3, r4, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x0, &(0x7f0000d75000)=0x4, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6d000-0x10)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000f03000)={0x7, 0x0, 0xffffffff80000001, 0x0}, 0x8) sendto$inet(r3, &(0x7f00006a4000)="51", 0x1, 0x0, &(0x7f00006c9000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b55000-0x8)={0x0, 0x0}) recvfrom(r4, &(0x7f0000f51000)="", 0x0, 0x0, &(0x7f0000852000)=@ipx={0x4, 0x0, 0x0, "b3ff7ea99298", 0x0, 0x0}, 0x10) r7 = accept4(r2, &(0x7f0000861000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, &(0x7f000041b000+0x816)=0xe, 0x80000) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000506000-0x10)={0x7, 0x1}) readv(r2, &(0x7f0000f7d000)=[], 0x0) write(r0, &(0x7f0000b6d000)="240000001a0025f0006b001920bbfc00020b00ff00090000001000eb08000400000000b7", 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000338000-0x4)=@int=0x0, &(0x7f0000f8c000-0x4)=0x4) lstat(&(0x7f00009ce000-0x8)="2e2f66696c653000", &(0x7f000062d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r7, 0x1, 0x11, &(0x7f0000fc2000)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r6, 0x1, 0x11, &(0x7f0000417000)={0x0, 0x0, 0x0}, 0xc) utimensat(r5, &(0x7f00003fc000-0x8)="2e2f66696c653000", &(0x7f0000708000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000f0c000)={0x100, 0x77ab26dc}) sendmsg$unix(r0, &(0x7f0000366000)={&(0x7f0000ade000)=@file={0x4000000000001, "2e2f66696c653000"}, 0xa, &(0x7f000016b000)=[{&(0x7f00005cc000)="8a863c2c9cd77c195cc9bbe850f82017e665864096854e18444e5cfa6a4fc45ea7c2b1d9d20f31c7689b929710fee88877725d45198d38f77f81f87fb7317edfdbe1018ac5fefd0cc6a6a8f7978875b13cc0489ce177366429ef2a8ca21715fe48873c6d2dd2ff812c4221949b34afdff99eb3625cc942f3b488083f1e92f200b14f4c342a954ced66d4ec07a51176fda907766f3fbc033ca8c8a7bde67e33e9d8ca5eac8a9ec26836b52513bc9499c9a63bead0f741025c26ec28d9b0649af72b9d00553a258e24da3b", 0xca}, {&(0x7f00001b5000)="58d25f2ec81208db88e77505b6777b53cbdc5d04a014fb2d8d6c6329f80fb24a7d17267439bfd81cd907784b13d9b485de64c14aca39187f0eccd222ce082d5d384d0f1ad17a419fb8bf959695b1089f81eea9", 0x53}, {&(0x7f0000354000-0xff)="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", 0xff}, {&(0x7f00009a4000-0x1000)="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", 0x1000}, {&(0x7f0000a6c000-0x1)="38", 0x1}, {&(0x7f000097b000)="c1461e16943dc600050000000000009592f9a01b110a0318fe20ea78", 0x1c}, {&(0x7f0000517000)="1413211745faf1b2ec5572a0888965fed957377a72b00890a7eab11bc9afac69bac45a9fe63304932de468e6f919af3a167ca35debd69be4aa3fd67e8a560fbdf9e5098b6f9b731d385ac07adb36d4b27676d6c010ed92611376897e78ae9744bb1805475136edfacc08d19802f1e772da5f95d1ce8feb064dc20c77044ee52aceb1a6390682e60fb184db97d822936e8cfc092e2419fe94cefd8815bd152b28a5d93a8ae747ba59f3fcd106ff08", 0xae}, {&(0x7f0000fe7000)="bbd44cd6d3cde7f307c08e2d62b38b5ccb491da440a6af25884197261f8ce3700cd0bfa67af142ac65e831077dd54382591f1550006a13eaff052d5c4ff456bcd546aaba6c146626a1b0a7bdadd98c34841103f67e5999cb10e70fa780ef3deedd9f6544aa92aa135a75e173b8da549377ba3d6dab81d95f358126bdfbfc035c74e96b9ecdc4eefac5351069869474d73c1c2e142866bdf83b1a934ec075", 0x9e}], 0x8, &(0x7f000048f000-0x90)=[], 0x0, 0x8011}, 0x4000) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f000061a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000c43000)={0x800, 0x2, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, "0100010000000000", "fce8461e698ccff1ccf74ad8f77fc71abf4ac442059dd96f83b29c6414ef246f", 0x6, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00009da000)={0x1, 0x3, &(0x7f0000862000)=[@generic={0xd885, 0x0, 0x0, 0x7}, @generic={0x17, 0x0, 0x0, 0x3}, @map={0x8, 0x800, 0x80000001, r6}], &(0x7f0000003000-0x6)="2d212700", 0x8000002000005, 0x80, &(0x7f00009d9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) [ 258.268695] binder: 29567:29581 ioctl c0306201 20008fd0 returned -14 [ 258.337485] binder: 29567:29590 ioctl 8208ae63 2000df28 returned -22 [ 258.338949] binder: 29567:29590 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.338979] binder: 29567:29590 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.339131] binder: 29567:29581 BC_INCREFS_DONE uffffffffffffffff no match [ 258.339151] binder: 29567:29581 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 258.339192] binder: 29567:29581 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 258.339209] binder: 29567:29581 got transaction to invalid handle [ 258.339245] binder: 29567:29581 transaction failed 29201/-22, size 0-16 line 2775 [ 258.347468] binder: 29567:29590 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.347476] binder: 29567:29581 ioctl ae45 296d returned -22 [ 258.347488] binder: 29567:29590 ioctl c0306201 20008fd0 returned -14 [ 258.348338] binder: 29594:29595 BC_INCREFS_DONE uffffffffffffffff no match [ 258.348352] binder: 29594:29595 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 258.348372] binder: 29594:29595 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 258.348387] binder: 29594:29595 got transaction to invalid handle 2017/12/10 00:42:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) add_key$user(&(0x7f00007eb000-0x5)="7573657200", &(0x7f000068e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00007e2000-0x7f)="abd5a9ad4353c0521d1b9d8507445f9b2e650e1a5826c0651b8f1cf005a5b8b299183b9cbf55e9b1ff7978002726d91d4a60d7585cbbbc593e9398ecc2ae969221bf28c8d14ace989b05639f40b4a368c4830f2d96e22906c4e52cef77e42589a300021782a25be9bb7a27473345b8dc55f829ad00598dc5f6536e0ba9facb", 0x7f, 0xfffffffffffffffe) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00002ef000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000ffb000-0x60)={&(0x7f00005a9000)=[0x0], 0x1, 0x9, 0x100000000, 0x7, 0x7, 0x6, {0x1ff, 0x100000000, 0xfffffffffffffffe, 0x6a8, 0x1800000000, 0x7, 0x3f, 0xdc, 0x4, 0x4, 0x6, 0x80000001, 0x0, 0x4, "42e4e1a2fee2bbcce9724e72f8dd31fe9c2757dca5b158cfe23760c77ceb0945"}}) request_key(&(0x7f0000ac3000)="6269675f6b657900", &(0x7f0000a1b000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00004b7000-0x9)="766d6e6574305c2e00", 0xfffffffffffffffd) 2017/12/10 00:42:08 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001000-0x4)=0x0, 0x4) 2017/12/10 00:42:08 executing program 0: mmap(&(0x7f0000000000/0xab4000)=nil, 0xab4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000ab4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ab4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000ab4000)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0xcbf4, 0x8, 0x62}, &(0x7f0000ab4000+0xfea)=0xa0) mmap(&(0x7f0000ab5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ab5000)="2f6465762f7663732300", 0x9, 0x200000) fstat(r2, &(0x7f000090e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) mmap(&(0x7f0000ab6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ab6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000ab6000)={r1, 0x74, &(0x7f0000ab7000-0x74)=[@in6={0xa, 0x3, 0x4, @loopback={0x0, 0x1}, 0xfffffffffffff7d9}, @in6={0xa, 0x2, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffffffff}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, @in={0x2, 0x1, @rand_addr=0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f000014c000-0x4)=0xc) mmap(&(0x7f0000ab7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ab7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000ab7000)={r1, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x9}, &(0x7f0000ab7000)=0x98) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f000031e000)=0x2ab1) mmap(&(0x7f0000ab6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000ab7000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00002ef000)={r4, 0x1}) mmap(&(0x7f0000ab5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ab5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ab7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000ab7000)={0x6b, {0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @rand_addr=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x202, 0x81, 0xed, 0x1, 0x5, 0x0, 0x7fff, 0x79, 0x6}) sendmsg$inet_sctp(r0, &(0x7f00003fd000)={&(0x7f0000014000-0x1c)=@in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000ab2000)=[], 0x0, &(0x7f0000ab5000)=[], 0x0, 0x0}, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000002000-0x28)={@common="6c6f000000000000faffffff00000000", @ifru_flags=0x0}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0xf0) 2017/12/10 00:42:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000919000)="2f6465762f6b766d00", 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002a6000)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000830000-0x8)={0x0, 0x0}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000dc4000)={0x0, 0x3fff, 0x10000000000008, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00008fa000)={0x79, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000a95000)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000398000/0x2000)=nil}) mlock2(&(0x7f0000bda000/0x1000)=nil, 0x1000, 0x5) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000e46000)=0x40000000001) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000a21000-0x18)={&(0x7f000085a000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b01000/0x13000)=nil, 0x4}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000ebf000-0x400)={"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"}) clock_gettime(0x0, &(0x7f0000b05000)={0x0, 0x0}) nanosleep(&(0x7f0000544000-0x8)={r4, r5+10000000}, &(0x7f0000c33000)={0x0, 0x0}) clock_getres(0x7, &(0x7f0000f3e000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f000091d000)={0x3, 0x0, 0x7, {r6, r7}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00008f2000-0x4)=0x7f) sysfs$2(0x2, 0x6, &(0x7f0000588000-0xc5)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f000059d000)={0x0, 0x7f, 0x1, 0x33f196429d6641cc, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f000079c000-0x98)={0x0, @in6={{0xa, 0x2, 0x3f, @loopback={0x0, 0x1}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000a1c000-0x4)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f000038e000)={r8, @in6={{0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xbe, 0x5}, &(0x7f000064f000)=0x98) [ 258.348400] binder: 29594:29595 transaction failed 29201/-22, size 0-16 line 2775 [ 258.349177] binder: 29594:29595 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.349202] binder: 29594:29595 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.354468] binder: 29594:29595 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.354486] binder: 29594:29595 ioctl c0306201 20008fd0 returned -14 [ 258.372943] binder: 29594:29602 BC_INCREFS_DONE uffffffffffffffff no match [ 258.372960] binder: 29594:29602 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 258.372981] binder: 29594:29602 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 258.372996] binder: 29594:29602 got transaction to invalid handle [ 258.373013] binder: 29594:29602 transaction failed 29201/-22, size 0-16 line 2775 [ 258.374340] binder: 29594:29595 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.374368] binder: 29594:29595 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.380085] binder: 29594:29602 ioctl ae45 296d returned -22 [ 258.381340] binder: 29594:29595 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.381376] binder: 29594:29595 ioctl c0306201 20008fd0 returned -14 [ 258.445185] sctp: [Deprecated]: syz-executor3 (pid 29611) Use of int in max_burst socket option. [ 258.445185] Use struct sctp_assoc_value instead [ 258.475235] sctp: [Deprecated]: syz-executor3 (pid 29613) Use of int in max_burst socket option. [ 258.475235] Use struct sctp_assoc_value instead [ 258.803631] binder: 29567:29569 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/12/10 00:42:08 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000fdc000)={0x2, 0xffffffffffffff9c, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f000083b000-0x1c)={&(0x7f0000760000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000000000)=[{&(0x7f0000b96000-0x38)="ee668b0f78e1e1e4d6fc35a4a29a760adf9903df485485e9c998876885fb910f32cbb9e37c2fe840e844528e40aba2530bad2435dc0b0cba", 0x38}], 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r1, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r1, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000af1000)=0xfffffffffffffffc) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000c8e000-0x14)={0x1, 0x1, 0x6, 0x7, 0x20}) 2017/12/10 00:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8000004101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000820000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x10b000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db4000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) r3 = syz_open_dev$tun(&(0x7f0000481000)="2f6465762f6e65742f74756e00", 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000095f000)=0x4, 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000928000-0x28)={@common="67726530000000000000000000000000", @ifru_settings={0x7de, 0x7e3c, @te1=&(0x7f0000875000-0x10)={0x8, 0x2, 0x1, 0x9}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e4000000000000000000", @ifru_flags=0x2fd}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, &(0x7f0000133000-0x4)=0x1003) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fa4000)={0x0, &(0x7f0000580000)=[]}, 0x8) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0086426, &(0x7f0000dee000-0x8)={0x3, &(0x7f0000ce9000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000f3000)={0x5, [0x5fab, 0x7, 0x200, 0x0, 0x4b58]}, &(0x7f0000a3f000)=0xe) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00008a7000)={0x0, 0xfffffffffffffffd}, &(0x7f0000506000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000b79000)={r6, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x542c}, 0x98) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4008641c, &(0x7f00002f2000-0x8)={r5, &(0x7f0000d11000-0xa6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) sendto$inet6(r0, &(0x7f0000f0a000-0x2)="", 0x0, 0x0, &(0x7f0000f06000-0x1c)={0xa, 0x3, 0x4ed, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) r7 = socket(0x10, 0x4000000002, 0x0) sendmsg$netlink(r7, &(0x7f000061f000-0x38)={0x0, 0x0, &(0x7f000047d000-0x40)=[{&(0x7f000057d000)=[{0x24, 0x26, 0xffffffffffffffff, 0x0, 0x0, "d45029db0300000000000000ffffffffff"}], 0x24}], 0x1, &(0x7f0000cdb000)=[], 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000285000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x7}) 2017/12/10 00:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) mount(&(0x7f0000a3e000-0xe)="2e2f66696c65302f66696c653000", &(0x7f0000e1f000-0x8)="2e2f66696c65302f66696c653000", &(0x7f0000e0f000-0xd)="616e6f6e5f696e6f6402000000", 0x1000, &(0x7f0000c6d000)="") setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000ed2000)={0x3ff, {{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) 2017/12/10 00:42:08 executing program 1: r0 = syz_open_dev$mice(&(0x7f000026f000)="2f6465762f696e7075742f6d69636500", 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x28, &(0x7f0000001000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x28, &(0x7f0000b3d000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000-0x10)={r0, 0x28, &(0x7f0000840000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000-0x10)={r0, 0x28, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00007b0000)=r1, 0x4) dup3(r0, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x200, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x31, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001000-0x20)={{0x0, 0x989680}, {r3, r4+30000000}}, &(0x7f0000002000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800040000006, 0x800, &(0x7f00003b7000-0x10)={0x77359400, 0x0}, &(0x7f0000001000)=0x808, 0x3ff) sched_setaffinity(0x0, 0x8, &(0x7f00004b8000)=0xff) r5 = perf_event_open(&(0x7f000005d000)={0x2, 0x78, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33bc410f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r5, 0x0) timer_gettime(0x0, &(0x7f0000001000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) futex(&(0x7f000000d000-0x4)=0x3, 0x1000000400000006, 0x7fff, &(0x7f0000366000-0x8)={0x0, 0x1c9c380}, &(0x7f0000061000-0x4)=0x0, 0xfffffffffffffffe) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f7667615f6172626974657200", 0x80000, 0x0) mmap(&(0x7f0000000000/0x88f000)=nil, 0x88f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000db6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000601000)="9208040800", 0x5) mmap(&(0x7f000088f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 2017/12/10 00:42:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000b3d000)={0x0, 0x0}) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000b7c000)={0x0, 0x0, 0x0}, 0xc) syz_open_procfs(r3, &(0x7f0000ad7000)="6d61707300") madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x400, &(0x7f0000a13000)="03d9c9a41134d8c5b9beef0717d2d2f28d5338efb92720d9cb8f0fab3736148b86a530fa19aa41b1f3766ebe", &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000a4d000)="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") mlock2(&(0x7f0000d11000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$sg(&(0x7f0000905000)="2f6465762f73672300", 0x0, 0x200100) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000616000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000c86000)=0x0) fchdir(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000837000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r5, 0xffffffffffffffff, r4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ead000+0xb81)="2f6465762f70746d7800", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00003ce000-0x70)={[{0x0, 0x3, 0x4, 0xfffffffffffffffd, 0x4000, 0x1, 0x10000, 0x800, 0x3, 0x7f, 0x1, 0xfc, 0x1}, {0x7, 0x0, 0xff, 0xfffffffffffffffd, 0x0, 0x2, 0x7f, 0x4f4, 0xffffffff, 0x800, 0x6d, 0x4, 0xe9}, {0xfffffffffffffff8, 0x4, 0x2, 0x389, 0x1, 0x6, 0x9, 0xffff, 0x6, 0xfffffffffffffffc, 0x995, 0x8, 0x9}], 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x401, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f00006ea000)={0x0, 0x29, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000fab000-0x4)=0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) timer_settime(r6, 0x1, &(0x7f0000007000-0x20)={{0x77359400, 0x0}, {0x0, 0x989680}}, &(0x7f0000695000)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/10 00:42:08 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$addseals(r0, 0x409, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:08 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000001000-0x1000)="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", 0x1000, 0x0, &(0x7f0000000000)={0x2, 0x1, @rand_addr=0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) add_key$user(&(0x7f00007eb000-0x5)="7573657200", &(0x7f000068e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00007e2000-0x7f)="abd5a9ad4353c0521d1b9d8507445f9b2e650e1a5826c0651b8f1cf005a5b8b299183b9cbf55e9b1ff7978002726d91d4a60d7585cbbbc593e9398ecc2ae969221bf28c8d14ace989b05639f40b4a368c4830f2d96e22906c4e52cef77e42589a300021782a25be9bb7a27473345b8dc55f829ad00598dc5f6536e0ba9facb", 0x7f, 0xfffffffffffffffe) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00002ef000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000ffb000-0x60)={&(0x7f00005a9000)=[0x0], 0x1, 0x9, 0x100000000, 0x7, 0x7, 0x6, {0x1ff, 0x100000000, 0xfffffffffffffffe, 0x6a8, 0x1800000000, 0x7, 0x3f, 0xdc, 0x4, 0x4, 0x6, 0x80000001, 0x0, 0x4, "42e4e1a2fee2bbcce9724e72f8dd31fe9c2757dca5b158cfe23760c77ceb0945"}}) [ 258.803651] binder: 29567:29569 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 258.803666] binder: 29567:29569 got transaction to invalid handle [ 258.803677] binder: 29567:29569 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:08 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000008000)="2f6465762f76637300", 0x10080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000000)={0x4, 0x0, 0x1, 0x9}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40106435, &(0x7f0000000000)={0xe7f, r1, 0x10001, 0x4001}) r2 = syz_open_dev$sg(&(0x7f0000028000-0x9)="2f6465762f73672300", 0x7, 0x0) mmap(&(0x7f00004cc000/0x1000)=nil, 0x1000, 0xa, 0x100000000000032, 0xffffffffffffffff, 0x4000000000) r3 = gettid() perf_event_open(&(0x7f00004cc000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0xffffffffffffffff, r2, 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000a2d000/0x2000)=nil, 0x2000, 0x3000008, 0x83f, r2, 0x0) socket$inet(0x2, 0x8000000000000003, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$inet6(r0, &(0x7f00004cd000-0x1c)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000a2d000+0x847)=0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}], 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x29, &(0x7f0000a2f000-0xc)={@remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000002000-0x10)={&(0x7f0000f2c000/0x3000)=nil, 0x3000}) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f72666b696c6c00", 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$eventfd(r4, &(0x7f0000003000-0x8)=0x0, 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r3, 0x203, &(0x7f0000004000-0x8)={&(0x7f0000000000)="c941c4273f77aa0e6999dc07cf49a9b5d94341fd0c961ff05d47f3d32b0341397075935dad2d2022eccdd9b40bebaac419d80a809b556d9b0201d69443d44419907b20e81c7c87294caef3fa5010d3b9e935aedf3405940194cf3dfcad3a7c4ba3169594b5a5a7afb6495b6be5dbbbf4b52026160564083bfb4516339cb5311720b658de477a4935eb4826f1398390d9e538eaa596c8395b995ec5e5b0c19de5a94c269516915e19455dd13363e6c5e789a531630ee3e99aa8a8df4b97e8897c", 0xc0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$llc(r2, &(0x7f0000000000)="5b0290629af1e91f8ac5ca8ac5b2c8f8c1589684dc75299727607ecf8f5bcae4ad5987503e5ba786a372dd6196275005acc860540ad7985e7f20ffa7860f70d244d3127c95675dcfe85de8d298490b040163b22957d36a9b9be2061e59a172842fa8d6b673a0af870e258e06521384ebce642ceaedfb06044fd40d602658297af14a2951d0c94e12a9cc912f5676c5f6d79f8ae9ec010b07c10c0d4ec97b72eca8d07e54ccdb5159779a280c", 0xac, 0x8000, &(0x7f0000004000-0x10)={0x1a, 0xc, 0x401, 0x6, 0x1, 0x100, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) 2017/12/10 00:42:08 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b8000)=nil, 0x8b8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x10) mmap(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008bb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(r0, &(0x7f00006b9000)=@hci={0x0, 0x0, 0x0}, &(0x7f00008bb000)=0x6, 0x80800) setsockopt(r1, 0xfff, 0x65, &(0x7f000026d000)="41c932209c41e46f248bbe8e62f1435b4c1da6456ff36b9512500b1cc49d6253a045152fc17ff9ae918092c9be8029fe2d00f9661f79f3a515becafb72f588018040d7a60aa303edd3312f6ad728e133cea788456b699b09b233d98dbb72998f215bc603c0c85b01f9c844c4b3b3e16d4d737b29324260600fe746", 0x7b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0x4, 0x0) r3 = gettid() perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x662, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x1, 0x20009, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8e1ca97}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001000-0x4)=0x8c) ioctl$TIOCSBRK(r2, 0x5427) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = memfd_create(&(0x7f0000de7000)="706f7369695f61636c5f61636365737340706f7378785f616c5f616363737373656c662d5c5e0025", 0x0) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdb000-0xa)="2f6465762f70746d7800", 0x2, 0x0) write(r5, &(0x7f0000c4f000-0x1)="c5", 0x1) accept4$ipx(r4, &(0x7f00008d7000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00008e4000)=0x10, 0x800) r6 = syz_open_dev$sg(&(0x7f000014f000)="2f6465762f73672300", 0x0, 0x400000) recvmsg(r6, &(0x7f0000145000-0x1c)={&(0x7f0000ace000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000419000-0x10)=[{&(0x7f0000be7000-0x48)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x48}, {&(0x7f0000ae5000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1}], 0x2, &(0x7f0000e9b000+0x400)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b, 0x8}, 0x2041) perf_event_open(&(0x7f000008c000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000e82000-0x23)="230000003100056d00070000000051010000000000001100df0500101d02000ae523c7", 0x23) r8 = socket$inet6(0xa, 0x20000000001, 0x8000000000000006) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00005b6000-0x4)=0x8b, 0x4) [ 258.877668] binder: 29649:29651 BC_INCREFS_DONE uffffffffffffffff no match [ 258.916077] binder: 29649:29658 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.916108] binder: 29649:29658 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x0, 0x81) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f000033b000-0x4)={0x3, 0x1, 0x41}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000eb5000-0x10)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) epoll_create1(0x80000) r1 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) close(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f000080c000-0x4)=0x0) 2017/12/10 00:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) mount(&(0x7f0000a3e000-0xe)="2e2f66696c65302f66696c653000", &(0x7f0000e1f000-0x8)="2e2f66696c65302f66696c653000", &(0x7f0000e0f000-0xd)="616e6f6e5f696e6f6402000000", 0x1000, &(0x7f0000c6d000)="") 2017/12/10 00:42:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000f19000-0x8)=0x0, &(0x7f0000a8d000-0x4)=0x8) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00009ba000)={&(0x7f000088f000-0x8)="2e2f66696c653000", 0x0}, 0xc) r2 = dup(r1) getsockname(r2, &(0x7f00001a8000-0x1c)=@in6={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00009f8000)=0x1c) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000986000)={0x8, 0x3, 0x5, 0x7}) r3 = socket(0x10, 0x2, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xce, &(0x7f00001b2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000414000-0x4)=0x1000) ioctl$void(r3, 0x5450) accept4(r3, &(0x7f000080d000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bc2000)=0x8, 0x0) write(r3, &(0x7f00002d9000)="2400000058001f0014f9f426000904000a00071008000100020000000000000000fbff008ade58a9b50892b0a995ea49a9221e10f0372763198c5e86a0b8c061fba20e13", 0x44) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) r4 = fcntl$dupfd(r2, 0x406, r2) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f000080d000-0x4)=0x5, 0x4) ioctl$KVM_DIRTY_TLB(r2, 0x400caeaa, &(0x7f00003da000)={0x5, 0x0}) uname(&(0x7f0000c9d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mknodat(r4, &(0x7f00004ac000-0x8)="2e2f66696c653000", 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000213000)={0x0, @in6={{0xa, 0x3, 0x1000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40ee, 0xf8, 0x1, 0x1000, 0x1}, &(0x7f0000fa5000-0x4)=0xa0) open$dir(&(0x7f0000385000-0x8)="2e2f66696c653000", 0x800, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000637000)={r5, 0x352}, 0x8) fcntl$addseals(r2, 0x409, 0xb) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000adf000-0x4)=@assoc_id=r5, &(0x7f000088e000)=0x4) [ 258.941492] binder: 29649:29658 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.941512] binder: 29649:29658 ioctl c0306201 20008fd0 returned -14 2017/12/10 00:42:08 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000003000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x4100) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000002000-0x1)=0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001000-0x4)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000)=0xe8) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000016e000-0x10)="2f6465762f73657175656e6365723200", 0x100, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000553000)={0x4, &(0x7f00004c3000)=[0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f00004f1000)={0x2, 0x78, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sync() add_key$keyring(&(0x7f0000285000)="6b657972696e6700", &(0x7f0000a90000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00003c4000)=0x0) r2 = add_key(&(0x7f0000f46000)="706b6373375f7465737400", &(0x7f0000ab9000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000057e000)="f87dfe0846b183288830c6d56a57893e347a24bd59ffd9e2d87815c5d7ef11c4", 0x20, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0x81, r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00004db000)={0x0, 0x90, "ded30e0a2633855278778612505500ccf7af11e8519a139d34233a66f175fa34c103e048fd874583c476b8950100d16d307dfb162b874a0569fb281d50c548c04e1e35546c03538c162dde28275e00e3b2ddc09fe93d1c32112a435740744e5053d1cd76fcf93b7e84e8459fe698f9c943cc6ccefe013f1a456a9101a4b70f05a53e34024ff3f37de7fcb24fd4d1bf5b"}, &(0x7f0000741000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000515000-0x8)={r3, 0x0}, 0x8) connect$llc(r0, &(0x7f0000870000-0x10)={0x1a, 0x8, 0x2, 0x8001, 0x6, 0x3ff, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) set_thread_area(&(0x7f0000a7c000+0x4ea)={0x260, 0x20001000, 0xffffffff, 0x1, 0x1, 0x7, 0x81, 0x5, 0x4, 0x5}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00003c6000)={0x700000800004000, 0x100000007000, 0x3, 0xc, 0x816, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) getgid() accept4(r4, &(0x7f00008b5000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f00005ec000-0x4)=0x10, 0x80806) 2017/12/10 00:42:08 executing program 1: mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f000010c000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000452000-0x4)=0x14) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000efa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f000037d000)="f6eca2530000000844b49fa85cf24e0574b593dd38ee1570712bb8e34becc6498a19c7ef3fa8faffbe3fd97fe628e077c629db580bdb342e9408cfc86fc0cb8071ab572d015d02a4bdcfdd0c444113d5362266342f06bc583578b15a0808ee16c307310000000552c100e9c26d871c4e099ef9") bind(r1, &(0x7f0000bef000-0x80)=@generic={0xa, "38af356a916dff01f2594d5d262c2881eb8245a40300010000000000a59b5c3aae3085c032a4113e98b9f2e376c3c57d942eecfe0c9e4e8e7cd3c0bffe6316b17f00000003a3e226dfe8aaf2abc1d25d7954d80e0bd2a66642c9d6ada11024f2b5e7e3f125477afd1f9e9fd12fbb38b55676b7a9451970a973e6e3b65d10"}, 0x80) fcntl$setpipe(r1, 0x407, 0x800000000010001) mmap(&(0x7f0000efc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000efc000)=@un=@file={0x0, "2e2f66696c653000"}, 0xa) mmap(&(0x7f0000efa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) uname(&(0x7f000038c000-0x71)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000229000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x0}) mmap(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efd000)="2f6465762f73657175656e6365723200", 0x408000, 0x0) sendto$inet(r1, &(0x7f0000efa000)="2c1883", 0x3, 0x40000, &(0x7f0000efa000)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000efb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000cfe000)="2f6465762f72746300", 0x20004, 0x0) mmap(&(0x7f0000efb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet(r1, &(0x7f000045e000)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000efd000)=0x10) sendto$unix(r1, &(0x7f0000efd000)="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", 0x1000, 0x4004001, &(0x7f00004ca000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa) mmap(&(0x7f0000efc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000aef000)={0x3, &(0x7f0000efe000-0x18)=[{0x0, 0xfffffffffffffff7, 0x800, 0xffffffff}, {0xe8, 0x4, 0x3, 0x9}, {0xfff, 0x0, 0x45, 0x401}]}) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 258.980997] binder: 29649:29667 BC_INCREFS_DONE uffffffffffffffff no match [ 258.981076] binder: 29649:29667 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 258.981097] binder: 29649:29667 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 258.981114] binder: 29649:29667 got transaction to invalid handle [ 258.981128] binder: 29649:29667 transaction failed 29201/-22, size 0-16 line 2775 [ 258.982508] binder: 29649:29658 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.982538] binder: 29649:29658 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.990782] binder: 29649:29658 ioctl ae45 296d returned -22 [ 258.990828] binder: 29649:29667 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.990846] binder: 29649:29667 ioctl c0306201 20008fd0 returned -14 [ 259.091793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 259.123493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 259.287209] binder: 29649:29651 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 259.287229] binder: 29649:29651 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 259.287243] binder: 29649:29651 got transaction to invalid handle [ 259.287253] binder: 29649:29651 