cd5e3f7a0dcef015321f7ad4b2a5f3956e555f47c05c711ac1fa008e787df36fce42d47b2b5cdc2bdda63fd74320e9a913"}, 0xc7, 0x800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000459000)={0x0, 0xf2, "504f472ecb3746fbace87d5c8dec147d3997d0b4e8d12009c9c4a81f87d20a299560e32bd193e409af85901bd4f5de8d8e690b434ddf573e43206cf7bd40dd905fcfcaa5effc691be1fb3caf3c73a5e57cca4001303c5ef467018520b7ba962995075962b1fec497e387827e930e073a5018dc5def887fe11af0f835ff27164db1ae371718a5472c0033d02f30f3285e3d3b963a873e6bd17a995189d6a1b76aa55b5a50e12521650d3f286c7bf89946ebb63b0d75c65d196ba4e406ea48e4345d1f58c93adba994960ac67a1683ebaf4ce46e0760acf93fd37f920435f370b78c21c8347e37f2801324e968fb76902d851f"}, &(0x7f0000c7a000)=0xfa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = open(&(0x7f0000d22000)='./file0\x00', 0x4000000010442, 0x0) ioctl$TIOCLINUX2(r2, 0x40305828, &(0x7f0000be2000-0xc)={0x2, 0x3f48d048, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000854000-0x8)={0x0, 0x0}) migrate_pages(r3, 0x7fffffff, &(0x7f0000d17000-0x8)=0x2, &(0x7f0000ab3000)=0x5) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000138000)={r1, 0x0}, 0x8) 2018/01/12 15:09:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000acd000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) utime(&(0x7f0000c83000)='./file0\x00', &(0x7f0000a98000)={0xac3, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000054000)='/dev/midi#\x00', 0x2, 0x208000) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000ab2000-0x4)=0xffffffffffffffba, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, &(0x7f0000fdb000)=0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00006cf000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000ce8000-0x10)={0x0, 0x10000, 0x0}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000c9c000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1f002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000998000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000829000)='net/udplite6\x00') getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000173000-0x2)={0x0, 0x0}, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@generic="0000010100c4b3a539a077a9e99a7cf8", @ifru_addrs=@generic={0x11, "566f1f782472d14ba67030307312"}}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000e0e000)=0x2) close(r0) fcntl$setsig(r0, 0xa, 0x1d) ioctl$TCSETAW(r1, 0x5407, &(0x7f000076b000)={0x2, 0x8, 0x0, 0x4, 0x81b, 0x4, 0x0, 0x8d7, 0x7fff, 0xad7}) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000fcd000-0x10)=[{&(0x7f0000012000-0x1)="b1", 0x1}], 0x1, 0x0) writev(r1, &(0x7f00008d6000)=[{&(0x7f0000fd0000-0x63)="e0", 0x1}], 0x1) r2 = gettid() perf_event_open(&(0x7f0000feb000-0x78)={0x4, 0x78, 0x6, 0x200, 0x1, 0x2, 0x0, 0x15, 0x800, 0x7, 0x8000, 0x0, 0x5, 0x9, 0x2, 0x3, 0x8, 0x8, 0x1, 0x1, 0x8, 0x2, 0x7, 0xc94, 0x7, 0x4, 0x4, 0xff, 0x8, 0x7, 0x4, 0x4, 0xf01, 0x0, 0xff, 0xfffffffffffffff8, 0x7fffffff, 0x6, 0x0, 0x1, 0x1, @perf_config_ext={0x800, 0x2}, 0x20, 0x6, 0x6, 0x3, 0x3, 0x9, 0x7b, 0x0}, r2, 0x9, r0, 0x2) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) perf_event_open(&(0x7f0000daf000-0x78)={0x0, 0x78, 0xc5f6, 0x5, 0x6c8, 0x7, 0x0, 0x400, 0x20000, 0x1, 0x1, 0x7, 0x1, 0x4, 0x47, 0x69f, 0x3ff, 0x100000001, 0x6, 0x5, 0x4, 0x800, 0x92, 0x6, 0xc546, 0x2, 0xfffffffffffffffd, 0x9, 0x10001, 0x1f, 0x3, 0xfffffffffffffffd, 0x100000000, 0x8, 0x1253, 0x1, 0x3ff, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000, 0xffffffffffffffff}, 0x142, 0x100000001, 0x0, 0x4, 0x7, 0x9, 0x4, 0x0}, r2, 0xfffffffffffffffd, r0, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(r2, 0x1000000000016) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000979000+0xd86)={0x0, 0x3}, &(0x7f0000494000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000359000)={r3, 0x3}, 0x6) vmsplice(r0, &(0x7f00004c1000-0x30)=[{&(0x7f0000cb3000-0x2d)="92", 0x1}], 0x1, 0x0) 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0xfcb000)=nil, 0xfcb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0xfffffffffffffffe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d29000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000fcb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fcc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fcc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fcc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000fcc000)='./file0\x00', &(0x7f00004ec000)=[&(0x7f00008e8000-0x7)='vmnet0\x00', &(0x7f0000415000)=':+\x00', &(0x7f000033a000-0x22)='usereth1%selinuxppp1vmnet0*ppp0!.\x00', &(0x7f0000fcd000-0x4)="5d5be300", &(0x7f00000d1000)='!*({\x00', &(0x7f00005fe000-0x3)='-\'\x00', &(0x7f0000db4000-0x16)=']eth0usertrustedwlan0\x00', &(0x7f0000ae3000)='self[mime_type$+\x00'], &(0x7f00002c0000)=[&(0x7f0000fcc000)='\x00']) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000fcc000-0xb)='/dev/audio\x00', 0x400000801, 0x0) mmap(&(0x7f0000fcc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000739000)='/dev/ptmx\x00', 0x442, 0x0) mmap(&(0x7f0000fcd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000fcd000)={"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"}) fgetxattr(r1, &(0x7f0000350000-0xf)=@random={'osx.\x00', '/dev/ptmx\x00'}, &(0x7f0000c2d000-0x1a)=""/26, 0x1a) readlinkat(r1, &(0x7f0000db2000-0x8)='./file0\x00', &(0x7f000053c000-0x1000)=""/4096, 0x1000) r2 = creat(&(0x7f0000001000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @raw8={"841b23bdb55ecf76eacde660"}}], 0x30) fallocate(r2, 0x3, 0x0, 0x9) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 75.782872] binder: 11584:11594 BC_INCREFS_DONE uffffffffffffffff no match [ 75.797794] binder: 11584:11594 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 75.815321] binder: 11584:11594 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.822620] binder: 11584:11594 got transaction to invalid handle 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00003db000-0x8)={0x0, 0x0}) [ 75.828941] binder: 11584:11594 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x0}}, &(0x7f0000006000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_getres(0x1, &(0x7f0000f47000)={0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00006fe000)='/dev/autofs\x00', 0x0, 0x0) dup2(r1, r0) clone(0x8800, &(0x7f0000bc9000)="", &(0x7f0000001000-0x4)=0x0, &(0x7f00001ed000)=0x0, &(0x7f0000a53000-0xd5)="") 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000adf000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000014f000-0x34)={{0x80000000003, 0x3, 0x0, 0x10000000000000, 0x1000000000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$amidi(&(0x7f00000bb000-0x3)='/dev/amidi#\x00', 0x80, 0x200000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000c9f000)=0x8, 0x4) 2018/01/12 15:09:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f00003f9000-0x74)="", &(0x7f0000744000)=0x0, &(0x7f0000df5000)=0x0, &(0x7f00000d5000)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f0000889000-0x8)='syscall\x00') readv(r0, &(0x7f00009cd000-0x10)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) write$eventfd(r0, &(0x7f0000bbf000-0x8)=0x0, 0x8) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) clock_gettime(0x0, &(0x7f0000213000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00006de000)={0x7fffffff, 0x0, 0x8, {r1, r2+10000000}, 0x3, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:14 executing program 4: r0 = socket(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001000-0x10)="0210a12502000000090500d91dfb3700", 0x10) r1 = syz_open_dev$loop(&(0x7f0000064000)='/dev/loop#\x00', 0x8000000, 0x10080) mmap(&(0x7f0000e5b000/0x1000)=nil, 0x1000, 0x0, 0x2011, r1, 0x0) read(r0, &(0x7f0000e5c000-0x1000)=""/1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000261000-0x4)=0x7fffffff, 0x4) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000003000)=0x3) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000013000-0x8)={0x0, 0x0}, &(0x7f0000005000-0x4)=0x8) mq_open(&(0x7f0000013000-0x1)='\x00', 0x0, 0x0, &(0x7f0000013000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x8000000000000107, 0x1, &(0x7f0000000000)="010000000300040000070000000200cc", 0x10) 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000fae000)="29000000180031090000000100000001020000000000ff06800e00000c00080004000ee2ff00f4ff01", 0xfffffffffffffdd4}], 0x1) 2018/01/12 15:09:14 executing program 3: mmap(&(0x7f0000000000/0x581000)=nil, 0x581000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000581000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000583000-0xc)={0x0, 0x400, 0x8}, 0xc) mmap(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000582000)={r0, 0x7, 0x0, 0x10001, &(0x7f0000583000-0x8)=[0x0, 0x0], 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000447000)={&(0x7f000010e000)='./file0\x00', 0x0, 0x10}, 0x10) pipe(&(0x7f0000582000-0x8)={0x0, 0x0}) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f00000db000-0xea)=""/234, &(0x7f00002c3000-0x4)=0xea) mmap(&(0x7f0000581000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000583000)=0x0) mmap(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r3, 0x2, &(0x7f0000583000)=[&(0x7f00002f6000-0x40)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000584000-0x71)="7b79103e1a3546d34cca6db9bfe70a4ad9763753af13b61beb8a34c69047c9f9f95751a64b282a197d42947cea175455e432123d59bcd545b648d9765fcca4f964a1b43bc6cb7ac94991347814cc37029902516b7f4e79f4bd4e7d87412ac22774504ce8138cb250e42bcde05adabd7ef5", 0x71, 0x0, 0x0, 0x1, r2}, &(0x7f0000584000-0x40)={0x0, 0x0, 0x0, 0xa, 0x0, r0, &(0x7f0000583000)="8d01c5f6c09f9b72023319e1e512cf9d7a532e70ebaa6192fca32cb147913e2c3b6afd315a767ad1ad73386193bfd91227a05888831df114901a3bd6c67952fc7674345f2aea4209ebc270688f563b14bb45e470ef47f44ad78e8df00ab467709862f2220556dd16d425ad9c9b7fba70a9eed9375c42fd03ab538458d1e1ad20adca9fdf984b5b4153c9b872304620665372a25d48015f55865f46e25b8848349f7ff68f", 0xa4, 0x101, 0x0, 0x1, r1}]) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f000023c000)={r2, r2, 0x9, 0x3, &(0x7f00000dc000-0x1000)="881a4ae7acc37862e761cd0ef88d89396555c4c6d205e0ea0a7c90bddf26a8d09822eab84203f60aad241aefc126d6554d2f4a8b91bf48071fd1108ca2e457130a4c71b5e8fe57d08a39643b9b4d9b06db26b3ec76b4f457cbf35daec5d69eb86cefe7c9bff327962691e3b9bb04a2c3911b64e63a7af2693cffc66af973a82d6995a73283a16b3feeca171f18f1661dcc7556a640e4bafa2aefd2f4639130b3b31a4360c6c56a154fb4c5b78f33b0a7419ffec03f5040ee77fb3e566e542538f70522f49553d45606c50dc13badb2d146f942b733776de028eff58c5ab625bfe8a7eb35202d4cdea4bf554d54023a4ba36b9beda0265d5e3a4d0c190f1fae2d3d99078c5945c2ce2c43a07e4a30b76d863ee40815a678da3006d0dc10917417c6e1575841b4ae62ea936490099f927f6201959290d16db498e8bde045ac57bac246b2882b4fba8381807867d89e80ec006bf7f4f24df07afc47cdcdca82666ee7971d9f3dc7281d0e37baee56dbeff8ccd89e142cf0068b06e3b3d425ab019aff43879f7619cd84ed72f712dbfa58f2207465842a4522b91062b8a447ffc55d2ccb5174a3d920410e6a9efb80fc4f9a27d772dad71cc765bd56e13c013a8716284a5f0886463de3854a4ef54e9e286a28b0b27040948bc8f5a76ba244e52257a76da7340f8f815b7ba2e5cd58feec2916dfd653c7d3c477c8f99a70cfbb823c765c65bab9f95e1b9e6b4939e52ce379f4d1904512bf021d79e79a988daa8472db868ebd69c1a930696a30ed02a69675843c3d293df4c68ff39d4a922af07cce221ccf47fbae1776b12a8868f264faf6fdd9dce188a8230b2ccf5e734dd7d309074b52a3b86ab0d8dbc956c55b53bbcbc3ac5ef0a51eb1329a9ff49a14feab871bb691e11823fab4af21d274fafb014eca49ce185ebe20ed56fdff99f6330e633e91294d838215adf3749e54f2e205a083e0b7c7289830eb346c1863d11fb5bb890fa131cdffb2edf7a0109c40a3fe18328c319a8379af7ae24bb54869f7cb9100cfe33511abd37a930dc68494aa02efccfd14e818ca8aac4a4e97495f88b29f4459409c1832e8142b8eb129a47f63c3db741da40bf9e8d516dcc1b78d0a64db7f17c62599e71609e287a9d6453f7bcb6c1d3dc235d7a2d1205ff78ba327667e1d6f715e568ad26b4e49ea9e95653b203abe096f6e590d52c3be439788a1913890046635264a764f4ecc4ea9a405445947eb53674a3044e0deaba66657cf6a82ad1a04a0a453809cc5fe2ffe39a77e0e89b14922b285d8939c6d01182152b6c3957cd2f9681841a26dce65d838771f0fce35861c9b74fc11f4c04268d75851ed37a17ff58e50b63e23ef5a6e3fc11781932823ce21d48ab9d1aa753548423efd5bb92ba7b350fe9dedda5e9143c2e9ec0565540d7b3464e4dd4cb10e8359082fba1d71b7c1380b9916e84a1845ae22da77b63318b8e097a66a0ccbb2642b958c0e3b7da4ea49dd6d2065d20f55b5758d8c328806ba25af0bb14e2aedbc6896223813524d52b7321d74052d4f8990517d5ef3c339311b019b65e8b9ba5a18a1b27c9f78c369cc74abbd0cf729c46c1b8509204a79f52967ef37e965db5328771fe0d6a9bd29f461ae4b0f99a80ded45efbfea4442946be2733910915aeeb675a02a58f845d1cafb89bd25d6f37c1c48b39d715d5aa18b246d72cc42b3af0b80265a21d93e864b4cd7db4b859dbc9224149996912413408350de188a6f6ceb48333825093bf11c883adaa31f6f31499108472ad18a66d43d549bec7354c45125277e2fb3d88f90e158587ba1a3f189f98c0f72e59950f22440052e4c1c37fa69ace919e801176bce8f467aa90c566344c7183fd5001d9ac3c0b9d5ad3b062147755d6f689ab28d9f431877d2be98bf57631f4cfc6a17dc637c6c0c4e8cd83c3095d69f8fdc6b1a2f2d2a16125e39bddc7d269a4383bd51a28b887ec4843429479b9dd046e4600b334a76e0c0ab1acef3e43d1d98df95cbc6810e429a3cd0746b625f30499bcd67d631bd24ae26bf2ad7b05e33c8679ede1cbf4800bd5f950d54d9b804a784a518db733ac076e6b8f365c812ae89246fcb2b2b8382b2dc6d2715d22f9e36367893dc494f0d16c316ebf9d1e48247bcc1caaf25a7dbbc40c2e70d2785192339a2a876ab2301c5accce360f35d044b4e4c8ca2d6189ae378fc4276312e8f6774ea06314730609d8bdd4f7cfdd50de709d6a2249f39bcb0f14e9460a08144e689511b38b09a1766f0fdef0d4ddbb27ce3ce17727c8fca865617a1ee12809104bea323767965b624933bfb16a84c0ab748bd03c09a39f5c8768acf4aeab8a33e2ecd9abfc2f05a8e1a3aa9b7d4cd25d700091017e498a0ce7c14b1f12cf78f6beb96c8e93a863b9124cd21f1ca56226a7ab6ce033c1a77de083f61dc544fd7f73234138ad9cb3f2a82cbb0935ef9037d9cae0d07135da09bc90e3013459ebc6cb218d07a763a1c2abfc9b216d4bc74e0caa15a071659e06805798c8b232addc71886bc546c4a7ecf385d0b9bab99e374c5c5c716e87865b474b84c0abb153643d29999637d219e38a00b21570fc7bfb47bb46e570f60bacf0a762682b423df48d9265fdcfe43582be13be09da8ca53ce4d5d8f70d39d0e6c2b4222178b7c8e8a0c73af6fcaf7316d77df112dfe85662b54b0c8637ba8b2d35b8da5a7ffc1340cceb38b920615e3021ed9cf96632a8ea45bc9905a78989e96953b811e154335bf898ea8532f5c6b5f673c6c141178f4fa82c8f9445546d4c76960fdb7c869e6fed594e6fb2d522cd517c61bde03ee935bb483d69e135890c45eab134b302e3fe7dea7e2577ef41d4bb69802155163379b017ede5188b8d559fb3335157605060fad32788cc43a0707282f503cea57f34566f7a27c9c6d08dd6446b1e454af40671adda03a51a9ee4b6d671d141d699e5bb29ec4c4e7ffd47ba5c720f386adfdf62c0f91b7a61c767de6f56ff867376a9b0aa3d58484daff99eec9480722c2ee8d71f5d43a93d462ba380fa3167490c8dcd79816868765dba96ab955425b8eecda155be11094dc453eb0ab09a27c0ca83ee370d72bccc2c5d551b33a6f18a71118f5770141f48fff8e938548cef9c7c0198da00025e3fae2c177082a7e95a27cb29ea63e73aa0c6b68036477a603d3202ebcd8548035231ba35fe6100697a72cc2284e43998f6ee6aafe0763e71856053ff0eebec7ef1fc29a5f678a2e0de0ce2232c96719d8c349fa271d25ff6b996f80c67c35b4a63b191046890ca48bc14e25797a817c47db978aa914d910dd572cdc1627e5b498f144b85a9e7b63b3d9d6507383183aff032a934458def5affa8ec8978716a81186847bf77280932245ff8222c7f842cf02a938f6f965f3a00537b452380bbdb3f989d77284195e2babd39b7570fc94a7259e7bb48b10650a1b42688f83b2f1704eac50b4d72dbec55c558164424dd66e25eea7103150e33a6b765e7584e7d5df02fb2ad0b69cd44b8851cc8d3d0fca1d146859a188362903fbcdd163660aba1b5ddfc7f5a80c766737dfefe2476b5b9619263a7d2e7d7330264b878bb8a8bb312d047ce57f26782b4e168fcd9942ee245b7f29d6cb7c9ba701db51eb2b0ebd60ac8bb35b25d4ed6951984515ac786206d31131d762680f931f1c02a94f1895d4d8a0f636bc600a3e1c3f0b84f97e64a8b53dfb515db3ccc6ea75d7ce52d4a0f3d55d26c77a6e54fab60a3cfa0f13dbe2198dacab48ae6bea168a6579c54394b0d8e00d7ea8ddbaa2e16d5192f3735c66a145f63e909937c8c90686393935e3947ba04343d57e971307116f77203b580ee6cc924524cf95f530f85f253ac7d2b06ebedd71583972a529f8e75449bf7aa942bc343974cc116513642865a3c39730f8bed213f7ca91b7f0d6e32d45769e96619b9072ff4b89830f75c360ba73371e5bee77edb89e961b423e40fe8cfa9c4b31bc98012e4e203feb67a42fcdbe26e9061cf632014a123e23b479f8299fb9cacb148e18d2cbd8c18a80541e6a2dae8622767017e86800b6bfe14450ece9a803bb829efe9aa47961445c2ff942c06e846a509d62db8bc0ad950da7a1366bac643ccf8443ed7adaed6a36d0b92fc4ba17fc29d436b7ed3a2c383b03e0fb418b704862892258b8bb11cfbd847977a70b4eaa5a9f94baf34c109e1a7a09527435e7be0fe59c21ca2e92a1cfa9f68ec84cdf9362c405c6b7f2daf4b21a271e7c97d55aa6b5d6d64cda78dcdd4b205f06727433192fb953d2f8bd39afd99961376bbdce74735d235cd4adfa596567df36e6ed43b250679fbe11e5d991da05ae90e25d0d02ffa93d9bd80191a0b4c5e661da9f465b8c4e9d0399a891b8f4e13e98db3b5160be7e682b4e0e0cf517e002e3bb16aa920a3624493210a079629b89c5c3c7ac5cf39e955c992701476cfdf9a71bd50737671e2412cfc777d329c83c31e4c903942769df7732c189e7f8d3b0f4cc59eff02baa18dbe32b85af4c7c3192cb8d282d00369fc68059493be553f9901663103e99468263f7d850da417df8dc4fc18ba5abfd4886ba378676e9ccdef2670a45e5d7600a75c5e49cdecab90a69ab656c400d0db331a208655a2ce06ab32c6fb568255db490eebbe62e703f93bc6d13b92958bf528a9bc1c4bfe813cf44cbe75e12b748dcba6fdcbf6ad086a23844cdbad5f7753735b441dd39b714cd8041501cea7358e2b04002fa79f5fd84600b1c5c7b95011baf68ad0dba1d97a5d6c9d4f92373b549fae23fe4f0225c57a07a1db23b040a82adcc428564da1c0fc1e41fb62349ab3d2c77db664246f8f896f24c92a038966d4552bb2f1b03f786621aebe6f9c629b3f1b5567503df21726abe976e7e08fd75f19c6dacd9cdb6aae019ed049845e89e9f7c3f3b8e8bd13ca193d1e5af3c33ebfbc43c3480d4843d6660ba122908868808344f442d181f388b56a4daca29c4dae4622f1b6c98fa7dc581a78e4176c4faee5edb44693a2822f52374d23f8b7d1670a2be786aa7e7e69f0a176d59be12b29f9b3adb3ec93a88052c8af743aed8120a4d11ac68615f4fee17d7307edabe2c2910a9f4f860d69064559cf7d1c14aa4bc291cdf46995404f6d53e368b34e8d3136ca15ce7547fcf119398486c8197121ea7dd98495702923e8ebdcf02a2a4c99393a5d45f6988adf11ef222b5cd8747152d097c1a072c59d23539a71feed69906eee47324fd418f629e6c4ca5772f5402ffc24c8ce3e1052e80692a78b52c46a7013de70f75577c6ea7c549f737da4438c77e86a78c857957779b094dce6145bac33b105d4910b62230644f3992e8febbcabd373c01c91404e446940574419fbe10e8de67e9ca8c4852a9d48f77168b7b48a71629bc33b8385934b36b850ee00d48f399bae79fc4366096bd195606996cd622b1c50ba72df00f716fcea4b94ed8efe9f076226bc8fa5384173d8b8ef0cf31750321d9ca89bdd40a041c2f76db93770f4b4f852d11710a8e678e4a87736fd4306145fa23c39af8f1aa00b55e5281fa664768d0f93ad70b4893c777d9d97dd471df8c743708ef423add960daf388717288271188c8c65ef91b53c20098602b4fb9e91bca2175936988fbf5ac1293741e3b26ee93a82804b33a42f8337da13ea87a1c22c8418608d5de993a37406bc132dc1cda0841b6ca3093c42e33ba69876f3571355d073d10d175d166246d9b3123fc0175e7333d29c52c59d03e9323b2cbcc2ab1d93aaa5355642197816b508ba83", 0x24, 0x100000000, 0xf5, 0x9, 0x80000001, 0x1, 0x87cd, "5688719f314aa2e2c58e"}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000008a000)={r2, &(0x7f0000582000-0xfa)="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"}, 0x10) mmap(&(0x7f0000584000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000585000-0x4)=0x0) r5 = getpgrp(r4) mmap(&(0x7f0000584000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000584000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000585000-0x38)={&(0x7f00003f1000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000030e000)={&(0x7f0000584000)={0x168, 0x6, 0x3, 0x10, 0x2, 0x1, {0x7, 0x0, 0x3}, [@nested={0xe8, 0x2, [@typed={0xc, 0x29, @pid=r5}, @typed={0xc4, 0x94, @binary="482c629a94474f3d58c6d5b040a71f9dabe458e9869821949f710e311d3b09261881245abe043208239d2c5258b0d8a762de0b8e9145dbbc1d9c557bd979c51eaa3e69333eca98f517b21ff081fb3997d4eae27f6016f21806d830556497a80ca29130d7603fc44a9dd1f55882d949818006050a1deafd01c01f3f67522397f06849d7ad60ddb154f27ece26d3d3b41799cb65c87cd8e8026bff45ad3c51912407710e8c5fab182fe7afdf7184763f0363ea333f32588c23071d26c9"}, @flag={0x4, 0x58}, @flag={0x4, 0x86}, @typed={0xc, 0x43, @u32=0x0}]}, @nested={0x68, 0x6, [@typed={0xc, 0x5b, @fd=r1}, @typed={0x3c, 0x3f, @binary="0a903d2a41e77d37939329d54e0f9d29af85a8a1d71dfe73ef890fe5933751e57825956b75fff885a1d7dfced0aad44bc3bdd0b8"}, @generic="70d2b753071bfd32134c0685965f728dd31e5e8c79c9ce348fd9"]}, @flag={0x4, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x0}, 0x200000c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000578000-0x38)={&(0x7f000026d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000577000)={&(0x7f00002ac000)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty=0x0, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x32}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x0, ""}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 75.927295] binder: 11620:11624 BC_INCREFS_DONE uffffffffffffffff no match [ 75.934716] binder: 11620:11624 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 75.942206] binder: 11620:11624 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.949355] binder: 11620:11624 got transaction to invalid handle [ 75.955643] binder: 11620:11624 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0x8e0000)=nil, 0x8e0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000fd000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000)={0x3, &(0x7f0000002000)=[{0x0, 0x0, 0x0, 0x400000000000006}, {0x2d, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00008e0000)='/dev/sg#\x00', 0x3f, 0x420000) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r2, &(0x7f00008e0000)="f7b930d68ec4ba151c275ba11e326657b191c36b8d2c5d108140862ecbbcebe9264d06e46aa39c33f3b24507be5a8aa9ff03f90e51f2569b1cb56fac1f2cea7f42dcf327a167b52becac0f54dd32b1bd2a5a8b445878017a0c2666537be75657819eff62d4e8b70c15d3f6022c3e0cecc186eaf6f8710c21e5c6da5901c68910d1faef5eec289db1e425971ee056217f60902eb47614b4c485b4d58ddc684a019208a623542cd6b206deb60020a89f263a4c8d5969e433c8c13b18a602d77dfaef1074ea776414a0290af8e644ed36b9c90a", 0xd2, 0x4, 0x0) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f00002a1000)=[{&(0x7f00008e1000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00008e0000)=[{&(0x7f00008e0000)="3f491b7f7b14bc934c7c0efa17509f4edd58342fc50275209193ed3f70990d1a395f89c7b7ed0ed43a3c9279f92c3b027eac5087e56a94875273c59ec4e838983f", 0x41}, {&(0x7f00008e1000-0xeb)="f7e32e57bd09fb192d69ea5a6c3ba96f8fbe3253fd381cca1d28a5a67c6c844c3d4eb03965dca3e518320bdbad93ff96a64e327fe2a26b0b08d7526194f4517328cf1519e658dbeea40d12bd3146f57fff7feb87240529fc0f1c4ef1c5a97bb018b31204c89758d7458e25e19b30e2612e26a591518efd31f10c8aee41dc3d778a0874ec6b51c0e665661f6cdd552047d8825eba8d8a951933035387bb29bf57d22c368f9b28afd93926df58c0816889ef63d0b6cb7b566dde79e9911c2ac4cb29348543fab1c86d77b229dfce2c1ee760cb45094e0eaf7f3d8d6e4cfbfa4eceb4c0f0441967cfdeeca733", 0xeb}, {&(0x7f0000742000)="7232f0e9eb7def86d0929c53f9552e054782c591a54cd40006903caabdbb3edfb986f3a216d9d6687adb7202b65cca76039f06d5eb", 0x35}, {&(0x7f0000810000)="", 0x0}, {&(0x7f00006bd000-0xe0)="21ea786bb84cc39b918ebbc742afecbaa8be853a5472a97102211816509354686d1cc822e9a78658a59ac72250cde8f761eed523a667abec32c3aefa156d69fdb85d20ae592c814a7af4d08c047d2736e22c0d0fe9853618993c96a2d6019120bed7f132791bca8cc97b0789ce27a85b2233ab41518894b34f3f3a9767058f6e7bb8b72352cd75c15645c20003115117e119c9381a01d20802c60314bede3de4a3ab407e2d82f58ec181fad8d6cc6536d27e7724339540584105f046514dce93264457ba2fd1c5c53cf58ff78bad49069e5c8741706b180b7d0ee0eff721fbb1", 0xe0}, {&(0x7f00008e0000)="8c77abc348cf85c6", 0x8}], 0x6, &(0x7f0000351000)=[], 0x0, 0x814}], 0x1, 0x4000) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x28, &(0x7f0000321000)={0x4, 0x400000000000000, 0x2, 0xffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000429000)='net/hci\x00') mmap(&(0x7f00008e0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00008e2000-0x8)=0xfffffffeffffffff) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00008e1000-0x24)={0x1000, 0x80000000, 0x40, 0xfffffffffffff000, 0x100, 0x1, 0x9, 0x800, 0x71d, 0x866, 0x4, 0x1}) socket$alg(0x26, 0x5, 0x0) sendto$unix(r1, &(0x7f0000199000)="", 0x0, 0x0, &(0x7f00008dc000)=@abs={0x0, 0x0, 0x0}, 0x8) 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000d000)="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", 0x2) recvfrom$ax25(r0, &(0x7f0000000000)=""/0, 0x0, 0x10000, &(0x7f0000007000)={0x3, {"af39673fcaa6d6"}, 0x43}, 0x10) ppoll(&(0x7f0000002000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x982c02ab04c11007, 0x0}], 0x3, &(0x7f000000a000-0x10)={0x0, 0x0}, &(0x7f000000b000-0x5)={0x0}, 0x8) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f000000c000)=0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f000000d000)=""/59, 0x3b, 0x40002000, &(0x7f0000008000-0x10)={0x1a, 0x2, 0x29, 0x4, 0x7fff, 0x5, @random="25459f43b03b", [0x0, 0x0]}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000002000-0x4)=0x0) 2018/01/12 15:09:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fstat(r0, &(0x7f000091d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000156000-0x4)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000058d000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000013c000)=0xe8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006de000-0xf)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000609000)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x800, @loopback={0x0, 0x1}, 0x5}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x5c) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$dspn(&(0x7f0000520000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f000052d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000eff000)=0x0, &(0x7f0000e5e000-0x4)=0x0, &(0x7f0000390000)=0x0) r10 = getuid() sendmsg$netlink(r0, &(0x7f00009dc000-0x38)={&(0x7f0000bca000)=@proc={0x10, 0x0, 0x3, 0x1}, 0xc, &(0x7f00000f0000)=[{&(0x7f0000dc8000)=[{0x24, 0x3e, 0x200, 0x1, 0x0, [@typed={0xc, 0x27, @u32=0x9ab}, @flag={0x4, 0x63}, @flag={0x4, 0x8e}]}, {0x10, 0x19, 0x500, 0x2, 0x1, []}, {0x2cc, 0x41, 0x100, 0x1, 0x3, [@nested={0x20, 0x4b, [@typed={0xc, 0x6, @fd=r0}, @typed={0x10, 0x6a, @u64=0x1}]}, @typed={0x10, 0x93, @u64=0x1}, @generic="91e987de1e76cdb4cc19d8e3c163d8f90824f7ecbf3b4740def5c44dee0bb7504a0689711bd72e497f9e937ce937c2f402e8b6a30f4214eb62d7a1961ffac8628358acf92d480c3a0fc7cefd351adfda1fb9a53a3e419114b831b75a6d4960052f7ae6b89c3561e00a729ad4bdbafc2a52d77ca645b9b59e48aaf012e1", @typed={0x18, 0x93, @ipv6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @flag={0x4, 0x4e}, @nested={0x15c, 0x25, [@flag={0x4, 0x27}, @flag={0x4, 0x5b}, @flag={0x4, 0x32}, @generic="ca553eb1acd81b886908fb939d3659e5a41d884d3fbdc8dc258b7c4941ac01f15ab7d4974c4282ac069c8146063ddf0832d202e309cf88e7f246ec0469796df86b406e3ce2e5c06c85ab85e2b0fdedfc856cd635e527f23ad0ffd170b6aada62b6db1920bd4e65000bedba69ffaa1ac5f13fe2eed29ee061526d0075359148c2ae8b5c92ba1d50edeee0aef70b8141f3", @generic="62e6ef98fc426ea9bfff74149f64bbaec631d21ed2ecf0f2afa7677d4e7dd63e1cae53df5681ebf5553fb963bf71b20461f9c0e557ae0e776e9a879cda34ffd8d9a589f6cf104373e3b0b6e8a1c24b47c8610bc8319d98c0fe31620706424cb821f2966a8daf97cd111d639ab713bd207c42a781a50cf3c1c279555a694a936057122d5ef474bff657bac42c6e4e66b403e3337600df889e1bfdb573a7c82c18c9b6c084ded258c1fea972f1dea22fc7661c92ae137225070d161a50"]}, @generic="ddc135dbc4510f91299b1374c3860ec9502ba84aca8c01de39701793cec3cfea7b5bf72ebd85c475c399bb1652fb86b3d8227f83c6d3490d498cd7142a9177ba97b48d6b8dde4a75ef8eb1a1affc3944905529c3af168d2bf688dd7641c96b7d93928795aa18da10e7de6ee2aebe2c729a8b0ab90a30a18775677117e8ac3e1045804a3083d95a96c51b7ddd9c883c0ba16ff99f5158"]}, {0xb4, 0x22, 0x70c, 0x3, 0x2, [@generic="3bf770bc2a7d86ad52c47bc28658f539fca4abf7e3706808320bf9b1f58473392d791cb381e2d0d71184e5ac70a46b9e3e1f09e127b9e07a64d185145cc4464f0fa75a70cbcf22c1e38bbfeeaa87f782acfe79ca3cb8187a48ab1a75d547899950642d5a0b25c7d26c5a67a4971790e97027f0187d287b1d1884297ba381c79d7adac42245bccad69a1e84cd8996", @typed={0x14, 0x95, @str='\\keyring\x00'}]}, {0x4c8, 0x41, 0xc38, 0x0, 0x0, [@generic="51e0ec95b605957ae68988a89ffd0f616d2aea1b5c9da1fdabf8b9d996389ba2009e9a1d71ba098dd09cbfd06f9ef86e875f919b94c7fc28efe0249826de604f4a171c4ed8924306e562bac171f1fc8fb2666e92785bb27fbc3f1012362ec6e752b61f5452ba6e520aefa40c3ff88ace29fc2ffc8a5f27659286bfb34630f43805766670bda2a126ea43816b13d2cc7eb7ddb99d57f23edcec865c9b9f7d", @typed={0xc, 0x5e, @ipv4=@multicast1=0xe0000001}, @nested={0xc8, 0x90, [@generic="f845d8ec5063df8bfedba8cd589afac45f700679b699253090c04d55936d37872258ad1de444653cc778c1b494efb274a01bdddd224327cd5664a42cafa62c565e9fe7a4b36b6a144f25adfeb93b23c048a8fe5f4ecfb340017ba7e21fe0967f9e72592bc82e35fddb842f53d631e0f0f0be646ae72ed4bf234b5050cf4f306c2b7968e7a9973e714cbb0ab42e4e974a0fa728bfbd85056522ed03a472f2d7dfc23429e97a2274c81179ede48b88996c719e3300d119f0", @typed={0xc, 0x48, @uid=r1}]}, @generic="9af9c7c94e884ff34f93758b49e265d0493936826209c114e09c635d379c2986d6e00df3d429598170c4893f4ad75d25d60461c542af48eeddf4076379ce62ea334967873115f95acf203b", @flag={0x4, 0x74}, @nested={0x20, 0x7a, [@typed={0xc, 0x12, @pid=r2}, @typed={0xc, 0x41, @uid=r3}, @flag={0x4, 0x27}]}, @nested={0x70, 0x7, [@typed={0xc, 0x0, @pid=r5}, @flag={0x4, 0x26}, @flag={0x4, 0x11}, @flag={0x4, 0x58}, @typed={0xc, 0x62, @pid=r7}, @generic="be6361acfd70b176fd46f8b28487cd3cd5fe7c12aaadbef4ece974e5cda0abb4b7764f258fb8fbcb41b921595964e24f4c1b3e749a2470c0c51f", @typed={0xc, 0x4b, @uid=r8}]}, @nested={0x264, 0x14, [@generic="0d28ba801a956ab740e8e3ac70b8c7ecb95d469684bb7520bf61a7fba456157c51773aa0", @typed={0xc, 0x2c, @fd=r0}, @generic="75e4866f0754d98c62e467047592042a76af7d877119c7a893216d20b1a8cef039c293794a57a9063cb2178421df100e8405edb27615adf97d8c12808ab89b6fa069088079e44dcfcc48dd14e6a89c2dc4023986fbdda3678b7e71e6ccdc73a0491e2ce2b7a4a85d7302bc81de575264145b46ee0b580eaab939e5fcb168d9437236cea402ed985e8881a0044d2e26e9a242eb372303d23c35f5fd0fc43c1ae0114709925d4fb5c1724bc3affa90516c68008da20cd121", @generic="271532b7f7741387f92416278f8e0f970c8e19aeb0f5b819b94d5726f2012b55a2c7796b40abf37ac87dea4010d06fd9b90361e68126941ed4aec4b335edf1dd09275fb587f99daa6ab5ec90b87a1332209bbf8135c58b9f3e07e0cbdd18d739428dda7af4ca6d26f86c6465212a2262845853fa0f56214ebbee486b929a16213a2ff5e5194af2", @typed={0xc, 0x71, @ipv4=@multicast1=0xe0000001}, @generic="6474e29e1d32816d80ea959753af4850711afaa0dee8531c359b14dffd58eb5b051cf05bd5181fac32e280cc2acc0197287be64b4c1cc375d445da70e430305f99e5e99dd5cb6d8c95f2687ae8d358ee05520e454b1b85b3bd38ec09ef1233570e2698254f4a42d0a67392d1f470dedd9e5c04b5f7bc15fe7689dfe1b019af58f58bbbe98cc1b88777d48dffc00e09d41261347c85568e4bd3389c", @generic="8eb1ee510d4b9f2e80f43966a0886aa4fbbd833fda8b776d20ca0327cf11629dcf46f306d9c9d7466fd0b28fd698bcc046b248c8b14ad8254a090dcf776a593f669a033474e40290af"]}]}, {0x1e4, 0x38, 0x200, 0x0, 0x1, [@typed={0x78, 0x17, @binary="36b6806c20b9f393fa4b7001e9be2e0f7d01e56d1beac6258d39d6460d4c7aff5825db559c91aa1e665a6ce3de2f364d1d099429f555b3ee4e637656381f32e3aeeee0a73700eb39fe92d823cec3678365bbe9fa088653a6564551d965beb157fdb9008a3317117ed216635724"}, @generic="d6de0fcaaf6fb7513102e77904e7958e754e3530027060fbe5c86e0d214219c7accb183138fdf1b730c4a520d55c0f9fc55b38fbfc037667bd79921e0f6e92acfa0ecbcbcf625455318cd0a9fbd8eb4c1a9f8b0ef0a8da181a7af2eca7be573978d0873d671a61c3fb5c9760409e6ea44bdaf5623d81cb04267c", @flag={0x4, 0x16}, @flag={0x4, 0x2f}, @generic="b9a754df8b5894d6d5c4ae8c888fe397056a4994956c0865bd635e49", @nested={0xb8, 0x85, [@flag={0x4, 0x6e}, @typed={0xc, 0x3b, @uid=r9}, @generic="ce09f04e406d12a3d4f9f129ef4255e3a1025bc957c74000205edda7a38527c3c53c6ffc1261a04d2b1b85d3f6fad2ee4cff6b03c1c26631e32cbb0a45cf70de34c9f9d011628f0c77b1164ebd7cbf5b9db3e892274af70c64fe1bd6d2bd25bc5997885044e2f8b3618a0a414f92ed7137ca0a185ea4e0511cf264f4b19f970232443ccccd5b2af83de813a59f972e18f17bcc886f71", @flag={0x4, 0x2a}, @flag={0x4, 0x7a}, @flag={0x4, 0x92}]}, @flag={0x4, 0x22}]}, {0xf8, 0x13, 0x610, 0x4, 0x0, [@nested={0x18, 0x1a, [@flag={0x4, 0x2d}, @flag={0x4, 0x59}, @typed={0xc, 0x85, @ipv4=@multicast1=0xe0000001}]}, @flag={0x4, 0x9}, @nested={0xb8, 0x41, [@typed={0xc, 0x52, @uid=r10}, @typed={0x18, 0x8, @ipv6=@loopback={0x0, 0x1}}, @flag={0x4, 0x1f}, @generic="d9d4c9266e3c48a4cc31befd0ad288e9fb6b877ca2c7ac30f15c543ed22b2ea250dfccfa5bd9826ff89332e7346de92cb3bf5070b4aeb20187bc0f977f6b764f158c06e1076d846e7c28027796be563aa7419cf83e94a11bc021a850c95c8f75933483ef1bcb611b45e3a17e7b372bd15a42aa6028405873a1855f9c2513bee6501b3c0102fe10ea08d7"]}, @typed={0x10, 0x21, @u64=0x8001}, @flag={0x4, 0x60}]}, {0x10ac, 0x19, 0x200, 0x1, 0x2, [@generic="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", @flag={0x4, 0x96}, @generic="55ff51a287bb8a47ab5d38de08a26e1aa65b6622d356adbcbba67f298c3a2fdc1e13cde4f385a6cb5e2b22a44f2efb30f0298e372718733babcf49e2e5173792aef957e60854baad9d81bb4f20ca028dc8f5c5e85819136bf4ee787b290b4ee024b4c75fb15789ecf2b3dc94318ffcf6e8d9cf50810b8e0f03c59a988899f81dbfde55547ce0ea4021f78317", @flag={0x4, 0x48}, @flag={0x4, 0x43}, @flag={0x4, 0x93}]}, {0x14, 0x41, 0x700, 0x3, 0x3, [@flag={0x4, 0x19}]}, {0x29c, 0x34, 0x6, 0x6, 0x2, [@flag={0x4, 0x6f}, @nested={0xc4, 0x46, [@flag={0x4, 0x44}, @typed={0xc, 0x2, @ipv4=@loopback=0x7f000001}, @flag={0x4, 0x22}, @generic="b4496c8f43de1021ad8736da4fb463dc57707a6d1a3734aec232e71de8637f0b03c9e7f37566b9f59542f2262bdd752e361e1815c49e946b0600aeed649a74a311bfc293d78153905f4f30ac044d4def9ca4b194462c2759335818d7bda2ea96ac10cea3059babf0f9ecc1136015e122da39d72fca5f308859b365aec902f1e9ab694c284420eeae84bef4fd58bb63aa6bd7baf68fc7c7f16273ab70fcc90017f486a094ad3152ef88"]}, @generic="a05b8f55212afb1db0fa53cbae91b3d31dffb295b20b4bfffdc47eafe554559f85e11169e1f1784e52157370cfbdead9f91097c5fb6bb0a794bee5f920ae7dd0fb0aafeabaf1f00440fc86964975485288de6aab98b1f1671d602dac65929e4da2", @generic="68d748e1315bd168e4cacb36c66e7051c40f0c077c47e0832288e8cd1541a7a5e3cef379ddb37b3bea5e5e31cbd2b15acc87976448e8fa93a72f4783239acf6c212d09e248f6cafc6a1f3dab3e9c2ae91728fab1e5e9b4e3e47b0376109baa8c04c7b7290a276f029eb6a868928aa21b51b757ebfcaf53b62f241291d16e511fe5db5976b77c470621bf6ac4473ba07ae1fe86b34e75d01cab0f112d2b4ce9ca19824e965995896c02f39563da1b849aa4014fb0e410abaa549b8366afb2314292a9f325ce4d468a3df4571a391d6aaa62feb056a3a791535b10de", @flag={0x4, 0x7b}, @generic="073ffe3bb8e838841fba13c8af708960cfe451a7fbd23416ead09318b6c779e589bdd1ee201d15b59c65d87ad68b45f4ab176454c7fefc62f7e404810b35d40c2ab7522491c0830d7202f5b8f565d54d4c33786dd1399132c45ae6732c4caa90c579c9791c3569909a4483b68dbc4dc058187884a0fa8d60a27882599196", @flag={0x4, 0x80}]}], 0x1eb4}, {&(0x7f0000fa7000-0x58)=[{0x58, 0x1c, 0x0, 0x5, 0x1, [@generic="07b9d83a6acc1c89911b59b6dd12772b451162dfa86f31f70a0ca755516c6f12942a3d1f9392cce076ce0374c3e7cecf16e296dae826543205868258c407f679bb3e5fd47c"]}], 0x58}], 0x2, 0x0, 0x0, 0x40040}, 0x8004) writev(r0, &(0x7f0000cd7000)=[{&(0x7f0000754000)="290000001800310dda00000500c900020a2400000000ff0680000c000c00080004000e00e600ffe56b", 0x29}], 0x1) 2018/01/12 15:09:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) 2018/01/12 15:09:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00007ec000)='/dev/admmidi#\x00', 0x7, 0x50100) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000c41000)={0x2, [0x6, 0xff]}, &(0x7f00007b2000-0x4)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00006f9000)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_wolinfo={0xc, 0x0, 0x0, "00009d07c801"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000648000-0x8)={0x0, 0x9, 0xb61c339}, &(0x7f0000898000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00008fd000-0x8)={r2, 0xe10e}, &(0x7f00009a5000-0x4)=0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) sync() ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000db8000)=""/154) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000eb8000-0x12)={@generic="4e25618558b4ca666a4f1a7250765fa5", 0xb3f}) 2018/01/12 15:09:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200, 0x1, 0xff, 0x5, 0x40, 0x6, 0x7}, &(0x7f0000002000-0x4)=0x20) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000-0x4)=0x1, &(0x7f0000000000)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000e3d000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000a6d000-0x18)={0x6, 0x8000000005, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00002e2000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x205, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0}) [ 76.020413] binder: 11639:11648 BC_INCREFS_DONE uffffffffffffffff no match [ 76.027881] binder: 11639:11648 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 76.035898] binder: 11639:11648 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.043132] binder: 11639:11648 got transaction to invalid handle [ 76.049458] binder: 11639:11648 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000b4d000-0xb)='/dev/adsp#\x00', 0xfffffffeffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000301000)={0x10003, 0x0, &(0x7f0000f80000/0x3000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00005b3000-0x20)=[{{0x0, 0x0, &(0x7f0000001000)=[], 0x0, &(0x7f00009a1000)=""/91, 0x5b, 0x0}, 0x0}], 0x1, 0x0, &(0x7f0000b94000-0x8)={0x0, 0x0}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000dd7000-0x46)="d8e2cd386ba9a2048372cfa2aceb21162e47b9bfd6fc082a986ffb6591d5430bc5e1b4b658ace7694f5cafefe075f4bdc266f2f3258e2f93278a86594c09ff08571e3a7cd24a") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000774000-0x11)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) clone(0x0, &(0x7f00006a8000-0x93)="", &(0x7f00005b3000-0x4)=0x0, &(0x7f0000c34000-0x4)=0x0, &(0x7f0000e64000)="") sendmmsg$unix(r2, &(0x7f00000bd000)=[], 0x80, 0x0) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000874000-0x12)='/dev/snd/midiC#D#\x00', 0x3ff, 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000a6b000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007b1000-0x4)=0xfffffe72) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000cda000)=""/206) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000a5c000-0x11)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000720000-0x50)={0x12, @tick=0x3505, 0x4, {0xf66, 0x2}, 0x1, 0x3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f000000d000)={@common='tunl0\x00', @ifru_addrs={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x26) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x80487436, &(0x7f0000000000)={@common="02000000006c30000000006f3a0800", @ifru_flags=0x0}) [ 76.107104] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 76.137602] binder: 11662:11672 BC_INCREFS_DONE uffffffffffffffff no match 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xe7a000)=nil, 0xe7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000e7a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000e7a000)=@get={0x1, &(0x7f0000e2c000)=""/0, 0x0}) mmap(&(0x7f0000e7b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f000028d000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000e7c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000e7c000)={0x15000, 0x2000, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000e7b000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000e7b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000d56000)=""/5, 0x5) mmap(&(0x7f0000e7b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000c41000/0x18000)=nil, &(0x7f0000e7b000)=[@text16={0x10, &(0x7f0000294000-0x44)="ba4200b80300ef360f01d10f23e8baf80c66b838c8f78e66efbafc0cec65f3a566b826bcd18f0f23c80f21f866350c0000000f23f80f0d17b819008ee00f0132f30f22c6", 0x0}], 0x0, 0x0, &(0x7f00009d6000-0x20)=[@cstype3={0x5, 0xf}, @cr0={0x0, 0x4}], 0x2) sendmmsg(r0, &(0x7f0000bc4000-0x1a4)=[{{&(0x7f00008de000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f00001a3000-0x10)=[], 0x0, &(0x7f00006dc000-0x2620)=[], 0x0, 0x0}, 0x0}, {{&(0x7f00007f5000)=@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00000b7000-0x10)=[], 0x0, &(0x7f000039d000-0x178)=[], 0x0, 0x0}, 0x0}], 0x2, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000e6000)='/dev/adsp#\x00', 0x3, 0x0) mmap(&(0x7f0000e7d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000e7d000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000a4000-0x3d)='G', 0x1) 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000e0f000-0x18)={0x1, &(0x7f0000b4c000-0x1000)=""/4096, &(0x7f0000001000)=[{0x1000, 0x3a, 0x0, &(0x7f0000001000)=""/58}]}) fchdir(r0) ioctl(r0, 0x100000001, &(0x7f0000001000)="") [ 76.151001] binder: 11662:11672 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 76.160293] binder: 11662:11672 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.167584] binder: 11662:11672 got transaction to invalid handle [ 76.168902] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 76.182337] binder: 11662:11672 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000985000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f00008fe000)={0x2, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xca5000)=nil, 0xca5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={&(0x7f0000004000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000005000-0x10)={&(0x7f0000003000-0x1238)=@newsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0x0, 0x33}, @in=@multicast2=0xe0000002, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}, 0x0, ""}}]}, 0x154}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004ec000)='/dev/sequencer\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000ca5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) mmap(&(0x7f0000ca6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000ca6000)=r2) mmap(&(0x7f0000ca5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(r1, &(0x7f0000ca6000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000ca6000-0x4)=0x14, 0x80000) 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10000000010, 0x2, 0xc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000c51000-0xc)={0x6, r0, 0x1}) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffff9) write(r0, &(0x7f0000ced000)="1f0000000201ff00040000bb00020022074000ff08000800011600080100c4", 0x1f) 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000bab000)={0x4, 0xffffffffffffffff, 0x1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00003d5000)={0x0, 0x0, 0x0}, &(0x7f0000237000-0x4)=0xc) waitid(0x2, r1, &(0x7f0000e64000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x8, &(0x7f0000ddc000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000da2000)={0x1, 0x5, 0x9, 0xf2, &(0x7f00002eb000-0xf2)=""/242, 0x26, &(0x7f0000466000-0x26)=""/38, 0x13, &(0x7f0000cc4000-0x13)=""/19}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d89000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000672000/0x4000)=nil, 0x4000) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000836000-0x28)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000b16000)='/dev/net/tun\x00', 0x0, 0x101000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000097e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f00001a4000-0xc)={0x0, 0x0, 0x0}}}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000ca1000)={@syzn={0x0, 0x0, 0x0, 0x0, 