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="45986dea2b86bedb98571d2d16e083dabf062b83c1f3082538d59d6d860495fed13ee6a6e11c6a1ec4c2da3bced96a41b71652522ec6790902c7d8ae38d795e7ba49f9618d113c44d5a90e6bcad1b49f8f5a9b1a46bb1efa20fae3449e1d880fe1e55cb29ab9718b7356c390b6c7157cfbbafb1db474284d499d674be149d6d2cae4aa36bccd4a360cdabb84405bb2eb927728f9527e2a5680cd63cfa122d26fe8463289a5ad765d9d53b2ad9983f10e3191a5466834ff254f9f8ba1aa80c4f527982a00fb1d855dbf0c792886daf4f09b34c4aa8601b1803364e28353d9bbe6a11525220c0cb56d836796dceffb49f850879d8602b6849a881e05820311504489cf977ed09e6dd2df7ba1435c924c8fc8d435b55a07387143fcaa66970d42e664a3f86e088e15160255f27fbccb0abe73ce8265968be2d2270c5231651dd0b83d4a3def8891545354c0648982376caddb636d0cee264f2aa45121074669c09c7ac2c20001767964839a0d758e0b09d4cd485244c97e909546d9733c9375fb12ad51592f0e9452a26f3231caa14f99e9ad943a139cf3060d5fa0a7d89b6b9f7a3b11895ee82249bb16e5a4ae766cf5a8a2685fdf7231b6510f8cacfe364264047842e88e2e89f7b2938b2f058ef95d6b8f933075d5229ca14c0f7883f20ad80136e05e26c754bdbaccc2aca409de14df5696f45ccfbfbf6c022df20e3a10d7961ffabfc6364719af43ae53ed17fca287cf08dbb725d4ced49140731ac619aeae2700394b0820f0cae9b2d43cd55f5a0e705a835f7e458e5761a5f9f6977f959479b685a3d2a8291f7900f7a373c0aca01ea00d914a399a7f3d8dc08bb631e1b245484e9992ad02e881c27e38e8c94480a2a54683f40a9cb13a21089479240ada12b4ef3460339d545820154215feb6b22900a388f5879d546947e16aa237365332a7f5c725d938dcb66d0c72a9500b2ed5d72ccf19071c6ab5fa2942cbff7bd78efe1bf998e3bc2aa7d31c62c54cbe5fbf735f9d0356d74150fad7114e64cc284f39c9ed421f58a87c0894b8dfa5f66b785fdab1a5f1ab3d8830914ec7dc4efc2688209a0a451d5dc0b5db8c912b1f0927c44028fa366c684fce4ffd6edbf2ca1ff908d7d5aa318ee00a69faf4ba0949e2ebaabf4db9a0242ecb3527169145fb24967c906c33b312bef882e9f2e177e61b163d87595643b23d7f82fab4c3043570b61fde30b80b79fbdfd11c1d03c0aa877afda8a0cb1e46e42b2815452ab0a8249a144e1109219f062da0c55f84e37ea9951985bf4306c561aa517a5fe5b7f4fd66f02c1a49dbf215ced064a10fe411b7a0b3e4ee7403dc2ed87552dc6aec85f197d72e46936ca005c26fb74ed5d3491fe042e478297902031b0fb0d7c15e6bb119a36d3255f9467381c57860e84d79bc894c66e1492cb84923e030247e20327c02bec3d3efacc2222dde08babd84f064856792cbc0972de96cb411cef62f974b10526fb2f2e900f37fd4ddf6cb47815e506eddf9714c7d9e598e5c04cdbb402a411271140a746de6da6f3e052a709c9219f24c502ca0b63fb106bcfac97796e0dbdd73ce73068760906d9af6574ad43e4b6d45b2fe8c9cba6ef99735ccb1e8aac0c606c9919507f8b868fd75a0382103a7fa9293a060834500243844f4185c352e38eb2ee9627fc5584ec53b0b86d5950af83a65b4c91980d559879583c22959053a4691f05d849ead105d1c20eb8f2b371bcc38e345a7c20d56e9dc59afe5fd0f15a317167dd123195d25ae8e74886c55a198f5d0aa638d55ec68b0963b8021b25171401926e32655958a802fadf509a9d1d7caf05961bc4c70aa08359413ef7f7f007588ea3e0005cf795d8c56ef0aabae55c6893339fbcb902341c2f496bb283eb1fd521ac88632126d01fb38349f04f2b763c048fc9d7828371b53279624b2b3fd916e89616b1a3d98e719d29f5a2103d8a93bdb5555af8ddb76e9216acd472242efe48d6da72368ee513f1694d3548013c06ab5c4d32de07f8fba9c5db7803867c646b21f7bc7e91619bcdb347372b69241729ba0ff485202894041f68bb4e928f3712dc4f851f1778a562d49a457aedb11af3641b0c6c35688ccc90f293f852dd659824cd463d3b56dbfd7597b1695d5e71ddbde7c7494bd0a658271ef5c81bce2d1c3bf315eba8e7794a7f321d4963fe643f554bc9ca871f46db59e8de1d7186b36915e242c04be7fdb7eb4f43263f829ef8bee5a10b6a73bbcf80709ad18e1abbfcfa7bbc043f00b8f3cb120078e1ffa2a0b63eb666237ec222db5365dc8c5a610836b297c81e2f4a0448b1c8c447fbd299c72cd1f2c0b8e17b01eb0ad90b6ca933ccfd52a8d84a7bd6a7fba3b251bb43c622bc635806dbc0d7f40d5e5c6951e34d79b9e436ce5a9ff562e76aacc899367fcf2d08284e3e09052bb1050e5840547f9fb306de3495ad3147f42f9f99c27800ee833f2e827433c3ed70a6a5d786ca7b72efa19c438f6c1edccb724d219ce36dcc74cf99b17aa861c0c88b302c3be4a9da136ca3acfc9913b177ce797e770acea43948be54f113abe01f85b1b283043c89301cdf9c492e0fce0d5a9ae10fbb0dd536c7a15e0172fc17bc309d67b0ea7c1ae08b8356535af45655dab460eb156225cfca729f487470f5d637179cf38200e31b981f0e3669a17375f083593b6007240b79927891889b3330b9b8dba08a8679c789d998a97e407bbc95f03563ffdcc379a654dce469b5325a8f8ed226ece04e85dd9a38269f5421f45c79d295667307414c77a8739d0967be029a75ef81dc8680d0d1a6bfdb330addd14288fc0e19d4fabbe485a327b3ee1c6643be980b4edb60c9ce13a665ad0122c8b7e1de2216b8a5bda9853f2921ea54cf08c985f8156588f360fb4d385bb8f7e3e46443659ea9ce988cdc30f0b88c6cb650f8b599e71e29486036fa63f846258a7362cd76785795ac42382905bef261f5bd6846a7efcb2b63f30839fee893c9258debd98e9853d239c7540cab72034c1df6729df741554bab735a1892e3a3032fab160122e75cace61f3e5501c38a5183621a1c9475e966cbb58a765963ea7656f94b7aa9397c2ad2e44d54690ec1069e240ae150ea487f8de56585e834c742d3718e74c7931f04ec01090a496aa797d0d8d4339d9d25af095aa6e277d5cb20825a96587949096883919a883add1e15a6ecaf222fcb173793843f0179cfbf91deb80ef25e3dfb4ec8c0a9d47e69aa5f7f2219d52b9bd0acdc7c0415349c0944f187920005c7326da131af0452641cbe064c34c8c30541b09cdd12797248bcabfc502360b6786a4d57dad47abe4168ecdb61fa2d38f957f921ffd19437e28a64af174a5bb464548ab5157da0abcfb11f0951c9c07358abb085d6c3fd206cf9c1b59c6d7d5cab8aadfa00647db4730338c4d22e1a3dbc17797c82585c54cfc0e4ec6471c51a79acb11819c6fd6261202b03beaa25e6b419f7ae39379848cf549bbaff1f205386ba12f21d2dd9f6ee0b0e5a60650085aabeb713ea4772abbce0981b3a04344ab1989f4171fc2f8dbb0674e95e0b10dee31083322c3b18d8a699b405dc409f0ef334cd8c6078a8b6bc2a3f10a0eeebe29cb3d8d8f0e73928a06df6d951c7704832ed1d1474ffa12e9c5a1bef777713dc8c58134f57e17a376d41ee009f4832e2a7fffda522704a3d505512efbae82ebf81d9241b6b713a17cf6431a4bd401c43f19f15a2a72f0ac61237596d78ad326119fd47fbb062b60c54b794f36da53f5f2d27444d5207c4a5acc9b022be41f7546ad4d30e30fad865faa89dac279fa4828541c3bbb4ab6e1b4731b69254bb19a4d5a510b41053b5e5f63a55b8ff9838ce3a8643cf0245e31a4c0b72922d9d1671a8c265864c25c0cda9e12ab9606197e7e25794d6524f4936361e640a2546a8ba34285454cbe8459368316d7e24c8a44a5b1de3777f70a417a9ad27e810cda1894762c2a2f1f650dd8dfefda0af25a68f01a1afe9e20b20a3d0383edfbd95650d6dd1e677cb676776e9bcdc7675cfe06ce5e4dba4d9e02c575572e8caafc177fdf9df9381d423fa09ece233daeebd466cbad0a1f4b53fffa3b21ee363be926bb8249e6b91b6cc6396cf6738e10f78a309a3879e899ab4b52a1912cde128366834a0ddc4216fdb7a0d5248c600461ef87fceb82cade2abb929cee783ff9654d89dea8e73b39d48d350a5bbd0dddca06f8e09605a3621c0ff85a71533a782b01b9179fb1c1a82ff6640041dc10effaae9b1fc56cc65fab9ea33c0d2b5fcd78aaf440f5bd4172ebe9418f71afad87bfa512256e5307e1bc95ab6c383352c185aaf586442bc2caf17b9636c356826f7411128435a64dfd0cbfd3ed89c596e15afbb513db8c59a2154a6ed84784378e3e1d026a60d236863fae5228d6ea63a7196aed37d6926f7eff2b8c2e11988c51b4ec06b32b76c040a7ceaa6342c02d4c9da9fe31093a9a2dbee689001b8f8352b3edaae9541b2e08157fafff0eb46a05813552f51b6c6f67b14fc126c07235d296b191024ae82f691aa08ca62752880f874de8a58f2c3982f2cb3889e008c414fb2a8ca3d00311ae2981ef587ff19597b1f11897b515c1a98e7cd543d3c08a14cb21f38c8be387e2247a50319b4307f50f70f5486cf64fd60c32fd4ec5e8eed9c8c0d3495d31788c29cd9db4abdbd4f9385af36c7779950c1d1bf50e1193c34b45118e9eea801be629232057eded785b40db2c9faa8e0a1059199a7200345c9dfad979da8d28f17d97a8adcfbf87278bf9c9c044f0a51ef50a99e4d53eaecdaf325e0f9e150e09668840a52701901a992bcd817ddf56a5dfa5b4a78a521dca20a60699184c07d8bae0c8238c83098a5ca804c48707bb97e57f8ced4bccd51cc7038703b143d6ba0d6976c419544c1c32e916902ffc820572a8bb3f5ac9650173e4ed1895afae778c82ec0759771644ad3bb6acd68a891e7e7463eee5cc0d018d22e28b51119daf6cf5e01d6670b2d30d7b4e6b0169cdfa8499c55074befc4869e5976ce1cb37d47a929ecfebc605e25427529f7b30986a4d195ed7f972b8b89f00303a89721adcb11b157566624c0cee4cfe282d50ac294bdd8e236233fedd730adcfbf20b71edb6aefd56a89e6002d447ef1a6e97cf9bdd66d8381f7f6d0fe6310bef2e97f787db8ab5051d099170525a28e454c9d8d8fbe21f76697d83ff8eaa3e51b7232d54b29f79a23050e9fe251b5c1975a4a5a9ee044ea16a11ba98c97aaa6e24593e41d693d1b5c4352f7d3531f1bfda43b354b938f6a5d6b1e19ed11ff0c9bca5bcc3ad41531e811bf6b19f1de21f21d04adb36720bec23e9fb68f79be59f00f1b89233fd2362fc99371283c375d8a6be800560bcb706ddd8a68469be0c51b6e998371424256b78c7460ccfb6ce3dfb0d04bac646ca27aff48a19dd7eb4f56f7e424693ce09b756ea07506a9018c8f09e33c36a2df1594927ec61d710408ab410d78e4ec62dbfbfa53af4ede3002568e85b48fae8ab4c1c908c3aca951a38779f105bc4aa048de3fa53664741247866a82c04a4f680c316b1ccdcb564e8c7cfd5e5be021e03766456f6df406ad7ddfc452e3dadcc39eca364ac86f8fe9537a79e96234096b21e60f1384691923aee5eca78334c6f78a7f47202dfb093418fd5e84d1adcfade1da666cc7aca9ea06da9124b9c6862e8de709fe51758a5b7fb6b29a904bcff9698702c735811fb5f6ca7bc889d11c0eb6e2fd2b5fe160bc7261c7c788d6ed781d05b2af5", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) 2017/12/10 00:42:09 executing program 0: mmap(&(0x7f0000000000/0xeee000)=nil, 0xeee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f00000d2000-0x4)=0x4373, 0x4) r2 = socket$inet(0x2, 0xa, 0x7) r3 = dup3(r2, r0, 0x80000) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eee000)=0xffd, 0x4) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000ef0000)="255e198fd8aec8c33d5a3a7b7d1892c40780f5b93798bb01206126c8c6607944d2c846c5387fea75a61f11a05bfca0257d528a2a7435edc88c3866b92cdac371283aaf0c30d59bddb5ae6969a4fed889e6d135ec2adab369c7b270861cdd5328bb05c49a6e8bcacb2cbf9b3f494a2a703f8acb5d2120a6b1eb486b1c964d03012b62c6a06a4353126d42eeecdc82f8317ce79183e979d290d1892a70f1bcb8ab7ca2855c", 0xa4, 0x4, 0x0, 0x0) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000eee000)=0x1, 0x4) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000ef2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ef2000)=0xb) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000aa6000-0x4)=0xfffffffffffff0cc, 0x4) mmap(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000643000-0x1)="ba", 0x1, 0x0, &(0x7f0000ef3000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000ef5000-0xc)={@multicast1=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000ef5000-0x4)=0xc) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000ef5000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00003df000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, 0x100000000000000, 0x20, 0x5, 0x100, 0xfffffff, 0x200, r5}) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000832000/0x4000)=nil, 0x4000, 0x800000000003, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000ef6000)=0xa1, 0x4) mmap(&(0x7f0000ef2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000ef6000)={0x0, 0x0, &(0x7f0000ef5000-0x40)=[{&(0x7f0000ef1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8}, {&(0x7f0000ef2000)="0000000000000000000000000000000000000000000000000000000000000000000000", 0x23}, {&(0x7f0000ef4000-0x7a)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7a}, {&(0x7f0000ef4000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, &(0x7f0000ee0000-0x51)="", 0x0, 0x200000000}, 0x2020) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000ef8000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x97, 0x40002021, 0x0, 0x0) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000ef8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ef8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ef9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000ef9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r6) mmap(&(0x7f0000ef8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:09 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d7c000-0x10)="2f73656c696e75782f73746174757300", 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000e30000)="9048f01f178286e74da6205dc8d0871465d25f392f91758bbf53b8e97aef79dd7f07c8ebbe8f463c97af5c63e20e47213b06f0e5961ea303f9fb835ce140c8d1587338a84ba1ae5bc8927d69ad9bb68bc88bcd543a1b0da0d30149f84a5518ee0a8d1b910e5311757e6110bd81eafc1347ff0997f40668559b0f85a0cb5518da99d0d6137ec4cbebd942ec8d1ef0a356f47be863a27acdcc686c73943c1c1721394f8d32876ea12c24e44e7003eb142895f666c15a1b629f0eac267e98fceaf86a7b47c33c9b83f410d5473a145f8c3fc8a27ecd42e0b4ae2655890c7523268df4951c375cdc82a5339588f1577bfea116ebc421b7e38569ecce04a7a7c593d18b492ca03078cf780310b4ad07223c72ca379cfadafe99ad64fb79dfd8fd05cb0bcf51020ea1291d91e610c636467fb6cbafed652223e3eea5029e3cdc37d9d1ebcd97e47967a3551000d14e69d510e4a5aebb35dd2d1c9744eb8c1b6847dc6bec4d2e54a002f134a3a02fe7ec7fb12f4377545d7b025f28d79a11eb6dee141bf603424e8637788407714091e8abc45e87349260d8249b89b41102e98cb1b7f51904664c6e095ddeabfb2a1c0677e44ffb0cb8c68cde656e13e336a6bd0b256454fb7dcf9ecb1fac11e4e5555b3443cfd6d3c1bbed2a1f4eeb8c0e35a19f6e0521a98755c9778556499c5f69a578026ee17a7fe5d0e34408a1c5a4babc115f7bd1fe2bad650a72c6158f210f55ccfb6fdc970354d31703882675c597237f52e770c2ac98894bcd635d2aaedca94339b546a7b4a64039a8475b402a70147fb726cceadda90385f50d85f24708fc7487723de17daf23c6e60f640da705719488a12d95ced2b86414693e654855ebef5b423d4b865de5158eb1885b8aa9d7655c30370c6313ecc13ff6d733fef4fab50f5022e7e9d86c293a717f8bcd21d2b07c1cd2c0dcde028780631b317baf85433c8081e758a1687caa31e0f5f375711e65efdc179ec6199e54e3d023a0b891ba1f6c645e9271d50620babc9784b1aa730fdda0ace64080b816f891d81a2c2645f66381090d29cf9743edc3bd319c85bc993bbd6fad0653711069ecef35a8a6d039f57137bf85c8c8a980723b0db90c40c465eb245a3ff0570c145e6db0daf6b0be1a89ef8fef783ef9f3b8e73623ffcfd02e4b62df1083c2dfdcdce33181ec1320cd11910c958d88efe2db899aefcd8f4612bb6a81ae28f33fea1f18baaf27ae0653d9c990a8d152117965b7442052f1ba66118f4d95ff0e331f979922c1f0571b28df25718537cfb0e5f97670da2cd386fb1eb9cb623f0f7f4b7251d936f6e39421ca8df6b90b1e1ec54ea74ce3f762ae28ceaf3bf9a35ab14ed20fdde0f5224ea966317419c979c72b7ee10f0ea6a6d61570a6ac19a84d8b272bfc296d5c6ed29611320dbf641b41ca0a93c1a6dedd3a1067e8557c332d76efe9eed93813690c9548753539e5b8df244d2396f2b4cb358ef0ee065e50e774bb64589169ee4f0f9a38ade047690fa6f7a06ca3517a65b5dfc310445966fd9442901850dc9c023db2a8cb47aff4c7cb80a1819eee924c8ff1cb3c3e729fff4e0471fd99efbbc8fe22aabebf55c52b7b6560e5afde2f79957715866119f39eb56fa41393ed638ca7010ec5358dcea7558e60c10a3740a87de813bdce740b2cdd35d7417e6c4fb345c4dc9c69ef29261ee35819564bcb7f84c2b79960ae1d20885c2a96fd38d352a4ec74540d200e320b3aaa5cb9b445515385b6c94561da096f9f5f7cd609c3b6f6f8fd5a7e1943e3be0bb2f81dfb1dd98aa457ed101046e57f5cfc854247e91a5ebbf7c089bef8dd5f56e4dd644b567959e8ade63c4fd8399caf48eedb28add33799ec8360dc6471a23052e90a3bdcfd2daf471fed6000800837cfbb99c99670c936e9d13914f1aaeb58ffc2b4d698353efb2155d29b210531b770d62a44bfcc4100298bc2073a4880c1407eb7a52f802ee94704feafadd23fdad310c0a68eed941e66a575da57ed926e56da3793bd34baf364edd6b950ae8432729243f74b61758f791f525bfdfa0eb9be71314cfb95c6002e5e4a91e268113efc13c97efad2d25d8b474131012f99ed146eb74f298eb9b57bc2ea0c2f4151a2d3cc1eaa0b617a33aa274f7c318aee6815d05602dd4ab114b1c9bdbe28c22f305c8c2f14deb2fb55314da71c2e65aacd04486939a997432c6b33b92d18aa2b3165c1bd596da523bf1a22ff05c89f651a9157fc81ce83e9a840999d0829f098cd2c7c5666a9af943ee255df527c424a12ca916177a7d080301e3e4d6c41679ad446d9fac840a5cb8670568fb753012a7edb07c9de0ff45b32ef2fea12efae04e51ad1e8a5f43f1a6796274c67be53cae04676613b0b44cd572fabfedcd8ec302386a7b7d395fae662beab9dcb801c2e26b41180d643da5341cbb891f25b4bfe7fb65860ed15fab870bfedb410bc5ece7124abf2f8f79049e8e3ed6135d0b69f3d01a85c1bdbd18fc77bb150b8b485d0b164de045e5289498df0799c5aa80ec0c5aa943da6b6220f8db01ab9e6e547a6874ab3d8fa936374b2ee92fcc53cb6c2d56401803c8c4d84b8807854c85f23e4d58e1f7602abc12ad9896083da0f373ec5966861c038c47be702beb2e0ece8fb4bc64a77743f3353ec2cf2652637fb9f46980dd84b92058c78f1a8fc454aa1bd7fb1aa245041998d786dada668f1f0b1726cb62f76b2478e48b6500c4e8391de56ce240cc4a321ef618784884de8c68a9a9bdf3ff8acd57bb62869bfef87c44530e53b7d5009d3f608b89147bed1b1d39ffdde553fa285db7ccd8ebfcb3adb0d3ffe6efd906d44e4ff75bd9d61e2fb38a282e55281e68bafb08d59c8b9226324f518383b194f96c4f3b5526aa16639b74343a7d54fbfc718c3ad43d59955b7c87f36dbe1383b7c233decfbac9b4ff686a29b1431d2cd66c0fffa30c3fdf5d6a4d6441c51aacb4603007a6b85830ab1c6b8a2acc9826425f5d501d9dcb465fda05495ed6a3e0ae9d92cb0bf7cdba31b1857d7f65f56263a898539d40f938be1c8a48f014782e3d531f7acabd615f076d323406f0392f66458a89a6db36e07560a43ca6938fef99befcee15358353f1c5f0bd2258bb6733860d1b766d6048f32d9542cfd57e7c82d059af575d6015621998b09df03bdf5d459665f47489abffb30aea7c6bc6533feb7caacb7a0ae7a3ec02811e614f2cf87ac7a27c2255bb4acdc7f18e3205ec5b4e3de5c8c35a0a55286ab9dcf0cd01436f8839f521eebbd955f6b54c37d19291309e47b3f3530e554367ed797c8f733f4ede22ba00b68fa1d68aa4e8d0d2962174ea4ed5c6594b39414a57ea0372d7b5a0e7fb2ca233909da622a96a70b1b0baeb3e54e9e3385c326c24ae8d29320611a77894769a5622349a3630aaff1f2b99bed7717359a4b4a4db62da6103ed4cf678eb27000733538d44b6142b772af54213ee1081e48c2a6461ca1ab2b2970c27582f28c9434451d3a6725564a9acaeac7248dc41c8c0dff2f7971620448e9ec55a5f742f2bb20a314a04b362e304556834dc71405af3a8b706e9c65d73d6eacc2466d1bb806243f59958f4c1eabb714bee933feb00f0d223e46775e58dbcc33406b0c471b7cbc65eb836be61a1f15a30a3eb014e610f09d90355c4aaa03209e058fd6723a0b700cf39335edd427353b17f463a0c801ee6432bfea8fa00ef3b511c7dcfeb51588f7d78a2dddbaba86c3404ec3d11d6b8a72c11ea6d26cf6cbe3247161292337893c8ba5f926c90bcf9d85576384f305f558a9eb3e773b82be597a9be8a7db328f22ee24fb49f8ba091ad267081df5847de7ff8dee0e0b39d6d449f63fbbe5d3aebf479ab18e156a34599ba133b10970d76036913f1cb5a0c005734c5e61d3b017efc8d30873aa872bbf1d4d51a21807ab967637e1ba3ac126a9af2be834c774b79195b338069dd5370a9c9028c174ee45419e6468b5d7d41ef0748fa099d5b59f40fb937374b63fa4fa39db60821d1dd3defe768c4bead714eafd719ef85d81d0ebce3fdc23060f371e56d03b8d13e885afcc1ba51b01c6f7bce7921c25c524b69b40b1d8cdb0fed4a898ef23683456bbdb7d8327fcea8acebdbcc3ed15f0082820d22d736a508520deec08eda05f541ddd730a7c90eec03ec48b688304905cff13c05439cc8565e5d5a71f88440d6fe6243693a39b81253664285119d3412f8d584a2924951a264484882f45ddee6b96d4829182842235cc4ed025e99d576b9321049a9cef0da85a5cf2eb6493fb1efa65a6f67919b27e56924dcfbe52154e4080e2d879982ce91547e79034067d891afead365f64300d98ac8d8e1dbcf5b90c7fa9c4bbb24fa2bee6150153bc26e2b4ceb96df577bca02bfa9f301d533e3ec1e77e49adbb7b2f2d9838c486a4a8980c41596ba5b46075bbf965c3ebf4933828df445c68c3c6b9dab5a61b90cc35d346f4e2b81031a97d321513a5373fe5f0bba65ee969421c002dd9fc6dd8d426e0a6b9562e771d6d7024256ec27b27abcf601171a8f850b823fc55b8ee084c057ec032d3aae4dada791af69d831d3d599566beaf63715d5507e977b3ec23363ecca24e76f0fc908ce60969f5e958691578a822797bb74c8ff1d252a634a9dca24cc43d0c4212d871cb01d4f7db933fc68b41e98aa14071d3bc9829fa56edb4d693353f0ed1e785d102be5e3e274c19d92b4861985fc574cf6467334ec03f272dcc1a4311e8e0715310a732337363276d3dd17da1c2e09fffe85f4947f1d3365aead5371e6004e87ca2d8dcc320f94d186029a2f592714289987f578a8d855fe2d979c644ad124097e5a94f4546b46581d5134188552dc7704e776bf07428555db8cfb91deb34531931eb2b4b9a653656f6cc74f932517d2da48f7af5aa508e10317e2d2c16c3f917b0e0e3e7d514ce70bb1a01e3ab7894d9af21b3e6c1ec51931470e441d6605ce824c5a53ba101133f67ec747bea5b4c16adc4f671e389b7bd33551b2df50ca60cceb65dba2a383a38a15f8491460f973d56a1a9f37f1fa0afacaf787c2d3cc1970a21c17b14292ee364eb8069326701ab1687468d83053b8470ffcaf31be3e7aa9cb33759375d9693c1ed1eddadd8ee19ad6c9a1d98075f4667a378741bdb931e557aad190544e8859a6bb80f98f830d291eac06df82676d6325ed6d854f7a15021440ce5a74a7a18ee58228bff6061e256cbbf519903da4836a3cdaf7ecde9679c49179c0ec767931e9f4e03caa6b08347c923f0d13e0ece623826df9ee6b2f3e99ef43ee09ee4c73810c38a95d98ab2f26586fe78a24aa1b7b0fcb9f4dc22110bc435581e00d1424ebbcfcdab187d5c16fec113137528f4e62142a3f307c9bc3ad333b9ed0a35871e44c6c42546c5c908246e4cc3763db9f9d4322f7620ea10574d3e2d11bc7936166a5edbee8b92c98081d4ad9e4b68fa86b3627065c2f4e7b5807d30e6ec1ab32d927846ab6773d97dee5a6b031300e357fefa61f0864ab91b826376b0d8cdea87502d19b48caf4fb67e750306b91a7bbad97989f71dca3390f028e8b911ffa11f94f6359ec8c606b75593cd25cf774732316a0b6c70b3718a88ff33b4c070181ab4458f901eccd2c7e690086f4421516856beae07b323525b248d43e91f566ef7052db851e1704a73402882c34081bd40ff54709cd5716f5c41abcdb3de231fb4f83851e6bb4d718876b4a981735e891108d8ba02fe32ae47414a5b784acb1fc05b1a75f471356e4cb4c9dd097b") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0xffffffffffffffff, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r1, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r2, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000000, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000ba0000)=0x4, 0x4) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000b0d000-0x4)=0x1) 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x803, 0x800) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) fstat(r0, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) r1 = socket$inet(0x2, 0x5, 0x40) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000005000-0xdb)={0x0, 0xd3, "619a8b129814e2e91dfe5f26593c44b543f61bba999cb95c8682ccc28cfcd961b8b4b7b0cbbb8df30413a3abfbbe9461e807f39b00d71ffa690d7b3042491ee0f038d194765b83a84d25a0b0affcdb1db4d150107d214e57b54ecf67ed9af11145fbc0073926f330fc53a038c1c8bbf092bcb318179ee380de3a101baef43d7ebccae5c12aeedba7d8a5d645dd24a502872593056e5a7a0d3e0553846d1ccc015b31b1e5a6e7e478609eeb493136b29b28010a648f4a9645688ff63e691fecc57311c5ad4c6b569cccd1fa02ac5978fe3419b7"}, &(0x7f0000005000-0x4)=0xdb) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001000-0x6d)={r2, 0x65, "666c7549d97065b90c6113e25cb29c1df91a4c25c3f767ddda383073c42aa225bbb0a035a0a74dc4f5410a4459fed6d59058a04c21f94cd8113deb28e5cd5bfae005ab4e5c02639e7c276f8b2509ac5bff6455c6e5ffa9ed08eab6955afd475240217d3577"}, &(0x7f0000005000-0x4)=0x6d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004000-0x8)={0x0, 0x4}, &(0x7f0000004000-0x4)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000004000-0xa0)={r3, @in6={{0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000001, 0x6, 0x197f, 0x8000, 0x1}, 0xa0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) uselib(&(0x7f0000005000)="2e2f66696c653000") setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r3, 0x6, 0x7, 0x5}, 0x10) setsockopt(r0, 0x7, 0x7, &(0x7f0000002000)="e34e98b24dffa5d746fbaf5c9bbaab6f09a7bf6c83c18ed3d1c8822a8f3cd859ed8446f536571efb0866f834ae9525bea11596406349cdcaf83fadf118aaa4676aed9b7be9e4ee7bc85b078ec93184d3ceaaade404d3f6460cac8e435f100ba36adde54e10c86c55e3e8ae484fbfe4b1c61d67e16f89b48399de854d0a226a58b6371e78b825e0e1ad25773529dc2ef41e22fe322b856a97b42bce351797065c297f0d438fcc59163ff1dd66c0b43433362f60229e14", 0xb6) 2017/12/10 00:42:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e23000)="2e2f66696c653000", 0x0) syz_open_dev$sndtimer(&(0x7f00006d9000-0xf)="2f6465762f736e642f74696d657200", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000902000-0x10)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000452000-0x4c)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x48, 0x20, &(0x7f000091b000)=[@ptr={0x70742a85, 0x0, &(0x7f0000802000)=0x0, 0x1, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x0, 0x1}], &(0x7f0000788000-0x20)=[0x0, 0x28, 0x48, 0x0]}, 0x1000}}], 0x3, 0x0, &(0x7f0000009000)="d8fc1d"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000cbb000-0xc)={0x2, 0xffffffffffffffff, 0x1}) memfd_create(&(0x7f0000f69000)="2f6465762f736e642f74696d657200", 0x2) open(&(0x7f0000b3e000-0x8)="2e2f66696c653000", 0xfffffffffffffff9, 0x840100) 2017/12/10 00:42:09 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f73656c696e75782f61636365737300", 0x2, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000010000-0x12)={@generic="fecc8856fb59946ca98c3b2aa9b5041e", 0x80000000}) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000004000)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) add_key$user(&(0x7f00007eb000-0x5)="7573657200", &(0x7f000068e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00007e2000-0x7f)="abd5a9ad4353c0521d1b9d8507445f9b2e650e1a5826c0651b8f1cf005a5b8b299183b9cbf55e9b1ff7978002726d91d4a60d7585cbbbc593e9398ecc2ae969221bf28c8d14ace989b05639f40b4a368c4830f2d96e22906c4e52cef77e42589a300021782a25be9bb7a27473345b8dc55f829ad00598dc5f6536e0ba9facb", 0x7f, 0xfffffffffffffffe) openat$selinux_member(0xffffffffffffff9c, &(0x7f00002ef000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) 2017/12/10 00:42:09 executing program 3: r0 = accept4$ipx(0xffffffffffffffff, &(0x7f0000b68000-0x10)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000962000)=0x10, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000377000)={@common="697036746e6c30000000000000000000", @ifru_flags=0x1001}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x20000000000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000c41000-0x4)={0x100000000}, 0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000ef5000-0x10)={0x7, 0x60, 0x1, 0x40}, 0x10) writev(r1, &(0x7f0000ef2000)=[{&(0x7f000093a000-0x2a)="320000001cee55e66efffffffffffe000200e3f0010200007400000009000100000e0100aa64ff00442f", 0x2a}], 0x1) socketpair$packet(0x11, 0x18000000000088, 0x300, &(0x7f0000ba5000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000d1a000)={0x6, 0x0, 0x10001, 0x2}) preadv(r2, &(0x7f00008f6000)=[{&(0x7f0000372000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f000018f000)="", 0x0}, {&(0x7f0000e4a000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcb}, {&(0x7f0000fa6000-0x3c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3c}], 0x4, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00002f2000-0x8)={0x7, &(0x7f0000086000-0x40c)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000897000-0x11)="2f6465762f7667615f6172626974657200", 0x80001, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00003a4000)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000c2e000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000827000-0xc)={r5, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00005ed000)={0x800, r3, 0x10001, 0x1f6}) mmap(&(0x7f0000000000/0xdd1000)=nil, 0xdd1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000195000-0x27)="26000000110047f1935ebff70722000c07fff700010000000700ff36b80747510500b80e0000be", 0x27) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00007e7000-0xc)="2f6465762f72666b696c6c00", 0x60000, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000001000-0x20)="0000000000000000000000000000000000000000000000000000000000000000") dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs={0x0, 0x0, 0x0}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000)=[], 0x80, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000af9000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, &(0x7f00000a3000-0x10)={0x404, r7, 0x1000000010001, 0x5}) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000821000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@multicast2=0xe0000002, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6}, {0x6, 0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, {{@in=@empty=0x0, 0x1, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x18, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}}, 0xe8) r2 = dup2(r0, r1) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00009cf000)={0x3, 0x5}, 0x2) r3 = fcntl$dupfd(r0, 0x0, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000b1d000-0x20)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x800, 0x0, 0x1, 0xb, 0x80000000, 0xffffffffffffffe1, 0x7f}, 0x20) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00005d6000-0x10)=@common="73697430000000000000000000000000", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00008f2000)={@rand_addr=0x0, @empty=0x0, 0x0}, &(0x7f00005eb000)=0xc) recvfrom$packet(r3, &(0x7f00001cd000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x78, 0x2020, &(0x7f000080e000)={0x11, 0xf7, r7, 0x1, 0x559, 0x6, @random="3f0c5f636fab", [0x0, 0x0]}, 0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000090a000)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) symlink(&(0x7f0000d85000-0x8)="2e2f66696c653000", &(0x7f000094f000)="2e2f66696c653000") getpeername$packet(r3, &(0x7f0000f73000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000fd8000)=0x14) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000ac3000)=0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f000060b000-0x14)={@loopback={0x0, 0x1}, r8}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r0, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000058000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffd, 0x0, 0x3, 0xd, 0x0, 0x160, 0x0}, 0x20) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00008c4000-0x8)={0x1, &(0x7f0000293000-0x1e)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) write$tun(r3, &(0x7f0000199000-0x108a)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0x1040, 0x84, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @tcp={{0x1, 0x0, 0x42424242, 0x42424242, 0x9, 0x0, 0x10, 0x10, 0x100, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffffffffffc, 0x7}, @fastopen={0x22, 0x11, "035d1b46e364d86f07cf8c9b6e18e3"}, @generic={0x2f, 0x11, "c6dae33334ed8be34936da995fd277"}]}}, {"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"}}}}}, 0x1072) [ 259.474850] binder: 29717:29720 BC_INCREFS_DONE uffffffffffffffff no match [ 259.477110] binder: 29713:29724 parent offset not aligned correctly. 2017/12/10 00:42:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="", 0x4) write(0xffffffffffffffff, &(0x7f0000939000-0x57)="cb5931580539c62e8706b0d72fd716bf04c42ddb007577d1d8ea1b4697b7e769b4f3e4b788da2c37d9ee3b86b8f682de37b5de4a9bbb739c03bb07e7425402601c66f6cc3117686c79c3e481bd77d00cc86a2664cedc97", 0x57) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000c0c000)="7a68752f1e942da88651bdcd76a003ed807e9c370668499a878c655777f539311fbcdd8671c1686dc5ed3ad53852a7c34cc41a2e49d94ab740754c70ca7b02f189cc06d968ae2a49b69fc693e1155a1f4a410f12797ea42e88acc0b987ea799e82855873bd35273a31e818d81d265f35c2b4a0bb3b34ac53f17bfaef01e742167d15cb9623fb123f747eba009928", 0x8e, 0x8004, &(0x7f0000ac8000)={0xa, 0x3, 0x81, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1f}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922)="2ee9877d580ad32fd7906bb6af10cce4cd9781039daf1d4c619c10da629f37f69fe5", 0x22) r1 = dup(r0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000944000)={0xdd57, 0x4, 0x5, "337c65bce62e", "8e853152791dddc7a55cabf7e4546f8c"}) 2017/12/10 00:42:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x408001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xeab000)=nil, 0xeab000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000019000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$void(0x3f) mount(&(0x7f0000374000)="2e2f66696c653000", &(0x7f0000b31000-0x8)="2e2f66696c653000", &(0x7f0000ec2000)="72616d667300", 0x0, &(0x7f000002d000)="") set_mempolicy(0x100000000000002, &(0x7f00001f3000)=0x4d, 0x5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000ad8000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x82000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80010200000009) 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003000-0x10)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) [ 259.477151] binder: 29713:29724 transaction failed 29201/-22, size 72-32 line 3032 [ 259.488653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60956 sclass=netlink_route_socket pig=29725 comm=syz-executor3 2017/12/10 00:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) 2017/12/10 00:42:09 executing program 1: mmap(&(0x7f0000000000/0xff3000)=nil, 0xff3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00005d9000-0x1c)={0xa, 0x0, 0xfffffffffffffeff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f000037f000)="6a", 0x1, 0x0, &(0x7f0000001000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x40080004, 0xfffffffffffffdff) mmap(&(0x7f0000239000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe67000)=nil, 0xe67000, 0x10003, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000e67000)={0xa, 0x1, 0xfffffffdfffffff7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfff}, 0x1c) mmap(&(0x7f0000e67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r2, 0x29, 0x100000006d, &(0x7f0000d45000)=0x0, &(0x7f0000e67000)=0x4) mmap(&(0x7f0000e67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r2, 0x1000000089fa, &(0x7f00003b2000)="3c85758796a07e8932ae3837364625125b3f27551f0072e0b623fe300957e2d505b1d4be158f5c038386bf075613aee607a465f684f6a06bd78099dd89ae9ff95ec6755a1e095b6bff030001d456726ec84881d880070000001a9376fd1be6e1f1058d1b6d4203e3c5d23223a39e8479866ce597917572c2b358359d5db82de577f35869d5fb62b576e9a9b2f023c41938df893924b6bd1adcb6693433d3db7556d36df6c268176f8b6224b960d28d31527d06000000000000007b5386cc5a9bef7398164ae2798ed577dc606e568a6df41ffb2420ac678f95cbb72b6094f8def52cca") r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x1) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x3f, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000043000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000084d000/0x4000)=nil, 0x4000, 0x2, 0x1010, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ff6000-0x74)="00000067f1f394dad4a54fc0c60b87d437de04b7113ca2ab293ebfe631bdd1c4cd02a662c5c222249e17ecd803781db4995551958eb0a923f39976ad1e37bf9ceb9ba0cda09425b01eb2cedc4c33665fbbe5581953c6e8f7ee6598b5ecba07fcdfd53240d63987d93d25ef4320811000df1c7d5f", 0x74) 2017/12/10 00:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006c2000-0xa)="2f6465762f70746d7800", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f00005e0000)=0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f000059b000-0x4)=0x1c, 0x4) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect(r3, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000e1a000-0x1c)={&(0x7f0000a28000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000a21000)=[{&(0x7f0000cac000)="15b886643d44c417daf4354331b038c5321c8a7bbf068b7374819eb1256e7e754db3206d8b8bca0c980d0ff1b9930d220a982badc95ade37188619c98db736a6b4b390d35033be3010dd35af9211997076dddf3c6b7b255a20", 0x59}], 0x1, 0x0, 0x0, 0x44001}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000f55000-0x8)=0xf181) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x2, 0x0) stat(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000603000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000ff1000-0x8)="2e2f66696c653000", 0xb1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f000073d000)=0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0xa, @thr={&(0x7f0000aae000-0xd7)="e0987d91912701128ee0b2cf4268d631d10bc4f400bba92ca682f105ae830973ae34aa975fb12b5aca0a7efb160d1b7bc84caeaf3063a9e53c56a5505bc7763ab3e0b0dfa20d5703056214ce6f9ae4d30e6325b9210f6158aa9323cdab69cffc2a3159c02d59410246b8bd955c1a3f05cf7797e1b4879b0243038c25a70f116519a0cd7cac2de4bb5b33643aabf06976a4476253f55d8d35932ba5c222cc1649caf40a6f54caf6f4d6bf09b13ce5db43a2c71e16297a453cabba4f79efc8322e9cb0f55fb3ba5427d02cf66420a3a330c139c9cdc435ff", &(0x7f000036e000-0x5f)="f7c586607448dd010d82878a9fe3958d9de549327e26e966e05b14a7bf80cfad73ddfb766d967cab05cbb0f3eff3888ad756433824374bd31bc058a1bf4f08fb0ae36aa3ada73822ac5648ad683b21b9f2819b03978911e0cd402ca1dd28a3"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000046000-0x82)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00007b5000)=0x82) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) r5 = syz_open_dev$loop(&(0x7f0000851000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x44000) r6 = gettid() readv(r5, &(0x7f0000a44000-0x8)=[{&(0x7f0000df9000)="00", 0x1}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000631000-0x4)=0x2) tkill(r6, 0x16) [ 259.496816] binder_alloc: binder_alloc_mmap_handler: 29713 20000000-20002000 already mapped failed -16 [ 259.498354] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) [ 259.498366] binder: 29713:29724 ioctl 40046207 0 returned -16 [ 259.503420] binder_alloc: 29713: binder_alloc_buf, no vma [ 259.503452] binder: 29713:29724 transaction failed 29189/-3, size 72-32 line 2890 [ 259.504364] binder: 29717:29731 Acquire 1 refcount change on invalid ref 0 ret -22 [ 259.504393] binder: 29717:29731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 259.523105] binder: 29717:29731 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 259.523126] binder: 29717:29731 ioctl c0306201 20008fd0 returned -14 [ 259.537607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60956 sclass=netlink_route_socket pig=29725 comm=syz-executor3 [ 259.576710] binder: 29717:29739 BC_INCREFS_DONE uffffffffffffffff no match [ 259.576726] binder: 29717:29739 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 259.576745] binder: 29717:29739 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 259.576759] binder: 29717:29739 got transaction to invalid handle [ 259.576772] binder: 29717:29739 transaction failed 29201/-22, size 0-16 line 2775 [ 259.582156] binder: 29717:29731 Acquire 1 refcount change on invalid ref 0 ret -22 [ 259.582183] binder: 29717:29731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 259.596097] binder: 29717:29731 ioctl ae45 296d returned -22 [ 259.599250] binder: 29717:29739 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 259.599269] binder: 29717:29739 ioctl c0306201 20008fd0 returned -14 2017/12/10 00:42:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x8000, 0x5fe) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00007e1000-0x18)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) modify_ldt$write(0x1, &(0x7f0000b1f000)={0x81, 0xffffffff, 0xffffffff, 0x8001, 0xffffffff, 0x3f, 0x1000, 0x5c, 0x5, 0xffffffffffffffc0}, 0x10) r3 = add_key$keyring(&(0x7f0000e76000-0x8)="6b657972696e6700", &(0x7f0000de8000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r3, &(0x7f0000b71000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000938000)=0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00004f8000)={0x7, 0xfff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000003000-0xc)={0x0, 0xff, 0x20}, &(0x7f0000000000)=0xc) socket$inet(0x2, 0x8000a, 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0xb98f7b414b2ab904, 0xffffffffffffffff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000004000-0x8)={r0, 0x8}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000003000-0x8)={0x0, 0x5ae}, &(0x7f0000003000-0x4)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001000)={r2, 0x4, 0x100, 0x2}, 0x10) r3 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) 2017/12/10 00:42:09 executing program 3: clock_adjtime(0x7, &(0x7f0000232000-0xd0)={0x3, 0x1000001, 0x0, 0x1ff, 0x7, 0x8, 0x0, 0x7, 0x0, 0xcbb8, 0x0, 0x20008, 0x2, 0x0, 0x0, 0x8, 0x0, 0x9, 0xff, 0x0, 0x101, 0x3ff, 0xfffffffffffffffa, 0xaddef02, 0x6, 0x5}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = fcntl$dupfd(r1, 0x10000, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000fd5000)={0x0, 0x8001, 0x6, 0x1}, &(0x7f0000fe0000)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000611000-0x8)={0x0, 0x2}, &(0x7f0000d94000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000724000-0x18)={r3, 0xf, "61e58001ea00fa000c07e5013f00be"}, &(0x7f0000098000)=0x17) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x40000966, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfed000)=nil, 