0x0}, @ifru_mtu=0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f000037f000-0x12)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000568000)={0x6000, 0xd000, 0x5, 0x5, 0x80000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000001000)={0x1, [0x0]}) r0 = socket$inet(0x2, 0x80003, 0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000007000-0xb)='/dev/audio\x00', 0x204c82, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000008000-0x38)={0x3, 0x0, [{0xbfe, 0x0, 0x7}, {0x344, 0x0, 0x3987}, {0xade, 0x0, 0xff}]}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000007000-0x8)=0x0, &(0x7f0000006000-0x4)=0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000003000-0x10)={0x6, 0x107004}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={@common='tunl0\x00', @ifru_data=&(0x7f0000001000-0x20)="d31000b8428d2109e00c0000800007c8000000000000049500cc956fd6f6de93"}) 2018/01/12 15:09:15 executing program 3: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001000-0x10)={0x2c, &(0x7f0000001000-0x4)="549f9688e941e46d2384ae3d40b0dac2648a73d48edb69d20c9c97e2166ec934989bf5ad5b8b74cb06b7dc9c"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x8000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x22) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x840b, &(0x7f0000020000-0x151)="") r1 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000445000)='./file0\x00', 0x144) symlinkat(&(0x7f0000016000-0x8)='./file0\x00', r1, &(0x7f000001f000)='./file1\x00') [ 76.317604] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 76.344602] binder: 11705:11719 BC_INCREFS_DONE uffffffffffffffff no match [ 76.347444] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000e8d000-0x11)='/selinux/enforce\x00', 0x101000, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f00009e4000-0x4)=0x0, &(0x7f000006b000)=0x4) r1 = open(&(0x7f0000fb7000)='./file0\x00', 0x141046, 0x400000000000000) flistxattr(r1, &(0x7f0000779000)=""/13, 0xd) r2 = open(&(0x7f0000c6c000)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000043a000)=0x7c96, 0x4) fcntl$setlease(r2, 0x400, 0x0) 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000000000/0x8e2000)=nil, 0x8e2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00008e2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00008e2000)={0xfff, {0x2, 0x3, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x52, 0x3, 0x5e, 0xb2, 0x100, 0x0, 0x101, 0x2, 0x22}) setsockopt$inet_buf(r0, 0x0, 0x1000000041, &(0x7f0000172000-0x58)="958e392937a186d6306a3615593baa57ff0502060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0xfe62) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x88a) r1 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f00008f8000-0x18)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) io_setup(0x0, &(0x7f000048e000-0x8)=0x0) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000d21000-0xa8)=[{{0x77359400, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) write$sndseq(r0, &(0x7f0000dca000-0x8c)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @quote={{0x0, 0x0}, 0x0, &(0x7f0000f8f000)={0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x0}}}}}], 0x30) rt_sigtimedwait(&(0x7f00005c7000)={0x400000000}, &(0x7f00006c8000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000082a000-0x10)={0x77359400, 0x0}, 0x8) 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x2, 0x10) write(r0, &(0x7f0000d0f000-0x24)="2400000010001f004d12e30800de010303050100060001021f0000000600000000000000", 0x24) [ 76.366737] binder: 11705:11719 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 76.394306] binder: 11705:11719 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.401594] binder: 11705:11719 got transaction to invalid handle [ 76.407898] binder: 11705:11719 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:15 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001000)={0xfffffffffffffffc, 0x2}, 0x8) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1b2, 0x56f) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000003000-0x4)=0x7a) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r0, &(0x7f0000003000)="4e3370dcdebca21955bb8ddb47f68f87fc4c74caff541a19bf1674f15a045305f119434956e283553961689e8de89e6cc7f02aa4e1604a323febeac4e0a226b8d65ce22f3025b2bcc31fa2b945571b157f7b9c4ea1d1d3a8c6dc4dafa3aa4451590e3b3c53bfdeb751ded232b261b02da7a4e5ea51cc44d1ae22a1390e96e42ca119a6781ff2813c0fbfd00f5d7defc5fcd998873671bc53d9133647c4c0e7c0a64108b6f62329", 0xa7, 0x40, &(0x7f0000003000)={0x3, {"ce49ed4c766c5e"}, 0xffffffffeee6a214}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000001000)='./file0\x00', 0x62) accept$alg(r2, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000003000)={0x8, 0x3f, 0x3ff, 0xad2b, 0x80, 0x0, 0x0, 0xffff, 0xa512, 0x9, 0x100000000}, 0xb) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000003000-0x89)=""/137) setpriority(0x1, 0x0, 0x0) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000fc3000)='/dev/cuse\x00', 0x41, 0x0) mmap(&(0x7f0000fc3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000fc3000)={@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0, 0x0}, &(0x7f0000410000)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000f83000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, r1}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000fc2000-0x4)={0xffffffffffffff9c}) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair(0xb, 0x3, 0x200, &(0x7f0000051000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000-0x30)={0x48, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006000-0x18)=[], &(0x7f000000c000)=[]}}, @register_looper={0x630b}], 0x1, 0x0, &(0x7f000000d000-0xa5)='6'}) mmap(&(0x7f0000fc4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000fc5000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000fc2000-0x30)={0x74, 0x0, &(0x7f0000fc5000)=[@enter_looper={0x630c}, @request_death={0x400c630e, 0x0, 0x3}, @enter_looper={0x630c}, @clear_death={0x400c630f, 0x0, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000bc8000)=[], &(0x7f0000398000-0x38)=[0x0, 0x30, 0x38, 0x0, 0x30, 0x30, 0x78]}, 0x46b}}], 0xf, 0x0, &(0x7f0000fc2000-0x27)="de04801bf30007058602e45b9cd2b3"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000fc2000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000fc2000)=r4) 2018/01/12 15:09:15 executing program 1: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00002e7000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x600000) setpriority(0x1, r1, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) fgetxattr(r2, &(0x7f0000819000)=@random={'osx.\x00', '\x00'}, &(0x7f0000bdc000)=""/29, 0x1d) syz_open_dev$sndseq(&(0x7f0000981000)='/dev/snd/seq\x00', 0x0, 0x200000) 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f000000f000-0x11)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000000e000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000002000-0xd)='/dev/dmmidi#\x00', 0x0, 0x10080) open(&(0x7f000000a000)='./file0\x00', 0x60000, 0x2) r1 = syz_open_dev$vcsn(&(0x7f000000d000-0xa)='/dev/vcs#\x00', 0x5, 0x10000) r2 = openat(0xffffffffffffffff, &(0x7f000000a000-0x8)='./file0\x00', 0x101000, 0x100) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000005000-0x4)=0x0) setpgid(r3, r3) r4 = syz_open_procfs(r3, &(0x7f0000003000)='attr/sockcreate\x00') mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f000000f000-0x8)={0x0, 0x7}, &(0x7f0000010000-0x4)=0x8) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f000000f000)={r5, 0x7fff}, &(0x7f000000f000)=0x8) exit(0x0) sendfile(r4, r4, 0x0, 0x4) ioctl$void(r4, 0xc0045878) getpgid(r3) 2018/01/12 15:09:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:15 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000399000)='/dev/autofs\x00', 0x80000, 0x0) bind$inet6(r0, &(0x7f00000af000)={0xa, 0x3, 0xd4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xf85000)=nil, 0xf85000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000f79000)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000cbc000)={0x1, [0x1ff]}, &(0x7f0000f86000-0x4)=0x6) sendmsg(r1, &(0x7f0000cdc000-0x38)={0x0, 0x10f, &(0x7f00003c8000)=[], 0x0, &(0x7f0000e31000)=[], 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000f80000-0xf1)="", 0x0, 0x0, &(0x7f0000143000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00004f2000-0x23)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0xfffffffffffffffa, 0x3, 0x81, 0x10001}, &(0x7f000051c000)=0xa0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000f86000)={&(0x7f0000f4f000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000f87000-0x40)=[{&(0x7f000062e000)="bf90941c3f5f2604ef464da63c63ec443a7e8ce2f270d3d02cc5320c0e1d82267ed5c9cce776122974953a00a7a09a3c9defe13cecb2278f2c5f1a1ecc683997e1091c0a5cf6fd24d5431cb0e16179c438af4f376b9681ca4e1f3db546c8df0d1407614d793568b399c411364fae9ee8b07cbd4b01dde21d498e1888659ee50123c3c9416036772133cd", 0x8a}, {&(0x7f0000f87000-0xe3)="3280aab16a1302d4dd72932f32cab024706720e1de85838e42c4b7ff96d7e63eceaaf82d1ec2b2cd9055e3bb17de82c0d85367d5657dde5348b8596ce14cd6be05cfeffbeef81226dc51e786c163758da1a719f7953e4f7cefb6d9e5063455d9d5017e4a17e63e7c85df468d3d00c511790ee989e185f54f4579bbc79e8398281920d1367fd891610f7bf2017abbbf55edde2b2ae8dbe22cc306134ab3b06b8aad0b4ff6625cf15d2a55394adf745f43ca335a92e52176262fd8f8b39418140a27e327bbc65635d19c55e844b0cb88e2c356a40b8821a0593ba1cb434460d97ca6ef7e", 0xe3}, {&(0x7f0000f87000-0xfb)="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", 0xfb}, {&(0x7f0000849000)="8501d3d75162e3fffb7bb94b6ebe0a7c6fdffb945dff2192f9db39a4fa1b3e02615c6cf515a770a4c986f3abae6f2abb13e62ea08daab16b626aee224773c205998fe60e7d1406c4c305eb485375b2e58b7ef635f0cbfe663c71678c458f3815dd9c65b6bd186dec0a8504e2341dc590b2", 0x71}], 0x4, &(0x7f0000f86000)=[@rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}], 0x20, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000883000-0x8)={r2, 0x7}, 0x8) 2018/01/12 15:09:15 executing program 0: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000-0xf)='/dev/sequencer\x00', 0x408041, 0x0) bind$unix(r2, &(0x7f0000001000-0xa)=@file={0x0, './file0\x00'}, 0xa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fe7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x10000000007, &(0x7f0000194000-0x10)={0x44, 0xfb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18, 0x0}, 0x0) 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004e9000-0x8)='oom_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000b51000)=0x0) sendfile(r0, r0, &(0x7f0000014000)=0x0, 0x1000000800000008) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000469000)={0x2, &(0x7f0000443000-0x18)=[{0x10004d, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f000067f000-0xc)='/dev/rfkill\x00', 0x24200, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f000010c000)='./file0\x00', 0x40006d0) inotify_rm_watch(r2, r3) writev(r1, &(0x7f00000a6000)=[{&(0x7f0000430000)="8f", 0x1}], 0x1) 2018/01/12 15:09:15 executing program 3: sync() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000-0x4)=0x100000000, &(0x7f0000002000-0x8)=0x4) syncfs(r0) mkdirat(r0, &(0x7f0000001000-0x8)='./file0\x00', 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x100, &(0x7f0000003000-0x8)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000004000-0x8)={0x0, 0x8, 0x0, []}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000003000)={0x10000, 0x0, 0x1, 0x4, 0xa1c, 0x5, 0x5, 0x9, r2}, &(0x7f0000003000-0x4)=0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4, &(0x7f0000003000-0x20)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x8, r0, &(0x7f0000002000)="", 0x0, 0x1000, 0x0, 0x0, r0}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x5cb, r0, &(0x7f0000000000)="2bd6f66a1a8a77cf01677dcbb669acd81da75a8d079099f1044634346422d26713c4e4697ea7c7219ab63ce2f65d4609c5bdbcb59a8dd61c82f8d84b4d999928275fa77319a6c6ece6618ac2b90e5a5fd992fa07780617e4fd295689742bcf9cfc386e44981b527921cf24d03bfdeaf0a57ad841ffb7f03783c2bfcf47c0271a281d68e8e0d39faf51e13bf183276f2921c836ce98643454b57b57020806585b76854ce81c2e8c134b5719cca6ac90865b99034c1770b496c6b3d35c6f267e18c70ced410e746000ee707e0e8a6a0ccfb3d473c881ed095ab3f96f34c2a9", 0xde, 0xc062, 0x0, 0x1, r0}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000002000-0x7f)="79286415d4201aff772b8a2e53fc9be998a82b2a1184daa0ebc15c6cd0d1a782f022738adee241f10290912fd2a12b13fd0cf4242f9bbd93b1e67b59639accb92938f5e26f715ead79d5c84ff460cc153576c8317a1cdf83149b890bcf13121d969b2d52d8bfcae4e916af8b06b71bcfb4874e05b315463df4b32f6608fddc", 0x7f, 0x2, 0x0, 0x0, r0}, &(0x7f0000002000-0x40)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff0001, r0, &(0x7f0000002000)="eb60687afeab1e7745439dd64f45a8edf1aba59a779144c9", 0x18, 0x4, 0x0, 0x1, r0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x34080, 0x0) 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000c54000-0xb)='net/packet\x00') read(r0, &(0x7f0000b0b000)=""/157, 0x9d) r1 = getpgid(0xffffffffffffffff) migrate_pages(r1, 0xfffffffffffffffe, &(0x7f0000f7e000-0x8)=0x4c17, &(0x7f00008cb000)=0x8) socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f000069e000)=[{&(0x7f0000f5c000)=""/1, 0x1}], 0x1, 0x0) read(r0, &(0x7f0000c8a000-0x46)=""/70, 0x46) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000e05000+0xef)={r0, 0x28, &(0x7f0000fd2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0xfad000)=nil, 0xfad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000fab000)={0x19980330, 0x0}, &(0x7f00001dc000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000fad000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00003b3000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) bind$netlink(r0, &(0x7f0000fab000)={0x10, 0x0, 0x0, 0x3ff00000}, 0xc) mmap(&(0x7f0000fad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000fad000)='/dev/adsp#\x00', 0x8, 0x200100) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00001eb000)=0x7, 0x4) mmap(&(0x7f0000fae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000a5b000)='/dev/snd/pcmC#D#p\x00', 0x80, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000faf000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000faf000-0x4)=0xc) mmap(&(0x7f0000fae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000bc9000-0x8)={0x20071026, r3}, &(0x7f0000fae000)={0x5, 0x40, 0x100000001, 0x5, 0x571, 0x9}) [ 76.626784] binder: 11754:11763 BC_INCREFS_DONE uffffffffffffffff no match [ 76.643354] binder_alloc: 11757: binder_alloc_buf, no vma [ 76.643382] binder: 11757:11773 transaction failed 29189/-3, size 0-0 line 2957 2018/01/12 15:09:15 executing program 1: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000b5a000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x25, 0x1, 0x6}) clone(0x0, &(0x7f0000f43000)="", &(0x7f000004d000)=0x0, &(0x7f0000952000-0x4)=0x0, &(0x7f0000a06000)="") recvmmsg(0xffffffffffffffff, &(0x7f0000080000)=[], 0x0, 0x0, &(0x7f000062c000)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400, 0x0}}, &(0x7f0000be0000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) [ 76.684314] binder: 11754:11763 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 76.700308] binder: 11754:11763 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.707199] binder: BINDER_SET_CONTEXT_MGR already set [ 76.707209] binder: 11757:11788 ioctl 40046207 0 returned -16 [ 76.708864] binder_alloc: 11757: binder_alloc_buf, no vma [ 76.708887] binder: 11757:11788 transaction failed 29189/-3, size 0-0 line 2957 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) pwritev(r0, &(0x7f0000b2f000-0x10)=[{&(0x7f00003a3000-0x1000)="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", 0x1000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f000065c000-0x58)={0x1, 0x0, [{0x176, 0x0, 0x0}]}) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000e4e000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000d55000)=0x10) write(r0, &(0x7f000036a000)="", 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000e0f000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00006c7000-0x10)=[], 0x0, &(0x7f00009e0000-0x48)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x0}, 0x0) close(r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00007b6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f000086c000-0x68)={0x7b, 0x0, [0x1, 0xfd, 0x8, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000dc3000-0xc)='/dev/autofs\x00', 0x800, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000f45000)={0x8, &(0x7f00002a6000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = syz_open_pts(0xffffffffffffff9c, 0x800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000bd6000)='net/dev_snmp6\x00') ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000c51000-0x4)=0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000df1000)={0xfff, 0x10001, 0x8000}) get_mempolicy(&(0x7f0000709000-0x4)=0x0, &(0x7f0000de8000)=0x0, 0x6, &(0x7f0000d77000/0x2000)=nil, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000cda000)=""/206) [ 76.731937] binder: 11754:11763 got transaction to invalid handle [ 76.738218] binder: 11754:11763 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000011000/0x3000)=nil) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fstatfs(r0, &(0x7f0000014000-0x28)=""/40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f00008a3000)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000a37000)='ns/uts\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00006c9000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000dc1000-0x4)=r1) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x200002717, &(0x7f00007e2000)=""/1, &(0x7f0000000000)=0x1) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x3, &(0x7f000056e000)="2a8e339cbc4a24cbdd2186b32c816dac", 0x10) prctl$intptr(0x29, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00007e3000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x805, 0x0) sendmsg(r0, &(0x7f0000a15000)={&(0x7f0000cc8000)=@hci={0x1f, 0x1, 0x1}, 0xfffffed0, &(0x7f00003dd000-0x50)=[], 0x0, &(0x7f0000b0f000-0x110)=[], 0x0, 0x0}, 0x0) 2018/01/12 15:09:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000e11000)='cmdline\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fchdir(r0) rename(&(0x7f0000134000-0x8)='./file0\x00', &(0x7f0000dbf000-0x8)='./file1\x00') 2018/01/12 15:09:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f000066c000)=0x219) clone(0x200, &(0x7f0000251000+0xdca)="", &(0x7f0000744000)=0x0, &(0x7f00008c8000)=0x0, &(0x7f0000dad000-0x37)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0, 0x0, 0x0}, &(0x7f000044c000)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000ad9000)='attr/current\x00') sendfile(r2, r2, &(0x7f00004a2000)=0x0, 0x22) r3 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') read(r3, &(0x7f0000b5b000)=""/0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26105, 0x20) 2018/01/12 15:09:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) openat$mixer(0xffffffffffffff9c, &(0x7f00004e1000)='/dev/mixer\x00', 0x101000, 0x0) write(r0, &(0x7f00005bd000)="", 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000010000)={0x0, @multicast2=0x0, @loopback=0x0}, &(0x7f00003b9000-0x4)=0xc) clock_gettime(0x6, &(0x7f0000053000)={0x0, 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000c57000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, r1}, 0x14) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013000)={0x2, &(0x7f000001c000-0x18)=[{0x15, 0x0, 0x0, 0xffffffffffffffff}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) r2 = socket(0x13, 0x80000, 0x10040) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000726000)={0x0, 0x6}, &(0x7f0000ec4000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f000052b000)={r3, 0x4b6, 0x0, 0x9, 0x2}, &(0x7f0000765000-0x4)=0x18) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f000053c000-0x4)={0x0}, &(0x7f00007e1000-0x4)=0x4) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000af2000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f000097e000)=0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000e02000)=r6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000846000-0x4)=0x0, 0x4) sendto$unix(r1, &(0x7f000000d000)="", 0x0, 0x0, &(0x7f000000e000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) getsockname$unix(r4, &(0x7f0000574000-0x1002)=@file={0x0, ""/4096}, &(0x7f0000b3b000)=0x1002) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ad0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000479000-0x10)=[{&(0x7f00000b6000-0x84)=""/132, 0x84}], 0x1) 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x20000004, &(0x7f0000b3a000)="", &(0x7f0000f7a000)=0x0, &(0x7f0000dbb000)=0x0, &(0x7f0000001000-0x3d)="a21111904db30ed71b5e20eadf4da3041662e540b232626315530b18b0d0581f100763f0242d076e0bd997bcdc4e36991a4c185c259ea527f9e22da105") setitimer(0x0, &(0x7f0000001000-0x20)={{0x100000000000, 0x2710}, {0x0, 0x0}}, &(0x7f0000e51000+0xf82)={{0x0, 0x0}, {0x0, 0x0}}) [ 76.885197] binder: 11819:11825 BC_INCREFS_DONE uffffffffffffffff no match [ 76.893760] binder: 11819:11825 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 76.926238] binder: 11819:11825 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.933576] binder: 11819:11825 got transaction to invalid handle [ 76.939898] binder: 11819:11825 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000e5000)=0x80, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000036d000-0x4)=0x0) bind$inet(r0, &(0x7f0000105000-0x10)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) write(r1, &(0x7f0000a0b000-0xb4)='\b', 0x1) sendto$packet(r1, &(0x7f00005c7000)='D', 0x1, 0x0, &(0x7f000050c000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="714981799c01", [0x0, 0x0]}, 0x14) sendto$inet(r1, &(0x7f0000d25000-0x1000)="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", 0x489, 0x0, &(0x7f0000bc9000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0x181000)=nil, 0x181000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000044000-0xb)='/dev/vcsa#\x00', 0x9, 0x2) mmap(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000181000)=0x800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000182000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000182000)={0x0, 0x0, &(0x7f000008f000-0x10)={&(0x7f00000d4000-0x110)={0x2, 0x18, 0x0, 0x3, 0x22, 0x0, 0x0, 0x0, [@sadb_key={0x20, 0x8, 0x7a0, 0x0, "321ab5ba88323952483dc8b839d55451aa9cd47d5744cb0e1d6084c87f7c7d6046007e58d2afec17a6919ee8e21d1178ed8cfc38db5ad9bd2e6151e6ea42c80830d8f25b324b3fcb7d7b4d94def4163921c1fcdb7a5a89c20900685e361ed293a44a6092c153e70a22fce512a596e01b51e1fca78504a5051a3d620fadba83267ad06ebd7dea70d9e15e04cca5175ec562ba6b54407bcaca6f20fb07e185fc7042690ac2430dc7dc8c4ec3b5ef038217b0ca1e9fd9a8bdab69b3cda25e42b99513346b0aa6f2f203331c78f44621bc2b9a5936db4a67d91b5c6c2d81cef7f2567ecb6bb7b5af0e911869bf495c447e51d120c13d"}]}, 0x110}, 0x1, 0x0, 0x0, 0x0}, 0x20008000) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f00000a5000)={0x2, 0x4000000000000d, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty=0x0, @in=@empty=0x0}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_lifetime={0x4, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x44010, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000040f000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000526000)={0x0, 0x3}, &(0x7f0000290000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000294000-0x14)={r1, 0x100000001, 0x6, [0x6, 0x7fff, 0x7, 0x1e, 0x9, 0x7e86]}, &(0x7f0000b76000-0x4)=0x14) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000a91000)=0x0, 0x0}, 0xa00000400, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000344000-0x8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)="") getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000558000-0x4)=0x0, &(0x7f0000bdb000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) 2018/01/12 15:09:15 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000002000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x80000118, 0x3, &(0x7f0000b65000-0xf)="2a8e339cbc24cbdd1a86b32c2f1bac", 0xf) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000fd6000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x2}) 2018/01/12 15:09:15 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000b5d000)='cmdline\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f000029c000-0xe)={0x0, 0x2, 0x3, [0xeb1, 0x8001, 0x5]}, &(0x7f0000000000)=0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() capset(&(0x7f0000001000)={0x200f1526, r2}, &(0x7f0000001000)={0x46, 0x101, 0x8, 0x7, 0x0, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001000)=@assoc_id=r1, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f000046d000)=0x0, &(0x7f00008f8000-0x4)=0x4) ioctl$sock_ifreq(r3, 0x2000000008913, &(0x7f0000a0e000)={@common="6c6f0000000000000600000900", @ifru_ivalue=0x0}) 2018/01/12 15:09:15 executing program 4: kexec_load(0x0, 0x0, &(0x7f0000c26000)=[], 0x150000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000026000-0x12)='/dev/snd/midiC#D#\x00', 0x2, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000056a000)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00009f1000-0x8)={r1, 0x3}) syz_open_dev$dspn(&(0x7f0000d6f000)='/dev/dsp#\x00', 0x1, 0x400000) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00003cf000)=0x5, 0x4) perf_event_open(&(0x7f0000cca000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000864000-0x10)={0xfffffffffffffffd, 0x0}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00008d3000-0x18)=@add_del={0x2, &(0x7f0000017000-0x10)=@common='ip6_vti0\x00', 0x7}) accept$alg(r2, 0x0, 0x0) 2018/01/12 15:09:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:15 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000011000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000001000-0x40)="a5345f5b4b6c17e81430ee1394dbee6a3952d3458021ddae840c38537043016d20383f1986bb43ccca13b73c08da21c1c4bb9308dec5b38a06acb6c97cc74c5e", 0x40, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000013000)="d67f7acceaea7623bee2cba7025af605fefae0ab1a2c", 0x16, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000011000)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000014000-0x10)="bd0648131b7d1b5d76b262b41f54da0e", 0x10, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000012000)={r1, r2, r3}, &(0x7f0000013000-0xa3)=""/163, 0xa3, &(0x7f0000014000-0x38)={&(0x7f0000013000)={'sha224-avx\x00'}, &(0x7f0000001000-0x2)="27116dc9e9587b", 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000002000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x0, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) capset(&(0x7f0000012000)={0x0, 0x0}, &(0x7f0000002000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80000300, &(0x7f0000001000)="57b9a2c51136f1b02de1c63b8193a1f82ec6de491ef5b1ad020377715e01d949e32fac46489096c9d1eb93e43f349ea992a4321986ceacc8b567bef0d3ca5e2dfb466444e9a7c68ea529970efa68768259c103b978827a9c18dbf2246498865401370b0ae9059fe510b6dcbf4db57633edda39c23668ee3b5d4570490c47c56fce96405eff4a4f72e79f1f6618dd37397d26d80743c459053dd7ac75abd6cac54743915e", &(0x7f0000000000)=0x0, &(0x7f0000014000-0x4)=0x0, &(0x7f0000014000-0x9b)="365db42b82730cc12af9c22c11ff15b5afaed819c82f669e63f57a777f7d8da96abad7d1b6b1843f4d5c345f36424d49954eac0a60019d3112660c2f9b8bec09362111184ee17a4ede77f91e3f8ad63f8f81ef73876bb63c52278b10243e4afd73ecb66e08bcf8753be7141386d92c14d38b61ddf32ff22cf98549820a4e2436e3c3c9d18fe9230f7701b6059067233c4ffcba59f6dc049d013a63") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000841000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb7000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000a8f000-0x20)={0x1000, 0x10000, 0x1, 0x9, 0xb80, 0x40, 0x7, 0xb54f, 0x0}, &(0x7f00009d4000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000792000)={r5, 0x4}, &(0x7f00009f4000-0x4)=0x8) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000073000)={0x0, 0x0, ""}, &(0x7f000091c000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000a56000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x1c) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000381000)={r1, 0x100000000, 0x5, 0x400, 0x800, 0x780a, 0x5, 0x8000, {r2, @in={{0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4d, 0x3, 0x9, 0x4, 0x4}}, &(0x7f0000800000)=0xb8) mmap(&(0x7f0000a93000/0x93000)=nil, 0x93000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0xc) mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) 2018/01/12 15:09:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000095f000)='/dev/usbmon#\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000317000)='/selinux/context\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x7) fsetxattr(r0, &(0x7f0000211000)=@random={'trusted.\x00', '/selinux/load\x00'}, &(0x7f0000bdb000-0x5)='vmnet0.\x00', 0x8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000fde000)='/dev/rfkill\x00', 0x40000, 0x0) 2018/01/12 15:09:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x6, 0x401, &(0x7f00004eb000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000eff000-0x18)={0x0, 0x1f246c7, 0x30, 0x3, 0x4}, &(0x7f0000c94000)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000256000-0x8)={r1, 0x7f}, &(0x7f000083f000)=0x8) r2 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000e63000-0x78)={0x0, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x104, 0x0, 0x0, 0x0, 0x0, &(0x7f0000e62000+0xfe3)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0}) 2018/01/12 15:09:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000aa3000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) r1 = syz_open_dev$tun(&(0x7f00008e5000-0xd)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000029000-0x8)={0x0, 0x0, 0x0}, &(0x7f0000f12000)=0xc) getresgid(&(0x7f000000d000-0x4)=0x0, &(0x7f0000851000-0x4)=0x0, &(0x7f000030b000-0x4)=0x0) r4 = getgid() r5 = getegid() setgroups(0x4, &(0x7f0000dbb000-0x10)=[r2, r3, r4, r5]) r6 = syz_open_dev$sndpcmc(&(0x7f0000ea7000-0x12)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x101000) ioctl$sock_ipx_SIOCIPXNCPCONN(r6, 0x89e3, &(0x7f0000367000)=0x7ff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004b4000)={@common='eql\x00', @ifru_names=@generic="bf9f60809a29970d18ace2b5d4d29096"}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000fb1000)={0x1, &(0x7f0000fb2000-0x20)=[{0x6, 0x0, 0x0, 0x0}]}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00007c2000)=0x0) 2018/01/12 15:09:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000870000)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) kexec_load(0x3ff, 0x3, &(0x7f0000799000)=[{&(0x7f0000020000)="c9c44bd6e292b7fb74f38505ee7fe94ff6deac6c0a47b8ea48982beaface7e1f11b373511a55120881db0f38f8428e1b9bfa272ef4f56a0deabd0d6454a238a451e7d26518efe1903b3156a206b4d5b7acdf7d3f5d846bc9ebaf47b3b9fbc42f546819503123f866457286245687a32f23727f34e6e3b9e2633d0255029c7d5227be39382402b55409fcbb8dd6c7e554772ff6ed9218f7030d5542d7c5", 0x9d, 0x101, 0x4}, {&(0x7f0000a10000-0xb5)="a4993c372feb58ee72803cbf2c37155d6fe1d4212ba38ff14f7d4fe23f31916b705ee331bb8299d65a1690fa542d7c0ead0078db61b493ab17a552263d1fb1f0bcc019925d6e6027a13503c5c36746ef09d439c8c7be08d6c1304decef448a62e1cc537be295d26936665b3677f154cc056cd7bcfee3f653fea9309a085a111977f7065979eb71a2b26b3cfd4b4ae44010ea9dc066dbc6a5a9428a480201f62e25507eb2fedaaadc65814e18ae0dc4faed6646960a", 0xb5, 0x0, 0x1ff}, {&(0x7f000080e000)="f96e338e9332a621c99801f4c545211a944b6093ebb05efac102640f6df1becef189a8591f0997da066cfdf6e08928623f0c83", 0x33, 0x10001, 0x5c}], 0x320000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000e94000-0xb)='/dev/hwrng\x00', 0x200, 0x0) r2 = socket(0x9, 0x6, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00006f1000-0x10)={0x1, &(0x7f0000193000-0x10)=[{0x6, 0x0, 0x0, 0x0}]}, 0x10) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000088d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @broadcast=0xffffffff, {[@end={0x0}]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, ""}}}, 0xfe03) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000e90000)={0x80, {{0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7fff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x2, [{{0xa, 0x2, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xe0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x190) 2018/01/12 15:09:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000a8000)='/dev/autofs\x00', 0x204080, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000320000)=""/0) unshare(0x8000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000a73000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00004bb000-0xc)={0x0, 0x80000, r1}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00009a5000)="6ec970b75785ed39876e4ed14300fe6c891bc540dbdf9a6dda144cc1d0d37ca1c5339641d68edf593c323f6c979f25cb305f372b367c5eb6d002d4a3fad47618aecf2b850085afb0a72e7053862d93247f0ffe25f0c96de5d325eb1f11", 0x5d) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000ab8000-0x12)={0x0, 0x9, 0x5, [0x8, 0x6, 0x1, 0x7fffffff, 0x4af8]}, &(0x7f0000ac3000)=0x12) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000080d000-0x8)={r3, 0x2}, 0x8) r4 = socket$inet(0x2, 0x3, 0x0) sendto$inet(r4, &(0x7f0000ef8000)="", 0x0, 0x80c, &(0x7f0000765000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f000029f000-0x12)={@generic="b27159692e00986a79b1af158be04b22", 0x6}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000a00000)={@generic="02000000daaf72425013905c2f85364d", @ifru_addrs={0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000691000)=0x0) getsockname$llc(r2, &(0x7f0000af0000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000b99000-0x4)=0x10) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000f66000)='/selinux/member\x00', 0x2, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000664000)={0x5, 0x80000000, 0x7d6}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00003ca000-0x6)=""/4, &(0x7f0000369000)=0x4) eventfd(0x6) [ 77.067752] binder: 11864:11869 BC_INCREFS_DONE uffffffffffffffff no match [ 77.084873] binder: 11864:11869 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0x4d000)=nil, 0x4d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000025000)={0x10000, 0x10000, 0x8001, "a3f27b386a44", "ea953b090fda053fb306a10053a2b479"}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f000004c000-0x28)={@common='ip6_vti0\x00', @ifru_data=&(0x7f0000031000)="6268ca69545ab271e0271283983147ff23a5beba4bf5061e72157f89aff6c0ea"}) mmap(&(0x7f000004d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000004e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000006000/0x2000)=nil, 0x2000, &(0x7f000004e000)=""/189) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f000004e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000004e000)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @rand_addr=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000004c000-0x4)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005000-0xe8)={{{@in=@multicast1=0xe0000001, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x82, 0x3, 0x0, 0xa, 0x20, 0x20, 0x3b, 0x0, r3}, {0xc343, 0x1, 0x4, 0x33, 0x0, 0x7fff, 0x8, 0x6}, {0x0, 0x1, 0x7fff, 0x1}, 0x7, 0x6, 0x3, 0x1, 0x1, 0x3}, {{@in=@broadcast=0xffffffff, 0x3, 0x6c}, 0x2, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7fff, 0x7}}, 0xe8) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000004f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000050000-0x9)='net/snmp\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000015000)={0x0, 0x0, 0x7, [0x0, 0x0, 0x7, 0x9, 0x800, 0xff, 0x1f]}, &(0x7f0000017000-0x4)=0x16) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000011000)={r5, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x1, 0xf17b, 0x0, 0x80000001, 0x1, 0x400, 0x6, 0x0, 0x7f, 0x40, 0x3, 0x1, 0x1f, 0x0]}, &(0x7f000002b000)=0x108) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = syz_open_dev$sg(&(0x7f0000007000)='/dev/sg#\x00', 0x24a, 0x800) mmap(&(0x7f000004e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f000004e000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) mmap(&(0x7f000004e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000004f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f000004f000)={0x0, 0x79}, &(0x7f000002e000+0xc4f)=0x6) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000019000)=@assoc_value={r8, 0x2}, &(0x7f0000000000)=0x8) mmap(&(0x7f000004e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f000004e000)={0x0, 0x234000000, 0xc5, "02c89a8f0fa9726efa50240ee93a77b50e104707e645b21f032dc3cfed5f241bdc2c6cb4a4be1c23e5791ad7e3a7c59fccb7a618536438583375bf47a6fb92cd9661ec1b63ad7a10647dee5d967b88f087c88e7322fe60a593def3753a4417871d4b5daab54996d4264702da67303cdeddd13e7edbee811d2f40c2513e6b0f8bf72f070b6e17c59293bc9da54339b19daef3a10bf078be7b6903bf54e3caf84d76e4a845800571f9711301ae88b5df5f0f9a38fcad6ba02f464d58195081df8a4513367174"}, 0xcd) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000038000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) sendmsg$nl_generic(r6, &(0x7f0000005000-0x38)={&(0x7f000000b000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000)={&(0x7f0000013000-0xd4)={0x28, 0x20000012, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@generic="df898be907e2bd0000000152ca7f267b155633"]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f000001e000-0xd4)=""/212, &(0x7f000002d000)=0xd4) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000481000-0x6)={0x7f, 0x7, 0xffffffff}) mmap(&(0x7f0000000000/0xff0000)=nil, 0xff0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x0, 0x87, 0xff, 0x1, 0x2000000001, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fef000-0x20)={r1, &(0x7f0000ff0000-0xa6)="b7", &(0x7f0000006000)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000006000)={r1, &(0x7f000000e000-0x1000)="", &(0x7f0000009000)="", 0x0}, 0x20) [ 77.126067] binder: 11864:11869 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.133366] binder: 11864:11869 got transaction to invalid handle [ 77.139645] binder: 11864:11869 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00008c5000-0x4)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x9, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x2000000000010d, 0x2, &(0x7f0000000000)=""/4, &(0x7f0000003000)=0x4) 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = dup(r0) connect$inet(r0, &(0x7f0000987000)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f000098a000-0xe)='/selinux/user\x00', 0x2, 0x0) recvfrom$packet(r1, &(0x7f000056c000-0x54)=""/84, 0x54, 0x0, &(0x7f000000a000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [0x0, 0x0]}, 0x14) shutdown(r0, 0x0) [ 77.186866] device eql entered promiscuous mode 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f00003e7000-0x2)='\t\x00') 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00007be000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000fac000+0x89f)=0x14) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000e84000-0x18)={0xfffffffffffffffc, 0x5, 0x6}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000e35000-0xc)={r2, @loopback=0x7f000001, @empty=0x0}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000f2a000-0x28)={@common='gretap0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000eb3000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000c16000)=0xc) r5 = syz_open_dev$mice(&(0x7f0000276000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00009e9000)={r4, 0x3ff, 0x5, 0x7, 0x10001, 0x9}, &(0x7f0000cd3000)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000caf000-0x8)={0x0, 0x0}, &(0x7f0000f2a000)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000611000-0x8c)={0x8, 0x3, 0x3, 'queue0\x00', 0x60000000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = add_key(&(0x7f0000215000)='cifs.idmap\x00', &(0x7f0000808000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f0c000-0x8c)="a59f97f0b32fe8c08eba4a0ed132e62010852a9a93d56fea7f278d97a91d75de6a49adf9417563d80d3a319da0b2934dbe9ec71b40c4a2efd3c624a2fd71d9199fc6fd510ec06024169bc69e1d6b31dbc4936daf680c2ebb77075e6c01311d5cac11e5c4cb288e917251ad9d45253c7e7aceb8a57fe83b9df3d926fbebdd8126a4c70df20106414ce1fbd58c", 0x8c, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r6) keyctl$set_reqkey_keyring(0xe, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000401000)={&(0x7f0000215000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000733000-0x80)=[{&(0x7f0000599000-0xfe)=""/254, 0xfe}, {&(0x7f0000b47000)=""/213, 0xd5}, {&(0x7f00004ea000-0x86)=""/134, 0x86}, {&(0x7f00007fd000)=""/55, 0x37}, {&(0x7f000021c000-0xd5)=""/213, 0xd5}, {&(0x7f00001ae000-0x4b)=""/75, 0x4b}, {&(0x7f00003cd000-0xaf)=""/175, 0xaf}, {&(0x7f0000ded000)=""/19, 0x13}], 0x8, &(0x7f0000b63000-0x21)=""/33, 0x21, 0x0}, 0x22) getpeername$ax25(0xffffffffffffffff, &(0x7f00004bc000)={0x0, {""/7}, 0x0}, &(0x7f00006ca000)=0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000922000)={0x5000, 0x10000, 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000142000+0x75e)=0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) r8 = shmget$private(0x0, 0x2000, 0x10, &(0x7f000043f000/0x2000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00002d9000)={r3, 0xaaf, 0x93, "e49dacf5398f1f377638b63bfefa4032d00e762e25f0c8d0216d37440ab461588181b1e56d8459d5601c8e7f40c90032d31a918b1dc4e2661e8b945af0d7a5982229a10b72f41706b57fc9af9d13ea299c060b001ea9815b350748bcd0fd557ebae85a203f8b558fc59259feda373c183e445970aeb931346a54b9893d26fe027b6adc206d89c97d209dcd8f59f703195c70d2"}, 0x9b) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x87, 0xff, 0x1, 0x9, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8000000003, 0x8013, r9, 0x0) 2018/01/12 15:09:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000e6b000-0xa)='attr/prev\x00') unshare(0x8000400) fchmod(r0, 0x0) r1 = semget$private(0x0, 0x1, 0x218) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00003e6000-0xa6)=""/166) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000e6c000-0x8)={0x1, 0x9, 0x0, 0x7f}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20000) 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f9e000-0x1c)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f0000a8a000)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff9, 0x480100) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000105000-0xc2)=""/194) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000c43000-0x4)=0x0, 