0xfed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20026, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000f87000-0x1d)="706f7369785f61636c5f6163636573735c5c2f6e6f6465766574683000", 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000821000-0x78)={0x2, 0x78, 0x723, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) bind$ax25(r5, &(0x7f0000384000-0x10)={0x3, {"0a046ec3711e89"}, 0x8}, 0x10) mmap(&(0x7f0000001000/0xec6000)=nil, 0xec6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ec7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000ec8000-0x10)={0x5, 0x5, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000ec7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ec7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00001cb000)=0x0, &(0x7f0000579000-0x4)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) [ 259.984643] binder: 29717:29720 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 259.992124] binder: 29717:29720 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 260.001512] binder: 29717:29720 got transaction to invalid handle [ 260.007841] binder: 29717:29720 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) add_key$user(&(0x7f00007eb000-0x5)="7573657200", &(0x7f000068e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00007e2000-0x7f)="abd5a9ad4353c0521d1b9d8507445f9b2e650e1a5826c0651b8f1cf005a5b8b299183b9cbf55e9b1ff7978002726d91d4a60d7585cbbbc593e9398ecc2ae969221bf28c8d14ace989b05639f40b4a368c4830f2d96e22906c4e52cef77e42589a300021782a25be9bb7a27473345b8dc55f829ad00598dc5f6536e0ba9facb", 0x7f, 0xfffffffffffffffe) 2017/12/10 00:42:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000925000-0x10)={0x2, &(0x7f0000193000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff034}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f000021d000)="2f6465762f6e65742f74756e00", 0x0, 0xa) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="0252734fb088526cca26b5239cab12c4"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00006c2000-0xa)="2f6465762f70746d7800", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000f55000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_nanosleep(0x3, 0x7fffffffffd, &(0x7f0000001000)={0x0, r3}, &(0x7f000004e000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xf6d000)=nil, 0xf6d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000f69000)="2e2f66696c653000", 0x0, 0x0) r4 = perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x8000000000046, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00006d1000)={0x2, 0x78, 0xc31, 0xbd6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00004e2000)={0x0, []}, &(0x7f000093e000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000976000)=0x75) openat$cuse(0xffffffffffffff9c, &(0x7f0000c1d000-0xa)="2f6465762f6375736500", 0x20400, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000659000)={{{{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0xfff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x101}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x9, 0x9, 0xffffff7fffffffff, "d62d11bd1b60aa2dd0d2a100061f3622a2a7ffffffffc795fd606796249f88b1cb92e76cf581a045dec6976a6237b2075c0b8419edbd3ecf71c031526500000007024b15f9014783e0a5eaed0922946d"}, 0x160) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() sched_setaffinity(r6, 0x8, &(0x7f0000ee3000)=0x75) syz_open_dev$loop(&(0x7f0000db0000)="2f6465762f6c6f6f702300", 0x8, 0x8010000) mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000856000-0x58)={0x0, 0x3d, 0x5, @thr={&(0x7f00006c7000-0x1000)="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", &(0x7f0000061000-0x7c)="3a49da2158ce36b434896b52eb3b4823df50715f8a95135f4928f70bd2ff19adc13cdd0e20bf5a709a580fda15a22b492635251f92bda15d3c731984b61818d888286a2158e72ca68af9cc3b2502d1425ed4842681641f5f216c4f3709b837a9d373db52538bcaf76c52ba939c54c68e2c5ccb89eb2ec42403d241a4"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000861000)=0x0) 2017/12/10 00:42:09 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000e4f000)={0x1, 0x18, &(0x7f00006fe000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000852000-0x4)=r0, 0x4) r2 = dup2(0xffffffffffffff9c, r1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000024f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)={0x16, 0x88}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000690000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000923000)={0x0, 0x0}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000b00000)=0x0, 0x4) write$tun(r4, &(0x7f0000616000)=@pi={0x0, 0x6004, @ipv6={0x2b1, 0x6, "cec3e0", 0x3ef, 0x3a, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[@hopopts={0x7f, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @hopopts={0x0, 0x64, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xfe, 0xb3, "d8a50eb4f0abcfec79071a2065418655802e733ca3418b59ae0d76b0563e83b39862e53946ed16450d8cbfc75131b1594f4e2d3c0e4deee1c7014294c0885d8d594f587fbce632872e0907f0ff66fd1ae9cdd8df517580fae638169b4c7c629751ae735d4198951a70193853b05ee57b7c1cdc2049a4ef9ecfee0359728da197e76bf6a7d025e8f9b137d0690786c23931d5973e10629edb2c5f88175d8c356458f36ff16a6f13e8211bf91d1e3a1ed49e629c"}, {0xff, 0xd4, "d3a258ac0a318a07eee7357f5b879b339b5f4e06c3d515a83361ab9b675d2f919e3f2898e864de75b4b13bd110e1038674259824197b211a2d37df41bb865725d03734e3fa0a0dbc9b681ded150348d3d42960855b6a3f7674912cf82e8e2e5445edc55048a0736e6e594b9a9cd8033ff96a48aa5caa2fffae8764cc7b5c6a2b10a3b0bad990a630144fe756509716155a4e62f4da7f8cdbaf683a6c09823d6ecb4f15171e4fad655e9e6968937b4c77b191ca2643ffa04eaab20a442deeed3b708376854d81d30772e03cee8772756d022df9ad"}, {0xcf, 0xf2, "1400dda084cf419af05727a59763283e4dd106e5ff41df1626024c7d9d1cb4e1013a005177110e68ed58859a7fa0c1eed621244c4e77b5763a28044b299ba9d2ae48ec70931ceba1add36edab58be04687060095844a3cb06ff52c88fa24c69088776d37b343b2dd68548bfd40093fb928e4ca5fe815bde8b03c277c7ac0b708ca02701c73a39b13773848aa1ac05908034fe80c1c6dbb69d01a4f70edc168515f32fa8f44390c8b008af6147440f99bd425c8f745747111f7657b6bec0bcb54e25c2dfb62059eaba4336481be1d2a18d86fb776e56f7b59a5a42e93d2db0ca91ed4fa8428412165c7b338b190eb51314333"}, {0xff, 0x9f, "1d4b3c76533c6e45c1ba35cbf285cdace230bb249c2ee7a774cfa7980a41f47d77b49dbf48b73ffb9b8d5c79bd54fbf1fb5e4c771bab1a8acbc16d4d69d5a1769fea66dd75f1124fa8e94218d2107042d06ccfbba7fa2341fd237263e7054472f39b43e46332601e9ca8c9e6d44d20f8eb8f35a371988931d061edfb3df2ed9af75d2dacfcb76cb79520ee73b72b0fb1fa1c3fa4fd9dd06a796671291f6ba9"}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x744, 0x6, "abbed2", 0x9, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, [@routing={0x3b, 0x6, 0x1, 0x9, 0x8, [@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], "5be76108eb1aa7f6aeb64bb9462db4a53b35b71bcc131388df6c78e5ac5ece64cdd39ecb94c762c0155c66ae9c6e449e78e924585c2fef723cf66de2528bae8ad1399b39c2a6a1ed0818ebb3f993677efcbf931e55fe69"}}}}}, 0x41b) bind$alg(0xffffffffffffffff, &(0x7f0000f3b000)={0x26, "6165616400000000000000000000", 0x0, 0x0, "73657169762865636861696e697628726663343130362867636d2861657329292929000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)="2f6465762f6b766d00", 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00002b5000)="2f6465762f6b766d00", 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) add_key(&(0x7f0000d48000)="7573657200", &(0x7f00003a5000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000052b000-0x1000)="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", 0xf00, 0xfffffffffffffffa) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00001f2000-0x8)={0x0, 0x4}, &(0x7f0000fe4000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000784000)={r8, 0x5, 0x9d, "d0a902f7cf4eaaa98a6f8903d656bd495a17ae75e23fee9bf7353502fbb0c25eb934e7e174c9a5ac437cdecedb930649bf110bdf8f40867e4ad22549a8ba842f3d97e594ced11e16a23ce62712f6fcb78900f1c510e2ca464cb20db812658133e437e2ef62f66a6accb9b5593bf87b5a1991c17ec432c876a8eb56a48776f2887b30266616807ed4c8960c9cdbde291e714bc637df421b405081925429"}, 0xa5) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00004a3000-0x8)={0x0, 0x0}) setsockopt(r3, 0x5, 0x0, &(0x7f0000a39000)="81ee1c22535dbefc5c6a57621248390123c8c768942285d1d4e1cbb63f54c8c8673e3581a2d63428579c7d9c982165f102415f01cfecb4ca18aa3d6c0f2f09cd7bf01364e294ef5a91c050dc2be944cf1986e20836a4cca1076cf6338ffa7f59753219bbbae9e412b1506d6dc4be566b52799b667686fb90db015bcbf96c968defcb51be4dd462", 0x87) ioctl$TCSETS(r2, 0x5402, &(0x7f00002b0000-0x24)={0xffffffffffff136b, 0xd6d, 0xfffffffffffffffb, 0x2, 0xce0, 0x3, 0x3f, 0x80000001, 0x4, 0x7, 0x101, 0x4}) bind$inet6(r9, &(0x7f0000b6e000)={0xa, 0x2, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = socket(0x100000000011, 0x2, 0x0) setsockopt(r10, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) vmsplice(r7, &(0x7f0000924000)=[{&(0x7f0000edc000-0xba)="cada6d20d00ddb60284f23a020c4d4f63df7f753609364329275690cf9b362332d65c90db48f1ff9a6a375c36f6fddbda7b531fb29876926b5f6a787edf66429044d8d73bba76f12054bbd24326ad9a696d045cfd1c2dd6b17ad2b3c53e3b8aed35c6a352c5481b8982731d062f96b932dfe321bda22f1345dc1a3c06df96da34d799caebfca5bd15bee35f56d0cc156d1515dfe5a3970085ee524aa0ab9ae5cc3195f3db9d5892844609c8cacddc26ef5858b580ce0bcfbfcbe", 0xba}], 0x1, 0xa) r11 = socket$bt_sco(0x1f, 0x5, 0x2) readv(r11, &(0x7f0000000000)=[{&(0x7f0000000000)="00", 0x1}], 0x1) 2017/12/10 00:42:09 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000-0x7)="74696d65727300") ioctl$TIOCSBRK(r0, 0x5427) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x1b, 0x100000000000800, 0x7) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000002000)=0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) [ 260.216965] binder: 29823:29827 BC_INCREFS_DONE uffffffffffffffff no match 2017/12/10 00:42:09 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003000-0x10)={0x10000, 0x4, 0x7, 0x5}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000003000-0x4)={0x0}, &(0x7f0000003000-0x4)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000003000)=0x6, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)="2f6465762f6877726e6700", 0x40002, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000002000)={0x6, 0x3f}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000001000)="6b657972696e6700", &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x20000000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000-0x4)=0x0, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000003000)=0x0, 0xcf) [ 260.251107] binder: 29823:29834 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/10 00:42:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xfffffffffffffd, 0xe605) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00007a8000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000188000-0x1c)={0x18, 0x9, 0xaef, 0x8, 0x400000, 0x0, 0x100001}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000e000)={r1, &(0x7f0000007000)="", &(0x7f0000009000)="0000", 0x0}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000095f000)="2e2f66696c653000", 0x0, 0x0) clone(0x0, &(0x7f000052c000)="", &(0x7f000019c000-0x4)=0x0, &(0x7f00008be000)=0x0, &(0x7f00004fe000-0x1)="") setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000786000+0x4d1)={0x7, &(0x7f00009b8000-0x38)=[{0xfffffffffffffe01, 0x400, 0x0, 0xcf}, {0x3, 0x4, 0x1, 0x6}, {0x100000000, 0x6, 0xfffffffffffffff7, 0x20}, {0x5, 0x625c, 0x3, 0x0}, {0x0, 0xb553, 0x4, 0x100000000}, {0x9, 0x0, 0x5, 0x9}, {0x8, 0xcb0d, 0x7fffffff, 0x1}]}, 0x8) poll(&(0x7f0000a86000)=[{r2, 0x1, 0x0}, {r3, 0x200, 0x0}, {r3, 0x100, 0x0}], 0x3, 0x9) r4 = gettid() process_vm_readv(r4, &(0x7f000035c000-0x10)=[{&(0x7f00008e5000)="00", 0x1}], 0x1, &(0x7f0000af7000-0x10)=[], 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000022000)={r1, &(0x7f0000022000-0x93)="", &(0x7f0000023000-0xab)=""}, 0x18) r5 = socket(0x10, 0x802, 0x0) connect$ax25(r5, &(0x7f0000000000)={0x3, {"d004000000512d"}, 0xd3e}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000483000)={&(0x7f0000789000)="2e2f66696c653000", 0x0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000d69000-0x30)={0xb, 0x4, &(0x7f0000d8e000-0x20)=[@map={0x5, 0x80, 0x800, r6}, @generic={0x1, 0x40000009, 0x4, 0x6}, @generic={0x20, 0x6, 0xad3e, 0x2}, @map={0x20, 0x101, 0x6, r0}], &(0x7f0000216000-0x1)="00", 0x401, 0x8d, &(0x7f0000fe2000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8000, 0x1}, 0x30) write(r5, &(0x7f0000f69000-0x25)="13000000430025f00000000400000009020b01220010b500001000eb08002200e4ff00b700", 0x25) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000c7c000-0x20)={0x200, 0x7, 0x200, 0x20, 0x8, 0x8, 0x20, 0x10000, 0x0}, &(0x7f0000ad9000-0x4)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00006f9000-0x6)={r7, 0x0}, 0x6) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000fba000-0x8)=@int=0x403, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000eaa000-0x4e)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "72f20b", 0x18, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000a18000)={0x0, 0x0}, &(0x7f0000d37000)=0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000ea9000)=0x1c, 0x80800) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000dce000)=0x0, 0x4) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000e5000)=0x0, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000406000-0x14)={r8, r9, 0x2, 0x1, r10}, 0x14) 2017/12/10 00:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_udp(0xa, 0x2, 0x0) [ 260.251141] binder: 29823:29834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000854000-0xb)="2f6465762f6c6f6f702300", 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x40, 0x120) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00004b4000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = dup(r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x420000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f00008e0000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001000-0x8)={r3, 0x1}, &(0x7f0000c6d000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001000)=@assoc_value={0x0, 0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000adf000-0xa)="2e2f636f6e74726f6c00", 0x28042, 0x0) r5 = inotify_init1(0x100) fcntl$setstatus(r5, 0x4, 0x42c00) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00002d2000-0xb3)="") r6 = gettid() getresuid(&(0x7f00003e4000-0x4)=0x0, &(0x7f0000aea000-0x4)=0x0, &(0x7f0000059000)=0x0) request_key(&(0x7f0000c06000-0xd)="646e735f7265736f6c76657200", &(0x7f0000ec5000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000add000)="6574683000", 0xfffffffffffffffd) fcntl$setown(r5, 0x8, r6) shutdown(0xffffffffffffffff, 0x0) fcntl$setsig(r4, 0xa, 0x800006) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f000044b000-0xe1)={r3, 0xffffffffffffffff, 0xd9, "0cc06331c728f3669ab29935a69e492bd58fa5879ebd7684e610316a2a79e07a33b7252c68825245d3dcd37a93ec218394e30c3f1ed78553961e1d2ce55ee3c95b7f21da89109c1211e6c21fb59675752b678dc32292d7bb6ff3862713e72de5f320b46bebba80a7404d21a13f579ed02b9a3a1228e8c2e9891b1239b703c25f452871b963e3dbe537912639f7ff0f7e7402434753b8ae1587881ef6f4f02ac5b3004ee11268cc5e057b79953c9a129319fda2e16e9bc91df33a88d3d6061239d9258f07bbe56ac973c70d7dd30e567f6d79c3d9d7c44c904d"}, 0xe1) io_setup(0x7, &(0x7f000072d000)=0x0) io_submit(r7, 0x1, &(0x7f0000989000)=[&(0x7f0000566000-0x40)={0x0, 0x0, 0x0, 0x1, 0x80000000000400, r4, &(0x7f0000fcd000)="88c6b6344c99e8984f82126a8eb21e18ab407e47834a836e1c50a11060c372b032e2d307466d7f215800000001ace87b00000000000000052b79a5e5652a9cdf1626159c20d7818d54c7de349f13057cf57d94a0099d6a38a8ba8a7490ba4e4bba81112d0571d53f0186f55d9ca6fed22f35301b76e0cb094c910e7aab292beb5b979ffdf4e7a06d533cf3c538042b671f21105b9988cfa91e67bc911e345cc3ad1101f94b6ca5aea26910c536d57aedb8439d813b06314bd98ff494c8814415b6064dd1", 0xc4, 0xfffffffffffffffc, 0x0, 0x0, r4}]) inotify_add_watch(r5, &(0x7f0000b14000-0xa)="2e2f636f6e74726f6c00", 0x4000000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000ecb000)={0x0}, 0x8, 0x0) getsockopt$inet_int(r2, 0x0, 0x37, &(0x7f0000967000-0x4)=0x0, &(0x7f00000b2000-0x4)=0x4) signalfd4(r8, &(0x7f0000612000-0x8)={0xfffffffffffffff9}, 0x8, 0x0) [ 260.272124] binder: 29823:29834 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.272146] binder: 29823:29834 ioctl c0306201 20008fd0 returned -14 [ 260.312377] binder: 29823:29834 BC_INCREFS_DONE uffffffffffffffff no match [ 260.312395] binder: 29823:29834 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 260.312418] binder: 29823:29834 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 260.312434] binder: 29823:29834 got transaction to invalid handle [ 260.312453] binder: 29823:29834 transaction failed 29201/-22, size 0-16 line 2775 [ 260.313758] binder: 29823:29834 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.313788] binder: 29823:29834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.319876] binder: 29823:29834 ioctl ae45 296d returned -22 [ 260.320257] binder: 29823:29844 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mq_timedsend(r1, &(0x7f000078c000-0x63)="8b54d1feb7c83b1b9345d08e275ac381a8b61fd022eaba9f13c370e8067d29600ca361b28179786a311c9a87182e57e63ab95ca7641e0c41f2aa7cee435377c9d706b612d150db30eb85e6ab339eaacfb3acbbca1c045d67635200eba59f4976c8574e", 0x63, 0x1, &(0x7f000063f000)={0x77359400, 0x0}) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:10 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x80000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000003000-0x70)={0x0, 0x68, "75e93b134053e37c49a514fa6d6ced3c63f642a0430769d96c6815b966855bc5e60748fdfe42103d702f16747075bed61fcbbb24dcd22fa45720f39fa495bbe7c5eeb8bbc2f49feccc3e74fdbb0fcdb02ed00b92c0b550863670f791f133870ae2eeafa0faf03e5d"}, &(0x7f0000000000)=0x70) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002000-0x10)={r1, 0xfb2, 0x7fff, 0x0}, &(0x7f0000001000)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) r2 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001000-0x6)={0x0, 0x400}, &(0x7f0000003000-0x4)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001000-0x8c)={r3, @in={{0x2, 0x3, @rand_addr=0xe2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000003000-0x4)=0x8c) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) r6 = creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) sendmsg$unix(r6, &(0x7f0000930000-0x1c)={&(0x7f000066b000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000821000-0x28)=[{&(0x7f00009bc000)="4bbe666ce816e4d624ba651d7803be34fc31569f34f0dfdd7921e89463556d4f13dac95668663639c32994cc1c172b43c84f7f1135efcfcb90c065d64aa7cad2d6327f18ace88b08dab1ee584c88a8e113691057e9e721c2b26e3c8f79ec4edca6996c984bd4267e1bee4f6c0aca84fe0d46452a621ccebb094c8e47c2868b3a2370f5de37acb3b2b795a98b775d21db4c26a93829af45632ba82534e795f991378a7e0b1fa7032f66be61f87882bc1b619737651652c5e891786ed7926fc74dcc8af5e0670f3d00414ba3a40417c2ca89ba43b6206c129d3ca6d9ea50425a8ed06562c3545bb0082be939", 0xeb}, {&(0x7f0000580000)="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", 0x1000}, {&(0x7f000018f000-0x3c)="4e38ef0be0cf638034ddc9b9f0bccf63edaa85913cb34d249fc5383855942b8a7ff89cc0bbf6bcee8363ec95724d1b69d98e4ea0b94b4a57c9fbfbf9", 0x3c}, {&(0x7f0000de0000-0x82)="0a5b281316a27dbbeda3d98450e1f0a0bdd5db98b797122273e0611c349668100a5d752381fdff9bb3f366787badea8085dd20ba6ce62563bdbb29b38c15177cfe309b904265aa63336ae91d65c9e96d33e5ecab22e18a036780cde81903ce773a738a19cfd19dcd011f779d826986555154be017596b085e25439d8789559adc149", 0x82}, {&(0x7f0000fdd000-0x2a)="665a2509f05890d766fd3be205192e599e0a32b4bf2da011d397090ba000aa2bc53dd2bb6983c6e5fe5f", 0x2a}], 0x5, 0x0, 0x0, 0xd0}, 0x8040) 2017/12/10 00:42:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:10 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x2, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f000000d000-0x4c)={0x8000, 0xf0fe, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000005000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000006000-0x30)={0x50, 0x0, &(0x7f000000b000-0x50)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x10, &(0x7f000000d000-0x18)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000006000)=[0x20, 0x28]}, 0x1b}}], 0x29, 0x0, &(0x7f000000d000-0x29)="73975f7521a96b4bc51c6816d7e4e7de2f69f8f5b8aaae566a62817f7710bb446bd36d4ab5d871b79f"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe2(&(0x7f000000c000-0x8)={0x0, 0x0}, 0x0) [ 260.320274] binder: 29823:29844 ioctl c0306201 20008fd0 returned -14 [ 260.564293] binder: 29823:29827 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 260.571736] binder: 29823:29827 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 260.580683] binder: 29823:29827 got transaction to invalid handle [ 260.587098] binder: 29823:29827 transaction failed 29201/-22, size 0-16 line 2775 [ 260.644933] binder: 29886:29889 got reply transaction with no transaction stack [ 260.652839] binder: 29886:29889 transaction failed 29201/-71, size 32-8 line 2690 [ 260.663007] binder: 29886:29889 ioctl 404c534a 2000cfb4 returned -22 [ 260.670532] binder: 29886:29889 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 260.678005] binder: 29889 RLIMIT_NICE not set 2017/12/10 00:42:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) 2017/12/10 00:42:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)="64657620", 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00008c6000-0x4)=0x0) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f000076e000)=0x0, &(0x7f0000d84000-0x4)=0x4) ftruncate(r0, 0xffff) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000b52000)=0xad4, 0x4) write(r0, &(0x7f00007fc000-0x3)="48", 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000783000)=0x9) symlink(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000002000)="2e2f66696c653000") r1 = open(&(0x7f0000614000-0xe)="2e2f66696c65302f66696c653000", 0x0, 0x0) open(&(0x7f0000c9a000)="2e2f66696c65302f66696c65302f66696c653000", 0x10000, 0x91) ftruncate(r0, 0x3) ioctl$KDSETLED(r1, 0x4b32, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f000066d000)={&(0x7f00003c5000)="2e2f66696c653000", 0x0}, 0xc) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000f41000-0x8)={0x0, 0x0}) r3 = socket(0x2, 0x3, 0xff) sendto(r3, &(0x7f0000001000-0x7a)="", 0x0, 0x810, &(0x7f0000002000)=@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) tee(r2, r2, 0x71a8, 0x6) 2017/12/10 00:42:10 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f000000b000-0xc)={0x11, 0x80, &(0x7f0000001000-0x80)="f8fff62913634e6be665bf15f5f25eb64aea7fb4e89b8e5e569cd8e03c758223961a3c73e3b4d26edb99d995dd13c8fe8aca61b7c2908ab31dcba26d18c6786360e3a36b8792cf68ae6963b7cea3d0c9640ff149662f7e73d1fe7592b60f79a77885c21aebb944a223a6ea2f26f24a30194ec982d638ce1285d13a7b75d97f60"}) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:10 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000000000)=0x9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f000029d000-0xa4)={0x0, 0x9c, "f89ad150421f3dc97454138b3b0735e673dc06aec193ee726307dafc0e0e717177502746483c6f3b8af74eb3abe589db4f622b95b27e2ac583f0036ab39d74f96dc5881027c13796afebbd4266a1a604dde939a9ec574f838838cabbca1c2ba44bdcd327460b78074b3fc15df79ef99b34ae21891de83edfb5f17dff6e98019fe6cd0c383843aa9d93515c73bca2c1353be25a4883b7cb64802fb666"}, &(0x7f0000bee000-0x4)=0xa4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r1, 0x3}, &(0x7f0000001000)=0x8) socket(0xa, 0x2000000002, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x10000, 0x82, &(0x7f0000002000)="612cbd219074b5791642c5451e1315cc23383196bf66", 0x16) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xeea000)=nil, 0xeea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x100000001) listen(r2, 0x3) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000edf000-0x4)=0x800000000000090, 0x4) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000eeb000-0x1)="c2", 0x1) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eeb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000e6000)="2e2f636f6e74726f6c00", 0x0) r3 = inotify_init1(0x800) readahead(r0, 0x1, 0x3c7) uselib(&(0x7f0000319000)="2e2f636f6e74726f6c00") fcntl$setstatus(r3, 0x4, 0x72109c5fef5d34d3) gettid() poll(&(0x7f00006ef000)=[{0xffffffffffffffff, 0x0, 0x0}, {r3, 0x0, 0x0}], 0x2, 0xc000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000ad000-0xc)="2f6465762f72666b696c6c00", 0x50000, 0x0) sendto$unix(r4, &(0x7f0000936000)="641380d7ba10f7c69f1f3563be3ca878a91cb80ca52ad69d48fa327c19ce268e84aa172ac8f073b837a5890a9a25e46b51e89ef43594b73f1371e4d9bac01ef0d1df1af9ff2d5fc068cb093fe592fac132444350f70432a2ec49a1a5cec9a5ed1241212e77b79555129250f17828e021365c2390051ba6d9e6b23e7a60e23da2693231fbbbb6d9d6b3bd4f5f4e653127e0b9dabf0f3f27faa730c32609ccad6e2a9e0d357c19dc9c1cb8de17d95426c87f135b5386bbebb75c88a0dfb901eb03a295f379f91e1da7c9da5fe7", 0xcc, 0x40, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x20) execveat(r4, &(0x7f00002d3000-0x10)="2e2f636f6e74726f6c2f66696c653000", &(0x7f00006be000)=[&(0x7f00005b6000-0xc)="2f6465762f72666b696c6c00", &(0x7f00004d2000)="626465762b26706f7369785f61636c5f6163636573732e76626f786e65743000", &(0x7f000032f000-0x15)="747275737465642376626f786e65743127656d3000"], &(0x7f0000f1a000-0xc)=[&(0x7f0000da1000-0x8)="216b657972696e6700", &(0x7f000056f000)="2f6465762f72666b696c6c00", &(0x7f0000bfd000-0x7)="6c6f272e2b2e00"], 0x1100) 2017/12/10 00:42:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 260.695649] binder: 29889 RLIMIT_NICE not set 2017/12/10 00:42:10 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(r2, &(0x7f0000005000-0x4)=&(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f000000c000)=0xc) r3 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f0000010000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r4, 0x8915, &(0x7f0000006000)={"3bb0de7ec70e3a448b3240aa5858b7fd", {0x4, 0x6, 0x0, "5fd59ab71ebe", 0x7988b846, 0x0}}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 260.743102] binder: 29886:29900 got reply transaction with bad transaction stack, transaction 1180 has target 29886:29889 [ 260.751801] binder: 29907:29911 BC_INCREFS_DONE uffffffffffffffff no match [ 260.751814] binder: 29907:29911 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 260.751832] binder: 29907:29911 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 260.751844] binder: 29907:29911 got transaction to invalid handle [ 260.751857] binder: 29907:29911 transaction failed 29201/-22, size 0-16 line 2775 [ 260.751990] binder: 29907:29911 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.752035] binder: 29907:29911 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.753624] binder: 29907:29911 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.753638] binder: 29907:29911 ioctl c0306201 20008fd0 returned -14 [ 260.763082] binder: 29907:29912 BC_INCREFS_DONE uffffffffffffffff no match [ 260.763095] binder: 29907:29912 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 260.763112] binder: 29907:29912 IncRefs 0 refcount change on invalid ref 3 ret -22 2017/12/10 00:42:10 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r2, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000001000-0x18)={0x7, 0x7, 0x0, 0x3, 0x4, 0x80000001}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000011000-0x28)={@generic="8fb80de15a38223ff7ae4edbd19d3c04", @ifru_addrs=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 260.763124] binder: 29907:29912 got transaction to invalid handle [ 260.763134] binder: 29907:29912 transaction failed 29201/-22, size 0-16 line 2775 [ 260.764759] binder: 29907:29911 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.764782] binder: 29907:29911 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.767359] binder: 29907:29911 ioctl 40104593 2000aff4 returned -22 [ 260.768573] binder: 29907:29912 ioctl ae45 296d returned -22 [ 260.769778] binder: 29907:29911 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.769792] binder: 29907:29911 ioctl c0306201 20008fd0 returned -14 [ 260.816673] binder: 29916:29918 BC_INCREFS_DONE uffffffffffffffff no match [ 260.816686] binder: 29916:29918 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 260.816704] binder: 29916:29918 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 260.816717] binder: 29916:29918 got transaction to invalid handle [ 260.816730] binder: 29916:29918 transaction failed 29201/-22, size 0-0 line 2775 [ 260.816932] binder: 29916:29918 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.816955] binder: 29916:29918 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.817711] binder: 29916:29918 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.817725] binder: 29916:29918 ioctl c0306201 20008fd0 returned -14 [ 260.844172] binder: 29916:29922 unknown command 0 [ 260.844184] binder: 29916:29922 ioctl c0306201 20002000 returned -22 [ 260.845401] binder: 29916:29918 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.845426] binder: 29916:29918 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.849172] binder: 29916:29918 ioctl ae45 296d returned -22 2017/12/10 00:42:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00008f6000-0x4)=0x8, 0x4) [ 260.849209] binder: 29916:29922 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.849223] binder: 29916:29922 ioctl c0306201 20008fd0 returned -14 [ 261.005468] binder: 29886:29900 transaction failed 29201/-71, size 24-16 line 2705 2017/12/10 00:42:10 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa, 0x0, 0x0}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000014000)={0x0, 0xf, 0x1, @thr={&(0x7f0000014000-0x35)="5d4dd7b1f20300000000000000000005fd855832cee59b586b3cd79fcc000000003a0b5d240e4000000000000000f5f9665e7d4b8c", &(0x7f0000014000-0xbf)="8e7e84adcae2d988b2013af37d4f204857d19564ad4a1c360d15ddeab7b4bbcd12253944fc9fac9f2a79e73655ab996ff859208b3681d898ecdb218100088080647a3e2979fb1d9a685ddf6527a4fe5fd74982b0eda327632b45bd315f2fe6994aceff9d42d2297878f9c33e70e7307a9575e03cc3b2e7ca501afe57b6c875eb39beb4c9ed964ab98925f40547cd253c03d3516200fedbcef3dfffc623eb9d12a9adb88dc361df03c6e7d3bfbdaed93dae9d4c29d549a03c7a3c94b36636d8"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004000-0x4)=0x0) r1 = creat(&(0x7f0000011000)="2e2f66696c653000", 0x5757aeb5b0eaca6a) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000000a000-0x8)={0x0, 0x0}) readlinkat(r1, &(0x7f0000010000)="2e2f66696c653000", &(0x7f0000012000-0xe)="0000000000000000000000000000", 0xe) timer_gettime(0x0, &(0x7f0000003000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = getpid() mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = geteuid() mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000017000-0xc)={0x0, 0x0, 0x0}, 0xc) fstat(r3, &(0x7f0000006000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000016000)=0x0, &(0x7f0000016000)=0x0, &(0x7f0000017000-0x4)=0x0) fstat(r3, &(0x7f0000010000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000017000-0x9)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000e000)=0xe8) r12 = getegid() mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000016000)={{{@in=@multicast1=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000016000)=0xe8) getgroups(0x7, &(0x7f0000012000-0x1c)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000012000-0x38)=[{&(0x7f0000016000)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000004000)=[{&(0x7f0000010000-0x1000)="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", 0x1000}, {&(0x7f0000016000)="1fb3fe62df3cba9b992d79b0be42afaebc97738a88fb46f2a334eb02a1c159375a38c26ac89036a691fd5eb390065ccd67a1c9d2f45cee968e1672d410051e8751c9e41062c5590ab4c1733271f907d43a448efd94a0830c45c6a9910d2cbdcd8147908164d80f56d46ca7c0ab05d5782a", 0x71}, {&(0x7f0000016000)="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", 0x1000}, {&(0x7f0000016000)="613eb6f5708d24c584f9403c29b83fa73aed4ad61d2f1f4de499f543b76d239ad26d61a3dbeeebba3bfa30508926826560d8a0579fcc44f4ab0a51bef140d6cd5de13abd9b894cf078c451102f19c24d383ce94ff332c505422580fab6cd528c1eba24aabd895f828a7ea8eacd37527bd85fc552673ec1a014e894a4e2f559b32940814c7c9b23e7d11d15c874", 0x8d}, {&(0x7f0000017000-0xf4)="281c183c2782a4aa5a685c76078d1b354f766ae2f848e3103891d20be0c7eda8558490e93821d08c487a6fe32bbcd1bf7ea59f8377f0e586f0215d185930ca4ad0c97d2d7b81f8e7f637727aeffec301f6629470f56a2bb79fa39da950e39d090c8e77ddf886bc2b7ff06d1fe687fc94f61bfb8d7e41f182991a21e343406f2c0ec330c9b762d69807a091160d75975d8020e5b73ae49fe6bc929f95da847244dcc6e7ef4575f3a1dea61ff0182d14d7a9f0019b5249b22c6adacd4abaad801c5f69346d9bb143d8ad2a9a0473d512b195a44c49cb556ecb0d2baa1841266e7d0e56a759386b24d980bb609417c54ad093221c30", 0xf4}, {&(0x7f0000017000-0xb0)="75b36c2faf2c12370eb1f17f6cb3026ce9cbaac99ad479105a04d1805d6b345108088fda94e01c906b8f33ad2cdefaab803dcbdc292e7827dd5f440f7493cd9e1cc1b853efa874e4e3870c7ab7f700608312248c9b705cd527aaf68d2b35bca63b407fbe313fb9c33f4872302a1d43a6a00c9033859d344b1bdebdfb4410b1cb93c8f963a282619d717ec011e57d3a7d064642bf834ca447df9293287cfc4fa3fb48621a56e42024be3b294b37ab4924", 0xb0}, {&(0x7f0000017000-0xec)="200e162a4b22e746631366889d9b2768b26eec49ea91df84956293cb61cae0480fbfd254d9c19160353c18e95452441a10fffc6cc27b68193a07c050e2183bdcf9dbdfb1329644f3a71f09d04486177c262371eac1e97464685e276e66f342fd0c0e4df5aa3b3d6fe578547d18e56d17d311635f4d369686a090b44bbed6e167b29b403b29199330b75da3964e741e57028d3e79449e06b0897c6142ffb6110719e8f5305f222f6288151628f731f024909879ed64d27831d6902402b1480dda678e2f2d2141ba133a55d578abec58202ef3b8db0517deccd1582c3b77f3b6356201063cf5f5b0f66c6d5cda", 0xec}, {&(0x7f0000013000)="1d6ec40c0e152163f28616753860dd57db82b92e309477ef4aecc2a43e0133f62c9c8e0843a9a472e203d3a8842223fca88ae7d769d3d1072e7db4afa50b4f751e82021d912468f83dddaa0061c8db789020e123fd5f0800f79a60e5bc9cae21d5a1c6a1780b389586c529c05db42c54d014728613332691d338f5b821a1c3196b77816346ec804792a3ee818cba7fc969b6afa8188c0451adbc5f6400fd4fe4c0f2e8956185b8093718032a653a692895b05ba9b45b5a863af114ae2e653e1951f7a722de8fe264f5fee2d2c1", 0xcd}, {&(0x7f000000d000)="7ebfe430e46527982d918cdcedf6f8fabf61ce6e990ee6d613448816869955d01820148b729a6f75edf3cae35eaa47e58e4970ada7f7ccf06effab3be3e6a34519bb993a4bdd0a2ec7963469a0971a1acb2b5e5bb2ba95ebf952d8c49f6741487b4b0488b9553e75cbcd0b27a584991908a7e84e500c8435c4f76e2958f4bcfd1596460d21b79c38260c1ab7acfb9c4e5b0b6f340b5124f2887e7ba9bcbc3800ede988bf6e4bfb0e63c5e8c5669a4119fe046698c889249e9ac0996ab082ebc05143f5a622bd607bf740c6a6ca7fc5d6782a1131c60c12fe9e77a0ddf62ac371247eda552dd713075d8a41e2618c99807144", 0xf2}], 0x9, 0x0, 0x0, 0x40800}, {&(0x7f0000016000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f000000a000-0x18)=[{&(0x7f0000017000-0x17)="c73fd8a0d601ff3fb4556bd0751a73570373f38e893733", 0x17}, {&(0x7f0000007000)="", 0x0}, {&(0x7f000000b000-0x88)="62e01914d7ce15b626c415eefcb174a305d2fc47a07845b078d236bd0ef4e8a0f0d0cb7c6090aaeb34cb10db010ce00fa30fd12ec7483c0ce6729608900d97e6abf8f292201d4d922ad15911817aedbf834189a78bd60ffe58debabd685f54646bf8f67663810924ac6771133eb3ae5e6df80f887e567d8c9fe623563ee797c680ae9fe959c60930", 0x88}], 0x3, &(0x7f0000017000-0xa4)=[@rights={0x1c, 0x1, 0x1, [r3, r1, r3, r2]}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @rights={0x10, 0x1, 0x1, [r3]}, @cred={0x18, 0x1, 0x2, r4, r7, r8}, @cred={0x18, 0x1, 0x2, r4, r9, r10}, @cred={0x18, 0x1, 0x2, r4, r11, r12}, @cred={0x18, 0x1, 0x2, r4, r13, r14}], 0xa4, 0x8800}], 0x2, 