0x4) listen(r1, 0x0) sendto$inet(r0, &(0x7f0000a29000-0x1)="", 0x0, 0x20008045, &(0x7f00005f0000-0x10)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 15:09:16 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000b63000-0x10)='/dev/input/mice\x00', 0x0, 0x84000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x800000089f2, &(0x7f0000b70000)={@common='gre0\x00', @ifru_data=&(0x7f000020e000)="0f00000008000000db0001eef7ffffff00000000ff000100f17fe6030d722a32"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b7000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs=@rc={0x1f, {0x1, 0x1400000000000000, 0x1, 0x7, 0x401, 0x6}, 0x7}}) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000ff000)='big_key\x00', &(0x7f0000281000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000282000-0x1000)="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", 0x4d1, 0xfffffffffffffffb) 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000011000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = syz_open_dev$midi(&(0x7f0000e7e000-0xb)='/dev/midi#\x00', 0x0, 0x8080) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000e92000-0x10)={0x2, 0xa0, &(0x7f0000e01000-0xa0)="56a1983bb045c930a973b2cb973508df7e6907a71fb8964e4326ed66140f703ca4e232eed3bb04f1f4e34f8d3fc755a956d56ec3ced7bfe33d654d35f8e3dec23de2ee13d0081b95bf5dd71c318dc8d7b7a7ca381e6e4281a9446a5ce9d490a329bbb509e7248b5672d637409246279e88b1364a1c52d54485fdc14ce402821a637a555fc2d8b872bb578582046ef123a34fe3dcf8d3b63af62848c4136e5f7c"}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000884000-0x10)=@common="6e7230000000001000") r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00006e4000)=0x9, 0x4) r3 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) syz_open_dev$amidi(&(0x7f0000986000)='/dev/amidi#\x00', 0xbce9, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) recvmmsg(r0, &(0x7f00007d6000-0x3c)=[{{&(0x7f000030a000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x60, &(0x7f00005c4000)=[], 0x1000000000000100, &(0x7f00004b1000)=""/160, 0x216, 0x2}, 0x0}], 0xd3, 0x0, &(0x7f0000055000-0x10)={0x0, 0x0}) write$tun(r3, &(0x7f00003a1000-0xa1)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x395, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @udp={0xffffffffffffffff, 0x0, 0x8, 0x0, ""}}}, 0x26) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00005cc000)='/dev/rtc\x00', 0x20000, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000ea2000-0x20)={0x0, 0x0, 0x0, 0x8001, 0x80000000, 0x9ef, 0x5d1, 0x80000001, 0x0}, &(0x7f0000d90000)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000017000-0x8)={r5, 0xfffffffffffffff7}, 0x8) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000788000-0xd)='net/anycast6\x00') preadv(r1, &(0x7f00006e1000)=[{&(0x7f00008c4000-0x85)=""/133, 0x85}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000c15000)={0x0, 0x10001, 0x247f, 0x4}, &(0x7f00000d6000-0x4)=0x10) fchdir(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000e70000)={r2, 0x20, "bebc9d8a5d1eba4c21e4cad438ef899643bf78e77c81d469ed811266acaf06b4"}, &(0x7f000074b000)=0x28) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00003a8000-0xc)={0x10000000, 0x0}) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000064d000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f0000443000-0x18)=[{0x35, 0x40, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0xfffffffffffffcd0) epoll_create(0x72ca) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)=' ', 0x1}], 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000ce0000)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000f48000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000f4000-0x4)=0x0, &(0x7f0000f5c000-0x4)=0x4) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000caf000)={0x6594, 0x453, 0x100000000, 0xffffffff, 0x14, 0x1f}) getpeername$packet(r3, &(0x7f0000e0c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000426000)=0x14) sendto$packet(r3, &(0x7f0000744000-0x1000)="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", 0x1000, 0x0, &(0x7f000056c000-0x14)={0x11, 0xf7, r4, 0x1, 0x0, 0x6, @random="61f2c0fb3515", [0x0, 0x0]}, 0x14) r5 = syz_open_dev$midi(&(0x7f00000d3000-0xb)='/dev/midi#\x00', 0x4, 0x0) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f00003b8000-0x2)={0x6, 0x2}) 2018/01/12 15:09:16 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40000) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000659000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000002000-0x4)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000ae2000)={r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000c27000)="1f000000100affdde200f49ff60f0000000200000900018005ffffe5000051", 0x1f) recvmsg(r3, &(0x7f0000d57000)={0x0, 0x0, &(0x7f0000a64000)=[{&(0x7f0000474000)=""/3, 0x3}, {&(0x7f00003f8000)=""/126, 0x7e}], 0x2, &(0x7f000049d000-0x76)=""/118, 0x76, 0x9}, 0xfdf13124ad4d6d) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000cf4000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000ff9000)={0x0, 0x4}, &(0x7f0000267000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000a28000-0xa0)={r5, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x0, 0x7, 0x1fc4ff77, 0x2}, 0xa0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000d99000-0x4)=0xc, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00001f9000-0x10)={r5, 0x7, 0x80000000000000, 0x1}, 0x10) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f00005d6000-0x1)='./file0\x00', 0xffffffffffffffff, &(0x7f0000da9000-0x8)='./file0\x00') mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) clock_gettime(0x0, &(0x7f00003ef000)={0x0, 0x0}) madvise(&(0x7f0000d83000/0x1000)=nil, 0x1000, 0x10200000008) sigaltstack(&(0x7f0000f56000/0x2000)=nil, &(0x7f0000c65000-0x8)=0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b26000-0x11)='/selinux/enforce\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000cb9000)={0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000cf3000-0xa)='/dev/dsp#\x00', 0x7ff, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00008f3000)={r1, 0x80000, r2}) 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e6f000-0x20)={@generic="51eb6e4fa325705cb3df2e4b6975ab60", @ifru_flags=0x802}) r1 = syz_open_dev$vcsa(&(0x7f000079e000-0xb)='/dev/vcsa#\x00', 0x6, 0x40001) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000906000)=""/24) connect$inet6(r0, &(0x7f00006e1000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 77.315683] binder: 11932:11939 BC_INCREFS_DONE uffffffffffffffff no match [ 77.326131] device eql entered promiscuous mode [ 77.349220] binder: 11932:11939 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/01/12 15:09:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc5000-0x14)={0x5, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) r1 = syz_open_dev$sg(&(0x7f0000ec7000-0x9)='/dev/sg#\x00', 0x7ff, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000895000-0x6)={0x7fffffff, 0x9, 0x5}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000987000)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f000040f000)=0x20000, 0x4) unlinkat(r2, &(0x7f00007bc000)='./file0\x00', 0x200) fadvise64(r2, 0x0, 0xb8, 0x57f658edf6d92b8f) accept4$inet6(r1, &(0x7f0000cd5000)={0x0, 0xffffffffffffffff, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000525000)=0x1c, 0x800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000706000)={r0, &(0x7f0000c75000)="", &(0x7f0000fdd000-0xb7)=""/183}, 0x18) 2018/01/12 15:09:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000c6b000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000194000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f6d000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[], 0x0, &(0x7f0000c3b000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x0}, 0x0) writev(r1, &(0x7f0000829000-0x10)=[{&(0x7f0000734000-0xc4)="7df8073781661860840e9320f253d1b4", 0x10}], 0x1) setsockopt(r1, 0x8001, 0x1ff, &(0x7f0000989000)="eb968531578930165df5f08382336430501c49c7b6f0bb3c77dfb838511ad1cabd3581cd9bf67899f8b6eb348852e12fb45bbd8671bcb17dd9ba9b5bfa63dd3e5a3c3ac8c198b4452d75362c69858ed4a6390db888250c53d4fe711b4ae32dd56f6437760c1f9aa3d5d2dae1afc7e01e8c7afe67fcfc5feb5a32e6834687f4de5be7ef2c684547ed9b64f8e5138b741b3525b99c712c11829c81ad778765f348cc2b8a93056382c1ec532d105e047bb6a6bdcc6b8e0b81c4fa794771af8aea3148d1178bc40682f8e714eb03794ff4bdd8067296f26725113b2cf41d5e07e3f82a52d78bbeab13c16d6be289368c3c3b", 0xf0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000f6f000-0x10)=@ethernet={0x0, @random=""/6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00000d7000-0x50)=[{&(0x7f00006cf000)=""/176, 0xb0}], 0x1, &(0x7f0000d54000-0x46)=""/70, 0x46, 0x0}, 0x0) 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x896000)=nil, 0x896000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006ec000)="8907040000", 0x5) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000412000)=""/22, &(0x7f0000894000)=0x16) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x200000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x20, 0x0, &(0x7f0000001000)="8aca0625eff9f92d5e7cd0fc9e98ad3545c7a6d9380b167e740f41", 0x1b) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r0, &(0x7f0000002000)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @multicast1=0x0}, 0x0}, &(0x7f0000000000)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000066000)={r2, 0x974}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x401870cb, 0xffffffffffffffff) [ 77.392425] binder: 11932:11939 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.399714] binder: 11932:11939 got transaction to invalid handle [ 77.406050] binder: 11932:11939 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xd14000)=nil, 0xd14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000425000-0xd)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000d14000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000d15000-0x4)=0x0) 2018/01/12 15:09:16 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000d3000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00001c4000)={0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={r1, r2, 0x7fff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000a7000-0x8)={0x0, 0x0}, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000333000)={0x0, 0x5, 0x8, 0x9, 0x5, 0x7}, &(0x7f0000d06000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00002fc000)={r5, 0x1}, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f977387950687125e", 0x2) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000edf000)=0x33a71ebd) fcntl$setpipe(r3, 0x407, 0x1f) accept4$nfc_llcp(r3, &(0x7f000071d000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f00000a2000)=0x60, 0x800) r6 = socket(0x9, 0x0, 0x1) connect(r6, &(0x7f0000002000)=@sco={0x1f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x3a) open(&(0x7f0000880000)='./file0\x00', 0x400000, 0x6) getsockname$packet(r6, &(0x7f00000e5000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00000bb000-0x4)=0x14) r7 = openat(r6, &(0x7f0000b7f000)='./file0\x00', 0x10000042900, 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000938000-0x4)=r5, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000522000-0x4)=0x7) 2018/01/12 15:09:16 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000f90000-0xe)='/dev/admmidi#\x00', 0x6, 0x2000) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f00009a6000-0x4)=0x3, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f000062b000-0x20)={0x2, 0x2, 0x1, 0x80000001, r1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, r5) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002000-0x4)={0x7fff}, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000002000-0x38)={&(0x7f0000002000-0xc)={0x10, 0x0, 0x0, 0x21120080}, 0xc, &(0x7f0000002000)={&(0x7f0000000000)={0x94, 0x24, 0x208, 0x3, 0x3, {0xe, 0x0, 0x0}, [@typed={0x64, 0x5a, @binary="bd1e9d3350027755a245d42f3c0af375a4224491a94ab1b817d6c09e68bcdc6457e79c21cb91fa2d139b114ad7eb353479399807e525cba1e6d2352fdba21874327691df74dd2fb66950ab9cf8a478ce03a01d252fa2e4576b854374"}, @typed={0x1c, 0x2a, @str='vmnet1vmnet0user\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000040) fadvise64(r0, 0x0, 0x89, 0x7) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) getsockname(r0, &(0x7f0000001000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000003000-0x4)=0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002000-0x160)={{{{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x9, @loopback={0x0, 0x1}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x1ff, 0x1, 0x180000000, "edecda184c6827bc3616a30684f56c0b2c56128f8703af1113e08e31474ada1fdc82ca717131c11dc138cf1b4494748000953ec51a64842b6180f8f44c196724d960b6d2f654b21441b4077a6c31c718"}, 0x160) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000002000-0x8c)={0x6a85, 0x7, 0x0, 'queue1\x00', 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001000-0x4)=0x0) ioctl(r0, 0x3, &(0x7f0000003000-0xfe)="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") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x81, 0x1, &(0x7f0000003000)="80a92576b0a5810ca21dfc2a16903267c5ac63a7b806bfddefe9c1fad86e02f96ef52ab77966b71b293b1b43c22e357fe84e4666fd79d9f15f0969452ce01cd6b87ab5a78f00941d412fd8f00dfd9fa9e6a85fa05af48b024b4cabed8f86c6aade6c8516d54d7c4942f868d1492cbb8ce7d7eda4b13f", 0x76) r6 = msgget$private(0x0, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000005000-0x78)={{0x479a5478, r2, r5, r4, r5, 0x0, 0x2, 0x0, 0x0, 0x0}, 0xfffffffffffffffb, 0x0, 0x3ff, 0x9, 0x0, 0x55c8000000000000, r1, r1, 0x0, 0x0}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000003000)={0x400, 0xf004}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000005000)='/dev/admmidi#\x00', 0x2) ioctl$KDDISABIO(r0, 0x4b37) dup(r0) 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000f7b000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = memfd_create(&(0x7f0000210000-0x40)='queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r2, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000dfb000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000fb8000-0x10)={0x0, 0x0, &(0x7f00008f8000/0x4000)=nil}) readahead(r1, 0x1, 0x0) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330, 0x0}, &(0x7f0000002000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0x7)='ns/ipc\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00008e5000)={0x0, 0x6, 0x7c6}, &(0x7f0000ee8000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000232000-0x8c)={r1, @in6={{0xa, 0x2, 0x24fa, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xde3d}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) setns(r0, 0x0) 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000330000+0xd27)="d3ab27191a01002356ba602dff05000bfef9f3d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmsg$alg(r1, &(0x7f00002b2000)={0x0, 0x0, &(0x7f000062c000-0x20)=[], 0x0, &(0x7f0000d72000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000c5b000)=[{0x0, 0x0, &(0x7f0000c78000-0x80)=[{&(0x7f0000637000-0x1000)="1b", 0x1}], 0x1, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000829000-0x40)=[{&(0x7f00007a6000-0xfc)="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", 0xfc}], 0x1, &(0x7f00000f5000)=[], 0x0, 0x80}, {0x0, 0x0, &(0x7f0000fb6000)=[{&(0x7f0000a84000-0x1000)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20000040}], 0x3, 0x2000c850) recvmsg(r1, &(0x7f0000a4a000)={&(0x7f0000300000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x60, &(0x7f00005a0000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)=""/0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000a79000-0x38)={0x0, 0x0, &(0x7f0000fb4000)=[{&(0x7f000024c000)=""/0, 0x0}, {&(0x7f0000abe000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/91, 0x5b}, {&(0x7f0000dde000)=""/31, 0x1f}, {&(0x7f0000123000-0x47)=""/71, 0x47}, {&(0x7f000032a000-0xd5)=""/213, 0xd5}, {&(0x7f0000040000)=""/171, 0xab}, {&(0x7f0000daa000-0xb5)=""/181, 0xb5}], 0x8, &(0x7f000084c000)=""/4096, 0x1000, 0x100000001}, 0x40000000) 2018/01/12 15:09:16 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c9a000-0xc)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f000054f000)={0x0, 0xcb, "3cb529c3f5309d26c6d1663909138d7e3e3d2f3c469540b49980835662223c24689b640e792fe8e14e06589a4e85dca420fc69953e1cb5957985804e8c2a1f7a0be6de306273ed8edda9a7ca4e261e739d58c3ff6b35655668c6acba978d88209ee716a43482bb17ecd835934576c9d810efdd51a6f723a7bba35a714f4d83504d20ea05084557dc334aec177e2bf37d3e2f79e723aa8b103fffd68c5dfc8bbef034df029f4ce8ff7464eb9e79857ac23abeecd426589eb898f85c31fc093273ca3e1efbf793dbf92fc3ea"}, &(0x7f00008cb000)=0xd3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000aa2000)={r1, 0x6}, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000002000-0x4)=0x3, 0x4) 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000cc6000)='/selinux/mls\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000113000-0xc)={0x80000000, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) mount(&(0x7f0000fb8000)='..', &(0x7f00008bf000-0x8)='..', &(0x7f0000898000-0x8)='xfs\x00', 0x5004, 0x0) umount2(&(0x7f0000c1b000-0x2)='..', 0x2) [ 77.498641] binder: 11966:11971 BC_INCREFS_DONE uffffffffffffffff no match [ 77.508394] binder: 11966:11971 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 77.516712] binder: 11966:11971 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.523942] binder: 11966:11971 got transaction to invalid handle [ 77.530236] binder: 11966:11971 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0x9f4000)=nil, 0x9f4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f00009f4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009f6000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000333000)={0xfffffffffffffffb, 0x3}) mmap(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f0000544000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00009f5000-0x10)={&(0x7f00009f5000)={0x230, 0x1c, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0}, [@nested={0x16c, 0x60, [@flag={0x4, 0x76}, @typed={0xc, 0x1b, @ipv4=@local={0xac, 0x14, 0x0, 0xaa}}, @flag={0x4, 0x25}, @typed={0x18, 0x6d, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}}, @typed={0x48, 0x8e, @binary="bdb7182cc5b3f649d8451fb2d5f94af666c4e01306e2c59e42736978525cb3f260a1e64b3c4ff1aac7449b6b8a55739c5c11b8e9f58221b051a33f32d374a9"}, @flag={0x4, 0x42}, @generic="549b3325dfa1631f8e0e742b4e769fa33e055ab08de5f765bb6ed2acedd405f733edce426b8b2e2d1d72f8f9ead0dae76e613ae60dbbdfe613c0a4c09a9a12d6637128a617ad0bd37d62a01f746e953bae08a87fa3c9f00c27a13e2cfd6947f4ec3ecbb151a9d6cf251a970a8317dcf55f2ba8d64a90fb024c7ddce58d49c8ea2ba7cf72890585217c83cab2adf0dd607b413bc375022b5de9f143dcfd84b45d31abb6152ac4dc3d486d58ad397ba36e60d3e6e3d37c16788758b7f5ef39039cb6fa16d0385f10d5ee4790663d6baaaa8522641732216fabe450d2c010840a0d11da86", @typed={0xc, 0x84, @ipv4=@multicast2=0xe0000002}]}, @typed={0xb0, 0xfffffffffffffffe, @binary="66b08a6cf1a6f7383f65c45ef62c6e07ecd0b78c8750afe6e60c614f9d79b73809709e297cd3c72d1f76d0cc9841f83d9352474838d4d31fbf6754c3c1307a03121b92207b1ff70528268aed1e6ffb5a8a5edff56390068a5014552ae941c4a51f99cb278eaf6570b779bd3feabee4fd9d2c3c525fff15e08238b532487785b461f64357fbf3116d3581ad383678e55143dc3ea3e948ac34c60876bc95593b0b9a1a9ef6a8f5"}]}, 0x230}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 15:09:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00001f9000)='/dev/kvm\x00', 0x4000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r0, r1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000726000-0x20)={0x1000, 0xec0ef768fe5a8334, 0x1, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00001cd000)={0x8, 0x942, 0x7, 'queue1\x00', 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000f49000)={0x0, 0x0, 0x0}) 2018/01/12 15:09:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) prctl$setfpexc(0xc, 0xe0003) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f000022a000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f00001ab000)='./file0\x00', &(0x7f0000e6f000)={0xc, 0x0, "aad25b82"}, &(0x7f0000e7f000-0x4)=0x0, 0x0) renameat(r0, &(0x7f0000a48000-0x8)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000fd5000-0xa)='./control\x00', &(0x7f000043e000)=""/1, 0x1) fchownat(r0, &(0x7f0000262000)='./control\x00', 0x0, 0x0, 0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000f27000)={0x0, 0x57, "6673d67753d137ace2e3d72f5eabfd0f8c477c1fcd55164f6bcf8b32b18d8047ad027986da0194c6c34cbe7cd7b3945f8e73635dd2875195c944f60501a73f19d5adb16dfe73ceb0391a273e02f23ac1b58c5671a651ac"}, &(0x7f0000a2d000)=0x5f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000876000-0x108)={r1, @in6={{0xa, 0x3, 0x1, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x4, 0x2, 0x2, 0x3, 0xfffffffffffffff7, 0x80000000, 0x335, 0x0, 0x7, 0x8, 0x7, 0x6cf9, 0x1, 0xfffffffffffffffc, 0x20]}, &(0x7f00005c9000)=0x108) [ 77.585479] binder: 11990:11995 BC_INCREFS_DONE uffffffffffffffff no match [ 77.607807] binder: 11990:11995 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 77.643963] binder: 11990:11995 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.651427] binder: 11990:11995 got transaction to invalid handle [ 77.657740] binder: 11990:11995 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f7d000-0x32)="", 0x31b, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/01/12 15:09:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000bba000-0x8)='./file0\x00', 0x260140, 0x5) write$tun(r0, &(0x7f0000363000-0xd2)=@hdr={0x0, 0x0, 0x5, 0x8, 0x3, 0x401, @ipv4={{0x10, 0x4, 0x3ff, 0xff, 0xc8, 0x3, 0xffffffff, 0x2, 0x6, 0x0, @empty=0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {[@generic={0x88, 0x9, "09c3075fd201d7"}, @ra={0x94, 0x6, 0x1}, @generic={0xcf, 0xf, "82cc48d7a7ab50a6671348d8bc"}, @end={0x0}, @timestamp={0x44, 0xc, 0x2, 0x1, 0x1f, [{[@broadcast=0xffffffff], 0x0}]}]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x4, 0x5, 0x0, {0x20, 0x4, 0x4, 0xfffffffffffffffa, 0x9, 0x2, 0x2, 0x7, 0x5, 0x3, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, {[@timestamp={0x44, 0x40, 0xbf0, 0x1, 0x1767, [{[@multicast1=0xe0000001], 0x7f}, {[@multicast2=0xe0000002], 0x0}, {[@multicast2=0xe0000002], 0x2}, {[@rand_addr=0x4], 0x1}, {[@broadcast=0xffffffff], 0xffff}, {[], 0x2}, {[@loopback=0x7f000001], 0x27}, {[@multicast2=0xe0000002], 0x0}]}, @cipso={0x86, 0x2a, 0x86ed, [{0x0, 0x7, "1143b86105"}, {0x0, 0x3, "e4"}, {0x2, 0xf, "fe1662aae983a71be283246c6f"}, {0x6, 0xb, "d27b398c84c38e4397"}]}]}}, ""}}}, 0xd2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002aa000)='./file0\x00', &(0x7f0000001000-0x48)={0x48, 0x0, "eef6ca5801653ce80f6f7166b0a6f19b827d4bd0abc8e3fd9a1724ecb8dc3e2d0b5ca92ffe7eae4fe8a77b80864d0d3f2c1435fed7143ac8327bb8bfa8b09812"}, &(0x7f0000001000-0x4)=0x0, 0x400) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002000-0xc)={0x0, 0x6, 0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001000)={r1, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x6}, &(0x7f0000001000-0x4)=0x98) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000002000)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, &(0x7f0000001000)="b9f5b6c162cb2adbad52e827d58c613e4464c0907a284a07d637645cabb412625484ee5d7a7fc52bdd7d3e9ecb1b4be17c170ff7e42285e8d6f1b7032b95156c816f2daad5fbb5141dba1998b8afe2cd020a8f9846698068dc05f0a5f1f29410ba5574e6fae9fbeb9eb5fe6504313ba3a753ca40b3c08034bca969dbe6a3617715bfee00a5f36fd5758241542bd347fc74e1cfbff9bc9c0e2005e6cf4e92c54b6bbcde33a057ad40fe7831f70a6219395c5a7d67b963a2d57171a9eb374438e6dc33365a6560c2dcbf3180abfbb9c28ffc616ca9916cb2c91f2da3fb81c0b2c0cfab5f8466", 0xe5, 0x20004000, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={@common='bond0\x00', &(0x7f0000003000-0x88)=@ethtool_flash={0x33, 0x100, "374e6690c2122a9c3885a08fc9d71336f46e4a96d12da7ccd1ef74eb293397624751d99a60bd33f066250bdda6b30c02c7909ea3092ea0e2b40a745833790de2c13f543bdf379a1117094c1f1e84d519523b7d9f08288eaa1b1eaacb02edabbe57e9f02bdbd48fbd4d68ac398658a58b0c93214a8f0f57bf0f041e35b8eb437f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002000-0x10)={r2, 0x6, 0x21a3af7c8000, 0x9}, &(0x7f0000004000-0x4)=0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000002000-0x8)=0x0, &(0x7f0000004000-0x4)=0x8) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000003000)=0xffff) getrlimit(0x0, &(0x7f0000003000)={0x0, 0x0}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000004000-0x24)={0x4, 0x3, 0x80000001, 0x7, 0x4584, 0xcdc, 0x6e, 0x7, 0x6, 0x20000, 0x400, 0x3ff}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000004000)=""/4096, 0x1000, 0x0, &(0x7f0000004000-0xa)=@file={0x1, './file0\x00'}, 0xa) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000001000)={0x8, 0x9, 0x100000001}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001000-0x24)={0x8, 0x6, 0xffffffff, 0x7, 0x9, 0x1, 0x40, 0x0, 0x9e, 0x100000000, 0xc65, 0x9}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000006000-0x4)=0x6a, 0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000007000-0xb0)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000001000)=0x1) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000007000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000030f000)=0x0) getpgrp(0xffffffffffffffff) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000cfc000-0x8)='net/dev\x00') preadv(r1, &(0x7f000003a000-0x40)=[{&(0x7f0000cc6000-0xba)=""/186, 0x310}, {&(0x7f0000086000-0xb1)=""/177, 0xb1}, {&(0x7f0000824000)=""/4096, 0x1000}], 0x3, 0xfe) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8080) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfbd000)=nil, 0xfbd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000811000)='/dev/input/event#\x00', 0x2, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000e09000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000958000)=0x10) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000fbf000-0x28)=@routing={0x3e, 0x4, 0x1, 0x6, 0x0, [@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}]}, 0x28) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000fbd000)={0x6, 0x7}, 0x8) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000fbf000)='./file0\x00', 0xa40, 0x8b) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000b17000-0x12)='/dev/input/event#\x00') ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000e53000-0x34)=""/52) mmap(&(0x7f0000fc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r2, &(0x7f0000fc0000)={0x1f, 0x1, {0x4, 0x81, 0x2, 0x1000, 0x100, 0x0}, 0x0, 0xffffffffffffffff}, 0xe) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000fbd000-0x28)={0x0, 0x0, 0x0, 0x0, "df6de010f51f9c0de19f7adc11fcad5be0e54c4a89ffa1e5d5d6225b12a59011"}) 2018/01/12 15:09:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000060a000)='/dev/kvm\x00', 0x608c00, 0x0) r0 = syz_open_dev$midi(&(0x7f0000e96000-0x1)='/dev/midi#\x00', 0x100, 0x0) openat(r0, &(0x7f000086c000-0x8)='./file0\x00', 0x40, 0x4) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000c22000)={@common='lo\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000e4d000-0x10)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000dc5000)={{0x3, 0x3, 0x1, 0x5449, "91285c531f2d477d16ab18d8012d66475554347983260e8a61eb3257da9f434469296f25e9a652653a3db6c3", 0x2}, 0x0, 0x0, 0xfffffffffffffffe, r3, 0x5, 0x81, "ffc12df9b2c83e965afbf1cb2f80d83a2b5f040f701cf8e18eb78b16ba3f301cf823fa38ff5abd48369c0c6781b02fc3630930627e35f965513d7e058f5e21c6", &(0x7f00004ec000-0x1)='\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x9, 0x7ff, 0x2, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000fe8000)=0x0, &(0x7f000036e000-0x4)=0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00003b8000-0x10)={r2, 0x1, 0xfffffffffffffec9, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bf0000-0xb)='/dev/hwrng\x00', 0x208140, 0x0) utime(&(0x7f0000b24000-0x8)='./file0\x00', &(0x7f0000203000)={0x30000000000000, 0x0}) inotify_add_watch(r4, &(0x7f0000aed000)='./file0\x00', 0x80000018) 2018/01/12 15:09:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000ec6000)='./file0\x00', 0x2e) mount(&(0x7f00001a5000-0xe)='./file0\x00', &(0x7f0000f8a000-0x8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f00000b2000)="") unlinkat(r0, &(0x7f000048f000-0x8)='./file0\x00', 0x200) mount(&(0x7f0000f70000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00008b8000)='hpfs\x00', 0x2000000, 0x0) perf_event_open(&(0x7f000001d000)={0x4000000002, 0x78, 0xb1db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54a924a6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000267000)='./file1\x00', &(0x7f0000d70000)=@known='system.advise\x00', &(0x7f0000b6b000)=""/2, 0x2) r1 = open(&(0x7f0000ff3000)='./file0\x00', 0x101000, 0x190) setsockopt(r1, 0x101, 0x5, &(0x7f0000ead000-0x57)="33e3dfb886b262fbda1b1467c4d84f18f0bac8ff29ce846232f75f5d487bc3bed54c2f3ff45c13088cbd674c018b01c331b2283c55b2280d5065b166af35943bf172ec4e240a827a16e2cd698f2f3e8d6fca603b4cdd6c", 0x57) r2 = socket(0xa, 0x6, 0xfffffffffffffffe) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000acd000)={0x3, "0a70581268a813f1d498ac6ab4079de8540c0f66a2e74f663e529691504fd781da88fbd93919d87316f4737de7c7df4aa98392066304cf693765e0c82e8552643e815d6907e7fec92cb4a21ec4c3fc42340dc23eb00d397fd36cc717b332b19ffd70bba9373fadf2eee146ee81cb50e201d09ea34c2f4cb7d8a31c94e1333990f6"}, 0x89, 0x800) setsockopt(r2, 0x100000114, 0x8, &(0x7f0000007000-0x4)="02000000", 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000cb5000)={&(0x7f00006e2000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000f60000)={&(0x7f0000740000-0x15d8)={0x15d8, 0x11, 0x7, 0x910, 0x0, 0x2, {0x7, 0x0, 0x2}, [@nested={0x68, 0x11, [@generic="32e31279ee2bdcd3ffc321c13a2716ff74a6f3801499f37773f9107adb2cf1ef80128600d99efd6b205974a47651835f91404d8fb5e417ca8c907741f66307c0632cc6102b2e181948eb0ea7af309e9c0cdfcf514b66376728bfedd1d941", @flag={0x4, 0x75}]}, @flag={0x4, 0xa9}, @nested={0x34, 0xb, [@flag={0x4, 0x39}, @typed={0xc, 0x8c, @str='\x00'}, @generic="", @typed={0xc, 0x3e, @str='\'\x00'}, @flag={0x4, 0x3f}, @typed={0xc, 0x30, @u32=0x401}, @flag={0x4, 0x7b}]}, @flag={0x4, 0x80}, @nested={0x364, 0x5c, [@flag={0x4, 0x19}, @generic="8e175368936163a01c1f84d130fc88b926bc602fa51e444683bed5aac6b5c73f4fb864d90c68ebf394caea6862ec2de04ecf85a4e555d5d7793e0d186d1d0ff24d9cf916924dae3f903ca41ee22ce265782c4b8f2e1b4acc4df47bd948731ce7a9488ead261ce3eed577356a6c6d766a4eb7cc1d907f8eefc9d266c0c5847434b04be88b94e781a5ce96fcc2fc5757975e35ae", @typed={0xd8, 0x3c, @binary="0a8a7bf2ae0f3834c843d1c592b81ac182b564c3cfb760406519703b3348d911ca79ddbe99457bae58aba466df9f8242ae2eb76d27b835b14146201169307df7d9fe9ff5f2e25881e687fa9f1888847a8ecbed1a8b4ee0cd7959ec1ea840010d066d29c3b8c461ea66733fabf9c22f78995521276f4a8df889352dd79eca54472d29134da1221bea30d22a31ef06d172f60592d9b4ef57058032ab2ed935c5dd37af57401d1a0007ec102df9847268ad5a5a7bd3cf18f33612be707034b36d84d82064c6782e8edb2ee501f1ce"}, @flag={0x4, 0x33}, @typed={0xf8, 0x0, @binary="0a2a50749208def4ae39bf88a6356ed862e8003adb02b967897436f567d1738b279edbcc0b269bd6394e96277e2ef243316fca7416d386aaa982a751faf65a27d677c46d2c2a9c694b6221fcd9218def38e1878e27fdf0cd1607aa019bff91ae6032eb1a671a5b7445666fc661f8a78f3e5690434576ca6b72cce748c04b55a44ada7143db521c1e46f38677471fa75f1c7389fcc6eedb5ed239f74e3f4e540abb4d52bb31977656cd779e43045832a9dfd494229139a47ceac13098f9deaf08e36b4137f5a3ac81f44d51c10ce65051257fa3a8f4bdc0dc45331ab2ede8932637ac5599b3db90f406e36a0d914620"}, @generic="ac1f7468c0c67844c70670b9775d3b7c3681de39859c8d3e202c0316498593f080254c0b46ec0c1c56cf7bf3d168eff436ae7a6c3e5e866ca0185ae0febf1b56b92599581a16af81c1b30e287780f1578bad63eb4abc1416ef1dbb48ae274567f7535df5fc022911e79531896c757bccc90933f593ed8f135e0199fa3540091ab712db9f563eea1270f94253a7b7c8731fd4140b088385334e9cac841b0c058b408ab3168665f757bd005505b8eddacacb34a12dce7ae014e72606ac760d406c8f99db4201a7d4c4509ce3f94b150261bb1c1c31", @generic='e', @typed={0xc, 0x59, @ipv4=@multicast2=0xe0000002}, @typed={0x10, 0x70, @u64=0x8}, @flag={0x4, 0xd}]}, @nested={0x8, 0x10, [@flag={0x4, 0x8e}]}, @nested={0x11b4, 0x1b, [@generic="4292047e4aa658c697eb3bcd98496d66b440fc692d0c13ba616a76d084443363859adc91524590b954b976b14a4ec2ea5c2506f41feaa1f1cb0a45c17c21592c4df6", @generic="8a279928eeb22b710789e74e88423168141026f01439b797bb38b85295dc895b3be9ab3be9998d", @typed={0x10, 0x33, @str='!.&8\x00'}, @generic="3aee283497d92692e835a79bb5b2052d85489307abf183c9f86db44f80d1c719549621e2f5f0cf6259f23192fae5828b168325975bd6402c86f6b437b7460e438bb1958b898a6c93a40192e79cc3f9e8ad1147dbb8b4d85af4c1ed403191e009799add922eba873c0cad05c3ff89bb030c0cbd291f132b07ec67223de146d2e79115ec5389c717d7b496b7ef234388c78335ab485251d2f678f10cda8e0707b22c82b6d49558e32943d04e1321d6ed6e6c6499dd75fa96b1bfbad0b0dfa7d53517d7079d490101fa16f807e7509fddeff422e4e864c5638509206bedb09d6511413dcde141cba8d3ba2895a227f6c792b915819c0752c2942982114a4be38901dd63a6d1cca1b3980a801b538e26124e344916a0b58830b2404c21f257cac9f54a4091412ef0597a1d5562b152aae2aeae85208d5770bd986c8ce8c57f8af8e08db07d5bd765f0f83e62960a75a2597e3dce053d4251fe8c67b90c9b6b22f748855a9562e7be3f19e5a8d774a529e99e09cea0968009855371aedbd33ee09ea32912b933376080bba0c7aa24e5b50b2283740e38688c28d3f3d1c8091c24a8d9c4094a14463b02b8909c0458c6110a5b70175254e94869ca402b7106952d93badd4179f1bb292acc3c8545490b28f4e6c938b6efe08b930578619f60aee88a19bc8d6c524f19055fee372c7ea81208dbe1c6810144c66684640d6d265b7cb03e43036343876477c988496db23c16edcec35a85fffe1a983837310b42ecb614c57aa650a087041073e4a861321948de03ace2fccafa8186350479914c5c8d937c3c7a24835bb5ebc53d787945e2e04f01a660bd04b8b64ad7bb77da0d9b0323946d66029c1669e4e7c10f54c14e704f7c91196241546b8738869af858456d423d352bb196874f6bde46a240d6b8c06bb4264faa140a778c07b154ff616af3f997d419ff97c2d51fcdd486b965cd150d56ea0be403c91f95f6797edc36e9a71b83f64eaa800f7184767846ee718f51319fc69b6a9804e73016335fc32790dd0f85fbb68b40b6f763489c3050c2a436b00e4f68d5bea3220f7e50fb11ba86afc4345e979b175a28f0a955b3208ffc48ea1da2dde1d93e1d15378358f94c59114c05a5caf8cf00ff14af313f195ce2caa609e75e8fb465ea8a1a93509512cf7e5920407ac33d95a254405d9a1bb84324204c92bd162cd61e4a15474fc2c4286be22d654c3289a56c4e5458d7cb6833ad5158dd8406b825471c2533e301ac8b17659abd235b9131aee5a58ee94b4a02281bf1c255b8090644e7d86b2e68bf60b1a1f865a4aa827afa6fcb69485f7403c4713765da5642e9c1618686e1222487c45e92b1806eccc109387a9e51f2815fd245255297e42a8994c4f524531a2d512ef55bb280cfa1f985a2d1dedd83a9dd9c0093f909eef4ccdfcb561a64396ce64d107417997c1bfaa5daa01a5553d8cc900b354cb0eb845fc3f230d5c6b9b6bd9003c85e1bce9d0268e952bdc9a204754ef7163e5cb9d85b93058d10d09fc7446de4639654b0dfcd6b497851c0ce3e24d85a3ae6c27c0804fc26b94ecbc07634f4626350f6019d904de7d25eb401fedb163aa588eb4b30a43ea48586631ab71e4872ccfe2d248dbc36ba00cd94151bf46a1a127dbaed5512b8e3ea1e1f36a8d896a5576be7d914bef10a2550e4744aa0b0b2475922a86338c4d22b424355fa772758df9d68766cabcea82396dba37094d741efac13c1c3374842bf1596a938eea20f7a50032d6c7af5730a98642ad2edbce21bab5c95d919858c5425dd3fee9cd634d5adf9a1b1c9ebada0dcd3c90782f3a4fb80fc9c463b909b541ef68b3d7fe7140184f730faf5e4396a76c3384908ee30ca64c9b4d384337f1cb280f033e284d3f3cdc99d70d0bedca1bd619244fef47b33cb6b135301dce99a74637a55ede90db8d181dad631f5a67b6c6e5abdbf1f11044132cf3fbba6856b2b57005b10281cdf7080ba4c30b8edd5c49fbffc82c5515a2a8ee28a7846504d5063a6e5994d8a5b8d41f883f766f8418539d879cdf8e338158214af320806517413a99cb582dd17948bac4ecf86182b020dac89a8c97f3563a4209cb4c7f3db0698872e88fa72ff1207a4f3711dedd0a960e1ab610a93d2d0080c33b161cede3900248a848eb548c055df0fd48950f69c855242b20e0e9aaf033b8b722a723381fef851cce086557befc85d4f730b3aa51178eb0fc40c67986922ba8fbada5dbe90f18977fd4ae24a336aad5827045dfa3529ced0e218cdfdbcbe694f9b15f606f7ce78910e6892cd48870df9db7d03efc73b46e6f91f5a68bd053a9923257b422624184ec3e86f2010cfd1a8a4f94234ce5c75a9083f5a3c295815e03546fea56467046a6629e8afdb6db0f6c2bfa20d1fa1cbbef487711e0949fd7f1e1f460d46b00c6d2f5b332e1620a5fd1adb6505761285b3f0286502e0bc508c740c9f8f1cc5cad11b957e638831ddd26ec8c1701cb37b99a30cefb9ff5db7ab55080cefdf08b9410762feb9aa1dcb25bb871ec3ad4bc43a36d60e6a69b917d3a7b4933af180ca690bedab022670e6591b4d090e246f8d290dd032693db200a6913320d04e4a678e1f3f5c6bc6d59cb002c473c2e863de455a18f53fdf0d8432e57b2a3b3924c6a404b7c5c69e6e8755fc3bf1cacfff506c3509e98f698fc29d94309bfa7b05ba2efbfba35199b7fb1ed28e9c3f7a6f2d067e8d4c38d4e4540527c1abc225013efa7dfb0c23d99a29d4bcd7035f38a865f9e599f454c22e6e8de05c330588758fb4cbac59f2f8df7af2269a8cb56803702c7f349d66fd56db4b828607bc05d122aecfcf98e6bc2ded097a49d13f4f1948902376c00c4513aa2323bc192417014cc924ff9a30b282551da4978d45c859d6b1243f7881cd5950d42c0cfb326d4a0047184e6b9a16b7899eecd2b7a1e67b2894e840514f23c224ae4cf754a19653f8879b0de23a0e30241e9462dd80b1faab7121f20f6577f987fe7ee1fe73e673e86dfaa2d94b1feee10e83db18af8d7bd7d4b29e67c9012ae1b2c830bcf0c221cb31f28b85d857c7de36a8ced5ad7267147f3a62930c735447b5f9304c2d3004e62a5161d77fa3813c7c0985bbe1ecf3d120134af9c9e143e9c4e9b3ddfb2db13a746278673ddbcf274a0ae44cfb41cf5c88d4251516f832789e18a1ddb2da80513314ee54ad36cffe7f45c4bbd5197b7b2bed290cc23ed20d224f78ef35a65383aeb90c259b79f5096ce3c5ca39c5e2bf4150951da37aaf02733deba4d3f5d4c7050d586d8ea173576bb091117144f2fdf16f7d504c566743fdab8c61d367b14d442966a4d981009493760e67705411ec9b948ac7e297c5dc7926a052bc896a3bb3d420acba83431f42859da4abbeabad1e44090c420437c289c317150a2f57e5e2c25ea18d3ae883fc00d13fe1604f4ad90225f5c28a586e7069c99f24f7daf534be97cd5ae20f05497a6cf235910f4a404346a1b78c28b422f734c0f405b298d5d8d81198376998e600da7dacfa7e1d6f7e4b07d0cc9d6dbc7aa5dec700fbfd57837777afcef3514b2db4e058220787d0c0602728918ad42641f087e1d75776f827fa4de55c68a6caf953d827de0c4c6848ae60e7cae882eac816cb52ae55978bedaa871582f5a2280dcaa00cd76601463aaabe6be57cbedaf1b74e174367a0cdc107640d794371bd477ccbb1edaf4171baea73e9ed2b24b84f90327f72a1da119a2ebb7965ece38011b4e61a165f1c60f24ca17a13d3184b4e81d011f6bff2c66cb0a323f98dd6af5b7ab9fb8558ebcd2314aec44f5e96d0f35572d53458d6e5e6e45f03f3af7602d24649501ea34c1726cefd4553690d842a78e0d9a8797c45e21c91c0a56e3637fd10e34d70dc874b743fa113c2181c6117bdcb3fcec6b010fb03235e98abd4168b5053512f157b37ba1784eb0315a94a7b79e2115c0831d83198e0cbaace06deabfcd173d5a878894320c32f28462c8f7dd74f06d91880afe1afec3bb7f2338cce14120c220ade6bb103c08048fb93bacaea7d7b8c299915358f57f53be4fc039ead8d6793be928ef6cdc9a3df8666c03636b27104705efb7ddf85ecdff698077d19c9f86131e22ba6b7d135296760216bb587dbefde6529b960db43ed6b3fc8dc60f31404f4b16244bdfcf98a3d8b813bbd4e20add29c1534c7ee2fc5e4f20dde5bc5c7e721f36b70adc6f7c9cf299ca32403d3bb59562038d389808972ab9321cf239f855698c14eef5e96f768f7fa4f131a13a555be4aaa15cddbfb46151d32579e2b8e189fb235f0c6aeb7061b3ddf2a744a2b254a39cf877166fa085e23b66eaf7320a649751ed24f6df45ef0fe126cf1d7266d7e516254b9fb99c12d2d6afa834984f688fefae880b9d924aeae32addc13081f6161e328b28e739946c06fab439f8214f95a765db8e97f0f0b3df4268e64be0ab7ba8843b3260b865060140e5e907d51d9a6a9ddc74fd561e1601e496c774df9bcd0d52ecd542acb906deb0cc25f42f025a0d378ccc1c0ac45307f2a78367ca5c17269a8ca763dfcfbd2fe066e3cd0ee4357ffa7b0db5bea9c419d11da3768c2328e9a2b262be4ac503a51893f1a33d7ba496cd94d9c53a1befa14f1e01a5f771c0471f1125824ce175375080f9f6c9023e15e58da1c3a92160872a52dd38365fe859795f4b95d2d08ee84297b92ed773c7108cccdc5d0088c899b974857ed9deb2c91b093f5db2a96ee0ef6b962b3aeb9f39103687b13b52244eb35395210350683021e471864ad3b39fe85fe0c2983571c796713b5a31de4c23a51bc9fa7b4ec2af2562962b786eeb63ac69a630d3793fbda4c73dc6c3815ce37631437a8fe01ba5696197e4108eeaf7531558e822b646ed396ae154fbe855a5868874e88db065b2f2b6d07a5bcb0e4de0d910bf50f33b83f334baafca3bc3209b07873ac2ee9c03785948fd2f3f21a5b67093b694aeed8466b60509344cebbefd8652ef9980173a9481d3a0892699a5b0706e40e10d960c16deb9d96af4f5311c329bc7209a658a84c88a0012ca0f563376c14f477d06e335e8dbd8986caac1388fc37ec44987444914c56387c9cae58bf36cdad855e3a1bf0468b5ed325e501280a5eb772f863085edf63c128d2559b8961c86aafe83c74c8ccfe1e80eb1a6472d02a3173bd26a4ebce0ebe02409b31e9c5dd46f0290afd42c31dc0a88501232b9dc1d18c88f65093470c9e99657fc8bbad992e31fdfba3d64ff3a3f0b7215c52455dade48d4896852422af967ff4059b070a6381357cb9e714ed16b0faa40a6d715015adc9bcfbf25956304d04d0406740f6c586d4939efed56af1b3541064c7de5735261bc40714c08b1b24b2b9c8b137a71f1e38d4ec7609dde64dc3e9c4d33e838acf8243088ce3299991814e5a80fffaabb560a6ff5927e38a9e6e3e063d6fd4d726066a9a598a716ad9c11b3553a32f0ea68d044e912ea0f8f677b0a039d99544ca8ad02b2e496a5976279aee11c876efdb5457bce37b1af6d83144fac85de52d683480d269822a2c276f7043df05bea16de5c5f271b19f174b8bdc327941b27a321cbbbb90379f48569694f7dc8e506f8b7f19fab80f5bc1c0de50b5020dbdcf34b50019eaeeb3a0de2ab5a75b5e6ee1040007b0aa3bc83f9359b946c23bafbe4fac28d3e249cb730567356aa5d17e87a9a8a4096fcfc68e461b3b33559fe9f4c7412a2ab87d1673e062ca42b95561829a94ee5ab5291049a07e0b224f00bf82257a6800597d", @flag={0x4, 0x44}, @flag={0x4, 0x6f}, @generic="c38bfed2f4ac289476982b94e9f9d77cb9c9a50f79d81fc5ff4dd6faaa1eb63895b0f49a819cc80f1a374d6bcb37336191d2b8a61ee7a51e2a4b3d17ccdf1aa8c9385d18cd3a809633fda444837d4796cd947c66dd51", @generic="68de5f270bb1f6d382f93f16f10239e229573fc8ea1bb3f9e49b6846ef37d96c38ac011b95736d3b98bd023b46c368ee8878d91bd18494167ada16ca776cb8712ac8e6e90c348cf98e2877858fe29e2ba4f27eb8faca802e8aa30b9f81a0e85aa96a97000974f9068a600766a30b10a0f838517b6d5ff4c6e4f6e1efcd1af2c2e50179ab21072a02bf1c8717034510e22a747ed8d9a6c89584a62a5a6341b8a2334f1446945f943b3c1068a6f5e15b7a83b4d1aa672ed12704f23fc8ba33fd28159600fedbac2c8d1d918466aefe3a8a06619686c54268"]}]}, 0x15d8}, 0x1, 0x0, 0x0, 0x0}, 0x4804) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000d1000-0x60)=""/96, &(0x7f00002ba000-0x4)=0x60) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xfffffffffffff1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)='./file0\x00', &(0x7f0000b20000-0x8)='./file0\x00', &(0x7f000028b000)='ramfs\x00', 0x100000, &(0x7f0000408000)="") r4 = creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0xfffffffffffffffc) mount(&(0x7f0000a3e000-0xe)='./file0/file0\x00', &(0x7f0000e1f000-0x8)='./file0/file0\x00', &(0x7f0000e0f000-0xd)="616e6f6e5f696e6f6402000000", 0x1000, &(0x7f0000c6d000)="") mount(&(0x7f000098b000)='./file0/file0\x00', &(0x7f00001e9000)='./file0/file0\x00', &(0x7f00007ba000)="0700cc667300", 0x1003, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00004c1000-0x4)=0x645) mount(&(0x7f0000c32000-0xe)='./file0/file0\x00', &(0x7f0000185000)='./file0/file0\x00', &(0x7f00000cd000-0x5)='cifs\x00', 0x100000, &(0x7f0000b64000-0x1000)="") mount(&(0x7f0000823000)='./file0\x00', &(0x7f0000de3000-0x8)='./file0\x00', &(0x7f000092a000-0x5)='isfsc', 