0x4) process_vm_readv(r4, &(0x7f000000b000)=[{&(0x7f0000006000-0xc1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x61}, {&(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x33}, {&(0x7f000000b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x49}, {&(0x7f0000006000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, &(0x7f0000007000)=[{&(0x7f0000001000-0x43)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7ffff000}, {&(0x7f0000009000-0x8d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d}, {&(0x7f000000b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf0}, {&(0x7f0000009000-0x63)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f000000b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000c000-0x9e)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9e}], 0x6, 0x0) inotify_init1(0x4) r15 = socket(0x1f, 0x804, 0x29) bind(r15, &(0x7f0000011000+0xac5)=@l2={0x1f, 0x800, {0x405, 0xf2, 0xffffffffffffd106, 0x3, 0x8, 0x1}, 0x81e, 0x69}, 0xe) clone(0x0, &(0x7f0000000000)="", &(0x7f0000000000)=0x0, &(0x7f00005dc000-0x4)=0x0, &(0x7f0000001000-0x5d)="") r16 = open(&(0x7f000000f000)="2e2f66696c653000", 0x0, 0x1) ioctl$PERF_EVENT_IOC_RESET(r16, 0x2403, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f000000e000-0x8)=@assoc_value={0x0, 0x7dd}, &(0x7f000000e000-0x4)=0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r16, 0x29, 0xd3, &(0x7f000000b000)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x800}, {0xa, 0x3, 0x9af3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffff}, 0x10000, [0x6, 0x6e5, 0x7d8d, 0x9, 0x9, 0x100000000, 0x1000000000, 0x1]}, 0x5c) r17 = open(&(0x7f000000d000)="2e2f66696c653000", 0x2, 0x0) ioctl$KDDISABIO(r3, 0x4b37) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$ax25(r17, &(0x7f000000e000-0xca)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca, 0x2, 0x0, 0x0) fremovexattr(r16, &(0x7f0000012000)=@known="73797374656d2e736f636b70726f746f6e616d6500") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000000f000-0x24)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000009000)=0x24) 2017/12/10 00:42:10 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000, 0x40110, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001000-0x30)={0x84, 0x0, &(0x7f0000003000-0x84)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x30, &(0x7f000000d000)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000)=0x0, 0x1, 0x0, 0x23}, @fda={0x66646185, 0x2, 0x1, 0x21}], &(0x7f0000000000)=[0x40, 0x0, 0x40, 0x18, 0x0, 0x0]}, 0x1}}, @request_death={0x400c630e, 0x4, 0x1}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r2}], 0x7a, 0x0, &(0x7f0000006000-0x7a)="56d58df7ab235fe9b0411572d3107eb375f9b97121572009e8bfbd0979f3aef07922df420560a409a59103037916dc41c8d618e116ee35e33cb0bd87c334668bfd9c4e93a59f2f0ad238a09327754606013bf7d42f77207e87d7d12f487805e5b4d3e6b24acef6ec6989cd46d98cbe1b5e5f36cbf423cd5e86f5"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r4 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r3, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) [ 261.047827] binder: 29925:29931 BC_INCREFS_DONE uffffffffffffffff no match [ 261.047841] binder: 29925:29931 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 261.047861] binder: 29925:29931 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 261.047878] binder: 29925:29931 got transaction to invalid handle [ 261.047892] binder: 29925:29931 transaction failed 29201/-22, size 0-16 line 2775 [ 261.048147] binder: 29925:29931 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.048173] binder: 29925:29931 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.049697] binder: 29925:29931 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.049712] binder: 29925:29931 ioctl c0306201 20008fd0 returned -14 [ 261.054527] binder: 29886:29927 got reply transaction with no transaction stack [ 261.054539] binder: 29886:29927 transaction failed 29201/-71, size 32-8 line 2690 [ 261.056202] binder: BINDER_SET_CONTEXT_MGR already set [ 261.056215] binder: 29886:29933 ioctl 40046207 0 returned -16 [ 261.060821] binder: 29886:29927 ioctl 404c534a 2000cfb4 returned -22 [ 261.060878] binder: 29886:29933 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 261.060892] binder: 29933 RLIMIT_NICE not set [ 261.061377] binder: 29925:29931 ioctl ae41 0 returned -22 [ 261.062200] binder_alloc: 29886: binder_alloc_buf, no vma [ 261.062231] binder: 29886:29927 transaction failed 29189/-3, size 0-0 line 2890 [ 261.068514] binder: 29925:29931 BC_INCREFS_DONE uffffffffffffffff no match [ 261.068534] binder: 29925:29937 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.068539] binder: 29925:29931 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 261.068558] binder: 29925:29931 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 261.068564] binder: 29925:29937 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.068575] binder: 29925:29931 got transaction to invalid handle [ 261.068591] binder: 29925:29931 transaction failed 29201/-22, size 0-16 line 2775 [ 261.069986] binder: 29925:29931 ioctl 401845ff 20000fe8 returned -22 [ 261.071575] binder: 29925:29937 ioctl 8924 20010fd8 returned -22 [ 261.081225] binder: 29886:29941 got reply transaction with no transaction stack [ 261.081248] binder: 29886:29941 transaction failed 29201/-71, size 24-16 line 2690 [ 261.085862] binder: 29925:29931 ioctl ae45 296d returned -22 [ 261.085927] binder: 29925:29937 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.085944] binder: 29925:29937 ioctl c0306201 20008fd0 returned -14 [ 261.127121] binder: 29948:29950 BC_INCREFS_DONE uffffffffffffffff no match [ 261.127136] binder: 29948:29950 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 261.127156] binder: 29948:29950 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 261.127171] binder: 29948:29950 got transaction to invalid handle [ 261.127185] binder: 29948:29950 transaction failed 29201/-22, size 0-16 line 2775 [ 261.127844] binder: 29948:29950 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.127869] binder: 29948:29950 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.129177] binder: 29948:29950 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.129217] binder: 29948:29950 ioctl c0306201 20008fd0 returned -14 [ 261.142119] binder: 29948:29956 transaction failed 29189/-22, size 72-48 line 2775 [ 261.146465] binder: 29948:29956 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.146491] binder: 29948:29956 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.148767] binder: 29948:29950 BC_INCREFS_DONE uffffffffffffffff no match [ 261.148782] binder: 29948:29950 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 261.148800] binder: 29948:29950 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 261.148815] binder: 29948:29950 got transaction to invalid handle [ 261.148828] binder: 29948:29950 transaction failed 29201/-22, size 0-16 line 2775 [ 261.164243] binder: 29948:29950 ioctl ae45 296d returned -22 [ 261.164287] binder: 29948:29956 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.164306] binder: 29948:29956 ioctl c0306201 20008fd0 returned -14 [ 261.573442] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.578939] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.584518] binder: release 29886:29889 transaction 1181 out, still active 2017/12/10 00:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0xfffffffffffffffc) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) creat(&(0x7f00009de000-0xe)="2e2f66696c65302f66696c653000", 0x2) 2017/12/10 00:42:11 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00004c4000-0x78)={0x1, 0x78, 0x0, 0x5, 0x40e2, 0x0, 0x0, 0x0, 0x8000000000000000, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x4, 0x1, 0x5, 0x4, 0x0, 0x4000000000000000, 0x0, 0x0, 0x1f, 0x0, 0x0}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="00", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000025d000)="2f73656c696e75782f6d6c7300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000dd4000)="", &(0x7f00000e1000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x3, 0xfc41, &(0x7f000067b000+0x43e)={0x0, 0x0}) listen(r2, 0x1000000000002) epoll_create1(0x80000) socketpair(0x401, 0x0, 0x73, &(0x7f00005d0000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x26f000)=nil, 0x26f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000d4d000-0x1c)={0xa, 0x1, 0x5, @loopback={0x0, 0x1}, 0x1}, 0x1c) fcntl$getownex(r3, 0x10, &(0x7f0000778000-0x8)={0x0, 0x0}) getpriority(0x3, r5) ioctl$sock_ipx_SIOCAIPXITFCRT(r3, 0x89e0, &(0x7f0000556000)=0x5) mmap(&(0x7f000026f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000ea5000-0x50)={{0x1b9, 0x6}, {0x8, 0x40}, 0x4, 0x1, 0x5, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f000026f000)=0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00008ea000)=0x100000001) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x0, 0x0, &(0x7f0000045000-0x10)={0x0, &(0x7f0000000000)=[]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket(0x1a, 0x2, 0x1e5) r7 = accept4$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000abd000-0x4)=0x10, 0x4) connect$bt_rfcomm(r6, &(0x7f0000159000-0x9)={0x1f, {0x16, 0x0, 0xfff, 0x2, 0x3f, 0x2}, 0x3}, 0x9) r8 = accept4(r7, &(0x7f0000ac2000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d4b000-0x4)=0x8, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f000006f000)=0xfffffffffffffffe, 0x4) r9 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000d5c000-0x4)=0x0, 0x4) sendmsg$netlink(r9, &(0x7f0000f42000)={&(0x7f0000e95000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000ced000)=[{&(0x7f0000ba4000-0x131c)=[{0x6b0, 0x0, 0xb11, 0x0, 0x0, "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"}], 0x6b0}, {&(0x7f0000aab000-0x10b7)=[{0x34, 0x9, 0x0, 0x1f, 0xf78, "51ebd2e891fb7331ddb6ac24d1aa718c7a4d38c03afe5eb266a82e461d6f9ccc8a1a6948"}, {0x1019, 0xffffffffffff7fff, 0x100, 0x1, 0x0, "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"}, {0x6a, 0x100000001, 0x100, 0x4, 0x4, "92f532f3ed21b106c6540c4aefc337f539ec7c3ab4f9b564b32ceb818059370939e385390365c0c618902a382b177d0d2c046f83515b23d29538fab9432c04ccc90d36c01ccbdd5041214366bf2c77a224d4eedaa8d38db494b8"}], 0x10b7}, {&(0x7f00002da000-0x14a3)=[{0xb1, 0x80000000, 0x120, 0x2, 0xfff, "dc3f3a7efbb8e898f205ce29c3d2d586d38c32fea76262adeabd7f6b4ab800e5f3f61cc06bb1c0445b51c9ad17b0789d6da1b7eff9885cfcafcbbc000000000000001e1ac0a7b95be56506ec18495c8e16046e9493e6a314767460c9d390a97fe444033bba6c576e645e229fe9981aee9244241e53f3db6acc445fbfc3de84cc57eaf06268de50c37483539b60fe89c1396dfc25c053cb40a41e76a92320cc667a"}, {0x57, 0xff, 0x0, 0x0, 0x100000000, "3e401b855565f11deb73413b2add6dd600a8e17c08251094efbc9afa13fc9fb30678b8e10ff1cba7a5309ebfc39741b53a3dcf1df5ac6f7bcb19c54d78bfc640f5d2ec5a8b650a"}, {0x9c, 0xffffffffffff8001, 0x4fd, 0x1f, 0x6, "a3fd473a86086aba7e903d90007c97dc8c391cc266a9646fda677fd76106ee9108222f7f8a9f647907a05c56b715c6a5f4a2f17d91bf48f911064bf6d63a6e5239359ec81892d2a14fc0cdd1411377025841ab258ddd3668434e89b0fb26ed80570c217cab80416678a0cdd9bfaa44d94da5de12261034d7e55942c408fab7e1b692bd443b72de723567e2b0"}, {0x1011, 0xfd, 0x310, 0x9, 0x80000001, "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"}, {0x78, 0x6, 0x301, 0x100000000, 0x5, "bfc774b80fd750e9e1e157fc7fd4797706a935e8440db1b528204a2912a20994fee1c34eb5486ef5524fc5d39f1d32a19d3cdcc624f684d1f215c8547b2b6bb67039e2cb12c1c0e9f65e1932e38c46156149e5b0aee4af31798244713227344e877103d0bfd649dd"}, {0x55, 0x4, 0x201, 0xfff, 0x1, "fad78f4d8c10fa10e99edf6fcde08f3c7204816ca7f9e55e04820e7b4eafd98ba5a4c264cab0e8cba19d898f5d2bb13f6eba5cfd8c639581086fa311cf0fe2e723502083fb"}, {0x198, 0x9, 0x400, 0x0, 0x828, "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"}, {0x89, 0x2, 0x928, 0x4, 0x9, "5307624fea70f79cf3f06c4b33fc90a21188f7d0ae826518ce01ad7cf813549dd9f737826c86c02468634c07044f1dc5e3977ca06533f25af75fceabdf4c7e1855338c488404fbbf3b823a27277174945e31b205b8199addd028d0246d33ee85b8911d41b65ee62cd9bea4e1105832e680c71225548fc2999c"}], 0x14a3}], 0x3, 0x0, 0x0, 0x51}, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00001d6000)={r8}) 2017/12/10 00:42:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000df7000-0x4)=0x9, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000805000)=0x876) 2017/12/10 00:42:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000e4000)="2e2f66696c653000", 0x101000, 0x44) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00006d5000-0x4)=0x0, &(0x7f0000f46000-0x4)=0x4) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f000095b000-0x26)="26000000250043050000004d010000000f2000000000000000060200f1ffffff0bb803956e35", 0x26) socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) fstat(r1, &(0x7f0000f55000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tun(&(0x7f0000820000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f000001f000+0x71a)=[0x0, 0xfffffffffffffffb]) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000db4000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) close(r0) epoll_pwait(r4, &(0x7f00006e4000-0xc)=[{0x0, 0x0}], 0x1, 0x8, &(0x7f000030a000-0x8)={0x6}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e4000000000000000000", @ifru_flags=0x2fd}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00009f0000)={0x0, 0x2, [@random="51eb9167c16f", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}]}) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) sendto$inet(r2, &(0x7f0000ff5000-0xf8)="5ee3026c63755fd9e44762dbcb9c3cab23b91da038128cd109bdf6d9b2b3c11166c78a6c707640d2fe08d6a2e52b8784c63b1c851ae05a19320972df413aee69362a489a9b8ce26534377bbc1f234e1472b6c964fc639e15218df870c69e9744eb10df2c8f61d0c08e2aeaeae9521a51040e5e3f834d658dd6083093d6eef1c03512d039902c0721db5affbc373130ea7be4e6b97eb6498b1e6286b0352c739c3c25f3a5065e0f67db1d6734079d1f489f260b2bab4b329f280695c61f857959ac4491394d838163ee6bcc5b0da167244cffc32a0774f46e91ce5fce7ed442dc1b8218f1be841b7498b7337475b7933114b0775d9eb6106f", 0xf8, 0x40000, &(0x7f0000bf1000-0x10)={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f64000-0x1000)="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", 0x57e, 0x48000, &(0x7f000043a000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) sendto$inet6(r6, &(0x7f0000031000)="07bdbde67ce5005eff0ffb00000eddee3f8b12714bcdecc318af30a8711585de94fbd57944478be8362d782b31c3bd", 0x2f, 0x40000000000, &(0x7f0000fde000-0x1c)={0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, 0x1c) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000f40000-0x8)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f000085f000)=0x6, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f000020e000)={0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000c89000)={{0x9, 0x5}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x8, 0x9, 0x5, 0x9, 0x1f, 0x6, 0x0, 0x4, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000919000-0x10)={r7, r8, 0xfdb1}) sendto(0xffffffffffffffff, &(0x7f0000100000-0x41)="dbea8ae9711ac7906fb709e19f2ca62c0e92f856c98f72edccbbcfad49de1fff9cf16cb6afce1443a4ba319434f8e345765b2b2f624cad678b94fd99039c4c49dc", 0x41, 0x0, &(0x7f0000f2a000-0x14)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="fd10d37e4e25", [0x0, 0x0]}, 0x14) mkdir(&(0x7f0000972000)="2e2f66696c653000", 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00006d3000)={0x0, 0x0}) [ 261.591543] binder: release 29886:29889 transaction 1180 in, still active [ 261.598497] binder: undelivered TRANSACTION_COMPLETE [ 261.603625] binder: release 29886:29900 transaction 1180 out, still active [ 261.610659] binder: undelivered TRANSACTION_COMPLETE [ 261.615776] binder: send failed reply for transaction 1181, target dead [ 261.622557] binder: send failed reply for transaction 1180, target dead [ 261.629320] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/10 00:42:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) fanotify_init(0x34, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)="2f6465762f7161745f6164665f63746c00", 0xc0000, 0x0) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000002000)="2f6465762f696e7075742f6d69636500", 0x0, 0x20000) ioctl$VT_ACTIVATE(r0, 0x5606, 0x240c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000002000)={0x0, 0x0}, &(0x7f0000002000-0x4)=0x8) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) [ 261.670320] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [ 261.693274] binder: 29977:29983 BC_INCREFS_DONE uffffffffffffffff no match 2017/12/10 00:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r2) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 261.709823] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=29979 comm=syz-executor3 2017/12/10 00:42:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:11 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000c7b000)="2f6465762f72746300", 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000d38000-0x4)=0xffffffffffffeffc, 0x4) bind$inet(r0, &(0x7f0000e83000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000f50000)="0e21", 0x2, 0x0, &(0x7f0000062000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000)="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", 0x480, 0x0, &(0x7f000069b000-0x5)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00004b4000-0x1)="", 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xeaf0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$loop(&(0x7f0000001000-0xb)="2f6465762f6c6f6f702300", 0x20, 0x3fffe) r1 = socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000002000-0x4)=0x2000000000000000, 0x4) bind$inet(r2, &(0x7f0000004000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000fc3000-0x1000)="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", 0x481, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000242000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000f98000)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000dee000)={@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8000, 0x2, 0x500, 0x6, 0x1, r3}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000194000)=0x0, &(0x7f0000982000-0x4)=0x4) recvfrom(r2, &(0x7f0000dd1000)="", 0x0, 0x40000000, 0x0, 0x0) lgetxattr(&(0x7f0000037000-0x8)="2e2f66696c653000", &(0x7f0000e7d000-0x11)=@random={"757365722e00", "2f6465762f6c6f6f702300"}, &(0x7f0000f03000)="00000000000000000000", 0xa) socket$inet6(0xa, 0x200001, 0x2) socket(0x10, 0x802, 0x0) connect$ax25(r2, &(0x7f0000000000)={0x3, {"d0dfd05f9a512d"}, 0xd3e}, 0x10) sendmsg$nfc_llcp(r2, &(0x7f0000031000)={&(0x7f0000719000)={0x27, 0x831, 0xbb41, 0x0, 0x6, 0x7fff, "32df4c23aa34a7ebe55a2b4b084603519e344ab80e017bb0b1e1ffec80063a794929bfa2ccfd02e5d66bf9dc11df8e294a652a72a477d7992939fbd8767653", 0x3}, 0x58, &(0x7f00003dc000)=[{&(0x7f000010b000)="46bc945d47352c3e4ac21c104c09ab798443ee5dfb42131c10bce545c8184573fcf99dda11045582a85437c192d83a6901af8e662ca35d7273182e16fa68d0acf8a60062f75b12837abce832c73cfee3f576979fccf14b44bb933f82dc00242eddd923737192450f423042cdf2677442fca50dea5ffe25fc81c68d9f8b0387cf7345fd29732baef5cee44e89863d9e3b30507ae6ba6d11053c89426d7006a5cf5260652fd25c0d9a53c53929185fb287aca7477b33fc13bcbf969b7df369e4e0fb1c48ea735e59bbf185017110641d5de83a6e5e4e11672380bdaa5d463488a8e6", 0xe1}, {&(0x7f0000537000)="ff008946e83b0149d83a0fcb1ad1a265dfc05135", 0x14}, {&(0x7f0000330000-0x15)="cfa42a873f2217394917d8ce08f6acff09525f49ed", 0x15}, {&(0x7f0000b49000)="32494bfe20b904274e1f7ec38ca02cb30dfc98d349aef9b426c00af1ec46329c2a76e6", 0x23}, {&(0x7f0000976000)="1a79cfa7777b054b21d9bdda98b40d8293c3a85a279c17736698aae799d3c713ba075233a888fe6f1fb98ec0a8f51fde0fffc9dc3653c31a796956736b90d3bb9ea1c96fd188dcc2f2511a0422e935509122dd011d4e4c1488cee8e7e70f5f07d155368cea568c542debbc88391bbf723ef632625e6b01c78f463115034b6fef", 0x80}, {&(0x7f0000571000-0xe7)="0033d3028c8e4b17ceb95d1cfb5b326f053cd1b17b589fa7258820f2894aefac69865ace71ffa969b0ededb5ca4a0b1fdd188c7c8c25b25be7f9c7b138cb8f7a804c4e5c1eba888ea87fa7c024d4c0d36b2964fb783c9e98e5637daa5133b5a462b636db404ac6aed19b0413cf25b93dd5c9eb56d9fa9bb91f19f291379f981a37ab5d0ecfedbe51f715555990f02328b8bdf7f60ce381bbdf71a1e0dbf9d499725f3384b2a155611d17b571b549664fb845e4b5e7d2d433a4eebdb821041f5edea7fbdb0b4291dc6d406122ca4427e145a00ad8edb9eab01a8f35b3897eef84980a3546500be7", 0xe7}, {&(0x7f0000e3f000)="4782d0a6eacbd60aece0b617f4e2e6b0897771a09c449582ada658fff07cd9cef8f65669c6c0728e8f161b8b14b7878f260a273eea8b5b38b9f6dad7750206acf65bf5e8f3c9c83e77a578bc11531d872657a572a251b694ecd73a078f4042e435de4c3916e7cb4f889f6989c4c79234822e7bc5f12ad50bdd59fc811fd1dbf9629ad8251f60942175d36f948b9470f5e325b9c61cb2265823d3d5c8eb", 0x9d}, {&(0x7f00000b7000-0x7f)="586b6cd3285f7d038ef5229c947ca7296d40908bffedb8e38a0d3eba8f922ebd568595917dcfb1c20f664566d5f079d5067c6c53e04ebb1b832d59147dc212f165917bd271c2c4106d36ee5adbf272bca2e791c2e496c7529fbe9d23f95be4a58c9c0b71cdf138a5ba92f140fef9d1ef0bce16098565ca94d5d6f504e2b08c", 0x7f}, {&(0x7f0000787000-0xad)="ecf519362bbb8f1ea33ec97e332cb9118c92b2ff50dca5d96491445873527259441fa00639df46583c39e0b2823c20b584c6b0c1382e4f494fea85c2a73a3297e7aaef22aaf7ff3a143f1ddf7f0c18745a9aa06d23e7e1c3ed66f233b896a3a62dab847e84a1115a25e80f045f80edd294cbdf835c82405eba000202d152983e4c0a7fbbcf909c6d8fc317ffa5bac8f2e3e80bab0d9de3c1693c7b9596a48b043b8c51c8ed8ae90bc247d21f0c", 0xad}], 0x9, &(0x7f0000cbd000-0x80)={0x80, 0x18d, 0x1ff, "3b9d20eb4c1d5b2d2811ee8aa25f801608838b47ebcb169b745fde87cec717833110607dfef2307d18ebcf90246f469ac3d14862f6475f21a850b2cbf0573afd39c493ae25e7cfeb9e72319721ef7ed286768cde5a62ca1f0e1f3d05a7cb7743cc8f868f2f585415dc63a998c3652bea7e8c3087"}, 0x80, 0x20000040}, 0x800) 2017/12/10 00:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000935000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) 2017/12/10 00:42:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x103, 0xd, &(0x7f0000002000)="32c294f28e1854ccebf6d4adecfdaf40b6b8af4c9a12809ed2a7f940baf0c78a47cd6f69e2f8ca172ac3ee6cd26987a61728a56721889e21ac8e2c9b4ad5a4cd8a627f139e6fabac1d7577a2699ddd0ca43ad5f08b1696f0e4bf8e0eb87332801008404834775117b8cdc8a283a67a4b82d07deff54d54e41119400f2e9a2ef9b2e453bb3032aea850e38fe1e299159265d4baf33099bb054d38dfce96eeb46a9232a94661d3b05e21c520afa04db6115f3e178ebab65fdbd94be935c232997f3ce9199063131b9fb907e46d3f78d021a760b1c7c0984eb54d42f52ebd288effe9fb884aba58400428f0ecaf", 0xec) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) [ 261.734940] QAT: Invalid ioctl [ 261.749626] QAT: Invalid ioctl [ 261.755565] binder: 29977:29995 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/10 00:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000049000-0x10)={0x2, 0x1, @rand_addr=0x20000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00007cc000-0x8)={0x0, 0x0}) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000008972, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000807000)={0x0, 0x0}) madvise(&(0x7f0000ab8000/0x2000)=nil, 0x2000, 0xa) clone(0x400, &(0x7f0000a13000)="03d9c9a41134d8c5b9beef0717d2d2f28d5338efb92720d9cb8f0fab3736148b86a530fa19aa41b1f3766ebe", &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000a4d000)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40d, &(0x7f0000001000-0x8)=0x0) mlock2(&(0x7f0000a22000/0x2000)=nil, 0x2000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00004b8000-0x18)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00006f4000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_bt(r1, 0xdd1f, &(0x7f00002ee000)="adcff48f27ea31580c2ce63601aeedb7aa1de0bcce93fe088d51f2d4e280ea481699088d619d3a9962f93de48ea1c54b7523e19892b2387bdfea14f11b409f3ecbec83a6ba55be8db50167daaaa7fae53651f4d69021a4299b2da27f1fa887ca61eb4a2eccfd86260cd2f1fa4db9cd669457876d87fa7ef313c4a194489e0820") ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000971000-0x20)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00002e5000)=@ioapic={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x200000000000, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000516000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000318000-0xb)="2f6465762f6877726e6700", 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000033000)={r6, &(0x7f00005c1000)="3fc6dadcc3f09b9c91034f7caa18a2ba80ae310d4ef84ad091fabb809f294a00bcb8aec0511499821d9cb690d8ae4e7a1b882eaa07e57616c96e8a582b0c9ba85ba283bd167f77d195a6bb51e1ff36f031203966aaa75e479869893dc85da6d5a8ea2e7a50bf77d5a1175359c3cc71ce4ab21d4f67944ec6ddf42f0d6bcbaaa72832a150c7a846f878cec176f6bbcf2fc430bd", &(0x7f0000bfe000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x18) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000796000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000163000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x80000005], 0x0, 0x0}) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00004e1000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00002a5000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000c55000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000803000-0x18)={r3, 0x0, 0x0, 0x0}) 2017/12/10 00:42:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001000)="2f6465762f7573626d6f6e2300", 0x80fe, 0x4002000) r2 = perf_event_open(&(0x7f0000934000)={0x2, 0x78, 0x968, 0x8, 0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000+0xf9e)={r0, r1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000002000-0xea)="9996922ed714814dd50379d5b5535ed3f72ed840cc9ef8049496842e89f4242a0914093214d6efa15abf8d2ea67bc5af0488e4eef5e86990588dfcc94af927a70bb757ea2577782510bf02996415f65d81b8bfa6910f7ff2c95daec4e43e59d0e8cec5d7eb27904646e0a368e85d6b6f436c053e24098c8528a28a34a712ae4482b4515954671932a6a5c68d5d3965bf333da9b89308025fa1adf2d6b09b0282caef79718a73bb9fb673382941f1d812e303f18a7c448b57b6be33d39bae71ee44e331f377dfd102d40c400930f6e624ed3bb73338851bf9d2ff1856a42891f7a648e781fe26e5286f5b", 0xea, 0x200000c0, 0x0, 0x0) bind(r1, &(0x7f00000e9000)=@rc={0x1f, {0x8004, 0x5, 0x5b, 0x6, 0xd5e4, 0x3b1f82c9}, 0x7}, 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000861000)="7d", 0x1, 0x4000004, &(0x7f0000ce8000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f000001e000-0x8)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x409, r2) r4 = socket(0x5, 0x4, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x9de000)=nil, 0x9de000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009de000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00009da000)={0x1, 0x3, &(0x7f0000ea8000-0x18)=[@map={0x2, 0x1, 0x5d9d, r3}, @generic={0xc5, 0x0, 0x0, 0x200}, @generic={0xd39d, 0x0, 0x0, 0x8}], &(0x7f0000981000-0x4)="47504c00", 0x8000000000005, 0x80, &(0x7f00009de000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5, 0x0}, 0x30) mmap(&(0x7f00009df000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1d, &(0x7f0000e51000-0xf3)="ea83c86e645815c2975ad2c0a7a16af031844798e3f60b2b3000000003acb0b96b461146213a3b03b0756a78f4c400000004d2140ad91a9c443a7f911b0079267d2e08528aff96ec30d9aa8a499f2ad6e74b2e8d5eafa2a98bad00633d4f1f3679b60f86ecca99650204ffddf785c11474ae34be417c12f0bfaf9a1a1f30e8d3bf933f0859f2ec4e5d7cca8b88e9d095d49d96cd515cbadb86ce70acb6a2e197ebd1542bd1ee90490a5e770bb16b5c2db73f007901f742e021a694aa359d833d9ef59f5ebe027fb6000994c9e3c01f3211601f1e6d0b761567a21e36eb9724a415c5d60f9501dd5c9d0378562800026dc4", 0xf1) mmap(&(0x7f00009df000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000d50000)="2f73656c696e75782f61636365737300", 0x2, 0x0) mmap(&(0x7f00009df000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf56000)=nil, 0xf56000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@remote={0xac, 0x14, 0x0, 0xbb}, @multicast2=0xe0000002, 0x0}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000ec0000-0xe)="6e65742f69676d7000") [ 261.755594] binder: 29977:29995 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.759955] binder: 29977:29999 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 261.759976] binder: 29977:29999 ioctl c0306201 20008fd0 returned -14 [ 261.773119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=29979 comm=syz-executor3 [ 261.786887] binder: 29977:29999 BC_INCREFS_DONE uffffffffffffffff no match [ 261.786906] binder: 29977:29999 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 261.786930] binder: 29977:29999 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 261.786946] binder: 29977:29999 got transaction to invalid handle [ 261.786961] binder: 29977:29999 transaction failed 29201/-22, size 0-16 line 2775 [ 261.789215] binder: 29977:29995 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.789244] binder: 29977:29995 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 261.794828] binder: 29977:29995 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.794846] binder: 29977:29995 ioctl c0306201 20008fd0 returned -14 [ 261.811292] device gre0 entered promiscuous mode [ 261.819841] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 2017/12/10 00:42:11 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0xfffffffffffffffd) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f000000a000)={{0x2, 0x8000, 0x20, 0xfffffffffffff001, 0x6, 0x100}, 0x4, 0x0, 0x9, 0x7f, 0x9, "08299d25681f8b54ff91bbd2203f51c42f908a66c72e064995f0e572f9e421a6bc09189a8e9935b37b3b959df9b9f924fccf79ae84eefc7a8333fefd5397ca614076ba2de43aefdcf750b8e1234903de404922c14439a422d82763e25f376fbeacefb5f4919c209770ded2a251c3c25bf46f3e9ca3d11e131cef5028b009e4e2"}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:11 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000d000-0x10)="2f6465762f73657175656e6365723200", 0x4000, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000d000)={0xaa, 0x10, 0x0}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000000b000)={0x81, 0x0, [0x100, 0x8, 0x3, 0x23eb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs(0x0, &(0x7f000000b000)="6d61705f66696c657300") getdents64(r1, &(0x7f0000008000-0x119)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x129) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000002000-0x8)={0x5f62, 0x8}) [ 261.828854] device gre0 left promiscuous mode [ 261.830725] device gre0 entered promiscuous mode [ 262.064935] audit: type=1400 audit(1512866531.644:314): avc: denied { map } for pid=30033 comm="syz-executor1" path="/dev/hwrng" dev="devtmpfs" ino=1045 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1 [ 262.275111] binder: 29977:29983 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 262.275130] binder: 29977:29983 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 262.275143] binder: 29977:29983 got transaction to invalid handle [ 262.275152] binder: 29977:29983 transaction failed 29201/-22, size 0-16 line 2775 [ 262.297574] binder: 30081:30084 BC_INCREFS_DONE uffffffffffffffff no match [ 262.297589] binder: 30081:30084 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 262.297609] binder: 30081:30084 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 262.297624] binder: 30081:30084 got transaction to invalid handle [ 262.297638] binder: 30081:30084 transaction failed 29201/-22, size 0-16 line 2775 [ 262.297929] binder: 30081:30084 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.297955] binder: 30081:30084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 262.298633] binder: 30081:30084 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 262.298649] binder: 30081:30084 ioctl c0306201 20008fd0 returned -14 [ 262.299072] binder: 30081:30084 ioctl 800448d3 2000a000 returned -22 [ 262.324790] binder: 30081:30085 BC_INCREFS_DONE uffffffffffffffff no match [ 262.324807] binder: 30081:30085 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 262.324828] binder: 30081:30085 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 262.324843] binder: 30081:30085 got transaction to invalid handle [ 262.324856] binder: 30081:30085 transaction failed 29201/-22, size 0-16 line 2775 [ 262.329169] binder: 30081:30084 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.329198] binder: 30081:30084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 262.341323] binder: 30081:30085 ioctl ae45 296d returned -22 2017/12/10 00:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x8000) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r2, &(0x7f0000b83000-0x10)="00000000000000000000000000000000", 0x10) write$evdev(r1, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_udp(0xa, 0x2, 0x0) 2017/12/10 00:42:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = memfd_create(&(0x7f0000b3c000-0x2)="2100", 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000e4c000)=0x8, 0x4) r1 = socket(0x11, 0x4000000000080003, 0x0) ioctl$KVM_S390_INTERRUPT(r0, 0x4010ae94, &(0x7f0000f2f000)={0x1, 0x3, 0x1}) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00001df000-0x78)={0x0, {0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000660000-0x10)=@generic="e749e3ab19e79f6150997ef89b13c5b0", 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00004e8000)=0x128, 0x4) bind$inet(r0, &(0x7f00006c7000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) pipe(&(0x7f000017a000)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f7f000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000d2f000)=0xc) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f0000e51000-0xc1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1) socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000589000-0x1)="cf", 0x1, 0x20000003, &(0x7f000052f000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$inet(0x2, 0xf, 0x582) ioctl$KDENABIO(r1, 0x4b36) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$ax25(r2, &(0x7f0000cf6000)={0x0, {"00000000000000"}, 0x0}, &(0x7f000008e000)=0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b7d000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00003fe000)=0x14) perf_event_open(&(0x7f00005e3000)={0x2, 0x78, 0x2, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8000000000000d, 0xfe, 0x0, 0xfffffffffffffff8, 0x3fffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x9, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket(0x104, 0x83, 0x7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000c51000)={0x8, &(0x7f0000b6d000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000736000-0x10)="2f6465762f73657175656e6365723200", 0x8880, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x80045113) ioctl$sock_SIOCSIFBR(r4, 0x8940, &(0x7f0000148000-0x18)=@get={0x1, &(0x7f0000f26000-0x2a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7fff}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000950000)=0x0) fadvise64(r5, 0x0, 0x7fff, 0x3) inotify_init1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f2000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f000096d000)=r3) sendmsg$unix(r6, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x1c, 0x1, 0x2, []}], 0x1, 0x0}, 0x0) 2017/12/10 00:42:12 executing program 1: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xfffffffffffffffd, 0x6) r0 = socket$inet(0x2, 0x100000000080000, 0xfd) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000ff1000-0xc)={0x0, 0x1, 0x30}, &(0x7f0000225000)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000fef000)={r1, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000ff1000-0x4)=0x8c) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000fef000)={r2, 0xaa, "5969cd0e6de5fe54925871f3e97828dc7d0e852b112eab83412b6d381cc6f6c3cb048068be1627592227f0f2f346ddcdf5afeaf6e1386e926cb20695050d8a503aac585e91140532da640242b742f00437b86330698043d4a3e43ebdfc3e22df97e55bfb05459d56919ed65521c54cd755b114a9f45a6aed474ffc2712bcc44536ed5762515273e3177e1838ba75c4d34788c4d430047520524d8ff04601e388a945a5b4c9e4972cd288"}, &(0x7f0000fee000-0x4)=0xb2) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ff1000)={0x0, 0x0}) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000bdb000-0x10)={0x0, 0x84, &(0x7f00002db000)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x6ad, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x1, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in6={0xa, 0x2, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9223}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000ca5000)=0xc) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000c6c000-0x10)=[{&(0x7f0000374000-0x3b)="3900000013001900000000e700ffff0076000118030000006c0202cd06008005110016000400000000000000010000011000003420000000009686", 0x3b}], 0x1) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000d83000-0x8)={0x0, 0x0}) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000fee000-0x18)={r3, 0x5, 0x30, 0x8000951f, 0x80000001}, &(0x7f0000ff2000-0x4)=0x18) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000ff3000)=0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000feb000-0x8)=0x6) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000bcf000-0x4)=@assoc_id=0x0, &(0x7f00008db000)=0x4) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r4, 0x800008946, &(0x7f000044e000-0x28)={@common="6c6f0000000000000000000000000000", @ifru_data=&(0x7f0000ff4000-0x20)="020000008d351b9f6d000000000000fffe22007663f5f94214007fff000000e6"}) 2017/12/10 00:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000454000+0xf1c)=0x0) 2017/12/10 00:42:12 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000a000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000008000)=0xe8) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000006000)={0x0, 0x0}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 262.343307] binder: 30081:30084 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 262.343327] binder: 30081:30084 ioctl c0306201 20008fd0 returned -14 [ 262.344516] binder: 30081:30085 ioctl 800448d3 2000a000 returned -22 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x44fb) socket(0x0, 0x1, 0x2d91) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 262.552218] binder: 30096:30101 BC_INCREFS_DONE uffffffffffffffff no match [ 262.560166] binder: 30096:30101 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 262.567735] binder: 30096:30101 IncRefs 0 refcount change on invalid ref 3 ret -22 2017/12/10 00:42:12 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f6175746f667300", 0x40000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={@generic="6b7c01ee69c23650b7d7288ef79483e3", @ifru_ivalue=0x3117}) pause() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000001000)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000003000-0x20)={@common="697036746e6c30000000000000000000", @ifru_flags=0x1001}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000004000-0x4a)="ff0fc6513af7784d9cdc5a7214bc10eae365a178403558c35ef557a4a1e71c146be8fa179560a7f92451d9be4426fb3e13743e31bf31d7d16990749b6e992212ab01225bdea623601ca0", 0x4a) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000004000)={0x0, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x0, 0x7, 0x9c, 0x4}, &(0x7f0000005000-0x4)=0xa0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000005000-0x14)={r1, 0x1, 0x6f6d, 0x6, 0x9, 0x7}, &(0x7f0000004000)=0x14) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000005000)={@broadcast=0x0, @broadcast=0x0, 0x0}, &(0x7f0000005000-0x4)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004000)={@generic="4ac3f392b043eab020ef7118ec5512a8", r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000004000-0x14)={@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000002000)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000004000)={r1, 0x6}, 0x6) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000004000)=0xc) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000007000-0x4)=0xe8) setreuid(r3, r4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000006000)="ff40f971aa2a2de399d49b629f4e9f77c646bdc0c28cf07dfd5c72281c728af1868f19a6e19f68d15b29ff0102b2434a0cd854553381f19a02c513f4b8707e5e103fc4c611e80cacd157f28321a5dbd8b3d936dc0e2a452d962384fd06066fe5ea96c9ef4e03f469fe69d060897b3fd22d317ea3816a09914c95890bdb91c75f47b66ce039941491f0a0b5ab5488b8428c8a9273a314e13252dbaa8ee520ea36f86700197519c258cbc14c27270e9295c143", 0xb2) accept4$ax25(r0, &(0x7f0000005000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000007000-0x4)=0x10, 0x800) 2017/12/10 00:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x800000003fe}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000001000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={@generic="1b63ac1414f9a368f27f03a6ccabd0d4", @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r1 = socket(0x11, 0x4000000000080003, 0xfffffffffffffffe) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 262.590439] binder: 30096:30112 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.590472] binder: 30096:30112 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000a8e000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000770000)=0xc) perf_event_open(&(0x7f00009c8000)={0x1, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000e9c000-0x9)="2f6465762f73672300", 0x1, 0x101000) connect$llc(r1, &(0x7f000098f000)={0x1a, 0xf7, 0x0, 0x5, 0x42b, 0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c63000)="2f6465762f7667615f6172626974657200", 0x2000c0, 0x0) chdir(&(0x7f0000e44000-0x8)="2e2f66696c653000") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f000092b000)={0x0, @in6={{0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00007a7000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00001df000)=@assoc_value={r3, 0x80}, &(0x7f0000861000-0x4)=0x8) r4 = socket$inet6(0xa, 0x5, 0x7) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000156000)="2f6465762f73657175656e6365723200", 0x102, 0x0) write$eventfd(r5, &(0x7f00001d7000-0x8)=0xffffffff, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000b64000-0x18)={0x0, 0x8, 0x10, 0x0, 0x4}, &(0x7f0000373000)=0x18) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00006d5000)={0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f000009c000-0x9)="2f6465762f73672300", 0x49, 0xc0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000c42000-0x20)={@generic="ed003b2456e1b6bd64639ae9a769872f", @ifru_flags=0x3803}) r7 = add_key$user(&(0x7f00004ea000-0x5)="7573657200", &(0x7f000054c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00004a6000-0x7a)="1815baf38424d55486caacd588e408599fb6b3855fb2e149d7b74c12b864c940e2d32d24cbae82315f8c61bc2fb016aff1bffed525e003cd5144a35cfc249b8dae524650ea742f87ec8a88f15923758e57263958681e687e4922f84cc7858b9cd5a619901c00f909900696139c76517560d987f38b2e045b4481", 0x7a, 0xfffffffffffffff9) r8 = add_key$keyring(&(0x7f000086e000)="6b657972696e6700", &(0x7f00007fd000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f000092f000-0x8)={0x4, &(0x7f0000611000)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) keyctl$reject(0x13, r7, 0x8, 0x8, r8) write$fuse(r1, &(0x7f00002ef000-0x18)={0x18, 0x0, 0xa, @fuse_bmap_out={0x101}}, 0x18) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000eb7000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00006e7000)={r3, @in6={{0xa, 0x3, 0x401, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7fff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10000, 0x1}, 0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000c62000-0xc)={r3, 0x800, 0x430}, 0xc) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00008b4000-0x4)=0x0, 0x4) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00006fa000)={0x0, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x1, [{{0xa, 0x0, 0x2, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x110) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 262.599661] netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. [ 262.615243] binder: 30096:30112 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 262.615262] binder: 30096:30112 ioctl c0306201 20008fd0 returned -14 [ 262.641401] binder: 30096:30112 BC_INCREFS_DONE uffffffffffffffff no match [ 262.641417] binder: 30096:30112 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 262.641443] binder: 30096:30112 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 262.641457] binder: 30096:30112 got transaction to invalid handle [ 262.641472] binder: 30096:30112 transaction failed 29201/-22, size 0-16 line 2775 [ 262.641580] binder: 30096:30124 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.641605] binder: 30096:30124 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 262.653123] binder: 30096:30124 ioctl ae45 296d returned -22 [ 262.654593] binder: 30096:30124 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 262.654609] binder: 30096:30124 ioctl c0306201 20008fd0 returned -14 [ 262.681237] netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. [ 262.901770] binder: 30096:30101 got transaction to invalid handle [ 262.901782] binder: 30096:30101 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001000)={0x0, 0x5}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003000-0x10)={0x5, 0x8000, 0x1f, 0x8, r1}, &(0x7f0000001000)=0x10) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00005fe000-0x7)="74696d65727300") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0x5d4, 0x2, 0x8, 0x7fff, 0x0}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f0000001000)={0x2, 0x0, 0x4, 0xfff, 0x8, 0x8001}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000200000-0x18)={r1, 0x40, 0x20, 0x0, 0x3}, &(0x7f000073c000)=0x18) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000837000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000c000)="2f6465762f70746d7800", 0x0, 0x0) ioctl$int_in(r2, 0x100080045432, &(0x7f0000a37000-0x8)=0x7f) 2017/12/10 00:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000cae000-0x8)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:12 executing program 3: kexec_load(0xc10a, 0x5, &(0x7f0000a4a000-0x50)=[{&(0x7f000086e000-0xa4)="ae9489406c5394f612d123331952c257ecc350f90f966111734eb0126e8447113d004382909206209fc19754a20a34a7a42ca6beaf7139769cb93b917f52c8371b798308d4d930add61e4a1d0ce7429ec22ebcec60b68af22146435adb66c741039a442310d6787a0d73f9f4567af6caac5bf5ec081689f5df5daf361189427a98c27e4685d8ef517e9389dd04cb327393aeed3344e6b007c75b782d89b99c24a137586e", 0xa4, 0x0, 0xfffffffffffffffe}, {&(0x7f0000f6f000-0xde)="65d3124d6c71453cbfea0393c5ff800b14591685c0baffec8e2b3355ff2be9cb07642451d899e8ccbaf4913a35e2232dd8d70e0d3f66f0e1e658604de52a492903545fc365ca845b882121c1734304a01c628a1e4f0ded99e927176b6b6ef87d4b475c48feea72fa091738da89dee417947bdbe231b233f18697421bc410f3d04d75cfe35a0300a392efc2e8377b675554a938c6cca403e0dc72aeb51b08e3b4f462b3954683765f912d54c471fe0af6bad86e6ae5355a83918b2e776a53905927152ee2eae7654842f6be1957b9d37e4d2ee227c2ff98b6a3c188b178f0", 0xde, 0xfffffffffffffffa, 0x4}, {&(0x7f0000bf4000-0x25)="51cbef9bd7e90d875f1c9c08d280bc8b7c2595dbf1f9beefbbcce52e7d431a00fc8d1c1897", 0x25, 0x3, 0x2}, {&(0x7f0000d48000)="0cf0048c46bd951d881f1d4af52b736f6f7604254dcb96261e3ade71b036e650fc24b4bc9b687d77bf8895cdd3fc986efad2fc9eee4df781270cce9d0088c2b248ec", 0x42, 0x3, 0x0}, {&(0x7f000046e000)="9e4a00a1a58d8f858240babfc7880ff3e808c2cb86420cebe2279cd5814c4ae0180b4d01c3e0a007f1863e6ec52b7efd16a94468796c4f92656d90b25264b091242048f6aaa817a7a978e4efacb1344e0406503a80dd34e56cf215d240b56b9612e9ba1c4f81ab7eb9ea4d2b65be835f912ebe6859c37c3a2a36f689bfcdf2732f30aa8d9d218d8f89b7a6c39388530db84f5161db2ecea377776e99c1c025c149a5b26974cb63b4c13ba9740dc65cf279242e20763ff739325f16960d81b99766c8e4df550bd9477322535290dda418a6b356260ceca943c4b0d7d60213", 0xde, 0xffffffffa7fe399c, 0x8}], 0x280000) r0 = memfd_create(&(0x7f0000eb3000-0x7)="6367726f757000", 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000001000-0x4)=0x3) clone(0x400201003f9, &(0x7f0000174000-0x4)="", &(0x7f0000869000-0x4)=0x0, &(0x7f000046f000)=0x0, &(0x7f0000bfe000-0x2)="aa53") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000072f000)="2f6465762f73657175656e6365723200", 0x80200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000e5d000-0x26)="0000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = perf_event_open(&(0x7f0000696000)={0x2, 0x78, 0x160bea5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00001f9000-0x8)="2e2f66696c653000", 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000954000)={0x2, 0x79e, 0x20001, 0x1e, 0x5, 0x80000001}) socket(0x11, 0x2, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000d36000)={0x0, 0x0, 0x0, 0x8, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000e3b000)={r4, 0x18, &(0x7f000012b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = memfd_create(&(0x7f00006ff000-0x1)="00", 0xfffffffffffffffd) shutdown(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000dd4000)="2e2f66696c653000", 0x1) io_setup(0x7, &(0x7f000015d000)=0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c96000)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000a2e000-0x14)={0x80000009, 0x6f78703c, 0x1ff, 0x2, 0x3}) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000898000-0xb)={0x2, 0x3f, 0xffffffff, 0xffffffffffffffff, 0xffffffff, 0x6, 0x8, 0x1, 0x200, 0x5, 0x7}, 0xb) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r3, 0x2000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00003be000)={0x0, 0xca, "3e7d2b5d3be873b34ba83f7816f2cd2de6278a3fa02d840f91c4377819e384a297486ed2e5eb62dcf9282a6f1682857be2224f0e1a3711796b3eb2e96fca97bddfabe80267ccc924d618c6f1cb247dd56bd88960de267da1d71ba419139ae9dccb58c9ef4a38b57ece2db27621679dac2e299014f2b81b3d3e3f2ddc5cb7c7751c1558355b0ed8bbbee630c97eb0aafd245b4fba85c150963b74aec48f2b809cceff62354b33ffab344c49b7d0c9b66c90036b1c9dccd6b94b2e65feeded46c7b4f641f3d140e53613a9"}, &(0x7f0000530000-0x4)=0xd2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f000056f000)={0x1, 0x90, 0x9000, 0x3e, 0x3, 0x8, 0x6, 0x6, r7}, 0x20) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f000000e000)=0x0) r8 = getpgid(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000d93000)=0x3) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000fba000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000aa2000)={r9, 0x3}) request_key(&(0x7f0000a0d000-0x6)="6c6f676f6e00", &(0x7f0000402000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00006ab000)="5b5e00", 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000ae8000-0x4)=0xffffffffffffffff, 0x4) 2017/12/10 00:42:12 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) setsockopt$inet6_tcp_int(r3, 0x6, 0x1d, &(0x7f0000006000-0x4)=0x5b884584, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f000091f000)={0x0, 0x0}) 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001000)={@common="69666230000000000000000000000000", @ifru_flags=0x8000}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x9, 0x4000008000080003, 0x0) socket$inet(0x2, 0x80000, 0x4) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)="2f73656c696e75782f7573657200", 0x2, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000003000)={0x7, 0x4}, 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0x4)=0xe8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000004000-0x18)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401, r3}) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 263.066436] binder: 30176:30183 BC_INCREFS_DONE uffffffffffffffff no match [ 263.100008] binder: 30176:30183 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/12/10 00:42:12 executing program 1: mmap(&(0x7f0000000000/0xf5a000)=nil, 0xf5a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80801, 0x2) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00005a4000)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00001df000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0xc, 0x35, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x800b, 0x84, &(0x7f0000f3c000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000d5d000-0x10)={0x0, 0x2c, &(0x7f0000114000-0x2c)=[@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x6fc4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}]}, &(0x7f0000103000)=0x10) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000f5e000-0x8)={r3, 0x2800000000000200}, &(0x7f0000f5e000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000f5c000)={0x20000000000027, 0x8000, 0x6, 0x100008200, r4}, &(0x7f0000f5b000)=0x10) socketpair(0x1a, 0xfffffffffffffffc, 0x6, &(0x7f0000f5e000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x2, 0x1f, &(0x7f00003db000)={0x0, 0x0}) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000f5e000)={r4, 0x6554}, &(0x7f00006eb000)=0x8) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000336000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f5c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000058000-0x30)=[{r6, 0x8010, 0x0}, {r2, 0xc0, 0x0}, {r1, 0x822c, 0x0}, {r6, 0xc048, 0x0}, {r8, 0x501, 0x0}, {r0, 0x0, 0x0}], 0x6, 0x20000af0c) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f61000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f62000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f000054e000)=[{&(0x7f0000214000-0x10)=@in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f60000)=[{&(0x7f0000f5f000-0x8a)="821de36b43bc954db55e689e7de6e9585001b8373bee236a0f7b34140fd00b184d09750a8c34413a5b7dd23c3d5aca21f542b8aa2e9af8276dece6319edb079fa06a72f2e72455340cda8090770f8992601bedf7d6355fe1839ef9f94441791821e374bfed7407111f4189f8711fa31c08ac3c25eedeeaba62d3f8e656cf6fd8abf890fe6a0fa972908b", 0x8a}, {&(0x7f0000f5f000)="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", 0x1000}, {&(0x7f00002e0000)="38c5b778b0fe762ac067af1f5044fecf56b17e6a00000007de137f00000000000000d34529dd3bde14ff5705257e6f552f7c56be92ac8b965e3b463c2f256b05c535f2a3ddfdad54b9ca97c9f861fd4f0ce40000000000408b2635988b97bf7afbe92c808b17481a171170c25aaa3ec4fafaf98713c9d1ff5d4a605f34d6f4cbb7a7f4b2dc7719d46d8f49bfd174fbe67475c8340800edee55b2e1b6466680338fad3c4fc2072b49d9a6eee87071", 0xae}, {&(0x7f0000f62000)="bde0f7251f0af0ed98cb9d379b8a7fd662a83d80c220a6a91efbe0c5418a0add6f60640e479997aa04300974e0dbf9663fbd60b67fbe9db368cfbccc4f32ff34936c42f03c8fd6a6e0720e881baee635fe9a0a5e1c91be9720e809af237fcdf2e5d06a26cb10c4753a59b6bdc77e854ed6b4879155533568bf379c6015e4c9a985aed84034930ff13c7778edffe7b43e529241a41bfa7e4b7620831aa13e0222", 0xa0}], 0x4, &(0x7f0000f62000-0x180)=[@init={0x14, 0x84, 0x0, {0x26, 0x4000000000000000, 0x44, 0x80000000e0a2}}, @sndrcv={0x2c, 0x84, 0x1, {0x8000, 0x80, 0xd, 0x0, 0x56, 0x7f, 0x5, 0x4000000000000, r4}}, @init={0x14, 0x84, 0x0, {0xffffffffffffffca, 0x8, 0xea36, 0x7f}}, @sndinfo={0x1c, 0x84, 0x2, {0x2006, 0x3, 0x80000000, 0x7fff, r5}}, @sndinfo={0x1c, 0x84, 0x2, {0x6, 0x8000, 0x40, 0xfffffffffffffffd, r7}}, @init={0x14, 0x84, 0x0, {0x4, 0x2, 0x8faf, 0xefffffff}}, @sndinfo={0x1c, 0x84, 0x2, {0x1, 0x8000, 0x10001, 0x0, r5}}, @init={0x14, 0x84, 0x0, {0x80f6, 0x1000, 0x2, 0x4000000000003}}], 0x160, 0x8d}], 0x1, 0x8002) mmap(&(0x7f0000f5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000f60000-0x19)="00000000000000000000000000000000000000000000000000", 0x19, 0x40000001, &(0x7f0000f5e000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00004b4000-0x38)={0x0, 0x0, &(0x7f000055f000-0x90)=[{&(0x7f0000f5b000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}, {&(0x7f0000f61000-0x90)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x90}, {&(0x7f0000f5a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x56}, {&(0x7f0000678000+0x487)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x66}, {&(0x7f0000f60000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40}, {&(0x7f0000f5b000-0xb4)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb4}, {&(0x7f0000f5a000)="00000000000000000000000000", 0xd}, {&(0x7f0000043000-0x1d)="0000000000000000000000000000000000000000000000000000000000", 0x1d}, {&(0x7f0000f5b000-0x5)="0000000000000000000000000000000000000000000000", 0x17}], 0x9, &(0x7f0000f5a000)="000000000000000000000000000000000000000000", 0x15, 0x0}, 0x40) 2017/12/10 00:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f000060f000-0x4)=0x7f) 2017/12/10 00:42:12 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f000000a000)="6b657972696e6700", &(0x7f000000f000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000000)="2e726571756573745f6b65795f6175746800", &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000001000-0xc5)="363aae264f8fcf3b1ea7fe028ad67eb62c539c2551786974010c63191881ed31f8e6236516c252e6d5bf9370b16f81ef0986d2f33e256a782db81495d017ef4e781a157461c71698d4ef75d8a22ea4e545a1d3c445215de806116e2228c37dc0a24f9ef6b4e60cbdef889135fe8e6163a9f81860b70054ead63de8cdaa49095b839b3d270cf3f5256789f6023a73047167434e1b574717cd8e10a748baf1a3a0055d0efeed41a0ee34bfe81ef3d227350c4790c5d38c54335eba46d21a7fa1db398321d0a9", 0xc5, r4) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 263.100109] binder: 30176:30183 IncRefs 0 refcount change on invalid ref 3 ret -22 2017/12/10 00:42:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f00005ed000)="2f6465762f6c6f6f702300", 0x482, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x1f, 0x0) r2 = perf_event_open(&(0x7f0000def000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x2001, 0x4a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00002fe000)={0x3, 0x8, 0x100, 0x81, 0x542, 0x8001, 0xffffffffffff7b73, 0x7, 0x3, 0x9, 0x20}, 0xb) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000ba7000-0x9)="2f6465762f76637300", 0x2001, 0x0) r5 = open(&(0x7f0000345000)="2e2f66696c653000", 0x1003d, 0xc2) r6 = syz_open_dev$vcsa(&(0x7f00006ab000-0xb)="2f6465762f766373612300", 0x2, 0x80) getpeername$ax25(r5, &(0x7f0000ab4000)={0x0, {"00000000000000"}, 0x0}, &(0x7f00006f5000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f0000001000)="2f6465762f7572616e646f6d00", 0x0, 0x1ffd) fcntl$getown(r0, 0x9) r7 = memfd_create(&(0x7f0000002000-0x9)="2f6465762f73672300", 0x3) r8 = creat(&(0x7f000092f000)="2e2f66696c653000", 0x100) r9 = syz_open_dev$loop(&(0x7f0000eef000-0xb)="2f6465762f6c6f6f702300", 0x5, 0x2) geteuid() poll(&(0x7f00009ef000-0x48)=[{r9, 0x68, 0x0}, {r5, 0x108, 0x0}, {r8, 0x630, 0x0}, {r8, 0x8, 0x0}, {r3, 0x104, 0x0}, {r3, 0xc00d, 0x0}, {r7, 0x1620, 0x0}, {r4, 0xfffffffffffffffc, 0x0}, {r2, 0x24, 0x0}], 0x9, 0x266) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000001000-0x8)=0x7fff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000002000)="1239ca", 0x2) pwritev(r10, &(0x7f00006cd000)=[{&(0x7f0000986000)="95ca7ab4e840ee4f6dcd0af7c3e809e456ce22fbf93dd11dcfca078b168f311f45223b6f68e06853a1100030c74f90c5d8683b0f914f71db08ad3ce1a0966e25ae2c32a9728842316d37074750ef38fe38b716b89de6ac2dd2c50ac633c80e8e9110d773865188840b4f7ef1121c8857ed03a6a0711b5e8871fd5e32e2415fd860a076b5b54037adf7b99768bcee20174918a406ef80b2c717d34ebd38347ad19d5b9d03a656b017af9cc66b8d01f2e044914f20f41bf08042164ed35ccf9f1587ad26a0068f0135bb401b8c523386648623efb4a5708df764a8c84034b66462351b", 0xe2}], 0x1, 0x80000) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0186416, &(0x7f00005cd000-0x18)={0x80000000, 0x4, 0xfffffffffffffffa, 0x4, 0x1000000000008, 0x5}) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) getsockname$unix(0xffffffffffffffff, &(0x7f0000620000-0x1002)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f00000e3000-0x4)=0x1002) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000de7000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000090b000)=0xe8) pwrite64(r9, &(0x7f0000726000)="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", 0xffe, 0x200000010200) pipe(&(0x7f0000bf3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r9, &(0x7f00001cd000)=0x0, 0x7fffffbb) 2017/12/10 00:42:12 executing program 4: mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 263.100125] binder: 30176:30183 got transaction to invalid handle 2017/12/10 00:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001000-0x5)={0x1000, 0x4, 0x80, 0x3ff}, 0x5) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40d, &(0x7f0000002000-0x8)=0x2) 2017/12/10 00:42:12 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r2, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$TIOCMBIS(r4, 0x5417, &(0x7f0000004000-0x4)=0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ftruncate(r1, 0x4) 2017/12/10 00:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r3) sendto$inet(r2, &(0x7f0000eed000-0x2)="e122", 0x2, 0x0, &(0x7f00002d7000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/10 00:42:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x803, 0x400000000006) keyctl$session_to_parent(0x12) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000029d000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000fe0000-0x28)=@ethtool_link_settings={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = accept4(r0, &(0x7f0000c65000-0x58)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000224000)=0x58, 0x80000) connect$nfc_llcp(r0, &(0x7f0000f10000)={0x27, 0x8, 0x4, 0x7, 0x8, 0x3ff, "4491d05e4e50c5b1f9dbffb984f61e68adb745c5b3d0ec9bd4c429c95ce7513b0035b7ed7e05202709a8a2d07ae505c417739730120c84486b40b7ec2a5e67", 0x1}, 0x58) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000456000)={0x0, 0x0, 0x2, 0x10000}, &(0x7f0000b73000-0x4)=0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000077e000)="2f73656c696e75782f636865636b72657170726f7400", 0x111a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000093b000)={r2, @in6={{0xa, 0x3, 0x401, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xc4e4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xc9c2, 0xfff}, 0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000c54000)={0x0, 0x2, 0x0}, &(0x7f00000f5000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00009fc000-0x8)=@assoc_value={r4, 0x800}, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000a7d000)={0x1, &(0x7f0000752000-0x1e)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000c7e000-0x98)={r4, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x2}, 0x98) fdatasync(r1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000a07000)={r4, 0x653, 0x6, 0x9}, &(0x7f0000e85000+0x836)=0x10) [ 263.100140] binder: 30176:30183 transaction failed 29201/-22, size 0-16 line 2775 [ 263.104084] binder: 30176:30191 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/10 00:42:12 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003000-0xd)="2f73656c696e75782f6d6c7300", 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) [ 263.104111] binder: 30176:30191 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.115775] binder: 30176:30183 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.115795] binder: 30176:30183 ioctl c0306201 20008fd0 returned -14 [ 263.135377] binder: 30176:30191 BC_INCREFS_DONE uffffffffffffffff no match [ 263.135400] binder: 30176:30191 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.135420] binder: 30176:30191 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.135437] binder: 30176:30191 got transaction to invalid handle [ 263.135452] binder: 30176:30191 transaction failed 29201/-22, size 0-16 line 2775 [ 263.136716] binder: 30176:30191 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.136743] binder: 30176:30191 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.150202] binder: 30176:30191 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.150220] binder: 30176:30191 ioctl c0306201 20008fd0 returned -14 [ 263.150329] binder: 30176:30183 ioctl ae45 296d returned -22 [ 263.195859] binder: 30206:30209 BC_INCREFS_DONE uffffffffffffffff no match [ 263.195874] binder: 30206:30209 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.195894] binder: 30206:30209 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.195909] binder: 30206:30209 got transaction to invalid handle [ 263.195922] binder: 30206:30209 transaction failed 29201/-22, size 0-16 line 2775 [ 263.196178] binder: 30206:30209 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.196204] binder: 30206:30209 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.197134] binder: 30206:30209 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.197148] binder: 30206:30209 ioctl c0306201 20008fd0 returned -14 [ 263.233996] binder: 30206:30224 BC_INCREFS_DONE uffffffffffffffff no match [ 263.234048] binder: 30206:30224 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.234069] binder: 30206:30224 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.234084] binder: 30206:30224 got transaction to invalid handle [ 263.234098] binder: 30206:30224 transaction failed 29201/-22, size 0-16 line 2775 [ 263.235447] binder: 30206:30209 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.235474] binder: 30206:30209 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.241350] binder: 30206:30224 ioctl ae45 296d returned -22 [ 263.242931] binder: 30206:30209 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.242943] binder: 30206:30209 ioctl c0306201 20008fd0 returned -14 [ 263.300627] binder: 30234:30240 BC_INCREFS_DONE uffffffffffffffff no match 2017/12/10 00:42:13 executing program 5: socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00008a8000)="2f6465762f696e7075742f6576656e742300", 0x48000000000, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:13 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f72666b696c6c00", 0x200000, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap$binder(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000010000)={0x3, 0x80, 0x5, 0x0, 0x9, 0x10001, 0x87, 0x1, 0x4, 0x2, 0x6, 0x3, 0x0, 0x100000000, 0xffffffff80000000, 0x5, 0x7ff, 0x9, 0x88a0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x14) 2017/12/10 00:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00009be000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000022000-0xe8)={{{@in=@loopback=0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e2e000-0x4)=0xe8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00002ae000-0xa)="2f6465762f6375736500", 0x80, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000460000)=@assoc_value={0x0, 0x0}, &(0x7f000097b000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000824000-0x4)=@int=0x2, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000081000)=0x8, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xc000800000000001, 0x10000, 0x1}, 0x10) r5 = socket(0x11, 0x802, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000623000)=0x2, 0x4) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f00003a2000)={0x8, 0x1, 0x7f, 0xa, &(0x7f0000bdd000-0xa)="00000000000000000000", 0xa4, &(0x7f0000fe1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda, &(0x7f00000ca000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00005b4000)={0x6, 0x4, 0x9, {0x0, 0x0}, 0x1f, 0x1ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000bb000)={@common="6c6f0000000000000000000000000000", r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = add_key(&(0x7f0000473000)="2e6465616400", &(0x7f0000472000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00002a1000-0x4a)="fe8063592c0782e74e7b4a0c5461e0cd97f428591cfc403eac322c84e9d8e408de119e72017850c1eb7ba688e2dbc8c090b9a4ebd1243029f3c0565cb051cceae587f6ffadacf9c3d1a2", 0x4a, 0xffffffffffffffff) keyctl$get_persistent(0x16, r1, r7) bind$packet(r5, &(0x7f0000f29000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000597000)={0x0, 0x3, 0x1007}, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000ed2000)=0x9, 0x4) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00001a9000)={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) close(r5) sendto$inet(r8, &(0x7f0000928000)="d0", 0x1, 0x20008045, &(0x7f00001a8000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000d26000-0x8)={0x0, 0x0}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00001a2000-0x4)=0xffeffffffffffffe, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00004f3000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2, 0x0, 0xff, 0x4, 0x7fff, 0x7, 0x8}, 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00004cd000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000f85000-0x6)="736d61707300") close(r1) syz_open_dev$usbmon(&(0x7f0000935000)="2f6465762f7573626d6f6e2300", 0x8, 0x2000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000627000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) getdents64(r1, &(0x7f0000290000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x38) 2017/12/10 00:42:13 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f76616c69646174657472616e7300", 0x1, 0x0) r1 = socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f73656c696e75782f706f6c69637900", 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001000-0x8)={r1, r2}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002000)=[{0x8, 0x7}], 0x1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000003000)=0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x7, 0x9}, &(0x7f0000004000-0x4)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r3, 0x101}, &(0x7f0000001000)=0x8) r4 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000004000)={{0xa, 0x2, 0xffffffffffffffc1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x84}, {0xa, 0x2, 0x8001, @loopback={0x0, 0x1}, 0x5}, 0x8, [0x2040000000000000, 0x4, 0x8, 0x80, 0x7ff, 0x4a, 0xe267, 0x0]}, 0x5c) setsockopt(r4, 0x107, 0x3fd, &(0x7f0000001000+0xf29)="00bb4bc62941c8f6e0d8f2a146d4c3737504d7d9a8a3", 0x16) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) inotify_rm_watch(r1, r2) 2017/12/10 00:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000894000)={0x9, &(0x7f0000001000-0x50)=[{0x0, 0x5a12, 0x7ff, 0x0}, {0x6, 0xfffffffffffffffa, 0x0, 0x98c6}, {0x5e4b, 0x7, 0xfff, 0x1000000000000}, {0x1, 0x3f, 0x2, 0xffffffff}, {0x7fff, 0x0, 0x5, 0x80}, {0x1, 0x9, 0x80000001, 0x8}, {0x8, 0x0, 0x9, 0x7ff}, {0x3f, 0xe51, 0x9, 0x3}, {0x6440bffb, 0x8c, 0x0, 0x97}]}, 0x8) [ 263.300643] binder: 30234:30240 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.300663] binder: 30234:30240 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.300678] binder: 30234:30240 got transaction to invalid handle [ 263.300692] binder: 30234:30240 transaction failed 29201/-22, size 0-16 line 2775 [ 263.302011] binder: 30234:30240 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/10 00:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x35, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfa1000)=nil, 0xfa1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) mmap(&(0x7f0000fa1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000681000-0xb)="2f6465762f6877726e6700", 0x0, 0x0) mmap(&(0x7f0000fa1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000fa3000)={0x0, 0x0, 0x0}, &(0x7f0000d52000)=0xc) fcntl$setown(r1, 0x8, r2) r3 = syz_open_dev$vcsa(&(0x7f0000f06000)="2f6465762f766373612300", 0x40000000000077, 0x180) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000fa4000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x1b) ptrace(0x4207, r4) mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000917000/0x1000)=nil, 0x1000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000152000-0x8)={&(0x7f0000fa7000)="d40000000013e1", 0x7}) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x1000000, 0x72, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x400000000000014, 0x2, &(0x7f00009d5000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000fa8000-0xd0)="6008ba630b1f136f8410008dce3bf239a62059b996ef862b00ad1e4a2d87fe6c693cdf6164ad0691b3b6d6ff336bf7445fb82aad12c82109b287a723d20be96aaaf508d19e2dff05f8df2014ecd423fd0d79c3e2cc44f0cfd22000000097d9195809df660d4ae123bf149abe1606d57943670013de6a2d69805390c88b327f1c29581ffbe28c150c59e702f1fe936658040000000000000032e4decfdb02893574961d4b3526a2de3325648be224d23dc9068cbc0b813d25f05ae29a864f9b7b4876b67e1bcd637c0e954cd3b2ed8ed4") ptrace$setopts(0x2, r4, 