0x84000, &(0x7f0000d59000)="") 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$evdev(r0, &(0x7f0000001000)=[{{0x0, 0x0}, 0x0, 0x0, 0x8}], 0x18) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) timer_create(0xfffffffffffffffe, &(0x7f0000004000-0x50)={0x31f, 0x1, 0x0, @thr={&(0x7f00003e6000)="", &(0x7f0000087000-0x2)="a19d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x989680}}, &(0x7f0000005000)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f000059c000+0x53c)=0xffffffff, 0x4) close(r0) r1 = accept(0xffffffffffffffff, &(0x7f00009e1000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00009c5000)=0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000c2000-0x5)={0x8, 0x10001, 0x7ff, 0xffffffffffffffff}, 0x5) r2 = epoll_create1(0x80000) fcntl$getownex(r2, 0x10, &(0x7f0000245000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) 2018/01/12 15:09:16 executing program 2: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00001e5000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x9, 0x80000000}, {0x0, 0x4}, 0x2, 0x1, 0x4426, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001000)=""/134) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000003000-0x4)=0x2298) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000004000-0x10)={r0, &(0x7f0000000000)="db00f80f2a9ca532bcfa6dc54e9ed01600e5725311dc2fa94c512cfc7b463f037e8e7db203660b31b3e09dbb2533068a8bca9c7cecee38693061fb04b93c1c1122c8de5ac8b5e201389496cc715ccedcebd8a0a86192"}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000005000-0x29)={0x0, @in6={{0xa, 0x0, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x39}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x10000}, &(0x7f0000001000)=0x98) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000004000)=r1, 0x4) tee(r0, r0, 0x174, 0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000005000-0x4)={0x0}, &(0x7f0000006000-0x4)=0x4) ioctl$KDADDIO(r0, 0x4b34, 0x3f) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000006000)=0xe0000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000008000-0x10)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000006000)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000008000-0x4)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000009000-0x4)=0x1) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000a000-0x40)={0x80000000, 0x7, 0x5, 0x775a, "f210649b5cf88375424444996d2a879969db26da773f3f0edcd15d069c81e67b422a7942e538073c70ab122b", 0x3}) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000003000-0x4)=0x2, 0x4) 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r0, &(0x7f0000eed000)="", &(0x7f0000b88000)="", 0x0}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000882000)={r0, &(0x7f00001bb000)="1c38505ebe71f9187d9897a918afd234ac838962402fb45651040ac0d390f79eeae4e62ce926109002064fd53ee378603ff206eb00559dd4165b1ab1f261853db3ba00984aa4f16a3d37d2a504977ffe1a70a9acb779331b4f28c67181666137b19cda24ec81726c21c67fdbba54f9f5b818e4ab383badb1ba2d9ba317e58f8420699e5f3eb82d66fccea7aad78a37ffa254f249af317f05f1fa564db52758ba9ac4df7e00b95fda061e4a305359e515bc4726893ea614eb40d3f7ef795f76f0d75796698f9d9d735aefac81b93fb2b1710f597354b41e9a49f75580f2021dfcf28fe23d68ba", &(0x7f000023c000-0x8f)=""/143}, 0x18) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x440, 0x106) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000002000-0x4)=0x0, &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) renameat(r0, &(0x7f0000ca5000-0x8)='./file0\x00', r1, &(0x7f000087c000-0x8)='./file0\x00') r2 = socket(0x18, 0x0, 0x1) getpeername(r2, &(0x7f0000a94000-0x80)=@generic={0x0, ""/126}, &(0x7f00000e6000-0x4)=0x80) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000ad8000-0x23)="220000001a001300000001ff7f0000000000005c3d0000000000000002001000be7e", 0x22) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000075e000)='/dev/loop-control\x00', 0x40080, 0x0) bind$alg(r0, &(0x7f0000cc9000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(tea-generic)\x00'}, 0x58) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000e8a000-0x8)={0x0, 0x0}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000952000)='/selinux/status\x00', 0x0, 0x0) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x2000000, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 77.803585] device lo entered promiscuous mode [ 77.811265] binder: 12033:12035 BC_INCREFS_DONE uffffffffffffffff no match [ 77.811276] binder: 12033:12035 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 77.811304] binder: 12033:12035 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/01/12 15:09:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdd000-0x11)='/dev/vga_arbiter\x00', 0x101000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00002cb000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00008a2000-0x9)='status\x00') writev(r1, &(0x7f0000b97000)=[{&(0x7f00004f3000-0x1)='0', 0x1}], 0x1) syz_open_dev$vcsn(&(0x7f0000c7d000)='/dev/vcs#\x00', 0x64, 0x200000) write$fuse(r1, &(0x7f0000a05000)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out={0x0, 0x0, 0x0, 0x0}}, 0x30) 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000acd000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c83000)='./file0\x00', &(0x7f0000a98000)={0xac2, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00006cf000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsn(&(0x7f000016d000-0xa)='/dev/vcs#\x00', 0x5, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000d6f000)={0x8da, 0x101, 0x0, 'queue1\x00', 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x5}]}, &(0x7f0000f92000-0x4)=0xfffffffffffffd67) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0x3, 0x6, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000ff7000)="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", 0x781, 0x0, &(0x7f0000ff8000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x40000000000007, &(0x7f0000fed000-0x4)=0x0, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000ffc000)='/dev/audio\x00', 0x80000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pause() getsockname$packet(0xffffffffffffff9c, &(0x7f0000ffd000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000ffd000-0x4)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f000050f000)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) poll(&(0x7f0000f7c000-0x40)=[{r0, 0x0, 0x0}], 0x1, 0x0) listen(r0, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000ffe000-0x8)={0x0, 0x2, 0x3}, &(0x7f0000ffe000-0x4)=0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000ffd000)={r3, @in6={{0xa, 0x2, 0xd5, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000ffe000-0x4)=0x8c) read(r0, &(0x7f0000c9f000-0xd0)=""/208, 0xd0) [ 77.811326] binder: 12033:12035 got transaction to invalid handle [ 77.811336] binder: 12033:12035 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x0, 0x8014, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) [ 77.891360] binder: 12062:12064 BC_INCREFS_DONE uffffffffffffffff no match [ 77.891372] binder: 12062:12064 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 77.891396] binder: 12062:12064 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.891413] binder: 12062:12064 got transaction to invalid handle [ 77.891421] binder: 12062:12064 transaction failed 29201/-22, size 80-80 line 2842 [ 77.966355] binder: 12082:12083 BC_INCREFS_DONE uffffffffffffffff no match [ 77.966366] binder: 12082:12083 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 77.966389] binder: 12082:12083 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.966406] binder: 12082:12083 got transaction to invalid handle 2018/01/12 15:09:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000112000-0xe)='/dev/admmidi#\x00', 0x0, 0x40201) fcntl$setstatus(r0, 0x4, 0x40000) bind$alg(r0, &(0x7f0000beb000-0x2c)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x143) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000610000)="", 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00003e1000)={0x0, 0x6}, &(0x7f0000acd000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f000013b000)={r2, 0x4, 0x94, "7801d7dfcecc29f373e702a2168d2d51656cb4cc3d430ecdf8bf47bb64229786ea60ef493675a4a2bdaccdfd37f4aad6f1d433d5557522695d611f2cace1797245a37c38b1871587ee03af0e9ea65d11c01ac70a07e6294aec50a1eaad49e889d2e7baf85474f34ae42ab2e25f48e27ad6665c067c0e4082ae66896c9352dc98514d8f95a8239d40294f781e0d673aa5c2e74d0e"}, 0x9c) r3 = accept$alg(r0, 0x0, 0x0) io_setup(0x4000000000000001, &(0x7f000044c000)=0x0) accept$alg(r1, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000bda000-0x20)=[&(0x7f0000618000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3", 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/01/12 15:09:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005dd000-0x10)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00008af000-0x1)={0xb9}, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ea000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000b60000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) stat(&(0x7f00002dc000-0x8)='./file0\x00', &(0x7f0000b68000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) 2018/01/12 15:09:16 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000601000)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1ffffffffdb, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f8f000)='/dev/rtc\x00', 0xdef8f221ff31eb20, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000e59000-0x4)=0x7ff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00007d0000-0x143)="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", 0x143) sendto$inet6(r1, &(0x7f0000adb000)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524cf9ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c906a38cbda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be7700d66f2d2c3a63dba8eb35e7127246029e222f0b2aebbe767f5125e2d9ea5d5987b9bb96f303e4f3c647c776c5b6306472896dcebe0de6d001b453a4e26dfe433b409586e0faca3ee89e8b936ea46b97a0f663544a8f4784c6b484334949f583b02557645c7d7884910eaf4879da3f4f37ce789b728a49d0546730e2adb0a9cb74620b0cf3a28061a607089a47a23e831c16dd002fc6ad4ebd7c62d265da40d6bfd145698d18d14522e19aa599cd9e412c4644dccb31849bd5e31411c6ff9249be50762cc6fdaa01a7cdcb162dc0516524002b688a462f69b6cce348a6dc5e9356ae3938909ea062f9501220214e83a4e621b8d685925c92c7564e9132cfe10f8acb646b731114ff101479f99d70a4bd6033bf5e4e6675120fa21d0610a685af21ba76162fa5cc571056b295b8f9987fdef14526be89516234dee2d93bf7ceba533af07bb7a6e9f1d5756f81a7558b5e029e662c5dfe00f657bd5a5165c6d44bd90f719342b7ac36eb8f10cdaeda44c079ecb31d324125ac848a27ba173ad35d1acd4e206387ecea474d6a70086d225448e247bfcd51ecae1f15dfe10acc50e7757cca9c5ef80562b63224c3259d6d1fc928264d356b8345ba03e10cd6970c0343ee98359dcb5920b83cb0aa034807f40050c6cf63543e107d85bfa82ce4f5e90f6078a743b0c7ccdd007c7c0115abfd5a9a52873b7b5da78a1ab7404016c5d00aabcfc3e16070b8222a99efebebf6042e6da1dbb3e782d831c0eb4f464b82abc0a8", 0x7d0, 0x0, &(0x7f0000c05000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r3 = syz_open_dev$midi(&(0x7f000021a000-0xb)='/dev/midi#\x00', 0x5, 0x80000) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000ff4000)={0x0, 0x0}, &(0x7f0000d9b000-0x4)=0x10) sendmsg$nl_generic(r2, &(0x7f0000586000-0x38)={&(0x7f00009c5000)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f00004fa000-0x10)={&(0x7f0000ad9000)={0x1a8, 0x31, 0x200, 0x1, 0x3, {0x4, 0x0, 0x0}, [@generic="4dfb1d46a7e4af23e9f7f36f26bb4d8cfec36cbe17c14c54622e34be9cb40b1a083c16b8d0b9653ee1256e0330b26acca277975a7f7b7e4b21b4f2aab900204fa62cb9709836564d9d3823fe9f833a8a98d2b6e41a632f43690381898b8d742829e52ea4a287866c11dc639b4c1014cab80c73542ca22242b7d8be6700786116c37d4ced5798bef28017625ea608125a66f6d0a67189390fe517305c72", @flag={0x4, 0x10}, @typed={0x18, 0x61, @ipv6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @generic="47fbf48112cc0e42f5188ee2ca1a15f94e910c8ef39b9353e79636dd292715c3297eaf862aea2994160ccbbd6d9903308dd46cbcd96c76d391001aef7c21a1ac91118f995f86bc6f23dfe992807de072955022120cd69154377ee88ad3af9c22cb971c3e4df6b4c25747b00cf03d845f8f1d17c3a26da6de44495e74b8edf64ea2fda50875fabd5e7c8bc10a56d5a3aa392e717f55565695a1a96fccc2811aaae3bf10c55dbc6ab7bc9bf0c3de6cbba015998cc120223807caec56655a2c3b93823b3034a347b13f9142cf3514c6c5994a1a57e1", @flag={0x4, 0x87}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x801}, 0x20008001) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000dc4000)=0x0) 2018/01/12 15:09:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000d9c000)="6e6501658f2f746c496b6e00") ppoll(&(0x7f0000481000-0x48)=[{r1, 0x40, 0x0}, {r1, 0x84, 0x0}, {r1, 0x8, 0x0}, {r1, 0x2200, 0x0}, {r1, 0x0, 0x0}, {r1, 0x5344, 0x0}, {r1, 0x514, 0x0}, {r1, 0x202, 0x0}, {r1, 0x180, 0x0}], 0x9, &(0x7f000074c000)={0x0, 0x0}, &(0x7f00008ca000-0x8)={0x7}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000c1e000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff6000-0x4)=0xe8) accept4$packet(r1, &(0x7f0000621000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00005ee000-0x4)=0x14, 0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x7, &(0x7f0000880000-0x38)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@jmp={0x5, 0x668, 0xf, 0x7, 0xf, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9427, 0x0, 0x0, 0x0, 0xc56d}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000a000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], r2}, 0x48) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000c9e000)={0x0, 0x0, 0x0}, &(0x7f00002ba000-0x4)=0xc) sysfs$2(0x2, 0x1f, &(0x7f00009d7000)=""/205) chmod(&(0x7f00003de000)='./file0\x00', 0x103) write$sndseq(r1, &(0x7f00008cd000-0xf0)=[{0x1, 0x10000, 0x81, 0x4, @tick=0x7f, {0x3, 0x5}, {0x74, 0x8}, @control={0xa2, 0xfffffffffffff300, 0xf13c}}, {0x5, 0x4, 0xd800719, 0x6, @time={0x0, 0x1c9c380}, {0x7, 0xff}, {0x6, 0xb74}, @raw32={[0xffffffff00000001, 0x2, 0xb48e]}}, {0xfff, 0x5c, 0x6, 0xd5ad, @time={0x0, 0x1c9c380}, {0x8, 0x7}, {0xfffffffffffffffb, 0x9}, @quote={{0x4, 0xffffffffffffffff}, 0x1, &(0x7f0000616000-0x30)={0x400, 0x9, 0x3ff, 0x3, @tick=0x5, {0x5794, 0x0}, {0xa1, 0x8000}, @queue={0x4f, {0x5208, 0x800000000000000}}}}}, {0xcf12, 0x7f, 0x0, 0x200, @time={0x0, 0x0}, {0x7, 0x200}, {0x7, 0x9}, @control={0x1, 0x3ff, 0x8}}, {0x3f, 0x40, 0x2, 0xffffffff, @time={0x77359400, 0x0}, {0x91ef, 0x3}, {0x3, 0x1}, @ext={0x82, &(0x7f0000e8c000-0x82)="69ebed236c00f78b0f1cf8ddf42b225d44e1ccd16712cbac217e0c7697723d6cb4920e2f4973cd231bf84b07be4bf7a05fc6f65ea418e9ef718f753834a8d8a01e7ace886558c947ec746cfdf63312426c99674230a767b3a57689d1c800052a5eb8f8ed5f67525d655456edd72f20482b5e4d562f20463067b54953400e64f516e2"}}], 0xf0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) wait4(r4, 0x0, 0x2, 0x0) dup2(r3, r3) getsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000b69000)=""/63, &(0x7f0000c4a000)=0x3f) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00004e8000)=@add_del={0x2, &(0x7f000020e000+0xcb6)=@generic="9964abc85f599d94ba850b74e477c7c4", 0x4}) fcntl$setpipe(r3, 0x407, 0x1f) 2018/01/12 15:09:16 executing program 6: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ceb000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000235000)={0x0, 0xc2, "0c0725f67c84203961dff1bb5dde8e3a843e3af7c94ad5f5f41ff54f175637aab69ca24a00a3351b3e1c12a274cc1931d144b82092b17b0a7773fabbc2b9fc61d8f8c00921a00ad89633ea0a118daa11989a8a26e7e66379000d974a0d15a354b3a0522aad4884f23d3e8238d56ef0f72e732e033c495f44af435a29cc78351f9cbdcf1357eeeb2bf92abd9e6394644d98fc451a3e07c72d7d6969b8f9a7bf657884f4a9aa517a0b17e0c39eaa317631dfe3391935be663e38367b1068c61b722c18"}, &(0x7f0000000000)=0xca) openat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r0, &(0x7f00003bc000)={&(0x7f0000000000)=@in6={0xa, 0x2, 0x8001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8}, 0x1c, &(0x7f0000acb000-0x20)=[{&(0x7f0000001000-0xb5)="78636971c268d092e4721208d59d6f2598903e30bb86dfc0e09364991d74fe8bb9c2a99866f56c750b9a072aa985782b2117c0aa6bf3f412a9b6d8104337fcf8e0a13843934b101534a3fc3c6d2e3627fdc7631e16a41ed045565c6003e5bd1ab3bda3153aa13748600a8dfe67ef58d52e8a2a9ab047ad3d2d3e457be6039ebf02d0f2dccfef2d4cff31e0a91a7af6f808451792d4b047176cff82db46e2d918b3ede0761599e0ba99c7c9a5e1e1e72d9e89ff83f2", 0xb5}, {&(0x7f0000ce0000-0x4a)="0c5b5a9229bd81752852cd141771bb0ff6d0d7e7e5e9489229e4bc8ba6cf66c17314ad63ecc5c63568e4602a05e349b79942ab852abc663fe9d9860f020dbc3527f5f5ac0a3b0d667968", 0x4a}], 0x2, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x224a, 0x16, 0x594, 0xef}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x8, 0x8, 0x8b3, 0x3, 0x9, 0x7f, 0x6, r1}}, @init={0x18, 0x84, 0x0, {0x6, 0xa5a, 0x5, 0x16}}], 0x90, 0x44810}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) linkat(r0, &(0x7f00002e7000)='./file0\x00', r0, &(0x7f0000ff2000)='./file0\x00', 0x400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f00007db000-0x8)={0x0}, 0x8) 2018/01/12 15:09:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f000001c000)={{0x0, 0x0}, {0x77359400, 0x0}}, 0x0) r0 = open(&(0x7f0000e59000-0x8)='./file0\x00', 0x101000, 0x0) getpeername$packet(r0, &(0x7f0000639000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000baf000-0x4)=0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000c2000-0x4)=0x7, 0x4) 2018/01/12 15:09:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x0, 0x0, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001000-0x10)={0x0, 0x2, &(0x7f0000001000-0xd)=[@in={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}]}, &(0x7f0000003000)=0x10) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000b22000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xc000800000000001, 0x10000, 0x1}, 0x10) r1 = socket(0x11, 0x6, 0x4000000b3f) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000fbc000)=0x2, 0x4) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) [ 77.966415] binder: 12082:12083 transaction failed 29201/-22, size 80-80 line 2842 [ 78.052163] device lo left promiscuous mode 2018/01/12 15:09:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058000-0x12)='/dev/input/event#\x00', 0xafd, 0x8000040000002) poll(&(0x7f0000c4d000-0x18)=[{r0, 0x0, 0x0}], 0x1, 0xf5) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000d5d000)={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000051f000)=0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000a6f000)=0x100, 0x4) write$evdev(r0, &(0x7f00008c2000-0x30)=[{{0x0, 0x0}, 0x2, 0x0, 0x401}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) 2018/01/12 15:09:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000b75000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @empty=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000137000)=0xe8) r1 = syz_open_dev$sg(&(0x7f0000ac3000)='/dev/sg#\x00', 0x2, 0x309000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00001a3000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f000085f000-0x8)={r2, 0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000a0f000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 78.136079] binder: 12100:12105 BC_INCREFS_DONE uffffffffffffffff no match [ 78.158219] binder: 12100:12105 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 78.171310] binder: 12100:12105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 78.178579] binder: 12100:12105 got transaction to invalid handle 2018/01/12 15:09:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000b1f000)={0x0, 0x38, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000da2000-0x4)=0x0) timer_gettime(r0, &(0x7f0000329000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) mlockall(0x2) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000076e000/0x2000)=nil) shmat(r1, &(0x7f00008ad000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) syz_open_dev$sndmidi(&(0x7f000025c000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 2018/01/12 15:09:17 executing program 4: clock_settime(0x7, &(0x7f00002fd000)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigreturn() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002000-0x40)={0xf6ea, 0x80, 0x9, 0x3, 0x101, 0x974e, 0x2, 0x7}, &(0x7f0000000000)={0x8, 0x101, 0x10000, 0x4, 0x0, 0x400, 0x1, 0x0}, &(0x7f0000002000-0x40)={0x9, 0x2, 0x10000, 0x2, 0x4, 0x5, 0xff, 0x6}, &(0x7f0000001000-0x10)={r1, r2+10000000}, &(0x7f0000001000-0x10)={&(0x7f0000001000-0x8)={0x2}, 0x8}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) 2018/01/12 15:09:17 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x81, &(0x7f0000004000-0x4d)=""/4, &(0x7f0000001000-0x4)=0x4) [ 78.184889] binder: 12100:12105 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:17 executing program 6: mmap(&(0x7f0000000000/0xf6c000)=nil, 0xf6c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f67000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000f6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000f6c000)='/selinux/checkreqprot\x00', 0x444002, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000d1e000-0x8)=0x0) listen(r0, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00008d0000-0x11)='/dev/vga_arbiter\x00', 0x408402, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x4f3eb6cc) accept4(r0, &(0x7f00000d4000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000eab000)=0x10, 0x0) listen(r0, 0x0) mmap(&(0x7f0000f6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f6d000-0x11)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3800000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00008a9000-0x10)={0x0, 0x48, &(0x7f0000d22000)=[@in6={0xa, 0x3, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0}, @in={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}]}, &(0x7f0000f6b000-0x4)=0x10) 2018/01/12 15:09:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00002bb000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00006f9000-0xef)={0xffffffffffffffff, 0x0, 0x0, ""}) perf_event_open(&(0x7f00009d6000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r2 = memfd_create(&(0x7f00000da000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000bb6000)=[{&(0x7f0000caf000)="aa", 0x241}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000101000)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00006b5000)=0x0, &(0x7f0000390000)=0x4) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000343000)='/selinux/context\x00', 0x2, 0x0) sendfile(r1, r2, &(0x7f00000de000-0x8)=0x0, 0x100000001) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000e62000-0xe)='/selinux/user\x00', 0x2, 0x0) 2018/01/12 15:09:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x0, 0x0, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a38000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f00004bf000)=""/79, 0x4f, 0x0, &(0x7f0000b5f000-0xa)=@file={0x0, './file0\x00'}, 0xa) bind$unix(r0, &(0x7f00008da000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8) socketpair$inet(0x2, 0x2, 0x100, &(0x7f0000d54000-0x8)={0x0, 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000933000-0x90)={0xcbd5, {{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) connect$unix(r1, &(0x7f00000bc000)=@abs={0x1, 0x0, 0x0}, 0x8) 2018/01/12 15:09:17 executing program 2: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x18, r1, 0xfffffffffffffffd, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000352000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000fa2000-0x4)=0x0, 0x4) 2018/01/12 15:09:17 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f00006f2000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000001000-0x7)='status\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write(r2, &(0x7f000069c000)="220000001e0007fffc01000f090007000a000cebeeffa7001a00ffff05000980be45", 0xffffffffffffff5b) recvmmsg(r1, &(0x7f0000113000-0x168)=[{{&(0x7f00001b5000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f0000d5f000)=[{&(0x7f0000bf9000)=""/120, 0x78}, {&(0x7f00004ac000-0x4d)=""/77, 0x4d}, {&(0x7f0000b17000-0xdb)=""/219, 0xdb}, {&(0x7f0000618000)=""/4096, 0x1000}, {&(0x7f00006b0000)=""/126, 0x7e}, {&(0x7f0000325000-0xde)=""/222, 0xde}, {&(0x7f00005c4000)=""/0, 0x0}, {&(0x7f0000f7a000-0x46)=""/70, 0x46}, {&(0x7f0000f47000-0xc9)=""/201, 0xc9}, {&(0x7f00006da000)=""/124, 0x7c}], 0xa, &(0x7f00007d9000-0xc5)=""/197, 0xc5, 0x2}, 0xffffffff}, {{&(0x7f0000abb000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f000081b000)=[{&(0x7f0000787000)=""/5, 0x5}, {&(0x7f00001ca000-0x1000)=""/4096, 0x1000}, {&(0x7f0000f9c000)=""/55, 0x37}, {&(0x7f0000d55000)=""/10, 0xa}, {&(0x7f0000937000-0x4)=""/4, 0x4}], 0x5, &(0x7f000066f000)=""/4096, 0x1000, 0x301}, 0x7fff}, {{&(0x7f0000c64000-0xc)=@nl=@proc={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xc, &(0x7f0000d0e000-0x50)=[{&(0x7f0000fda000)=""/4096, 0x1000}, {&(0x7f0000fdc000)=""/155, 0x9b}, {&(0x7f0000972000-0xc)=""/12, 0xc}, {&(0x7f000062a000-0x10)=""/16, 0x10}, {&(0x7f0000fd8000-0xdc)=""/220, 0xdc}], 0x5, &(0x7f0000e7d000)=""/141, 0x8d, 0xfffffffffffffcc3}, 0x1}, {{&(0x7f0000696000-0xc)=@nl=@unspec={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00000b5000-0x60)=[{&(0x7f00008df000)=""/31, 0x1f}, {&(0x7f000025e000)=""/127, 0x7f}, {&(0x7f0000010000-0x11)=""/17, 0x11}, {&(0x7f0000269000)=""/147, 0x93}, {&(0x7f0000a75000-0xd6)=""/214, 0xd6}, {&(0x7f00000cf000)=""/177, 0xb1}], 0x6, 0x0, 0x0, 0x5}, 0x0}, {{&(0x7f000046f000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f000076f000-0x40)=[{&(0x7f0000126000)=""/93, 0x5d}, {&(0x7f0000028000-0x20)=""/32, 0x20}, {&(0x7f00001f2000-0x9c)=""/156, 0x9c}, {&(0x7f0000e00000)=""/131, 0x83}], 0x4, &(0x7f0000a77000-0x22)=""/34, 0x22, 0x8}, 0x0}, {{0x0, 0x0, &(0x7f0000118000-0x60)=[{&(0x7f0000b48000-0x5b)=""/91, 0x5b}, {&(0x7f0000a0d000)=""/36, 0x24}, {&(0x7f0000ed8000)=""/47, 0x2f}, {&(0x7f0000493000)=""/101, 0x65}, {&(0x7f00003e9000-0x9f)=""/159, 0x9f}, {&(0x7f0000cec000)=""/71, 0x47}], 0x6, &(0x7f00005ab000-0xc3)=""/195, 0xc3, 0x2}, 0x81}], 0x6, 0x40000100, &(0x7f000008a000)={0x0, 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f000073e000-0x50)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x4, 0x2, 0x0, 0x921, 0x14, r3}) 2018/01/12 15:09:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ae9000)={0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f000031a000)={0x7, &(0x7f0000368000-0x38)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000467000-0x8)={r2, 0x1}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000814000-0x8)={0x9, 0x2, 0x13, 0x7}, 0x8) prlimit64(0x0, 0x7, &(0x7f00005fe000-0x10)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00007af000-0xf)='/dev/sequencer\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f00000a1000)=0xffffffffffff0001) fallocate(r3, 0x1, 0x7, 0x8001) 2018/01/12 15:09:17 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000afe000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000a5d000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000c98000)={0x0, 0x0}) setpgid(r3, r4) openat$mixer(0xffffffffffffff9c, &(0x7f0000aea000-0xb)='/dev/mixer\x00', 0x440000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bf5000)='/dev/sequencer2\x00', 0x200000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00004d9000)='/dev/autofs\x00', 0x0, 0x0) r5 = open(&(0x7f000083c000)='./file0\x00', 0xd6d5cce1b4cf32ff, 0x50) r6 = openat(r5, &(0x7f0000007000-0x8)='./file0\x00', 0x82, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000cd4000-0x4)=0x0, &(0x7f0000511000)=0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000399000)=@ioapic={0xd000, 0x40, 0xffffffff, 0x5, 0x0, [{0x8, 0x101, 0x7, [0x0, 0x0, 0x0, 0x0], 0x308}, {0x1000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x1, 0x80000001, 0x3ff, [0x0, 0x0, 0x0, 0x0], 0x7}, {0x1, 0x40, 0x4, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x6, 0x8, 0x8001, [0x0, 0x0, 0x0, 0x0], 0x7d9b}, {0x0, 0xc70, 0x7, [0x0, 0x0, 0x0, 0x0], 0x1}, {0x3, 0x48, 0x7fffffff, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x0, 0x5, 0x40, [0x0, 0x0, 0x0, 0x0], 0x9df}, {0x3, 0x5, 0x6, [0x0, 0x0, 0x0, 0x0], 0x401}, {0xfffffffffffffff9, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x7, 0x5, 0xd880000, [0x0, 0x0, 0x0, 0x0], 0x81}, {0x1, 0x6, 0x8, [0x0, 0x0, 0x0, 0x0], 0x6}, {0xff, 0x8, 0x80000001, [0x0, 0x0, 0x0, 0x0], 0x3}, {0x1, 0x7, 0x5, [0x0, 0x0, 0x0, 0x0], 0x91}, {0x2, 0xfffffffffffffff8, 0x7fffffff, [0x0, 0x0, 0x0, 0x0], 0x7ff}, {0x7, 0x3, 0x4, [0x0, 0x0, 0x0, 0x0], 0x3}, {0xff, 0x0, 0x7e1, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x8, 0x8, 0x5, [0x0, 0x0, 0x0, 0x0], 0x1000}, {0x6, 0x8000, 0x8dd, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x4, 0x7, 0x9, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x40, 0x4, 0x1, [0x0, 0x0, 0x0, 0x0], 0xa1}, {0x1ff, 0xfffffffffffffffa, 0x200, [0x0, 0x0, 0x0, 0x0], 0xca0a}, {0x7fff, 0x3, 0x40, [0x0, 0x0, 0x0, 0x0], 0x1ff}, {0x7, 0x4, 0x4, [0x0, 0x0, 0x0, 0x0], 0x8}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 2018/01/12 15:09:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7c, &(0x7f0000d6d000-0x10)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) accept4(r0, &(0x7f00007f9000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000701000-0x4)=0x10, 0x80000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f000058b000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000022c000-0x68)={0xfd, 0x0, [0xffffffffffffffff, 0x79, 0x20, 0x48000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 15:09:17 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0x241) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x802, 0x0) sendfile(r1, r0, &(0x7f0000002000)=0x0, 0x876b5e795) sendfile(r0, r0, &(0x7f0000b7a000)=0x0, 0x2) 2018/01/12 15:09:17 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000001000-0xd)='/dev/urandom\x00', 0x0, 0x40001) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="c414b52f3223b7501c60e59cc600e2cec31b8544cd2cae7b811a84961c1219d650dd0fe56bf603fa4ef98d96d6a14622f117196b5db20515e8b7b7ac6760cfb6d0", 0x41}], 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x8) 2018/01/12 15:09:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000005000-0x14)={0x2, 0x4, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000eaf000)={r0, &(0x7f00004bf000-0x2)="06fb", &(0x7f0000c33000)="", 0x0}, 0x20) [ 78.342410] binder: 12138:12147 BC_INCREFS_DONE uffffffffffffffff no match [ 78.352621] binder: 12138:12147 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 78.362222] binder: 12138:12147 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 78.369540] binder: 12138:12147 got transaction to invalid handle [ 78.375873] binder: 12138:12147 transaction failed 29201/-22, size 80-80 line 2842 2018/01/12 15:09:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d9e000-0xd)='/dev/binder#\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000bad000)=""/76) r1 = syz_open_dev$sndpcmp(&(0x7f0000bb5000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000716000/0x1000)=nil, 0x1000, 0x0, 0x0, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d5c000)='/selinux/status\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000642000)=@ax25={0x3, {"0552ddf2d44333"}, 0xff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000010a000-0xc)={@rand_addr=0x51f, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000662000)={0x2f5, 0x0, &(0x7f0000e99000)=[@increfs_done={0x40106308, r2, 0x1}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00008d5000-0x50)=[@flat={0x77622a85, 0x1, 0x0, 0x1}, @flat={0x776a2a82, 0x10a, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x4, 0x2c}], &(0x7f0000134000)=[0x30, 0x28, 0x48, 0x48, 0x78, 0x0, 0x68, 0x78, 0x48, 0x38]}, 0x8}}], 0x86, 0x0, &(0x7f0000889000)="0257c9b367b067df712b458b03e73689fc7ac8d6eec83f59ab9f8c7ae6600d5cd212cd246a5aa8a7200edc018805dbcf97eb3a9a5bf54a1e0909e5973050a47aec632891641a7b62c670de7968357089d72e7ead4ebc0cd5858d89ce4003a559e07dd0a45a4ed6220d12fe913c95b399b92f4edd180be0c06762d3acd8e01514829ee78ee3b6"}) 2018/01/12 15:09:17 executing program 3: mmap(&(0x7f0000000000/0xa18000)=nil, 0xa18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/01/12 15:09:17 executing program 1: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000f96000-0x12)='/dev/snd/pcmC#D#c\x00', 0x2fe, 0x200102) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f00005bb000)='./file0\x00', &(0x7f0000fe7000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}) r1 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080043, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000fde000-0x8)='./file0\x00', &(0x7f00007c7000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de1000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) fcntl$setsig(r1, 0xa, 0x1d) creat(&(0x7f0000fdf000-0x8)='./file1\x00', 0x0) [ 78.424489] QAT: Invalid ioctl 2018/01/12 15:09:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x6, 0xfffffffffffef000) write(r0, &(0x7f000008e000-0x26)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26) [ 78.462828] binder: 12167:12170 BC_INCREFS_DONE uffffffffffffffff no match [ 78.471363] ================================================================== [ 78.471390] BUG: KASAN: use-after-free in array_map_update_elem+0x197/0x240 [ 78.471398] Write of size 1 at addr ffff8801c47f2600 by task syz-executor4/12177 [ 78.471401] [ 78.471410] CPU: 1 PID: 12177 Comm: syz-executor4 Not tainted 4.15.0-rc7-mm1+ #54 [ 78.471416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.471419] Call Trace: [ 78.471431] dump_stack+0x194/0x257 [ 78.471448] ? arch_local_irq_restore+0x53/0x53 [ 78.471461] ? show_regs_print_info+0x18/0x18 [ 78.471482] ? lock_acquire+0x1d5/0x580 [ 78.471495] ? bpf_prog_sub+0x60/0x60 [ 78.471509] ? array_map_update_elem+0x197/0x240 [ 78.471523] print_address_description+0x73/0x250 [ 78.471534] ? array_map_update_elem+0x197/0x240 [ 78.471546] kasan_report+0x23b/0x360 [ 78.471566] check_memory_region+0x137/0x190 [ 78.471579] memcpy+0x37/0x50 [ 78.471593] array_map_update_elem+0x197/0x240 [ 78.471603] ? array_of_map_gen_lookup+0xd50/0xd50 [ 78.471617] SyS_bpf+0x32df/0x4400 [ 78.471641] ? bpf_prog_get+0x20/0x20 [ 78.471653] ? lock_release+0xa40/0xa40 [ 78.471669] ? compat_start_thread+0x80/0x80 [ 78.471684] ? do_raw_spin_trylock+0x190/0x190 [ 78.471699] ? _raw_spin_unlock_irq+0x27/0x70 [ 78.471716] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 78.471729] ? trace_hardirqs_on+0xd/0x10 [ 78.471739] ? mmdrop+0x18/0x30 [ 78.471749] ? finish_task_switch+0x1f6/0x740 [ 78.471756] ? __switch_to_asm+0x43/0x80 [ 78.471763] ? __switch_to_asm+0x53/0x80 [ 78.471770] ? __switch_to_asm+0x43/0x80 [ 78.471784] ? copy_overflow+0x20/0x20 [ 78.471791] ? __switch_to_asm+0x43/0x80 [ 78.471799] ? __switch_to_asm+0x43/0x80 [ 78.471806] ? __switch_to_asm+0x53/0x80 [ 78.471813] ? __switch_to_asm+0x43/0x80 [ 78.471819] ? __switch_to_asm+0x53/0x80 [ 78.471826] ? __switch_to_asm+0x43/0x80 [ 78.471833] ? __switch_to_asm+0x53/0x80 [ 78.471839] ? __switch_to_asm+0x43/0x80 [ 78.471858] ? __schedule+0x8f3/0x2060 [ 78.471866] ? exit_robust_list+0x240/0x240 [ 78.471890] ? __sched_text_start+0x8/0x8 [ 78.471905] ? find_held_lock+0x35/0x1d0 [ 78.471931] ? vm_mmap_pgoff+0x1ed/0x280 [ 78.471944] ? lock_downgrade+0x980/0x980 [ 78.471957] ? selinux_mmap_addr+0x1f/0xf0 [ 78.471968] ? userfaultfd_unmap_complete+0x327/0x510 [ 78.471977] ? security_mmap_addr+0x79/0xa0 [ 78.471996] ? file_map_prot_check+0x2e0/0x2e0 [ 78.472008] ? userfaultfd_unmap_prep+0x540/0x540 [ 78.472029] ? schedule+0xf5/0x430 [ 78.472047] ? __schedule+0x2060/0x2060 [ 78.472059] ? up_read+0x40/0x40 [ 78.472069] ? down_read_killable+0x180/0x180 [ 78.472079] ? security_mmap_file+0x143/0x180 [ 78.472097] ? vm_mmap_pgoff+0x1fc/0x280 [ 78.472111] ? exit_to_usermode_loop+0x8c/0x2f0 [ 78.472132] ? trace_hardirqs_off+0xd/0x10 [ 78.472141] ? exit_to_usermode_loop+0x198/0x2f0 [ 78.472157] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 78.472164] ? selinux_capable+0x40/0x40 [ 78.472195] ? syscall_return_slowpath+0x2ad/0x550 [ 78.472206] ? prepare_exit_to_usermode+0x340/0x340 [ 78.472234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.472258] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 78.472265] RIP: 0033:0x452ac9 [ 78.472269] RSP: 002b:00007f75076edc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000141 [ 78.472278] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 78.472283] RDX: 0000000000000020 RSI: 0000000020eaf000 RDI: 0000000000000002 [ 78.472288] RBP: 0000000000000036 R08: 0000000000000000 R09: 0000000000000000 [ 78.472293] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ee5b0 [ 78.472297] R13: 00000000ffffffff R14: 00007f75076ee6d4 R15: 0000000000000000 [ 78.472336] [ 78.472341] Allocated by task 11733: [ 78.472350] save_stack+0x43/0xd0 [ 78.472357] kasan_kmalloc+0xad/0xe0 [ 78.472364] kasan_slab_alloc+0x12/0x20 [ 78.472371] kmem_cache_alloc_node+0x144/0x760 [ 78.472379] copy_process.part.37+0x19b0/0x4b60 [ 78.472384] _do_fork+0x1f7/0xf70 [ 78.472390] SyS_clone+0x37/0x50 [ 78.472396] do_syscall_64+0x273/0x920 [ 78.472403] return_from_SYSCALL_64+0x0/0x75 [ 78.472405] [ 78.472409] Freed by task 3742: [ 78.472415] save_stack+0x43/0xd0 [ 78.472422] __kasan_slab_free+0x11a/0x170 [ 78.472429] kasan_slab_free+0xe/0x10 [ 78.472435] kmem_cache_free+0x86/0x2b0 [ 78.472441] free_task+0x148/0x1a0 [ 78.472447] __put_task_struct+0x231/0x3c0 [ 78.472454] delayed_put_task_struct+0xca/0x3d0 [ 78.472463] rcu_process_callbacks+0xd6c/0x17f0 [ 78.472471] __do_softirq+0x2d7/0xb85 [ 78.472473] [ 78.472479] The buggy address belongs to the object at ffff8801c47f2300 [ 78.472479] which belongs to the cache task_struct of size 6016 [ 78.472486] The buggy address is located 768 bytes inside of [ 78.472486] 6016-byte region [ffff8801c47f2300, ffff8801c47f3a80) [ 78.472488] The buggy address belongs to the page: [ 78.472495] page:ffffea000711fc80 count:1 mapcount:0 mapping:ffff8801c47f2300 index:0x0 compound_mapcount: 0 [ 78.472506] flags: 0x2fffc0000008100(slab|head) [ 78.472516] raw: 02fffc0000008100 ffff8801c47f2300 0000000000000000 0000000100000001 [ 78.472525] raw: ffffea00071038a0 ffffea0007380220 ffff8801dad30200 0000000000000000 [ 78.472528] page dumped because: kasan: bad access detected [ 78.472530] [ 78.472532] Memory state around the buggy address: [ 78.472538] ffff8801c47f2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.472544] ffff8801c47f2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.472549] >ffff8801c47f2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.472552] ^ [ 78.472557] ffff8801c47f2680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.472563] ffff8801c47f2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.472566] ================================================================== [ 78.472568] Disabling lock debugging due to kernel taint [ 78.472701] Kernel panic - not syncing: panic_on_warn set ... [ 78.472701] [ 78.472708] CPU: 1 PID: 12177 Comm: syz-executor4 Tainted: G B 4.15.0-rc7-mm1+ #54 [ 78.472712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.472714] Call Trace: [ 78.472723] dump_stack+0x194/0x257 [ 78.472734] ? arch_local_irq_restore+0x53/0x53 [ 78.472743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.472752] ? vsnprintf+0x1ed/0x1900 [ 78.472763] ? array_map_update_elem+0x110/0x240 [ 78.472771] panic+0x1e4/0x41c [ 78.472779] ? refcount_error_report+0x214/0x214 [ 78.472790] ? add_taint+0x1c/0x50 [ 78.472800] ? add_taint+0x1c/0x50 [ 78.472811] ? array_map_update_elem+0x197/0x240 [ 78.472820] kasan_end_report+0x50/0x50 [ 78.472828] kasan_report+0x148/0x360 [ 78.472841] check_memory_region+0x137/0x190 [ 78.472850] memcpy+0x37/0x50 [ 78.472860] array_map_update_elem+0x197/0x240 [ 78.472868] ? array_of_map_gen_lookup+0xd50/0xd50 [ 78.472878] SyS_bpf+0x32df/0x4400 [ 78.472892] ? bpf_prog_get+0x20/0x20 [ 78.472904] ? lock_release+0xa40/0xa40 [ 78.472914] ? compat_start_thread+0x80/0x80 [ 78.472923] ? do_raw_spin_trylock+0x190/0x190 [ 78.472933] ? _raw_spin_unlock_irq+0x27/0x70 [ 78.472943] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 78.472952] ? trace_hardirqs_on+0xd/0x10 [ 78.472958] ? mmdrop+0x18/0x30 [ 78.472966] ? finish_task_switch+0x1f6/0x740 [ 78.472972] ? __switch_to_asm+0x43/0x80 [ 78.472977] ? __switch_to_asm+0x53/0x80 [ 78.472982] ? __switch_to_asm+0x43/0x80 [ 78.472991] ? copy_overflow+0x20/0x20 [ 78.472996] ? __switch_to_asm+0x43/0x80 [ 78.473005] ? __switch_to_asm+0x43/0x80 [ 78.473011] ? __switch_to_asm+0x53/0x80 [ 78.473017] ? __switch_to_asm+0x43/0x80 [ 78.473024] ? __switch_to_asm+0x53/0x80 [ 78.473029] ? __switch_to_asm+0x43/0x80 [ 78.473035] ? __switch_to_asm+0x53/0x80 [ 78.473041] ? __switch_to_asm+0x43/0x80 [ 78.473053] ? __schedule+0x8f3/0x2060 [ 78.473060] ? exit_robust_list+0x240/0x240 [ 78.473075] ? __sched_text_start+0x8/0x8 [ 78.473086] ? find_held_lock+0x35/0x1d0 [ 78.473101] ? vm_mmap_pgoff+0x1ed/0x280 [ 78.473111] ? lock_downgrade+0x980/0x980 [ 78.473120] ? selinux_mmap_addr+0x1f/0xf0 [ 78.473129] ? userfaultfd_unmap_complete+0x327/0x510 [ 78.473137] ? security_mmap_addr+0x79/0xa0 [ 78.473147] ? file_map_prot_check+0x2e0/0x2e0 [ 78.473156] ? userfaultfd_unmap_prep+0x540/0x540 [ 78.473169] ? schedule+0xf5/0x430 [ 78.473180] ? __schedule+0x2060/0x2060 [ 78.473187] ? up_read+0x40/0x40 [ 78.473195] ? down_read_killable+0x180/0x180 [ 78.473202] ? security_mmap_file+0x143/0x180 [ 78.473215] ? vm_mmap_pgoff+0x1fc/0x280 [ 78.473224] ? exit_to_usermode_loop+0x8c/0x2f0 [ 78.473238] ? trace_hardirqs_off+0xd/0x10 [ 78.473245] ? exit_to_usermode_loop+0x198/0x2f0 [ 78.473256] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 78.473263] ? selinux_capable+0x40/0x40 [ 78.473282] ? syscall_return_slowpath+0x2ad/0x550 [ 78.473292] ? prepare_exit_to_usermode+0x340/0x340 [ 78.473311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.473329] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 78.473334] RIP: 0033:0x452ac9 [ 78.473339] RSP: 002b:00007f75076edc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000141 [ 78.473347] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 78.473352] RDX: 0000000000000020 RSI: 0000000020eaf000 RDI: 0000000000000002 [ 78.473356] RBP: 0000000000000036 R08: 0000000000000000 R09: 0000000000000000 [ 78.473361] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ee5b0 [ 78.473365] R13: 00000000ffffffff R14: 00007f75076ee6d4 R15: 0000000000000000 [ 78.473840] Dumping ftrace buffer: [ 78.473845] (ftrace buffer empty) [ 78.473848] Kernel Offset: disabled [ 79.383387] Rebooting in 86400 seconds..