0xfffffffffffffff8, 0x2a) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000251000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000fa9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000fab000-0x8)={&(0x7f0000faa000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40}) mmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x4, 0x0, &(0x7f0000fab000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ca7000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(r2, &(0x7f0000dd5000-0x4)=&(0x7f0000fa7000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000603000)=0xc) mmap(&(0x7f0000fa9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f000051f000)={0x0, 0x3, 0x5, 0x9, 0x10001, 0x1}, &(0x7f0000fab000)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000b9b000)={r7, 0xafa1, 0x400, 0x2, 0x8001, 0x8001}, &(0x7f00000c6000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000f01000-0xb8)={0x0, 0x3, 0x3, 0x5, 0x2, 0x7, 0x1, 0x4, {r8, @in6={{0xa, 0x1, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x101}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x8450}}, &(0x7f0000faa000-0x4)=0xb8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000f9f000)={r9, 0x0, 0x30, 0x3, 0x9}, &(0x7f0000b72000-0x4)=0x18) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000fa0000)=[{&(0x7f0000fa1000-0x1c)=@in6={0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff}, 0x1c, &(0x7f00007ea000-0x20)=[{&(0x7f0000fa0000)="4fe6ff492e36195dfedc73009387ad187996470cf9b6c6a5807cefec2aed7d992fe1d4a356b35a13eaf80b6157eec164c5c339dcf6d5ebff9290415de676d84ccabd0a6e1708da7e54979909451588a47684481090e7506882f15e766afcc5f40e8643f2c3387e028e4e1e83", 0x6c}, {&(0x7f0000fa0000)="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", 0xfff}], 0x2, 0x0, 0x0, 0x80}, {&(0x7f0000fa1000-0x10)=@in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fa8000-0x50)=[{&(0x7f0000fa7000)="83c0535add8fd8304dc4d6a03e0d68f18c425c68ad31a7fb8fd3c343d197735b0a4f005a267f6b54f6754793ea3f653a8ebd148edc9d101b991d6a3e8627faa62c014190b77f5d23b234f6b1f62ddecb91d6dabfc32af79333779459fbfdcda041dc81da7c1bbd99de879809fda787ca5cd2f2deb7ad48ec8d64cd380226abd12e9443ff70e7b2a6b61c0bd6814ddd67f62677e32709fe43868fce95e6fbae09a98734e46032a3039c36f6abaf8aec953dcaf00449506155e3410a595f58400051db541ae0ee8aecdb149b4c7db452a56bb8f7857bfd22dd9ea8f28797f25705", 0xe0}, {&(0x7f0000fa1000-0x1000)="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", 0x1000}, {&(0x7f00000e3000)="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", 0x1000}, {&(0x7f0000723000)="003bb56dc6d44ad154ea935f1f14744ff45ec2553173e7e6d14a5532500473ddb42d076aae8d86bf918f5b061d8d24f1c1b7e002e3a5a6324c5309bd0b3090b8546dedf009ef127f338f4cfb81456ec826d6069a151ec611c400000001f9f6c989cfa4bf0281c83f71593bfae1a6a54b00d8941994fd05b911af7cc32a4239ce1085b5e5669dd177d556c9b84203e6272f7de347edde99f1e04a89e028402c91c5e451585c3d4a4d9fa2d4fdbfad7cc6dc940436023cb9991314e515", 0xbc}, {&(0x7f0000132000)="461ba00d9b0a74295bd7f101cdcc3b39d3d933c8875c98e66ed08c04ba689fab8e3d36dc5e592c403192d004b66c633103b1dbfdf1334b1db244189a28b2a685d6ca73c52b32b22c46117e85b5fa0ba8ed431f5130f2ec5be8aff9a3590444a85cfa6768b74949db2d86d512", 0x6c}], 0x5, &(0x7f0000354000)=[@sndrcv={0x2c, 0x84, 0x1, {0x1, 0xfffffffffffffffa, 0x8, 0x2, 0x4, 0x1, 0x2, 0x0, r10}}, @sndrcv={0x2c, 0x84, 0x1, {0x74, 0x821, 0x8203, 0x1, 0xc2d, 0x9, 0x6, 0x0, r9}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0xa27, 0xb, 0x5, 0x1, 0x10001, 0xc18e, 0x80000001, r10}}, @init={0x14, 0x84, 0x0, {0x0, 0x1000, 0x4, 0x5}}, @init={0x14, 0x84, 0x0, {0xc8, 0x3, 0x1, 0x9}}], 0x5, 0x20000000}], 0x2, 0x8000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000fad000-0x90)={0x10001, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000fad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000fad000)="ae88fee90822d347e3e25fea103d4fb23e75624841c06e63928bc5bc3c48e396831e3168d2726935b6dcbe061814fa2f65699140c6ca57b16f5b94809e229680eafaafb4e698e3675ae4b8c316921c", 0x4f) setsockopt$inet_group_source_req(r11, 0x0, 0x2f, &(0x7f00001a6000-0x118)={0x5, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) mmap(&(0x7f0000933000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r11, 0x89a2, &(0x7f0000faa000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs=@ethernet={0x800001, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000bbd000/0x2000)=nil, 0x2000, 0x200000002000002, 0x14, r11, 0x0) socket$inet6(0xa, 0x5, 0x7ffe) [ 263.302078] binder: 30234:30240 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.303416] binder: 30234:30240 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.305121] binder: 30234:30240 ioctl c0306201 20008fd0 returned -14 2017/12/10 00:42:13 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f000000d000)={0x1, [0xec]}, &(0x7f000000f000-0x4)=0x6) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:13 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001000-0x17)="2f73656c696e75782f76616c69646174657472616e7300", 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003000-0x8)=@assoc_value={0x0, 0x6}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002000-0x8)={r1, 0x3}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r2 = socket(0x11, 0x4000000000080003, 0xbd) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x0, 0x5000, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_add_watch(r1, &(0x7f00000ef000-0xe)="2e2f66696c65302f66696c653100", 0x5000102) [ 263.322887] binder: 30234:30245 BC_INCREFS_DONE uffffffffffffffff no match [ 263.322903] binder: 30234:30245 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/12/10 00:42:13 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:13 executing program 3: r0 = perf_event_open(&(0x7f00004a9000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000e68, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000008, 0x401, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x934, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000002000-0x4)={0x8000}, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x9b3, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000020000-0xc)="73797374656d00", 0x2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e002, 0x0, 0xac, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00009de000+0xf3c)={0x1, 0x78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0xc, 0xffffffffffffff20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, r5, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000059000/0x18000)=nil, &(0x7f0000007000)=[@text64={0x40, &(0x7f00007f6000)="c4a130580866baa100ed4f0f08c7442400d8000000c744240201000000ff1c2436f36f4e0f02caf30f2dcf66400f3881a100180000b982010000b801000000ba000000000f300f20d835080000000f22d8", 0x51}], 0x1, 0x0, &(0x7f00005bc000)=[], 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00007b7000-0xf)="2f6465762f73657175656e63657200", 0x600800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00006e1000)={0x2, [0x0, 0x0]}, &(0x7f0000a3a000)=0xc) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000dbb000-0x20)={0x1, 0x8, 0x8, 0x3, 0xbd8db4d30c6e6fba, 0x3f}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000edc000-0x5f)={0x0, 0x57, "226bfc8edf099a16a0a6a0c76cee701bc830710c775733e51070d8cfa218551d8c6028644b8865f9c1c5ba139d4cfeb7959b8f507c7bb514c31df5f7d84ed1bd8fd94dd09d34f3c77711a2d2ea5e3d08a940dc884afded"}, &(0x7f0000001000-0x4)=0x5f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000143000)={r8, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x6, 0x0, 0x1, 0x9, 0x2, 0x20, 0xf95, 0x745, 0x0, 0x1, 0x400, 0x10000, 0x4d, 0x4, 0x101]}, &(0x7f00007b4000-0x4)=0x108) r9 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$tun(&(0x7f00008dd000)="2f6465762f6e65742f74756e00", 0x0, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000001000-0x4)=0x0, 0x4) [ 263.322923] binder: 30234:30245 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.322938] binder: 30234:30245 got transaction to invalid handle [ 263.322952] binder: 30234:30245 transaction failed 29201/-22, size 0-16 line 2775 [ 263.324349] binder: 30234:30240 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.324383] binder: 30234:30240 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.327055] binder: 30234:30245 ioctl ae45 296d returned -22 [ 263.328706] binder: 30234:30245 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.328724] binder: 30234:30245 ioctl c0306201 20008fd0 returned -14 [ 263.774947] binder: 30269:30274 BC_INCREFS_DONE uffffffffffffffff no match [ 263.774960] binder: 30269:30274 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.774977] binder: 30269:30274 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.774991] binder: 30269:30274 got transaction to invalid handle [ 263.775007] binder: 30269:30274 transaction failed 29201/-22, size 0-16 line 2775 [ 263.775184] binder: 30269:30274 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.775207] binder: 30269:30274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.776030] binder: 30269:30274 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.776044] binder: 30269:30274 ioctl c0306201 20008fd0 returned -14 [ 263.813200] binder: 30269:30282 BC_INCREFS_DONE uffffffffffffffff no match [ 263.813215] binder: 30269:30282 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.813232] binder: 30269:30282 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.813247] binder: 30269:30282 got transaction to invalid handle [ 263.813260] binder: 30269:30282 transaction failed 29201/-22, size 0-16 line 2775 [ 263.817285] binder: 30269:30274 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.817315] binder: 30269:30274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.821195] binder: 30269:30282 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.821214] binder: 30269:30282 ioctl c0306201 20008fd0 returned -14 [ 263.821344] binder: 30269:30274 ioctl ae45 296d returned -22 [ 263.827835] binder: 30269:30282 ioctl 4040aea0 20010000 returned -22 [ 263.886521] binder: 30297:30302 BC_INCREFS_DONE uffffffffffffffff no match [ 263.886537] binder: 30297:30302 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.886556] binder: 30297:30302 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.886570] binder: 30297:30302 got transaction to invalid handle [ 263.886585] binder: 30297:30302 transaction failed 29201/-22, size 0-16 line 2775 [ 263.887401] binder: 30297:30302 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.887428] binder: 30297:30302 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.889331] binder: 30297:30302 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/12/10 00:42:13 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r3, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:13 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002000)={0x100000001, 0x5, 0x1, 0x84f2, 0x6, 0x2, 0x7, 0x60000000000, 0x0}, &(0x7f0000002000)=0x20) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000001000)={0x19, 0x0, 0x10001, 0x400}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000003000)={0x8, r3, 0x10001, 0x6}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002000-0x14)={r1, 0x3ad9a124, 0xfffffffffffffff7, 0xffffffff80000000, 0x6, 0x2}, &(0x7f0000002000)=0x14) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x2000, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000310000-0x2)=0x1008000200008, 0xa0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f00006c5000-0x6)="657468300700", 0x3ffffffe) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000bd6000-0x4)={0x6, 0x40000005, 0x7ffe}, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000f5c000)={0x0, 0xfe84000000000000, 0x4, 0x39, 0x100000001000, 0x6}, &(0x7f0000468000-0x4)=0x14) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f000025e000-0x8)={0x7, 0x1, 0x101, 0x99d, 0x7}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000773000)=@int=0x3ff, 0x4) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f00001f7000-0xc)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f000062c000-0xc)={0x0, 0x0, 0x0}, 0xc) getpgrp(r5) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000bf000)="2f73656c696e75782f636f6d6d69745f70656e64696e675f626f6f6c7300", 0x1, 0x0) kcmp(r4, r4, 0x1, r1, r6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) eventfd2(0xffff7ffffffffffb, 0x1) r7 = syz_open_dev$sg(&(0x7f0000224000-0x9)="2f6465762f73672300", 0x0, 0x0) ioctl(r7, 0x2275, &(0x7f00004a2000)="46cd") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xd, 0x8012, r7, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002000-0x11)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f000074b000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = gettid() perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x1110, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)="2e2f66696c653000", 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(r1, 0x0) 2017/12/10 00:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f000060f000-0x68)={0x81, 0x0, [0x3, 0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0xffc) r1 = socket$inet6(0xa, 0x8000000000000001, 0x1) bind$inet6(r1, &(0x7f0000936000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x3}, 0x1c) r2 = socket$inet(0x2, 0x80800, 0xdc6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00007ac000)=@int=0x0, &(0x7f000044a000-0x4)=0x4) setsockopt$inet6_buf(r1, 0x29, 0x8000000000003d, &(0x7f0000fc9000)="99daa6d752cb8b7cda743618237f86e4779ff8cb6b88ea4978e29ccd43d9d3d259cddca8ea21742c7293aaaf0085ac2becca650e6767a776aaa00ef4804b063f93407610eb667992baeecb7b10c27a43547f02873fcdeeaa70824542b22396cc37637c77bb30e3952264f5e291e83d5cc75ed22828389ff1acb8d3de3175c427e3094cd195655c480a0eecd45cac1b61a80ea7c714c73702127c7d9dde7a303b69ee6490d744d52c65f3a5b08cde6149", 0xb0) sendto$inet6(r1, &(0x7f0000fc4000-0x61)="10", 0x1, 0x0, &(0x7f000086f000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000a76000-0xdb)="bf", 0x1, 0x2, &(0x7f0000527000)={0xa, 0x0, 0x6, @loopback={0x0, 0x1}, 0x0}, 0x1c) r3 = accept4(r2, &(0x7f00001cc000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000fcc000-0x4)=0x9, 0x800) ftruncate(r2, 0x2e) r4 = accept4(r1, &(0x7f0000e54000)=@hci={0x0, 0x0, 0x0}, &(0x7f000063d000)=0x6, 0x80000) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000f5f000)=0xff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000d92000)=0x6, 0x4) setsockopt$inet_opts(r5, 0x0, 0x7, &(0x7f00006ec000)="8907040000", 0x5) sendto$inet(r5, &(0x7f00002e6000)="51918cf29f669c7deb5294775dad77984cac8d8ec96b07bf44f6e534a50979dff39532ce5629eb5a8ce5", 0x2a, 0x0, &(0x7f0000654000-0x10)={0x2, 0x3, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f000039a000)={0x81, 0x2f1, 0x5, 0xffffffffffff92ba, 0x5, [{0x20, 0x9, 0x20000000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x7ff, 0x5, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x1f, 0x5, 0x3, 0x0, 0x0, 0x3007, 0x0, 0x0, 0x0}, {0x1000, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, {0x0, 0xf, 0x7fffffff, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000de000-0xc)={0x3, 0x1, 0xa76, 0x2, 0x3, 0x8001, 0x82}, 0xc) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f0000ef7000)="", 0x0, 0x83, &(0x7f0000848000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f0000f46000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00009f7000-0x20)={@generic="ea01f1a1fed4fd97ba324d6ff3ffe3f7", @ifru_flags=0x2000}) r8 = gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000a57000)={&(0x7f0000be0000-0x4)=[0x0], &(0x7f000035f000)=[0x0, 0x0, 0x0], &(0x7f00002b7000-0xc)=[0x0, 0x0, 0x0], &(0x7f00006c2000-0x4)=[0x0], 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000a97000)=r8) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00009e4000-0x53)="64121ea6a5b904f315d8fe117c29b60bfe02e12acc731867da6e5c1eb422d6cd2e8855d48a6d27d3a5a2f3ac4d998a6efcd1c917b9abc70c394f53b2f2616caad7e4196ddcd7f0be462300fb351ae73a6bd35b") getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000e70000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000414000-0x4)=0xe8) 2017/12/10 00:42:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x35, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000768000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) [ 263.889413] binder: 30297:30302 ioctl c0306201 20008fd0 returned -14 [ 263.909668] binder: 30297:30309 BC_INCREFS_DONE uffffffffffffffff no match 2017/12/10 00:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0xd000], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:14 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x9, 0x6, &(0x7f0000001000)="", 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001000-0x17)="2f73656c696e75782f76616c69646174657472616e7300", 0x1, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000002000-0x18)={0x100000000, 0x5, 0x0, 0xffffffc000000000, 0x2, 0x93}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) accept4(r0, &(0x7f0000001000)=@ethernet={0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000)=0x10, 0x800) 2017/12/10 00:42:14 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @empty=0x0}, &(0x7f0000000000)=0xc) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 263.909685] binder: 30297:30309 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.909705] binder: 30297:30309 IncRefs 0 refcount change on invalid ref 3 ret -22 2017/12/10 00:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") r1 = creat(&(0x7f0000818000)="2e2f66696c653000", 0x123) inotify_rm_watch(r1, 0x0) 2017/12/10 00:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x9, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x40, &(0x7f000060b000-0x4)=0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000ccb000)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000731000)=0x10) fdatasync(r0) fsetxattr(r0, &(0x7f0000860000-0x15)=@known="73797374656d2e736f636b70726f746f6e616d6500", &(0x7f000022b000)="2f6465762f6b766d00", 0x9, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000396000-0x90)={0x0, {{0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00003c7000)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x13ffd, 0x0}) ioctl$int_out(r3, 0x5460, &(0x7f0000f84000)=0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f000073b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2017/12/10 00:42:14 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003000-0x10)={0x0, 0xfffffffffffff801, 0x8001, 0x1}, &(0x7f0000002000-0x4)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002000)={r1, 0x36, "05ecbcc307fd4d58ba33bc99646feda674f1ad5a8df085a0de529f087702aa02ed4cab7005d62daf8db8602e3eea241a0da2fbaca8c6"}, &(0x7f0000003000-0x4)=0x3e) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000003000)={0x4, [0x7fff, 0x7, 0x4, 0x1]}, &(0x7f0000004000-0x4)=0xc) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:14 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0xb0, 0x0, &(0x7f0000008000)="0980d4eebb5d0b31594008b3c778c004fd6cd178c4fce3dd08e4de9f7f008000009d9258432030dd24dea044b675bedb0c5d06bad15c3aae8d0190dcd469fa29f530fb872779384be1c08336bc69712ecbbfe03bb97f0ec4c74b34af2cce5520b1e6666c87b20b56dd49b77d73aef6bee61a5bacb978cd53d961c02aab1ccda25a5179a3c4ad7a8a4cadefcc1cc84dc8428be6aebba7982780e5e3e10c2e2fc9a55c0cdcd80209eafc1b2bdf27118c5f"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001000)={0x9, [0x7f, 0x7ff, 0x8, 0x10000, 0xffffffffffffff80, 0x0, 0xe8, 0x6, 0x5]}, &(0x7f0000010000)=0x16) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)="2e2f66696c653000", &(0x7f0000b20000-0x8)="2e2f66696c653000", &(0x7f000028b000)="72616d667300", 0x100000, &(0x7f0000408000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) [ 263.909719] binder: 30297:30309 got transaction to invalid handle [ 263.909734] binder: 30297:30309 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:14 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000024e000-0x9)="2f6465762f76637300", 0x4003, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) pipe(&(0x7f0000200000)={0x0, 0x0}) clock_gettime(0x2, &(0x7f0000ac9000-0x8)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x423f9) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000fe2000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000a4000-0x8)=0x0, 0xffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0xc) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty=0x0, @multicast1=0x0, 0x0}, &(0x7f0000000000)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000778000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, r6}) ioctl$TIOCGSID(r3, 0x540f, &(0x7f0000475000-0x4)=0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000000200000004, 0xff7f, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000793000)="2e2f66696c653000", 0x10000000003) mount(&(0x7f0000144000)="2e2f66696c653000", &(0x7f0000344000-0x8)="2e2f66696c653000", &(0x7f0000fb6000-0x4)="6e667300", 0x0, &(0x7f0000085000)="") shutdown(r2, 0x2) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f00008c3000-0x3c)="df975c3927196e27c91775606a2be583f645298194023034388deaa066cc75248c3e7621a6bca970dad1d548a82c5b2fc6fddedfe74e78521b9cf9c7", 0x3c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f000000b000-0x9)="2f6465762f6b766d00", 0x123400, 0x0) fcntl$setstatus(r1, 0x4, 0x800) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000f99000)="2f73656c696e75782f72656c6162656c00", 0x2, 0x0) fadvise64(r9, 0x0, 0xffff, 0x3) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000071000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x15, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 263.911055] binder: 30297:30302 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/10 00:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:14 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000004000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000003000-0x4)=0x0, 0x4) [ 263.911082] binder: 30297:30302 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.913633] binder: 30297:30309 ioctl ae45 296d returned -22 [ 263.914870] binder: 30297:30302 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.914887] binder: 30297:30302 ioctl c0306201 20008fd0 returned -14 [ 263.940859] binder: 30317:30318 BC_INCREFS_DONE uffffffffffffffff no match [ 263.940874] binder: 30317:30318 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.940893] binder: 30317:30318 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.940905] binder: 30317:30318 got transaction to invalid handle [ 263.940919] binder: 30317:30318 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400d, 0x80003, 0x0) setsockopt(r3, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2017/12/10 00:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x619, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 263.941095] binder: 30317:30318 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.941118] binder: 30317:30318 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.946968] binder: 30317:30318 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.946986] binder: 30317:30318 ioctl c0306201 20008fd0 returned -14 [ 263.978203] binder: 30317:30320 BC_INCREFS_DONE uffffffffffffffff no match [ 263.978220] binder: 30317:30320 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 263.978242] binder: 30317:30320 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 263.978258] binder: 30317:30320 got transaction to invalid handle [ 263.978273] binder: 30317:30320 transaction failed 29201/-22, size 0-16 line 2775 [ 263.979598] binder: 30317:30318 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.979626] binder: 30317:30318 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.983138] binder: 30317:30320 ioctl ae45 296d returned -22 [ 263.985418] binder: 30317:30318 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.985435] binder: 30317:30318 ioctl c0306201 20008fd0 returned -14 [ 263.986940] binder: 30317:30320 ioctl 80404508 2000a000 returned -22 [ 264.403723] binder: 30333:30341 BC_INCREFS_DONE uffffffffffffffff no match [ 264.403738] binder: 30333:30341 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.403755] binder: 30333:30341 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.403770] binder: 30333:30341 got transaction to invalid handle [ 264.403784] binder: 30333:30341 transaction failed 29201/-22, size 0-16 line 2775 [ 264.404751] binder: 30333:30341 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.404777] binder: 30333:30341 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.405353] binder: 30333:30341 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.405369] binder: 30333:30341 ioctl c0306201 20008fd0 returned -14 [ 264.433253] binder: 30333:30350 BC_INCREFS_DONE uffffffffffffffff no match [ 264.433272] binder: 30333:30350 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.433294] binder: 30333:30350 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.433309] binder: 30333:30350 got transaction to invalid handle 2017/12/10 00:42:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f00005f2000-0x8)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:14 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x1c, &(0x7f0000003000-0x4)=0x10000, 0x4) socket$inet(0x2, 0x3, 0x7) r1 = getpid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(r1, 0x1, &(0x7f0000003000-0x4)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000003000)=[0x72f, 0x3ff, 0x1], &(0x7f0000003000+0x15e)=[0x0, 0x0], 0x6) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000004000)="2f73656c696e75782f76616c69646174657472616e7300", 0x1, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000001000-0x10)={&(0x7f0000002000/0x2000)=nil, 0x2000}) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001000)=0x17, 0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000002000)={@generic="048d9c21282c0a45e113e3729efd4dc8", 0x800}) 2017/12/10 00:42:14 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000000c000-0x9)="2f6465762f73672300", 0xfe, 0x100) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000000)={"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"}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x2) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket(0x400d, 0x80003, 0x0) setsockopt(r2, 0x100000002, 0x9, &(0x7f000053d000)="0000e4ff", 0x4) 2017/12/10 00:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 264.433324] binder: 30333:30350 transaction failed 29201/-22, size 0-16 line 2775 [ 264.434824] binder: 30333:30341 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.434853] binder: 30333:30341 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.439950] binder: 30333:30350 ioctl ae45 296d returned -22 [ 264.443345] binder: 30333:30341 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.443365] binder: 30333:30341 ioctl c0306201 20008fd0 returned -14 [ 264.495529] binder: 30359:30362 BC_INCREFS_DONE uffffffffffffffff no match [ 264.495546] binder: 30359:30362 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.495568] binder: 30359:30362 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.495585] binder: 30359:30362 got transaction to invalid handle [ 264.495600] binder: 30359:30362 transaction failed 29201/-22, size 0-16 line 2775 [ 264.495800] binder: 30359:30362 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.495831] binder: 30359:30362 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.497982] binder: 30359:30362 ioctl ae41 0 returned -22 [ 264.499080] binder: 30359:30362 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.499098] binder: 30359:30362 ioctl c0306201 20008fd0 returned -14 [ 264.550565] binder: 30359:30367 BC_INCREFS_DONE uffffffffffffffff no match [ 264.550581] binder: 30359:30367 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.550600] binder: 30359:30367 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.550616] binder: 30359:30367 got transaction to invalid handle [ 264.550631] binder: 30359:30367 transaction failed 29201/-22, size 0-16 line 2775 [ 264.551976] binder: 30359:30362 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.552008] binder: 30359:30362 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.554877] binder: 30359:30362 ioctl ae41 0 returned -22 [ 264.556283] binder: 30359:30362 ioctl ae45 296d returned -22 [ 264.556332] binder: 30359:30367 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.556349] binder: 30359:30367 ioctl c0306201 20008fd0 returned -14 [ 264.618140] binder: 30381:30384 BC_INCREFS_DONE uffffffffffffffff no match [ 264.618155] binder: 30381:30384 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.618176] binder: 30381:30384 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.618191] binder: 30381:30384 got transaction to invalid handle [ 264.618205] binder: 30381:30384 transaction failed 29201/-22, size 0-16 line 2775 [ 264.618427] binder: 30381:30384 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.618454] binder: 30381:30384 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.618472] binder: 30384 RLIMIT_NICE not set [ 264.646396] binder: 30381:30390 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.646417] binder: 30381:30390 ioctl c0306201 20008fd0 returned -14 [ 264.691533] binder: 30381:30399 BC_INCREFS_DONE uffffffffffffffff no match [ 264.691549] binder: 30381:30399 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 264.691570] binder: 30381:30399 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 264.691585] binder: 30381:30399 got transaction to invalid handle [ 264.691599] binder: 30381:30399 transaction failed 29201/-22, size 0-16 line 2775 [ 264.693066] binder: 30381:30399 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.693095] binder: 30381:30399 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.693114] binder: 30399 RLIMIT_NICE not set [ 264.717524] binder: 30381:30390 ioctl ae45 296d returned -22 [ 264.717590] binder: 30381:30409 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.717609] binder: 30381:30409 ioctl c0306201 20008fd0 returned -14 [ 265.140403] binder: 30423:30426 BC_INCREFS_DONE uffffffffffffffff no match [ 265.140418] binder: 30423:30426 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 265.140440] binder: 30423:30426 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 265.140454] binder: 30423:30426 got transaction to invalid handle [ 265.140467] binder: 30423:30426 transaction failed 29201/-22, size 0-16 line 2775 [ 265.140971] binder: 30423:30426 Acquire 1 refcount change on invalid ref 0 ret -22 [ 265.141004] binder: 30423:30426 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 265.142399] binder: 30423:30426 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 265.142418] binder: 30423:30426 ioctl c0306201 20008fd0 returned -14 [ 265.184723] binder: 30423:30431 BC_INCREFS_DONE uffffffffffffffff no match [ 265.184742] binder: 30423:30431 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 265.184772] binder: 30423:30431 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 265.184789] binder: 30423:30431 got transaction to invalid handle [ 265.184803] binder: 30423:30431 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:15 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000006000-0x4)={0x20}, 0x4) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$LOOP_CLR_FD(r3, 0x4c01) connect$bt_rfcomm(r0, &(0x7f000000c000-0x9)={0x1f, {0x6, 0x1, 0x9, 0x9, 0x81, 0x200}, 0x5}, 0x9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:15 executing program 4 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:15 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xfffffffffffffffb, 0x0, 0x2}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001000)={0x204, {{0xa, 0x0, 0x1b3, @loopback={0x0, 0x1}, 0x1000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket(0x400d, 0x80003, 0x0) 2017/12/10 00:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ca9000)={0x0, 0x0}) futimesat(r1, &(0x7f00007d0000)="2e2f66696c653000", &(0x7f0000355000)={{0x0, 0x2710}, {0x77359400, 0x0}}) read(r0, &(0x7f0000609000-0x10)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f000019a000-0x4)=0x0, &(0x7f00000aa000-0x4)=0x4) socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f000032d000)="2e2f66696c653000", 0x40, 0x1a4) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000004, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000fc4000-0xb)="2f6465762f6877726e6700", 0x10000000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() mkdir(&(0x7f0000b8a000)="2e2f66696c653000", 0x20000008000000) mount(&(0x7f0000c32000-0xa)="2e2f636f6e74726f6c00", &(0x7f0000bda000)="2e2f636f6e74726f6c00", &(0x7f0000a74000-0x5)="7678667300", 0x2002, &(0x7f00003ca000-0x1000)="") perf_event_open(&(0x7f000001d000)={0x41, 0x78, 0x9eb5, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2000000000000, 0x0, 0x400000000003, 0x1f, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$netlink(r0, &(0x7f00006ff000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000afa000)=0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000656000-0x11)="2f6465762f7667615f6172626974657200", 0x222c2, 0x0) perf_event_open(&(0x7f0000f58000-0x78)={0x5, 0x78, 0x800, 0x4, 0x2, 0x9, 0x0, 0x0, 0x20, 0x2, 0x0, 0x20000000000000, 0xfffffffffffff813, 0x1, 0x0, 0xffffffffffff90a5, 0x2, 0x7, 0x0, 0x40, 0x8, 0x200, 0x1, 0x6, 0x0, 0x6, 0x0}, r2, 0x1, r1, 0xf) bind$netlink(r3, &(0x7f00000e6000)={0x10, 0x0, 0x438, 0x585a}, 0xc) r4 = inotify_init1(0x0) prctl$setptracer(0x59616d61, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d22000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000360000)=0xc) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f000000d000)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0x0, 0x0) ptrace(0x4207, r7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00006fd000)={0x0, 0x80000, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000ded000-0x28)={&(0x7f00008f2000/0x2000)=nil, 0x0, 0x4, 0x40, &(0x7f00001f7000/0x4000)=nil, 0x4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000bcb000)={&(0x7f0000bb5000-0x14)=[], 0x0, 0x8, 0x5, 0x7f, 0x5, 0x11, {0x8, 0x100, 0x3bf, 0x9, 0x8d63, 0x3, 0x7, 0x2, 0x9, 0x7, 0x7, 0x6, 0x2fb65d0b, 0x2, "82dc07e29ab943ffd4a9c46af61ce218171e48a3a9c0debb89fcbaeeed01e880"}}) ptrace$setregs(0xf, r7, 0x4, &(0x7f0000d50000)="af5adb62d711e774be80985400336f5c397ae118a2e7f90a8f0000cd1826c1e61b2c09006e69f7a0000000000000000032d2be93f0604c2c0db3d9ef8be1df00000000f1ff0606000000ffffffe0d50600000000b500080000003cf37403") sched_setaffinity(r7, 0x8, &(0x7f0000904000-0x8)=0x400) ptrace$getregs(0xe, r7, 0x7fff, &(0x7f0000c66000)="") ptrace(0x11, r7) 2017/12/10 00:42:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000000c) writev(r0, &(0x7f0000a26000)=[], 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000216000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00006d6000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001000-0x8)={0x0, 0x2}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3ff, 0xbbaf03e40000, 0x329c, 0x0, 0x104464}, &(0x7f000064b000)=0xa0) open(&(0x7f00003a9000)="2e2f66696c653000", 0x0, 0x100) r4 = syz_open_procfs(0x0, &(0x7f0000c85000-0x15)="6e65742f6970365f7461626c65735f6e616d657300") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) getsockname$packet(r1, &(0x7f0000879000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000d3f000)=0x14) preadv(r4, &(0x7f0000005000)=[{&(0x7f0000001000-0x1)="00", 0x1}], 0x1, 0x0) lseek(r2, 0x8, 0xffffffffffffffbe) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4) fcntl$getown(r4, 0x9) removexattr(&(0x7f0000433000)="2e2f66696c653000", &(0x7f000035e000-0x42)=@known="73797374656d2e61647669736500") r6 = perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d6286be, 0x2, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpgrp(0x0) perf_event_open(&(0x7f0000271000)={0x1000000000002, 0x78, 0x45, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0}, r7, 0x0, r6, 0xffffffffffffffff) r8 = socket$unix(0x1, 0x800000004, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000976000)=0x75) r9 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffc00000000, 0x2, 0x1, 0x0, []}) fstat(r8, &(0x7f0000587000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000e84000)={{{@in6=@loopback={0x0, 0x1}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, 0x0, 0x59, 0x17, 0x0, 0x0, 0x6, r5, r10}, {0xd3, 0x20, 0x400, 0x8, 0x9c, 0x7b, 0x2, 0x5}, {0x4, 0x3, 0x10001, 0x7}, 0x0, 0x7f, 0x8, 0x0, 0x5, 0x1}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6e, 0x9}, 0x3, @in=@loopback=0x7f000001, 0x3, 0x7, 0x3, 0x7ff, 0x1, 0x10000, 0x80}}, 0xe8) ioctl(r9, 0x8936, &(0x7f0000000000)="") [ 265.189328] binder: 30423:30426 Acquire 1 refcount change on invalid ref 0 ret -22 [ 265.189357] binder: 30423:30426 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 265.191851] binder: 30423:30431 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 265.191870] binder: 30423:30431 ioctl c0306201 20008fd0 returned -14 2017/12/10 00:42:15 executing program 4 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:15 executing program 4 (fault-call:2 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:15 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000003000-0x34)={0x0, 0x2c, "fcfb001b0097f16066cb8a3f0d43968081412a62590bd053b05fa4af2889134e8939f2dfb88bbcf437a38233"}, &(0x7f0000003000-0x4)=0x34) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={r0, 0x4, 0x101, 0x600}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) [ 265.747398] binder: 30443:30445 BC_INCREFS_DONE uffffffffffffffff no match [ 265.755478] FAULT_INJECTION: forcing a failure. [ 265.755478] name failslab, interval 1, probability 0, space 0, times 0 [ 265.755495] CPU: 0 PID: 30450 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 2017/12/10 00:42:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f00007d0000/0x4000)=nil, 0x4000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4000000000eb, &(0x7f00007d2000-0x5)="6eb1bb7e8e", 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d0000/0x3000)=nil, 0x3000, 0x8, 0x32, r0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8000000000000003, 0x200000004010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xaf9000)=nil, 0xaf9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00007b9000-0x9)="2f6465762f6b766d00", 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f000024b000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000099000-0x8)="2e2f66696c653000", 0x85) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001000)={0x0, 0x0, []}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r5 = socket(0x9, 0x805, 0xffff) mmap(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x2000012, 0x1c, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000637000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000afb000)={0x5, 0x0, [{0xa, 0x101, 0x501, 0xffffffffffffffd8, 0x8, 0x0}, {0xd, 0xd3e7, 0x8000, 0x2, 0xfffffffffffffffd, 0x0}, {0x2, 0xffff, 0x80, 0xf0, 0x400000000002, 0x0}, {0x7, 0x10202, 0x3f, 0x9, 0xfffffffffffffff8, 0x0}, {0x1, 0x8, 0x8, 0x0, 0xae6, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000a73000)={0x200ffffd, 0x1, 0x6242, 0x8403, 0x6}) mmap(&(0x7f00000f7000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000afc000-0x9)={0x2, 0x0, [{0xc0010997, 0x0, 0x100000}, {0xa7d, 0x0, 0x1b}]}) 2017/12/10 00:42:15 executing program 4 (fault-call:2 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:15 executing program 0: mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:15 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x9, 0x4000000000080003, 0x80000004) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000002000-0x1c)={0x6, 0x0, 0x2, 0x0, 0x10001, 0x1000, 0x48, 0xfffffffffffffffe, 0xffff, 0x80000001, 0x8, 0x2, 0x0, 0x7ff, 0x3f, 0x4, 0x7, 0x8, 0x8000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000002000-0x4)=0x14, 0x800) [ 265.755503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.755509] Call Trace: [ 265.755527] dump_stack+0x194/0x257 [ 265.755546] ? arch_local_irq_restore+0x53/0x53 [ 265.755577] should_fail+0x8c0/0xa40 [ 265.755595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.755609] ? lock_downgrade+0x980/0x980 [ 265.755623] ? get_pid_task+0xbc/0x140 [ 265.755646] ? find_held_lock+0x39/0x1d0 [ 265.755677] ? lock_downgrade+0x980/0x980 [ 265.755717] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 265.755734] ? rcu_note_context_switch+0x710/0x710 [ 265.755744] ? __lock_is_held+0xbc/0x140 [ 265.755768] should_failslab+0xec/0x120 [ 265.755782] __kmalloc_track_caller+0x5f/0x760 [ 265.755800] ? strncpy_from_user+0x430/0x430 [ 265.755811] ? strndup_user+0x62/0xb0 [ 265.755831] memdup_user+0x2c/0x90 [ 265.755846] strndup_user+0x62/0xb0 [ 265.755862] copy_mount_string+0x24/0x40 [ 265.755874] compat_SyS_mount+0x2d/0x1070 [ 265.755892] ? show_fd_locks+0x2c0/0x2c0 [ 265.755906] do_fast_syscall_32+0x3ee/0xf9d [ 265.755930] ? do_int80_syscall_32+0x9d0/0x9d0 [ 265.755953] ? lockdep_sys_exit+0x47/0xf0 [ 265.755966] ? syscall_return_slowpath+0x2ad/0x550 [ 265.755983] ? sysret32_from_system_call+0x5/0x3b [ 265.756003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.756028] entry_SYSENTER_compat+0x51/0x60 [ 265.756037] RIP: 0023:0xf7f16c79 [ 265.756044] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 265.756057] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 265.756063] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 265.756069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.756075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 265.756081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.777649] binder: 30443:30459 Acquire 1 refcount change on invalid ref 0 ret -22 [ 265.777683] binder: 30443:30459 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 265.792058] FAULT_INJECTION: forcing a failure. [ 265.792058] name failslab, interval 1, probability 0, space 0, times 0 [ 265.792071] CPU: 1 PID: 30460 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 [ 265.792079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.792085] Call Trace: [ 265.792100] dump_stack+0x194/0x257 [ 265.792117] ? arch_local_irq_restore+0x53/0x53 [ 265.792130] ? __save_stack_trace+0x7e/0xd0 [ 265.792158] should_fail+0x8c0/0xa40 [ 265.792168] ? check_noncircular+0x20/0x20 [ 265.792184] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.792196] ? kasan_kmalloc+0xad/0xe0 [ 265.792206] ? __kmalloc_track_caller+0x15e/0x760 [ 265.792215] ? memdup_user+0x2c/0x90 [ 265.792223] ? strndup_user+0x62/0xb0 [ 265.792232] ? copy_mount_string+0x24/0x40 [ 265.792241] ? compat_SyS_mount+0x2d/0x1070 [ 265.792251] ? do_fast_syscall_32+0x3ee/0xf9d [ 265.792272] ? find_held_lock+0x39/0x1d0 [ 265.792307] ? lock_downgrade+0x980/0x980 [ 265.792352] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 265.792373] ? rcu_note_context_switch+0x710/0x710 [ 265.792386] ? __check_object_size+0x25d/0x4f0 [ 265.792408] should_failslab+0xec/0x120 [ 265.792423] __kmalloc_track_caller+0x5f/0x760 [ 265.792441] ? strncpy_from_user+0x430/0x430 [ 265.792451] ? strndup_user+0x62/0xb0 [ 265.792463] ? _copy_from_user+0x99/0x110 [ 265.792480] memdup_user+0x2c/0x90 [ 265.792495] strndup_user+0x62/0xb0 [ 265.792511] copy_mount_string+0x24/0x40 [ 265.792523] compat_SyS_mount+0x49/0x1070 [ 265.792540] ? show_fd_locks+0x2c0/0x2c0 [ 265.792554] do_fast_syscall_32+0x3ee/0xf9d [ 265.792579] ? do_int80_syscall_32+0x9d0/0x9d0 [ 265.792602] ? lockdep_sys_exit+0x47/0xf0 [ 265.792614] ? syscall_return_slowpath+0x2ad/0x550 [ 265.792634] ? sysret32_from_system_call+0x5/0x3b [ 265.792656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.792681] entry_SYSENTER_compat+0x51/0x60 [ 265.792689] RIP: 0023:0xf7f16c79 [ 265.792695] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 265.792712] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 265.792718] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 265.792725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.792731] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 265.792737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.814822] binder: 30443:30459 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 265.814849] binder: 30443:30459 ioctl c0306201 20008fd0 returned -14 [ 265.848005] FAULT_INJECTION: forcing a failure. [ 265.848005] name failslab, interval 1, probability 0, space 0, times 0 [ 265.848134] CPU: 1 PID: 30469 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 [ 265.848142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.848148] Call Trace: [ 265.848164] dump_stack+0x194/0x257 [ 265.848184] ? arch_local_irq_restore+0x53/0x53 [ 265.848199] ? perf_trace_lock_acquire+0xe3/0x980 [ 265.848215] ? depot_save_stack+0x12c/0x490 [ 265.848241] should_fail+0x8c0/0xa40 [ 265.848262] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.848272] ? copy_mount_string+0x24/0x40 [ 265.848284] ? do_fast_syscall_32+0x3ee/0xf9d [ 265.848294] ? entry_SYSENTER_compat+0x51/0x60 [ 265.848321] ? find_held_lock+0x39/0x1d0 [ 265.848354] ? lock_downgrade+0x980/0x980 [ 265.848398] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 265.848412] ? __check_object_size+0x25d/0x4f0 [ 265.848425] ? rcu_note_context_switch+0x710/0x710 [ 265.848452] should_failslab+0xec/0x120 [ 265.848465] kmem_cache_alloc_trace+0x4b/0x750 [ 265.848477] ? kasan_check_write+0x14/0x20 [ 265.848489] ? _copy_from_user+0x99/0x110 [ 265.848517] copy_mount_options+0x5f/0x2e0 [ 265.848541] compat_SyS_mount+0x65/0x1070 [ 265.848561] ? show_fd_locks+0x2c0/0x2c0 [ 265.848576] do_fast_syscall_32+0x3ee/0xf9d [ 265.848604] ? do_int80_syscall_32+0x9d0/0x9d0 [ 265.848621] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 265.848637] ? lockdep_sys_exit+0x47/0xf0 [ 265.848651] ? syscall_return_slowpath+0x2ad/0x550 [ 265.848672] ? sysret32_from_system_call+0x5/0x3b [ 265.848692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.848729] entry_SYSENTER_compat+0x51/0x60 [ 265.848738] RIP: 0023:0xf7f16c79 [ 265.848745] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 265.848761] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 265.848770] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 265.848778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.848784] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 265.848791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.859201] binder: 30443:30473 BC_INCREFS_DONE uffffffffffffffff no match [ 265.859220] binder: 30443:30473 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 265.859242] binder: 30443:30473 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 265.859257] binder: 30443:30473 got transaction to invalid handle [ 265.859269] binder: 30443:30473 transaction failed 29201/-22, size 0-16 line 2775 [ 265.865269] binder: 30443:30459 Acquire 1 refcount change on invalid ref 0 ret -22 [ 265.865300] binder: 30443:30459 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 265.872213] binder: 30443:30473 ioctl ae45 296d returned -22 [ 265.873473] binder: 30443:30459 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 265.873492] binder: 30443:30459 ioctl c0306201 20008fd0 returned -14 [ 265.893455] FAULT_INJECTION: forcing a failure. [ 265.893455] name failslab, interval 1, probability 0, space 0, times 0 [ 265.893470] CPU: 1 PID: 30480 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 [ 265.893478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.893483] Call Trace: [ 265.893499] dump_stack+0x194/0x257 [ 265.893518] ? arch_local_irq_restore+0x53/0x53 [ 265.893558] should_fail+0x8c0/0xa40 [ 265.893578] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.893603] ? lock_release+0xda0/0xda0 [ 265.893629] ? find_held_lock+0x39/0x1d0 [ 265.893665] ? lock_downgrade+0x980/0x980 [ 265.893714] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 265.893725] ? depot_save_stack+0x12c/0x490 [ 265.893746] ? rcu_note_context_switch+0x710/0x710 [ 265.893776] should_failslab+0xec/0x120 [ 265.893791] kmem_cache_alloc+0x47/0x760 [ 265.893809] ? find_held_lock+0x39/0x1d0 [ 265.893832] getname_flags+0xcb/0x580 [ 265.893856] user_path_at_empty+0x2d/0x50 [ 265.893876] do_mount+0x15f/0x2bb0 [ 265.893904] ? copy_mount_string+0x40/0x40 [ 265.893916] ? rcu_pm_notify+0xc0/0xc0 [ 265.893947] ? copy_mount_options+0x5f/0x2e0 [ 265.893960] ? rcu_read_lock_sched_held+0x108/0x120 [ 265.893974] ? kmem_cache_alloc_trace+0x459/0x750 [ 265.893987] ? kasan_check_write+0x14/0x20 [ 265.893999] ? _copy_from_user+0x99/0x110 [ 265.894031] ? copy_mount_options+0x1f4/0x2e0 [ 265.894056] compat_SyS_mount+0xd0/0x1070 [ 265.894075] ? show_fd_locks+0x2c0/0x2c0 [ 265.894093] do_fast_syscall_32+0x3ee/0xf9d [ 265.894125] ? do_int80_syscall_32+0x9d0/0x9d0 [ 265.894152] ? lockdep_sys_exit+0x47/0xf0 [ 265.894164] ? syscall_return_slowpath+0x2ad/0x550 [ 265.894184] ? sysret32_from_system_call+0x5/0x3b [ 265.894207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.894235] entry_SYSENTER_compat+0x51/0x60 [ 265.894244] RIP: 0023:0xf7f16c79 2017/12/10 00:42:16 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000c000+0xe1d)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = getuid() setuid(r5) fcntl$setsig(r2, 0xa, 0x1) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000003000)={r4, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x7}, 0x98) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:16 executing program 1: mmap(&(0x7f0000000000/0xa64000)=nil, 0xa64000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) gettid() mmap(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = accept4$ipx(0xffffffffffffffff, &(0x7f0000c3b000+0x54a)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000962000)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000377000)={@common="697036746e6c30000000000000000000", @ifru_flags=0x1001}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x20000000000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000476000)="2f73656c696e75782f636865636b72657170726f7400", 0x200001, 0x0) r2 = syz_open_dev$mice(&(0x7f0000250000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000f7f000-0x2)="2f6465762f7667615f6172626974657200", 0x200040, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000753000-0xb)="2f6465762f6877726e6700", 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000c41000-0x4)={0xfffffffffffffffe}, 0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000ef5000-0x10)={0x7, 0x6, 0x4, 0x40}, 0x10) writev(r1, &(0x7f0000d00000-0x10)=[{&(0x7f000093a000-0x2a)="290000001c0055e26effffffffffff000200e3f0010000007400000009000100000e0100aa645aff0044", 0x2a}], 0x1) socketpair$packet(0x11, 0x18000000000088, 0x300, &(0x7f00007f0000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000bf7000)={0x6, 0x0, 0x1, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000b05000)="2f6465762f6877726e6700", 0x800000000000001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000105000)={0x6, r6, 0x10001, 0x2}) preadv(r5, &(0x7f00008f6000)=[{&(0x7f0000372000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f000018f000)="", 0x0}, {&(0x7f0000e4a000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcb}, {&(0x7f0000fa6000-0x3c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3c}], 0x4, 0x0) r8 = socket(0x1, 0x2, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f00002f2000-0x8)={0x7, &(0x7f0000086000-0x40c)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000967000)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000d27000-0xc)={r9, 0x0, 0x5b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000c2e000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000337000-0xc)={r10, 0x80000, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r12, 0xc0206434, &(0x7f00005ed000)={0x800, r7, 0x10001, 0x1f6}) mmap(&(0x7f0000000000/0xdd1000)=nil, 0xdd1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r13 = socket(0x0, 0xfffffffffffffffe, 0x0) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000610000-0x10)={0x2, &(0x7f0000615000)=[{0x94, 0x0, 0x0, 0x7c}, {0x6, 0x0, 0x0, 0x0}]}, 0x8) 2017/12/10 00:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:16 executing program 4 (fault-call:2 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80005, 0x20040000000000) getitimer(0x0, &(0x7f0000b3d000)={{0x0, 0x0}, {0x0, 0x0}}) stat(&(0x7f0000784000-0x8)="2e2f66696c653000", &(0x7f0000d26000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = perf_event_open(&(0x7f0000e52000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f000009e000)="646e735f7265736f6c76657200", &(0x7f000078e000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000943000-0x1)="00", 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000656000-0x43)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x43) r2 = open(&(0x7f0000e73000)="2e2f66696c653100", 0x100, 0x10) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00007b6000)={0x9, 0xb, 0x0, 0x7, 0x20, 0x20}) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00008e4000-0x4)=0x0, &(0x7f0000fab000-0x4)=0x4) clone(0x2000fffc, &(0x7f0000f23000)="50", &(0x7f00001f5000-0x4)=0x0, &(0x7f000079e000-0x4)=0x0, &(0x7f0000f2f000)="06") r4 = getpgrp(0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000725000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f000016f000)="2e2f66696c653000", 0x0, 0x0) fanotify_mark(r6, 0x8a, 0x1, r6, &(0x7f0000993000)="2e2f66696c653000") openat$ptmx(0xffffffffffffff9c, &(0x7f0000161000-0xa)="2f6465762f70746d7800", 0x1ffff, 0x0) perf_event_open(&(0x7f0000b90000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x533, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x80000040fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x100000000) prctl$setptracer(0x59616d61, r4) write(0xffffffffffffffff, &(0x7f0000df9000-0x27)="", 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f000078c000)={0x5, 0x0, 0x0, 0x0}) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000b07000-0x4)=0x0, 0x4) sendto$unix(r5, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000bd3000)="2f6465762f72746300", 0x2, 0x0) connect$unix(r5, &(0x7f000022d000)=@abs={0x0, 0x0, 0x0}, 0x8) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000c3e000)="2f6465762f70746d7800", 0x0, 0x0) 2017/12/10 00:42:16 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x408400, 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000003000-0x8)={0x0, 0x8}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001000-0x6)={r2, 0x5}, 0x6) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000004000-0x18)=@random={"62747266732e00", "70726f632d00"}) 2017/12/10 00:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000018f000)={0x5, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000bf4000-0x9)="696c6c696e6f697300", 0x9) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) [ 265.894252] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 265.894266] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 265.894273] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 265.894280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.894287] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 265.894295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.826974] binder: 30443:30445 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/12/10 00:42:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)="2f6465762f6c6f6f702300", 0x482, 0x2000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x1f, 0x0) r2 = perf_event_open(&(0x7f0000def000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xae2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x2001, 0x4a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00002fe000)={0x3, 0x8, 0x100, 0x81, 0x542, 0x8001, 0xffffffffffff7b73, 0x7, 0x3, 0x9, 0x20}, 0xb) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000ba7000-0x9)="2f6465762f76637300", 0x2001, 0x0) r5 = open(&(0x7f0000345000)="2e2f66696c653000", 0x1003d, 0xc2) r6 = syz_open_dev$vcsa(&(0x7f00006ab000-0xb)="2f6465762f766373612300", 0x2, 0x80) getpeername$ax25(r5, &(0x7f0000ab4000)={0x0, {"00000000000000"}, 0x0}, &(0x7f00006f5000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f0000001000)="2f6465762f7572616e646f6d00", 0x0, 0x1ffd) fcntl$getown(r0, 0x9) r7 = memfd_create(&(0x7f0000bde000)="2f6465762f76637300", 0x3) r8 = creat(&(0x7f000092f000)="2e2f66696c653000", 0x100) r9 = syz_open_dev$loop(&(0x7f0000eef000-0xb)="2f6465762f6c6f6f702300", 0x5, 0x2) geteuid() poll(&(0x7f00009ef000-0x48)=[{r9, 0x68, 0x0}, {r5, 0x108, 0x0}, {r8, 0x630, 0x0}, {r8, 0x8, 0x0}, {r3, 0x104, 0x0}, {r3, 0xc00d, 0x0}, {r7, 0x1620, 0x0}, {r4, 0xfffffffffffffffc, 0x0}, {r2, 0x24, 0x0}], 0x9, 0x266) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000001000-0x8)=0x7fff) r10 = memfd_create(&(0x7f0000438000-0x2)="f838", 0x2) pwritev(r10, &(0x7f00006cd000)=[{&(0x7f0000986000)="95ca7ab4e840ee4f6dcd0af7c3e809e456ce22fbf93dd11dcfca078b168f311f45223b6f68e06853a1100030c74f90c5d8683b0f914f71db08ad3ce1a0966e25ae2c32a9728842316d37074750ef38fe38b716b89de6ac2dd2c50ac633c80e8e9110d773865188840b4f7ef1121c8857ed03a6a0711b5e8871fd5e32e2415fd860a076b5b54037adf7b99768bcee20174918a406ef80b2c717d34ebd38347ad19d5b9d03a656b017af9cc66b8d01f2e044914f20f41bf08042164ed35ccf9f1587ad26a0068f0135bb401b8c523386648623efb4a5708df764a8c84034b66462351b", 0xe2}], 0x1, 0x80000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r9) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0186416, &(0x7f00005cd000-0x18)={0x80000000, 0x4, 0xfffffffffffffffa, 0x4, 0x1000000000008, 0x5}) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) getsockname$unix(0xffffffffffffffff, &(0x7f0000620000-0x1002)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f00000e3000-0x4)=0x1002) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000de7000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000090b000)=0xe8) pwrite64(r9, &(0x7f0000726000)="d362371a6b7ca947fa8f27e92178e03bcf55d80c848e1facf010a51c6274bbb746c9222eba43003b1598cfe0abf6ad5cd6f77ec899ba889bf519ba0a33334cc04e0d37ce7616d6d038ad9e072782a5784065924df5f7799191837c62503162520a444c577024b0f226dc85be8f33bffb1e4aaf838b387ebdac0c69f5d76ed4f564426376501fa1792e4f4000fdf06958093d7f2b8391c4c617384ba1450d16dadb4a24f2d8f3406fff7e97ce7c61191013896739870d667333b75ab9d5d425623a937441e5f1684ae084d4f84c031020001fef96e446cf81cbbeb8d3abf5f02c4ce89cdb743570f7248b3c6793e420b076a98c99c323b57dfc39a0bda7feedfbfb06c288d450a0422431aa1af4098b1dc09c083c278ffd28d435f40d2bfe9488983dc7b486767504fd4c77c3ed3253d74e0402a9e232061edcc367de831cd62d39a3f4b2fc5e63f94e694c2a91906688cc4969610521650997a3bb1af9d6413a0b6b7fdc95fbd133d12bb6a385071fb06da59c88db1b67ac160b73944b52335ca3b153735995c04740866d0119c6747ba91e43bda4749c27bda785ed03c733b5eba5ad850b03ff35f8c1d25d521fdb8917a5796553c824959af842849202819488a798367655b28003b1a0a68531a44e4febb81af0e06595be3389fe7ff6d1e1fefe9e087faf6e117b70c94e509d932cc70137b136f93529d028286aa4eeb244c3a6b7d158ea4b7fd5f3b88eb856f505389969e22b66084581065355307bd8c7fdb15be378f2de3536a046e99de5e74e8605346c270001ec7b015da4916ab03f3e37d6c0c54e097631e4dbc9e8d3b285a5d0dbb5e67b572bbe078397240f0c3aea0364d4ddaf686099bf8cdd92d9121190e477046ab4a7c1437647181740bf667a90d357cbdb567d45e6ec1e8bf9af0a53217aed2de230b560fb91a0346586c389e0edb9d47a45d5d55cafad70a940741b7df2a37d859590b87523238eb471e5cd64fde98904bb4a711fb7d1b752fea0de372a236ff4125e8d6ca6781459270991b261083a915994e4ff3486efe84fdb1f7d29229a44768549c6120e5c67776f76ecf310a4776934a767f6a5ccbdffc5cd2ae03fdfbe5e7f362fad8e63ddb83099adda4fd493b1e9c955fea05840c695e6ec473f2a4774aaf4ef74f2df8d11343722e0a8a2c1f82578b769f089b11a27e9cbc799e37bcc05b0d1a182c7d5ceae8b6759af0687bd7b5c682178a0af2cccd6f33f8c63dbd83c968dccb8db2762aa4e5799fe7adfb9a50eba39344a6a170e6b7c3ab68ad2fa3340acc46f3b6126e9ad48d4764c91db7e1fad2522319bed530df242f3db3984dc789076a883b2e34bdf9b59889f4fb866bb6e18a92bae65df8b6aecd804f1b1d256e5b30224ebaea15132ab84b82f3c52e4fb6ec03e89d5d028d46f067dd6b9173c6aec374e229d3a80cd03342699796f471c24642e37f08f14ef5147d9c80c032de9ec88a74d52876c66615695913f6131d7d632c0082c081b51c7ca2f3a296f1c52547e962a22c59385f5c7ef9859f01bbd3dc48f72bad8356ed417a1d7c1c84da0210ddf3bf6ddcda09c20842ffaa1f869605ad8bdda0747f54a84160ecc3f82b0be51f37977297d32d7b77e42110edddc77699dc376e8af82c4c0fe7bcb34a66c5fcb9efba95645413d000493482b171b76ac43eee6ccba88febbf2a3bc9a85a34449313dd6d85671c71fa243991d9b056d098195c37330579fc43d4710fcdd03872fe9eb15e0705fc2b8b45a6ef6b842043efbd4f502c3cb1fd867e9e59d4e759ca325c54d5fb0158e4380c3ac8e73eb175de18e96b8b8737080babc2a32e46b40b2199f1dbef312d9db4b94137e23e4bba4dba5ee30bf9789d14ba7efcdced84feb8ce711bdba7c5a025b89ce0d6f50d94366e6054142bda88f0b651ea3b72dcc9a2c07e130c5297e798e0a0c68304445eecbde01c408ade07cdee2ae31d1a5f7c43891ee73b521441e18c7f7969580501792ba0f5e16c57101fff3ec05fe51cf56f7aff7ad0b902a6658f7a143ec0f5ce87cb82293210ddb207bd098f8fdb99e3e82129d713313380442af1e1902a71be5f95e0aaccc96fd2afb7a7f30ab67bd4930e44011cbc95519a3f6ec1fb61638d19a01f9805daa154d8aae8eafa37cb23f9f22bda34a97426b694268054a7398cd3e13185a51f208697d059f241fea939b0fc4da765311fb0fcf7222e5a1fd146b617e7fa829e0ebddccfc676963d6e7df8f89463f636a1c420187fad4c83d988d7561b73a912a83d8d815a00a785b8827660420860e45f1ce2985d466bfdb91fad21c97f620167057429b0e3a521ccdec3b1d656e2a6904750d1e44df08a7d8b7cc649909c57ceb7358413714e8e9ffe741b57fa3e30b8d609a58e408c33b165fc9b1882d1be0a7cc3e1ac0efe40e1d3c247296ef33be2d604f767191615d1377fc5c1ae4677d984e130fefa0c9c1f90f5f718888dfa34e7c6c0c895d0c22d15b0ca7ccef948f8a54956f2b938b16e2d6cc44573fc29aaa19e0d2daa5cb1929f62e85ee782b4952350e26ddeea88fbdca0b14ec6fcc1812abac17223b298cf31531d2380acdf2d53856e06e00e9282cfe56765eef08ec989f383bf31fac6715e3b3848c090b8243832be624484965e0bd52c2c1674f1f6e039b85a313f690b869b5fdbcd8f97fc6ab8a53b8b9d2008eaa9aefdb8a08f9f1bcec5519311f0dc0a8922a4e2506b43b4f1cfdec13b85893649ede215486207e47fc274fa665c22d65cd47f7c2608c9b99c6b9fc9b358fd64266aae24d579a5936d74a83f0332afce81a25369e9d133b0c42fea7433759214b08ead0cf06ab9bb0160aa584211ad88cc96ecf9e4e51a54e70591287afdc78c80b0454d87fbff6e34b36b318a3e8fe5e8fefd7794d9dba26ea79cbd75e6957ab08cbf7228b634d95e42d3fe095c475b72816c1b805c9430d262c47cda3e7d524f971e404d3220c792f4300251621fac7ff50f7bb9a1d39234ec6ea969c5fa7b5067127d6a14eeeadc694eb6fbbe1321fd16b1d125a5889eb083ba9c2fd892bc83b8f7310eaf58e951ead395ab6e76bef291a98046bf3d7beb853be7d0806ed5032d869b19022f63cd617d1b55150e508c65618b37e09f8575c9d32c702ee0a9369eecd0507525ac51f9b20bc76c78aa85ffda10264c7f29bd1e584d50d0017380580936108a188492b87deb0eb0f11eeb0a2f3964bf21ff4f24d1f8e6e200219414911b3aadcb13fa75461d5c3c53b427a93326fb8278c34fd0b269726c02422d126de0a387afd0a9c5c0a2d3572e0530822b05e9f24b261a5d3cd08a18fd3d428b09fa05c5446b01aaf8954f07543e2cbc66179945d77a1e85bd68b3bf9f8c70b5690b95545371af5286cb6b0c555d63bf4e9531ff383fcd3a37294fe79ac3e34bddae92b6c1b35032b76d34ff19e5c9a679a4003c02ee5768cad2282e3e5c2668809a0f1049310f9ac736ae41deaa1d5bee27534d3a62223fb601b1a310e38cb87be68d3ec0d93dc00b02857bb579f9026c7c685cdfee518d754f2bc047225983b88a9fc5683dff1eb17a3e3cea9a96253a59a1543f0a546179b96087e74b0ccd2f679b6ca391c1c41f384509b86d060380b713f467578f8a3ef97659908a2ed5ce0890a125e637f80fc59c123a83f4808c47c1e73874008439f418656bee93dd9f2b60a3bd4c86c4a58ef23791b9d42f74eeef201a3b60a2c363830683e4ee61f9ee0388b41c3d79c737974395787b6e2d0dd56106b2193c100ca1f07715ea1331675b76d89682a138318587330d454f576e0b26f7a2a624af91abb251697ce7e6b6e630f395e2876b1c4447daae4125d43a4bd2a27e1d7e4420fc98cd3f012fd9483c422806db60f6a1cfd4d50e0a3e89a18c05cd816ce86c3aeb28383862f0337b1bc14631c9251310ada27f49b3f3040f49dd4143c32b0681faad11edb82cc0536bc0b80c7bd18ccece7ee863b06e4867483ae2296b94f09f6723a2ef0be2e3e12c49a0b9513185f655eef4168a08e5f4551fcae2f490356095ad95caebfdb69cd1da7bcb2c8e7f48a5198456e8b316f3ea92930c6158bd9c61025935de654abf9caa3404a0a6b02fafe6babb8e2198f5708c4bf3ecffe339a39985b29ae95ed0858541b077e9eef353d005b7a815291b69969cf2e3cf71c25a72c485885f496d234f81f94d9ec9fe98ffe07e15d2ff8ffccdbb022b9ff01ecbd3c44b63ba21699e9f5441d09439af2d41f620ee5fb50b477481f541138a36995a98b849d7ed1c685c592db41455a12a050e01dedc9443a72eaf9d9a94074b4eebfea5b2349d131f830e40ee8a51a4d3d9572f49964423909632ea3c21d34e71ef62752c2c44c59609041ff976a7860b1cadabf1686f5c3e0c27f236c670b1b6ad114d9a329375c9bd5db9f1b60a739d80382be0265767e110e4c03ca637dfc09c548114181ab2508e3454c08090f2a6296f5f395f1c6eb3f401c39edfa036793070e9815c2a2996a66283fbecb58f5bde2d8a33172110c7cdf95244b1ee0758cfbea995373099cf26d323b7994e73f9ec3c98b50d4e288d3d8ae29c11025cf52cd4dee01fc10308b0d9e88bf2d78762615c4fa990c7f6daa5417d8de090ebafa467d0441fc70082201b049679550fcddc57ee07a135e8435ffeff5263b601537b6e8ae9c5938a84aac49224f5a05b83299a4fcb867ed8f5b2011bcf32bb5e4da108684f12ee8065b8ad0e4b32d3932346ed6cb3a5ddd0db639a610865a192ae4345009c24d38b1d744de12759e72e5435f6c530ae31dd530af120e508480520af6df048b079b328a91d5091b975065eb90004ff6c7f62ed42b79ff9c11ff82649086b421d4048a854ad52f524d606257d56fae267407f4961996714314d500041991987f9b402eb338925d0b3fa9310ed16a75cac2b1b2c5223448c6525bf7643120b0dffbcdac2c1422b995c40b243bfd862f07915418f54b4b6d86f3c7b20f823e72908614d8c2c55c9576cd3f4bbb55c0fe56d3b30972f22fec4183baf828251d03d411e6937c5594c9e1c524f0143f9846de94590483facf02215147c2f4764fe09fcf01d784a03d1bff8d1d89043c1f6b7f42e2604e7adfe11d5696cedcbff373490b2362d24814e856e06db97bc4523dd30788aa9cd11e8753e95361a52dba909cdb14160515bdfab46ad1bde77ceb7869cd40a596b8359827507e6e5b12e2c313432157bf152b11691472b14c3e509d3a1697e54c056d42975e68ca336caf12d75ed0a3c971b9b1d1eb4eadb651d893fdf51a513d003b5cc1893cb2f756e2abf776e8ba950b6f3d52d67cbd8d5a25b6a2a5e70ced484e0fb3992c9e2b49959bf2aa2bbe7f1d8a0a39dee98495e72570e4a19390b758eaa7b45743cb47a5ef1372606fa577a42da88128c358bbf1b06ed7b69aba6b2b7f55d9079477bd622d9a42eec5e41121838e2f9ac86dd8b871e8ec1f3dac2b9b791c250e4817d081406168f04a0561ffc447776e5373935a9f6e87a78f5961c23e3a23b6f6a5706373ee960bafd256e5f46de258a285fa4a2a72f88a6a703617d1b025694fabce6d01dca651d49c2f669de8c66082b2dd31dd1c21f150d7906626b16c823e57e59c4812ea72c86f2a2b18e3e00943ac29a0bfbaf6f5330152db800935523d59a49556639a9928a4e3130a57f311ee2742f8a5d973eda5bce50f0a0b4f5258e14e140e478aa72f6c56c378a05d13fb83749af7bc0ffa9ec1d8158fcd1e0e91b89e267fa50c25", 0xffe, 0x200000010200) pipe(&(0x7f0000bf3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r9, &(0x7f00001cd000)=0x0, 0x7fffffbb) 2017/12/10 00:42:16 executing program 4 (fault-call:2 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000055000)="2e2f66696c653000", 0x2000000000000000, 0x1) r1 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f000000c000-0xb)="2f6465762f6c6f6f702300", 0x4000000000024, 0x800000004302) r3 = memfd_create(&(0x7f0000d0c000-0x2)="7b10", 0x2) pwritev(r3, &(0x7f0000623000)=[{&(0x7f0000ae7000-0x1000)="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", 0x1dc}, {&(0x7f0000767000-0x3b)="86dadbf8c242682370fbe4307000060400c6fbf9c421c6b753003a18c8be044609003ad34a9c5fe73dac94530000000000000000866106089a727a", 0x3b}], 0x2, 0x20003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ftruncate(r3, 0x8) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f00008a0000-0x8)={0x3, &(0x7f0000b50000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000699000)={r4, 0x2}) setsockopt$packet_int(r0, 0x107, 0x92, &(0x7f000076c000)=0xe2, 0x4) mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x3, 0x2851, r2, 0x0) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00007c3000)={"d84660a96ae4a6d94fd4d67d5f0ae4fe", {0x4, 0xffffffffffffffff, 0x4, "50bdd4eb52d8", 0x401, 0x0}}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000b91000)={0x8000, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000600000)=0x0) sendfile(r2, r2, &(0x7f0000803000)=0x0, 0x100000001) [ 266.826992] binder: 30443:30445 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 266.827054] binder: 30443:30445 got transaction to invalid handle 2017/12/10 00:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x100000131) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:16 executing program 4 (fault-call:2 fault-nth:6): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:16 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) r1 = getpgid(0xffffffffffffffff) sched_getparam(r1, &(0x7f0000000000)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002000)="2f73656c696e75782f6c6f616400", 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000003000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x0) [ 266.827064] binder: 30443:30445 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:16 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000000d000-0x10)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r3, 0x8915, &(0x7f0000004000)={"70cec74075ba3a7fb0c774b4c434146b", {0x4, 0x72, 0x186, "54050b7deb94", 0x5, 0x0}}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x0}, @reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, &(0x7f0000008000)=[], &(0x7f0000008000)=[0x38, 0x18, 0x18, 0x38, 0x18, 0x48, 0x40, 0x0, 0x0]}, 0x7}}], 0x0, 0x0, &(0x7f0000000000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:16 executing program 4 (fault-call:2 fault-nth:7): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000471000-0x11)="2f6465762f7161745f6164665f63746c00", 0x200003fe, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x40000000000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00003bc000)={0x0, 0x80002, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000f59000)={r2, 0x7fffd, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00006de000-0xc)={r3, 0x80000, r0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000a25000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xeb8000)=nil, 0xeb8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000eb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000a5d000)="", 0x0, 0x40000020040040, &(0x7f0000e7c000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000ebc000-0x4)=0x1, 0x4) mmap(&(0x7f0000eb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x11, 0xa, 0x1000000009) perf_event_open(&(0x7f00008a8000-0x78)={0xfffffffffffffffe, 0x78, 0x0, 0x0, 0x0, 0x8627, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x46cb, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) r6 = perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup3(r4, r6, 0xffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000e7f000)={0x2, &(0x7f0000109000-0x3c)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) r8 = socket(0x3, 0x4, 0x83a) sendto$inet6(r8, &(0x7f00003a9000)="4446", 0x2, 0x0, &(0x7f00001f7000-0x1c)={0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, 0x1c) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socket(0x1, 0xffffffffffffffff, 0x0) socket(0x7, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000b62000)=0xfffffffffffffffb, 0x4) 2017/12/10 00:42:16 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000003000-0x6a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x6a) [ 266.852746] FAULT_INJECTION: forcing a failure. [ 266.852746] name failslab, interval 1, probability 0, space 0, times 0 [ 266.852759] CPU: 0 PID: 30496 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 2017/12/10 00:42:16 executing program 0 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002b7000)={0x0, 0x0}) connect$unix(r0, &(0x7f000064e000)=@file={0x1, "2e2f66696c653000"}, 0xa) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000c62000-0x18)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) clock_gettime(0x0, &(0x7f000043a000-0x8)={0x0, 0x0}) recvmmsg(r0, &(0x7f000097a000-0x60)=[{{&(0x7f000098a000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x58, &(0x7f000028a000)=[{&(0x7f00006f9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9e}, {&(0x7f000045e000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xee}, {&(0x7f00005b1000-0x5)="0000000000", 0x5}, {&(0x7f0000c1c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfb}, {&(0x7f0000a5d000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4e}], 0x5, &(0x7f0000d0f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa3, 0x2}, 0x6}, {{&(0x7f0000faa000+0xfa1)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10, &(0x7f0000167000-0x20)=[{&(0x7f0000d1b000-0x6b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000dc8000-0x44)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x44}, {&(0x7f0000ed8000-0x64)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x64}, {&(0x7f0000649000-0x93)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x93}], 0x4, &(0x7f0000dd9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5c, 0xb39}, 0x9}, {{0x0, 0x0, &(0x7f000036f000-0x28)=[{&(0x7f000041d000-0xd1)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd1}, {&(0x7f000092e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x32}, {&(0x7f0000f5d000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000c36000-0xa1)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa1}, {&(0x7f0000d16000-0xa1)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa1}], 0x5, 0x0, 0x0, 0x9}, 0x9}], 0x3, 0x40002000, &(0x7f0000fa9000-0x8)={r2, r3+30000000}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000efc000)="") setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00003a3000-0x10)=[{0x0, 0x9}, {0x8, 0x3}], 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000874000-0x98)={0x0, @in6={{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x81}, &(0x7f0000ea7000-0x4)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00009e5000-0xa0)={r4, @in6={{0xa, 0x2, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0xfffffffffffffffb, 0x9, 0x4, 0xe4}, &(0x7f0000bce000)=0xa0) 2017/12/10 00:42:16 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000968000)="2f6465762f696e7075742f6d69636500", 0x0, 0x2000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f000062f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") umount2(&(0x7f0000290000-0x8)="2e2f66696c653000", 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c20000)={0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0xc8b, 0xffffffffffffffba, 0x3, 0x3}, &(0x7f0000416000)=0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0x1}, &(0x7f0000000000)=0x8) r2 = getpid() ptrace$setsig(0x4203, r2, 0x3, &(0x7f0000000000+0xc60)={0x1a, 0xfffffffffffffffd, 0x4, 0xd1a}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000224000-0x8)={0x0, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000c68000-0x4)=0xfffffffffffffff8) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000f9a000-0x20)={@generic="92f2c2f9b324f134045a9c8acfd81292", @ifru_flags=0x9ffc}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000e5000)={@common="697036746e6c30000000000000000000", &(0x7f0000076000-0xd0)=@ethtool_rxfh={0x48, 0x0, 0x0, 0x0, 0x0, "73ed28", 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000ee4000)={0x6, 0x7, 0x3, 0x1, 0x0}, &(0x7f0000a2b000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c9e000-0x36)={r5, 0x2e, "175964f434a15c761347ac02241fa297dd92b4fc638777b61796ae0a9d7b760a628384236bde6afaa892d6e81662"}, &(0x7f00007b8000)=0x36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000bb0000-0x28)={r0, 0x7f, 0x1000, 0x96, &(0x7f0000547000)="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", &(0x7f0000bf5000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80000001, 0x1000}, 0x28) fcntl$dupfd(r4, 0x406, r3) [ 266.852765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.852770] Call Trace: [ 266.852785] dump_stack+0x194/0x257 [ 266.852800] ? arch_local_irq_restore+0x53/0x53 [ 266.852831] should_fail+0x8c0/0xa40 2017/12/10 00:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)="2f6465762f6b766d00", 0x0, 0x0) [ 266.852844] ? __free_insn_slot+0x5c0/0x5c0 [ 266.852862] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.852878] ? check_noncircular+0x20/0x20 [ 266.852898] ? find_held_lock+0x39/0x1d0 [ 266.852926] ? lock_downgrade+0x980/0x980 [ 266.852961] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 266.852976] ? rcu_note_context_switch+0x710/0x710 [ 266.853005] should_failslab+0xec/0x120 [ 266.853018] kmem_cache_alloc+0x47/0x760 [ 266.853036] ? lock_release+0xda0/0xda0 [ 266.853055] alloc_vfsmnt+0xe0/0x9c0 [ 266.853069] ? mnt_free_id.isra.21+0x50/0x50 [ 266.853088] ? avc_has_extended_perms+0x12c0/0x12c0 [ 266.853107] ? avc_has_perm+0x43e/0x680 [ 266.853135] ? find_held_lock+0x39/0x1d0 [ 266.853163] ? lock_downgrade+0x980/0x980 [ 266.853176] ? __get_fs_type+0x22/0xc0 [ 266.853187] ? selinux_ipv4_output+0x40/0x40 [ 266.853201] ? module_unload_free+0x5b0/0x5b0 [ 266.853213] ? lock_release+0xda0/0xda0 [ 266.853222] ? _cond_resched+0x14/0x30 [ 266.853238] ? selinux_mount+0x2bb/0x4e0 [ 266.853257] vfs_kern_mount.part.26+0x84/0x4a0 [ 266.853272] ? may_umount+0xa0/0xa0 [ 266.853282] ? _raw_read_unlock+0x22/0x30 [ 266.853293] ? __get_fs_type+0x8a/0xc0 [ 266.853314] do_mount+0xea4/0x2bb0 [ 266.853336] ? copy_mount_string+0x40/0x40 [ 266.853347] ? rcu_pm_notify+0xc0/0xc0 [ 266.853371] ? copy_mount_options+0x5f/0x2e0 [ 266.853384] ? rcu_read_lock_sched_held+0x108/0x120 [ 266.853396] ? kmem_cache_alloc_trace+0x459/0x750 [ 266.853424] ? copy_mount_options+0x1f4/0x2e0 [ 266.853444] compat_SyS_mount+0xd0/0x1070 [ 266.853459] ? show_fd_locks+0x2c0/0x2c0 [ 266.853474] do_fast_syscall_32+0x3ee/0xf9d [ 266.853496] ? do_int80_syscall_32+0x9d0/0x9d0 [ 266.853516] ? lockdep_sys_exit+0x47/0xf0 [ 266.853527] ? syscall_return_slowpath+0x2ad/0x550 [ 266.853545] ? sysret32_from_system_call+0x5/0x3b [ 266.853563] ? trace_hardirqs_off_thunk+0x1a/0x1c 2017/12/10 00:42:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) recvfrom$llc(r1, &(0x7f0000ad5000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb, 0x10000, &(0x7f0000827000)={0x1a, 0xfd, 0x8, 0x2, 0x3ff, 0x20, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x6) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:17 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000001000-0x4)=0x4, 0x4) stat(&(0x7f00003a5000-0x8)="2e2f66696c653000", &(0x7f00009d9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f000013c000-0xd7)="", &(0x7f000060a000)=0x0, &(0x7f0000778000)=0x0, &(0x7f0000001000-0x1)="74") socket(0x131acc1691da6b92, 0x801, 0x266a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000001000-0x4)=0x41f, 0x4) mmap(&(0x7f0000000000/0x61f000)=nil, 0x61f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0xfffffe) r1 = socket(0x10, 0x2, 0x6) fcntl$addseals(r1, 0x409, 0xe) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x300000a, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002000)={{{@in=@rand_addr=0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0}, 0x0, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) close(r2) mmap(&(0x7f00000c1000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x7, 0x3, &(0x7f0000007000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000004000-0x18)={0x9, [0x10000, 0x6, 0x0, 0x200, 0x267, 0x1, 0xa3cf, 0x0, 0x2]}, &(0x7f0000006000-0x4)=0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003000-0xa)="2f6465762f70746d7800", 0x4000, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x400000008, 0x30, r4, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x80f, 0xa12b, &(0x7f0000008000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$nfc_llcp(r5, &(0x7f0000003000-0x60)={0x27, 0x0, 0x9cd, 0xdbf6087fa1e1bd11, 0xcf3, 0x69, "b4b0cfa6ca97a570e131c20497b1e550e6afc12e5f3afbf0dc860fbe94327c5d4ffdafe187a2b67145e1f14c8b90936c426a1b195f4e3d3a9f0092f96d3cc2", 0x100000000}, 0x60) openat$rtc(0xffffffffffffff9c, &(0x7f0000006000)="2f6465762f72746300", 0x210100, 0x0) mmap(&(0x7f00001c8000/0x1000)=nil, 0x1000, 0x1, 0x30, r5, 0x0) 2017/12/10 00:42:17 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1f, 0xfffffffffffffff8}, &(0x7f0000004000-0x4)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000002000)={r0, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001000-0xfc)=[{&(0x7f0000003000-0x58)={0x27, 0x3c, 0xf675, 0x7, 0x261, 0x3, "85650142e72b28184c7fa1c8bc35a6644119b29e6b3f83334a669295c3783828cf8f2fb36647ff13681cc0a379b95b7fbd1158bfa30ee4cf96a29cb38b6389", 0x9}, 0x58, &(0x7f0000002000)=[{&(0x7f0000003000-0x8d)="1293976a54bc9373e7609246d3beb32edef8cf1bbd9bcf115cac649ce7a98cad3f2f956e3534e8011e0cf5b79d99ad3a779571ddf9e3d9d87cd3af607ff3e4ed89bad571879d1d394f0e850ba63d7eda97c245b439cf2eb9f46457d1bf056b736b55648aaa07e831f84aadbe054a5e7f3782e00c51f128458b9d970b44e0d22cc31653249737bee00ccd30186a", 0x8d}, {&(0x7f0000003000-0x6)="c3b1433103c6", 0x6}], 0x2, &(0x7f0000003000-0xb0)={0xb0, 0x0, 0x8, "04cce1f221e414a9684d51f68fbb85d67acc38153c784214b67892aa90e1597e0f4893a66c903be5ccffbe3da38907e583fc308a761430660b11529914f5cfacd49b87fe63162fd97b847af2d7b7a7e3b76c0552279fd892b2d193c3b0b12f27169a42498834e875beef823b625c6b318171b0cca46aa2f65b717f6a21bd014f1236d7555f019ce345f4cbc7ed9be2d9783a421a7a91077ecf90cd754ba180d3fb0c33"}, 0xb0, 0x10}, {&(0x7f0000000000)={0x27, 0x6, 0x1, 0x3, 0x6, 0x1, "d636065c12f31ddc9490f107b7643f98a8e9cb6d28e9bb3d285f1f100f5120bdd5644589efe9c29f40670499f698a7c0e86dac9c2d233125dbb94488a86117", 0xc313}, 0x58, &(0x7f0000001000-0x18)=[{&(0x7f0000002000)="f6c9", 0x2}, {&(0x7f0000003000-0x69)="22cdf611d57e2e1eb1157fe4c82ee9ee35fd6c4a3188c45a2f94c0d040490142756387ae442636132df5a566532e51f587c7c4c903d12a70dc0dc0b734ec4061efcd3a2a20f40b441500e0ab8f98d04f833679b23f29ac319226a2ab91ac7c9c8430b35c01c13e904a", 0x69}, {&(0x7f0000003000-0x72)="9b244e37e3eed541c203142d9af62a1fa1668bbba701af4b61b46f40a7f661978a9302bd8876d714722d8001ae2a969d253b62361ff0297e2b2be3dd14a3099e1f7173a7045746844f88581ece34ba6b6e3ad3ee069fa15d0b2afe273ba0655ea49ea16806d62433d39a3c18f3e92a9c9085", 0x72}], 0x3, &(0x7f0000003000-0xe8)={0xe8, 0x10e, 0x200, "abfdc8e8206d7d57d61a0c96838c519a177ed2fc8b22500adffa66f60a27271755910d000f2a0207a82a54cb80f979dd3e77f59e177ec7cc7fb04c17315be075860d2c2cfac47026a92d4ef54de69ee00100c88f6e6b684a64bc01cd3382d4e1e4926e4501d3d186b7255bd0e58bfc788d68b7bc56c1738021bbd9402308156b992901807b34d4ff7d87cca3269a636849fae7935c170afc47cac6a7a0c9a1ea807d34c5538c26e88baece9cdcbba2951b29a8a736dd3230d54131e06fc4961f94af1801678d404946257b4feb15de49fab2b703baa915201e46"}, 0xe8, 0x10}, {&(0x7f0000003000-0x58)={0x27, 0x7fffffff, 0xb13, 0x2, 0x10001, 0xbd, "6d6bc5e36de921edd3b123a2b41d6a7f03b6054954d2266699f0439cdf9e44b8f41262ed92d9b54977a350c2785010d393b96c1f1f3a542765ffb91109e963", 0x5}, 0x58, &(0x7f0000001000-0x20)=[{&(0x7f0000001000-0x73)="3f99bac3cd8803a6ace9e571826cd23edb580987e392a847a7276036716231b711196bf00079e6b762c18cf61753b54fe60e4a05e3f747aa152d12ebeb8144c06abc1cb58690c3afbf5f14ad71d93b52abd9c22aed5e2d6b1b24586f69d8c131330b27966d04cb0b748978db546dd178237e1d", 0x73}, {&(0x7f0000003000-0x44)="d5d9395d80ddc282bdce659f78f32056eea94c5e254319b8c09f9e22f9cc1e3b75ba18e8430c4b3ee857ce7f41d63b34464a9814bf906baca234a37ca1a9479919e28049", 0x44}, {&(0x7f0000003000-0x1000)="7332984bb78b679896a8c1828d2a8cf2239749b974b003533f5e672307e0d1072b168be53de615003c6114cd7a1ba71b42f12a7f2635066654a93813237fc4f6857ed686bd39ec38cd362fe78a316a0e073415a734006e940953eeda43ec4b71dc95d87eaa261aa4b282867b412c1e0824931718ce77c563d0b7f91efbe0a3b18e437fc036bfa0b44490b2b700f50d81ee7895fc17d1dcec5ad81d988368a1a027a8c8ce602d34ab93c4d7b43c7e33003ea96b4fe85e79b98a4bacdb24f6d4f464a91d8bc2bc8d012b9baddda1999bc2e0d77b0b111c21d769dd205ea2cbe65ce639018a43c606cfd1d222e58ad611e588216f6ac1536ffa9ad6befd4a3f3a487ff04511bdd2ef414fbfb37a684a61447937c8b7e066a368ff24e80ac8b3a5dbdd397592b42767070de87488424dd114cbc5eb17ce217b3ed355fb1ee292bb49da5b249a04cde906ae3987d0da08b69458b145376f2aa4b11c3b2050d55de38eb0bc52802738b774dd5e261540dcdd8e0ebb331d369e397c91445c3cc5b9d06eca9ce328eb61313282f0f14e4561e05cc2982ce3601577fd58f506122b408ec845bc0198a3c3bac15ddc44efd75ec0aa270a3b7116085595e10426096c4e979ef13f2252074b1f06afa19f622a0a051efa47a16436d8e99fec171df19e0c55b87867673ebbd17c3584dbb75bb14da4a886d4982ef65eeb5e3f3babe417bee2387cf6263b7535dce7d6ef4390756ebd586992259ae702a7c97bad40913deb0830aa18afbcd837544db45e4a2c2480734579003241b1ef9d221ff62c80d4803529e24b06c1520368c6d7e7148c8a8f35f0ec56fccde19ee6cc87f8cc91003e1229c6f1fdfcc2d6c33b5addbdae7b614f0725f975c6302a8bf6d345822df611e409a599a170034c9e76dea612d6576dd5125ff51b0a5df1c785dcba0315cd095865da981fea1c4d4e443488dd9044964e96fc5b6435991257c4154cb688dc22cf9d3f0088e59830ac0818688068368a56bc310957f0caccaeefbda8bf9a43cdbc94627908d723d68d2e309ece1de6ac8e44300d647e1097bed60ea2733ac452eecb514fa2f85c2b0a7f2217efe7624abf21e2e8460f99efee673383ca688749622201861de8577403d365288be12ad9ade9072524c1d8f90ebe2ad5bdecf70add5a7e7a8b7508b7bf6ff542dbb657e566be4b52b5c715c1fe039d95e45fcbc4d8b5e03268baa0d1df358c3a7335db62838c618fa9dd62663fc36042e88561213c2d419b8c29ee983299df47cdc47bc826afce90b170927f8b71cbd9c4f56913b6af6d848f20d747f876bf648bdd1e849db0161fd08f15c1fe6a8055d8b3ed2724fe524edb8b6d518635223b61f764bab1dd58721dbf84d2ac3e4c75a4462106f8205815324352fbfe31dfaff705fc232a7f2d8e5c69ec9ad4e52437b1fa5e7575d30031a60742ca581bb353914a9885fd16d58cc1b801b1c0eb8449215b35fae8b060043a4d5ab8f59e09d3e6f5738c685d69a2ea54c04014efea821a29ee809125516f64df92542f9399e1306e3a9bb3632f17a882d4f416feaaa027f274391ee3b5728e2bfdf2a9d4f2e12659ce891c414706cd4fbc489b5ae3cccbb020e4922da5104b8115b6b3f422aa6e0d06d466b52e74dc3d198bbb528f0bc7a145b1f109fad5520373fa456259e0664f849f03a3056a5271bebd147f6e8cf58c1b30ae64a2141b9265d8fd58483d0354143d2f4af8c8150bb6f948597aa469580948c35677f9e3200b23488ae45f4cfbb3f6195815741f8f341981daece3c5c50f548905184c7979b63adf086d02c7f590ac0c712e646740199a8e6d686adb6e6d67223c165d7259e9adb9d85405b157e58cb61ab9b7f5041909a8b347c96d29c23021cad6717a0e2b4d6f458eb99f00d67cc4c133b5ee7476502b3d350c1bf5c0286604b3d11005addf7439169a888a3d335a00cbfb81271aec59dd58bd4aaea331ab1ec765ee24c4bf1b00836eaef689cecd9952c9d1237b2474ddc9df976618e32fe430b9eae5f5d8fbb1946bc21e87ac703d5cb09d67c572fde3f83e4032135d54e4d66d24f2439df3a0b9e1c1d0ee9fbd0ff34bf27ef9a59c5e9b31c36475516b71e584f103a4e89227a14869e42030f892e6286a75a097951364a954b50f6aa587dca594f7d72d8f413e78c0e349ad059f25e8db8e3bb4a55f5d46b5b51db5ab5fc009efd591a0cfb1a9ca613f291e457aaf341cf72c95eb064ef94bd35edeac0f2febfa4700183a88623ece6a4cedaf4e5933da67a9ff33947c3fb3fd764b50c4f3d9bc303ece6cde90c757b37abd3f3c91748a11b66ecbf88237f5be8425e4ba050548dce00f8a62b03eb2bd3a0b8e15c1b2b9af65d9af06829d989c761af31e09b7a86478abb70dbffa4ed101cb475efcd93cbeda0cd7a551bb5d3758a58f25afeadb9a596f47f0c41f980ebb309e9ceba3bce13adff8d76c8591e2b480cc62203ecc0734ac99be080a3ec939db0699e5c2c20a8f603a213369eaae951139f267392cde70e6f9eef4cbf8d955130dabf12e1752b5ebacfecd3304dc14f811a7b3417b4166380dee9d619acaf34c00a427d615a6cedafa4a5612226a87ed74bd749355281a7420cf659af4feca7737c2844f7b2f6182f3266b2803debed5f2c79bd2ad91a18808a096443444aa82bd7e285a1ad6cbcd3cd4486c35c41b9cfa569904ce73bf70461ffd348fdb4a3b409d72fb0a62e588c2d22c1e6775ed5cd565873bc1e4fcd41e3dbf229d6e193adc26d3f82b1eb4a3e8ec1adaef0efa68cffa300cdee99d4e45ed40da469b6bb3a65b213012f686b34d9fad0ecd3b3f674e6601d9c781a056df7b451a7b1ab0821a1f2cf262472ba98a629ea07056ad69c03753cfa8b8e38a11cf8df588725a054f96a304a0f2506dc9f22c34fd0b36aaf8e41816215bf0a98b66df8f04f27bd10805f2a6bf74e70296a91f61c5101b5ebde52818daba8f60019b92c0f6429b7f7f5be6de08f5bfaf888579ba50046970fe14681847535cf1c3319e2b0b4d8bc37517b07760e84647e866e74cf952f956e17e87182fab769a7fe69eaaab5ee26116aa8bb6fbfa09aa7795184807edbaf74b70896d430a7a1f102510fb88b4629daa2e9962a26ae330699b7d722014ba69fed00090296aed218279b3728e69cc39a4616fbb1d95576846c7253598cbc04f6eab61690cf3051016fddd5fcc0847ce7d0f19ba892c5a4f5c6218ddb7f135a4a024d6d556dbf3e3b7495dec717222f4c7bc108f8e82c4ba30628bea2de017ea2bfe817f9ffa61975e8e11c442b93cd446e387d5f75c3ae980f8ec7171b97348342944bfadf42180c19fb45e2bffec22f8a3a8eb226a1aca8234047d6e8c54d472e79412bc78dbb99e7c507193a517761bf0437f6bfc3e09ef9065a3071f459d6b29582cb9c721543586c78216ed9ef9fa09549dbefe8571e4d6f8c115334c571e8b3de0de166f2a7adc2f0d47d164f1b9cfbf049ca48c6d467b4d14d9478a5565450147f344f3ecd100e0b2b6cb9777e7272a1a67f4372af5cae5e937a905c78f3e653d2fdd059e8844fbb411e20601ede0a66bccf27bc8e2421c44d4ba641c33054bda9f8601798d1b85b64bd02b12cb741c02f40b7fdbcfd2234cfb6bdaf2eff8c9ee792cd109a8703cd1859893be454c2f947525adae360b9cdf0082218b3b47bd4f5798b21a64c512678c223b8d68611ba607d99dabe35f3f25b5d868ac594c7250a305f52b990f2a8cefc992a36b16ec35040de6a5accbb14e7dca500f5b340764db5ca6ca70cf20699583f14ea25dcf18a1a0cab8fd54e88c92314b5cdf23212f574e5e870c7796ef03b0b3cbb2046946d69ec6f7b0f3967f11b041630521e80757f9964f9fe4a75961650a006c15bd6130398bdc52b84cd904b02178f66f3f5ac6de8eb610947491481a0b1c721bf4613838877c33a08c03a1cbda5271764dea7547118ceef33da4f937570e4bcd67ed4583b66b150b8ea5cb06392ae2cc05456ce12c01558344b2b5c7a57f535eb3e783d19518d1cea6d59c46e80169a6b63c877b36c3ac146b69e747519e9b5402467cb1e80e7d7da2ca59c2c6dcb13e367282fabc54f4404bb197d7cd2f6969dc01d368c0258e25fa576d07b4bda2ec958b2f66a44433bd90f407b99e96f2e20affc0154526c35c41912309cb2677e61c7d0cc2218b58b2b3138b7e5444ff880e44997218e1bc10f5057c578526b3461626beb258647401652a2529275d5448a15403960386e00487af79a7027629c5427629518ec163193a63c7a3aa1b824a0dfe594c4f738c09558ac4947129a7affbd377a763025963aed4d506bd9322317bea8e02b457083c0816eb838cbc544c145b32386f876bf5bd4570627d21510de66d39a30c22cb3b6c7c5cbb8f35bdb89ce2c4896f1d5ccd82b8b8a348d5e21011822e02431905c85940234b6485a3e62ea1cc7e2b762a0234ee9a85d49251ce412a7e01d68c27188c461c72c9bd283258562da5726996cbf780ef00c5fa0ad1800ab1dd15db50d09d90762845dadeb03261977330aaebd6c4ceb45f963487928d2457aa6e04eb98d768ecf42bad9172d9b24a8e9eb2f1e69de4cf0efbf03ca07b1b33a557042f254fe2f4763882915bad7cb0a9617356016e1d326af6a5d4f9dee316f30a8b164ba6cd9513ff893ea37a644cb8d45beb23f9583a7860232d11f5d2713d9f13f6f0e2bf85166ac3b50b38d2e42552543caf956a7bf683f9d211ae4495be15c140b8cfc2f592db73919168ad4bc85a1db640cdb49667d70150b219d51b4c06a3bee9d1248492f6b94c30fa87ca408f320d436d52787a5ab0520bd4732582e94081b9a700f5d4afb75e5713ad0cab022b0f6bcb420ec2f21c1bdb19dc27c2bd43373da194c7d7022fa0c10e0785e8a1c1efbc3984d8c7c7e02ee1f6ae138081ad288ea01d907b3c4873be050f1e14fe634537496f40ba2395176e73ac1a0bb42cd7eb3d0aeb83cc9dddd12cab82d8ea8bc2bf19579c930c2b659b5a6d92f6d024cf97929226fe916d8cf177eaa6387f623ec95e324ce957ff124de813d76599906ce02875b0bf9e136a4438b484c9a113145b1a08e9ac73be0b565f3c69e7ab3259c45e0e117e6cadbf1487d796237f78db7a1b96659fad5dbe9e90c1fa9b3ce7260bcb924807907fb14c85917c7e4e60066cbea62a412618ebc71b89897f97976e155958d50436affd666606ac940a54363ffe186272f501c445c44c5119cdce677ce727fd9ef7afd5b8bede6596e01a11b9f559370fade53fb2433c0ac901a68a48fc5ccf3d4d6ac65d83c22c3ff6acaf5c7d3aa2650d8e16b4e88310f4a0257cd27e66e109774bc86fc4a1528c744bf8cf6c2d0bb07dd76f5edcdd8897b33b5b5f50907fe16debdb97fdf1e0c3a0bcfa936547f1bd3219001a15ce94143d6afb15324b267896e972eb0033a275178a7709c5f783abb0dab3e6606b59dcced139633e0f7e212f0519b8d310e6cb5a0133c8e29179082341a79df79ecba0af95c38148b1a96529ec013903dd79cef6280a2064050aa82bbe90a71ef7ce1c924550e92c43bc9504db24249affaedbd3d446037fd54f58fe08c1ababfcc4c1564a0d0502f3aa3de686932cf21015ac36840f35307e8ed49f4762ef8dda2a6c3a9e03e2dd7aeb2ec9f9153a3a0d7c99fb0ee9f79a75d62aed9f769ad0a845157f7865575d720f521c6be52961f52f1320b09147158c28d4269327e24beb630fd0ab88996333050de01e987d", 0x1000}, {&(0x7f0000001000-0x59)="a3f794e3285847c19ccdd24611726271c84b9bb0f6c22d06a5d7052933e2937882a1448472054a0dae57e6981a3e56a2ef76b414b17b50498dacdf91e2444468909153badba28b4d94a173266607b6f02998c65a088f0a75b0", 0x59}], 0x4, &(0x7f0000003000-0xe8)={0xe8, 0x117, 0x1, "42125f6308339514c5a8bc9503c95ba3c16f30a6a16bf115ef30531032846104e65a0e2c99a5119153bc05bd1d48834120443a31c5299c6793589ba52423eeedab51935d90dac779851f535193e7800a5978cc400bc18908bb1147b5c130c4c48d14316924435070790dd9ea06dda07d3d4f6ab6b86470bfe50554e1b0aa76b20efde1872d796e122b1f83fc4be6c0b182442ae2657ef29b43b2f320d1dbba702bc7d0e4ecf4f0b366a5b288f950947350680f2125c8d6535bd0bb1c59c0893a2783b9f45520aa667b7c96d51d1c87eaa7b3a29abee3e21f61f8"}, 0xe8, 0x10}, {&(0x7f0000002000)={0x27, 0x100400, 0x5, 0x7, 0x28a4, 0x0, "6dda0d31ead7273a1def4f599dd66dce2a19c07582707c6334b5808f41690ae07a70371e366dc8069548cf405b42f57b368b9977fdad5b15e74ee2cfdafdb2", 0x6}, 0x58, &(0x7f0000000000)=[{&(0x7f0000002000-0x5c)="280067bca2799e7df5dfd122b1dde4f8b2de4e26ebbe1c293705459ec0ed6bd95b2f73a060e9776da318a0c978169a96b2d9653e939977bcba571afdcc8be70ea3ba8b5e4581f0bc5df7fce7ca67e5ebd9c0ea1dbce32dc543f8dec90dac085a0ce9370a27d6badc8769c7de53452822c9f8d989d0e17478823be5a6783ba146bbb5b94e47344b3b6aacd23aa20fbdb76907ebfa785f2b342116e72d4217bf3651eb8344d49b7658d30b3c827fac44fb72b0d8699b70be866ef4d07acc68fb7bf47ad0b02b965743870373241ae042bdbf555b46f148148b817fa5690902", 0xde}, {&(0x7f0000002000)="d2bdc5bb1dfb84b3d7e1ef6c9cffbf6af4094f83c6950f272fcbe3b3be99e6", 0x1f}], 0x2, &(0x7f0000001000-0x14)={0x14, 0x11, 0x7f, "82d2120aa479"}, 0x14, 0x0}, {&(0x7f0000002000)={0x27, 0x92, 0x101, 0x0, 0x6, 0x100, "e319f3f9a978c45ea05822eb729872b00afc9166dcf2a212cb84d77d1c3b1cfacd6ce41963e9fdeeef4e4cb4f010c26d391fd0764c3b90fbfe2cf7e3d4b73e", 0xfffffffffffffff8}, 0x58, &(0x7f0000002000-0x20)=[{&(0x7f0000003000-0x9a)="d8e84221eafa59ec4bbd6ec3b62fcf61c4a97cd8f2be9e5ba4781a8a2f245ac4aa26bc5a9a2062e99bf0c2164b15b9876b498671e13407a59490e5004179bc96865cc250a036e9c1bb052fa253691fec77edee7fefbaf0fd5e44aafd0fe88c06f76da1e19e91c1eeb70d29c17179ac0fb4a100782e72aede7647f6964472aa28f2189b4a89b984f177b8ff66d24ee5c0cb8e40afa7320920b9a3", 0x9a}, {&(0x7f0000002000-0xf1)="7350fd2cca1afc4ec244e20ad52f00c09d3f028b8413ac5f992685832f5729f282fd530acee35a7c9048cb68d6c88376766c7b9eefa8b73551d80b634d0856912007ab55f92ef91f14adacbb0b0521062726f494ea74de7c9cc9699371d735b3fe9e17ccc05bea52d4fdde2886c9c26b425430033fed76e267900648cd0937208bbfbca664a259a48a356462384712522008a30585674629bdf68527cd3e22d0950fd41064c4275c296f8d696ed022ee3419c24168c8dcd72f7d70be7de988b45a5624c02822ff78a867662fa4756e13c0280e54ce23b650f840a2916d950cf005e2bfdd82f8dbb7a951261f6031b53030", 0xf1}, {&(0x7f0000000000)="b500e6f188af9169a52847cf0165c98774c7df0fff6143e52c7df5d0a296d41d2b9ed18a5b04be4fd37e63fb208709c6844088932182eec11dfbd1811aa0dd0a8a4774fb8a01bc86bd97dd0ef0e521a136bb7cdb4ede680fd864331150cfd775dacd68024c7a6297818e4273e90bdc45fe6cd7287f612064b7d07dd383298f911d36eef1d8d1ff8d210c9b761c75d85f27ed64216c25c0ab49ec10973ac29fbf5471f7197ec6214501426e5457f59629b362dcc6fc7308cf1dcfc206b8e51c027261edb6c3936256bcc71d5be32c6321c923edeb3474adb8ea7904d3fcb3e7c05b1c2081f15fc8d033bde6e468eeee85a0", 0xf1}, {&(0x7f0000002000)="834e945b4e6931bfb6ff804c3a362760d9ed4cb78c5837894cffb370061594dc19b0551d16354ef11fba85d30c890c0f49cfec24ea97b14127960be2acfa4bcc7d6b5e881f63734efab7a5fb877f2a66f499e910136dcba35a62fc010073615c50a14688251ebe98172bc1f05f972deaf65a8329615fdb6acc25381eaf72d87b7a2335c090cdf8fdb83bde24f15a58d68a12e6b52487a266830b22660156c8a15575048d873966c42c0db0fff8c86e757b51cc5097659069bcbfd3011eb22484e8286c2737033fccd312c57ccc6f37d3a9bccdbce68ec713cf6fd77040", 0xdd}], 0x4, 0x0, 0x0, 0x4040000}, {&(0x7f0000000000)={0x27, 0x9, 0x0, 0x3, 0x2, 0x101, "1bf03b60ec6acf351742967210cff7ff54e4a3305fcef5e61329f0d9a4a4f783c7226579cec1ff66232f30e1c5927d65ce0bab41d65e71f09862ec393c2e81", 0x8f8}, 0x58, &(0x7f0000002000-0x18)=[{&(0x7f0000002000)="853d68e1d96e704148fde66c29b161f622a7e05c1c24c980f8fc83e2940f63e2f38923f3c6f6ca8d572683881f8cf3a1ff5ff970d022d878f904f5af87f7c409a90b7697ca4da198bbb055", 0x4b}, {&(0x7f0000000000)="67b813dd4698a80eb8363e2880710d5396618b588527120ce19c781f876663c92ddb46a6d78454b5ff62e73568de978c3c046a2c871c69b6ae9b200e1b11d27f9da54cd15838608d4a9069b856a5eda5c56218e73c1977d9348813967331c933ed7b975b78eaf5ba5441706ed65e61fd42a90049db7d735d5f90b8", 0x7b}, {&(0x7f0000001000)="1f5d6e84d8c71d23a6aae844eaf8597416a79d37064e3f8f40c15dfa25212f471c1c16393f365047107e3d8945314bb4826d2a9bf752b01b76f89a2e545a9865764e3f1beb306dc9bfaa79bd9d6baafd9c2d4907b94968dc56d82f86cfe2487f69f787663ca41b13e0c3a617a342a45fff2a0b6e4340bc46c210", 0x7a}], 0x3, &(0x7f0000002000)={0x100c, 0x0, 0x7fffffff, "b9693803e6e27ad1e082b9222602e282e26e0f530ac3e8a9276d9a32ff5a1037b3275328c508319c32087d175f3d51018e17b63caedce6a7aa512a477c931ec657eff671f7fd235b6a1f15b1d232d03c62c853a71c2ab93db11e05616eeed8c381e2c92bb5e90cd7cab64651bad2da2b9531621bf4ce843203ea9a9462d084b613bf66478f94422d9594d9093571fc145acfcab52ce42a8cd4e75186615d2f9c6baa887152d454e60d7bfa7ebcb5dc96d17cdc360627630d1242ec7c63626a636c9d2fd7871d361a401411fa1e786ea3b0959bd740d1408a816cce56259a2fecf31279612f8a04cc0ab0c754b72117083ba590983b598deca1cfd07901757f3e95d4df5fae6bd6b162736a1dbee29b28001b605aaac63e96f6a902b11fa9e47791465002dd2db7ae9ff1faf25883e32fc3a6c85288be7801bf0a80761b55edd9f852215f472574b1f44be9e6f7d195e203d256ae84d444bb0379d84cf0fab2414ab55eb53374b0e14fbe00a1d98e763e264a10a4725bc1912b80b6a839ef3ab9c2216e67852155a09bba9935b470eb9688925c0b9360ed7b8e22de6973edc8a202ff942dce14204404ad1cd99af7d060669e970308ae4d3edcc8d03cef2a8c3bf7cebf86365003e0806fa17d354563634ce6bc8c450bf6fd3763bbbbe3636366fd25ab427577d88eca10ad8fb41fbf501c3a2e957768ca3b1c52c0469241674954ef28fec3d650df9dbc46c9132fcadad7fb4a2d9ec957071e2c3215967b7f07d2feb78da3b28088fed200dae1a579c6bf11af4889436a5bcab2d1be99702625d423a5f35ef602b9be05cd91216173336cd2c22454201a76dac90ce515f7204f4b3bd63d91ffa6243dbc9bfe4ed27c95af590969791b1dd74eeaf000fce9c52a667972d5aca4f8f499a89716e68af1c8d0795e1d436cc800f1c60115c9d33642857f045409b6bb579aa4d4b19c442a2a6a56a6b0588751d262090e8bc773ba51432fca4ced158518f522198b0ec955216d5ae9b454ba8207cb1b03034db9fb7722b22e4b2188398b92116df02cdf78bd35c8dad8279f04ad761b970eece3bc2afaa5ab816acc4fd8b617d07cfc6fd838c630252e2626e462228a39a92c7e93367706d2d24bd5e3971b2f27518e041f2f9c6ed5f75fe33c02f5cc28257510926cd93873dfd28e0f750b920789dfb07961ca65bce14cebe3a3898f7ecf06a09f09084c3270902bd17de945e7cac7b11f216bab958104cf959cce406ebaa833490edb005be69630cabdc849dc4983e01989d02ecbfb9425a5b7ff1a1fb26bd464e91bf1d9a643b71dbd4bdaacf9e75eb53915dc2e88294e72bfd073f0c4ab4e8674e0c90bd9250868a09162abe8193eb2e09c53d33da8afa7b198abcb527b49821843dbc16fd5aa5a1ec16450b874394f84097ebec1ab0e03c7ae717ae1def4827abdcaf6a8ec48e3085a93f43205bd4422c992a8b330b80b2ba08753bfa788aad00685b65c7e290764d1c3076eef8fe1e01d339218dd42d31bfbd6eb0ab4f16b1c5548b14a6f38720613a25cdc453461aea607cdeb479dc92bc7ccd899ca47f9cd51f2637fb89ccb805fcf5892ffd07a76045279d13ae832f0aa1b5a7d4546b8f21f233938338457946fce1b4f5f21fa09208b49e529018b956f9a0775baa905edac76222af296de64bdccac4013de08d1bcde162dc65d2ef88658c0c2f008ad0074ec1abf88cf72b07c6c713f9728e435cde93284f543dfb78b8262a8d1de68185a0e2880e1a0a4415a30c1b2dd6c125291a1f805db9eaa4ce4c279198baa7cd5030ed3c87867669e6b82221625081fecd0647a4e303d1b4512691fbca6c00f875294df96c8b5d0004eba126289fdaa172af0390b160130d280d4c75528ea0604934b7fb3a016cd652d69c717ea2cafa1e52f20d8ea73e5e921abb049c0015f5c53528938b7977580429849d408a27fc0fe772189a59cffed0a997985109207f17cd624c5a61d7f4e20d16ce88264765560f51b981c6f874c6098f49060f28dd341936a1b73397697277723e726330bd05269586f16d53967f33c9cb2e1b3e8101def4fa65997da183d6e2287730f2919ac096d1e8f1d6c41f0eb261972e036bf3629cfc9b5c000a70068cce588ea683846260abda58757a35c79e32d8642562d446a473bbdf95bf62791bb617840e492b23296fc16ea2736115c47ce65ab7cffb5dc3ea05699deada8bd5138fa58a1abda25d18746706769ab190d8dab0b15eef2ec5f0fb6711ff236d08c3b8f786f1083510d2ac1a4de7bd6a84ba50c6ca76d6bdbd80c21cd7b407d16deb607042429effc05b9f0c2c216089658f15db3728645b4d39fb3ad01d0b112076814f27224250eee02077a397b250bdb21daee81cb9d11408ad08e769befbd7539c4c2a034db0f7eb2b93d643e64ff10ee2e20005cc3b6e8100ce15599374cce9b835b29ec6397c0898f8b87853498eb68ce2c02493ce542a1a3e7b1dc100b3a863b6de9564b7f0ef9ca4155704207de868f8ed815af6950fc5484eb157008b9f70c8f13120b5a980d99ebf1e24ee753ab692641587eccf11ecb899ba3a3839cdef649e149e9e86133e33650692f0a6623176370fbba03a5b228eab1c1996dccebf9bd5ea78febf23bae61bd04b4b0ea18e60b4d721e561a859227434afef9be70ad2c5978d1e62909493d138eaa9cd38477178c76bdce93ce6fc0c310d01af8e1ee07ca9d777fc0eaa0e37f81a579672f531bf7056fa4c28f19d5df66e5ec22c64e8a8f67fbbdea2afdb5789846a006353b241ff486644736492fbea7d6add41991aee0ffd3e4408ead0bcf5f32b1d1df2d8b4da6c2885d67a70fdaa756a1806ecd4581633f577e5e102a341274049b9b78c9402beab59b813240d97ce766ee04b99b5f2b7e07d866d18decde510cbb9baaf49f31025a01f2a574032f50716fc6bb933fee62ecea803c38ca8b8ec99d0ebf2c091873b9b117f3e4de51d1fcf0ee0e7f9cb721c4c14b39808e0d3a7c9b522d4feba312d726af350a58e59570116358ca9e00a4b5523070b95e54a645c7241c292b0f550f8680a328eabb4bfbd4cedc18c2669c8e56d93fd6296f2adea7a4ed04f5bd8ad78f775bc0d5b65231b5f7a8c22c7a577dcf8333f751b60e30912f33f6f7fa43d4ca0cf779f5f5ae24560e3a604d0ef08c1e37f90c45c63e2f9e31cd033426b3a784f33baedb80713a19e6d2a0af72b5b18a64e2e08affb232c25b5c4f101f747fe14eed87c523cfe93e605e19fd1b3a686854bf977e3d7cf8541d25baf723e16618e4482727242a1fa73ff6d4e002c8c3e4907e2cf938c73cd93df3bddd7cd3a48d8d68ee14da97c950d87ca983549781b37b5849542058af82807de7944b2071c115cf2595ff15f473a7e24162f7fdabe5c09b26eca6cce91c7b899a231ccc96d41eba0b5d01d84324bd6efd7315f7b6436ab6f3911ac6b11fec314c137d6a42417fc4f097c3dcf7c9a1624cab85a87c123ed819c58a663d4a9b03f6354bd1710261ab774150b0cda03e5b8c6ec9e16cde14490b07a09282a8cd25c6d70add835b8df8bc1d16e036108d3897a1aba6749125d7bb3080fad96a6d02c9a61f177740a43ac1476febd5f810e5ecb60cdd5fa9df04651f0cc3d61f7a847d0d8480829fb1837d3f55eb5012e5cb06b9cb0721f5c5ef17865ad5fcffd5ca447aa38a252a8b9f58d44fd948aba78275211cd351039eb89c0089df3365c8a1bcd56d0a3303e6bc31c63c8647b43c1bdc121253f9d892a3bc03e60bd08f1e9c81726552ff9d8a349f563d183bb0d80fc9888609b61711578497ebcb7551e4ea7715e6cea8cd374e94456316b7a02e6bcd0334422c8e7aff53fdd240784af7f14defbe5ccf2c474830fe5afb78a1a266a1f6d90123a2731b09cce89577f2bd68879bc3d967ed813c33c6539b675084e6e82d7499335d9a64222b48f488dafe912e552b8336ebece6ad7183b2afd0122f2f43fe9ce6fa749b8c7856a07d052b06dde7f9e0a76ba159fa5bce301ae559dbd28bfd119fba98bec9437d848a81dfe9002d6d728c153074cb98f895efe2d17679b72f54158a0d6b2a5787819ba308f69394959bb5a0f0257ebfd0721d93c3e29fd80fd67287c37d3a6e4234db64daf713fff3796bdd20bacae02e06b30f86f27d833b2836901bb72dd71e79f279a396ec455b2b96447fff6b5f2fb51b4dcd8d6ecbad6881242681a3b59d1399371d15001924a603415e9f945212c7b4202c385444ed69428fc76e34d7ca4417f32b3c89bec270d6425c7f780ba42bba3560badb9c927a1cd2a375ce4e8d05bb5381d1f96597b7dab2228afce5083fbe2a3d4a3db3fea89574c406ab37d7c1fc4ad408647a14709f48a5ebdddc282440bb60b875a7c866bebbb4ac609aee50d9e80a1fb2dc68816c2cb254dbdf24b49517ba778aacd3e203b2ececa54c92d2ff5ce49a1d99cea695b9c5ceb39a435c7aac89f4ad9f71f54594a556458a83a792981840ef24599275240b40bd8f5a9346c130e0b1de07156e31cd374025b52a0589d9ca6c200e6153c130748b7cb0662499fb18b70819ad2e35fd1bfff43e621ae4ef8a62dcd6e06b67e05747df3be5c8d553fa27126c1d7e96e41aa37b5ee357d2bcadabb996ec07ccc367c572f006f4ef02f4c410c77988e799e11764d6197d9e1fd7d0c26b3b48542038ba316444a5e9be4ed52ea8c34555b27588cf268089b61b8a39fb10ced4ddbdf40406324f629fb075ff3e7c38131264afb7c672a016fe24e8533980305440f7e873b43655a05ecef24c27769cdf0791d58023d4ac8f93a9e9cdb62f0acdf098995d28ff41a3128c13de1c35b5a10a555147093ac062a6b367dba7801860e6ed9fb213bb9d8ceb73eacced35f84c0ee2d5843b14e41526aa300d1f51942a9fa599cf39baa40dd70053829c7524ec602d5acb13fe4c0a2c908eac4da4ce4e1f5a7bdbd0675cf6ddc68f6272b348682ee51ac68a13174aa2cd66f91b8cd8fb9f50affad28112f2dec43931e6e2cc7c2284f13fe3ebe27f9786ef3a203b5ebe07e60540461af2674b2c8da37e2aec5f6ed5c4ed5845fe7cc2febe67f9d5ac05a3f547c89b96daa0b5ee70cf2765535e9c4cf2cccf4a4a438ddc3a33c1af537b7092dcbb5cf12cd576b9ff84e6b49d02f7b5c53600b9f2a8222fc858e4de514f01928dbb886293d7ccdee69dcb5ec57f91f643d135eafb8c771bf08ef38cd5fe47f6322d702d7b7cc25e290ea40e3fd415934e3aa0649486960b26c7356fa224ff63bdb4a8efa9fcd09d35dde1015446178b4ae5620bba01f1721eec50430bddb12fe0f40f7079f894213e2e1e42ea62f3759f055e77f9f40e1eb5b3bb05296c746fa2aa211d5ad87a827e450130fa09c8d791d5affd879bcca9315a4047358ead96106eef4a107c7ab03df853ce6a93bb23e6fa7fa934d657d68e6a795e96533fc61ca3293d0dd3cfbd25d1d4175443eabd99c2267eeeac5d639a2965136c1f22031164bcd53e3a4582a04bfb3b373a1551a94192756fcaf54e89c1ef22fcf123306ff79b445edb667004f701a823a701771a5ce109eb49f35618e2ad9a32a23c86fb4903854c9b3dec1a2f0a2c9fe762f7aef89f114479a0abb2628ed4627fcbfd060270f504f35489584d3dd24ea9b6d5e3e089557e3da6b96aec0cebcf45deb0e873e4a3aecd8d05513a2206e415320377ea2fd0d220acfbfde6af36a2d14f9327b3c1fc03e568f9eba3e9b452374f49f3ddbf06338083ab909d9695"}, 0x100c, 0x24044000}, {&(0x7f0000000000)={0x27, 0x1, 0x7b, 0x7, 0x6, 0x7fff, "e739011dc2c7c5395a8da7b74087afa136b7415dac12f39499b76c443871cd719794800b32908fa41342f4509e55d6c035bcc1865af93f211a92ef5b84ddbb", 0x8}, 0x58, &(0x7f0000002000)=[{&(0x7f0000002000)="e71dc73c99c121da25d8feccadaec79c483fb5f3bba9a13863253f4800f8ceef2e53ca934ec8da777820dcde5ea8107a3fb20aeacce6ba32a03099162bd75a34913406bb629d27221de23c2c8f21503b43906b431c2c4a1b8c56364ad26a603c21811e5ee02f26e97e9344c6f7042c0c6530e718aa4d957ed509a1f4ee0bb8649ecdc81755829af18ec020128bd8519a0cfd9bcd6802031eb989719febdb7225f94709d74a56fcd1ba0c7c11db42e5c59cfc7293e634e95e4b387bcc878410fe8e3c5e2e5bd0ae", 0xc7}, {&(0x7f0000002000-0xf5)="06462f3b34dc05aec5111802321f7bb87258b5dbca256e676acbd43d76a3f1d4c841c03d25b481323f601bd087fd2d108ff1edb46208141199905b359185ed6c668230c132e48a46054a6d91de00f7ac1520f19884360b6634e1680704d28c8b53b4201ad200920fa0d2880e5c18c31b171598bd61238044805a97db09bc6220bb131dfa8aa489cf4b1a3e04972714e3e54f3623c8569f71752f651fa1346f04d07d74a6e7376b85a3aa7b6c1204ad9e7166df6623ba5dd0f95d23ee4031379876576dd6b56aa03ebd1c49d72449dcfef261358e267ded87f14ba6a8bd89a5955d6e30ba230d6d2bad8517e30222f42f82f5f174e8", 0xf5}, {&(0x7f0000002000)="e0e55b31e7b2", 0x6}, {&(0x7f0000000000)="2642fd5a324138a71cf684a9587d7e8428bac4b4f8929caec3bd124ecdf1653d72f1febc752a715da271c239fcd77c4588d8ef6e949e28d9e587ca32ac7adcea62be76ed38a3f81cca870a2e2e47691bbf8b41878cfa0ec795415559281485313ca34f9fa5afd99e995398bde344c52e15f5e2aef6a9494319d94a751155bad7f413dcc95e158d5ffbc44efc3d7ee4e2a86bc5690c3b182a7026e0919317d36b070c922c", 0xa4}, {&(0x7f0000001000-0x6c)="73b805c84c63d53a02ffd36c85f2e433e08cfc197659a6d6c5489cdf17558e70ca4ec34db1a268ea705ba15b436bf50686088d13b171d2b7e931a31d96c23514bfef67c7ce6cdba42ccb0cdcac01629567bb278622fdda1924a0d590fa85b6eefd26d5bd27bc7271ee5953ddcd32c7683c091082aa188b82c4872db7fcb15537345cfd2a40165e847bc8491272fc2b6a1e829e7be29c1841fa6bd5a27dfd7312605451b6bd786b27c0edd1bee7d44cb7bf8e515e697c46216d5053a08f2d2e434eb3ad0f03dfab", 0xc7}], 0x5, 0x0, 0x0, 0x0}, {&(0x7f0000003000-0x58)={0x27, 0x100000001, 0x80000000, 0x7, 0x0, 0x2, "2dfeb0c86cef7010d69e1a18221d3b01822b9c09766e40749425d5700f52c76c26e31e64684aa3d15c7ae20aa84ff8a295d6d87d271b45a233bb2112f09085", 0x10000}, 0x58, &(0x7f0000002000)=[{&(0x7f0000001000-0x60)="db9309ea6b58c43679c772285e60093d38f6a5188f6ddc6eb6a3462acf768749be051034d82207ed45b838ea1dfdf97e3bb7ee86737d4394dd2612b0ac769cb5f17ba4672f6a4611d1957909b5d3d35fb93afacd91ca2de46324ccb0284e60f6", 0x60}, {&(0x7f0000003000-0x78)="8ff0cbd9a06c3dd1dc836359a5f913c3a98b619fad241a1f12f78ff0423b68e6cedceda400e52248e63c3df0eb559c819f7441519c9f618245e540c8ef52a718b1fa66f2519fb5c8e2f2a016ce3a5c16b540b0198163f3e40f1eaf719a57965918961a7054ae76fd0ae566b05977766316085dd9acc60de6", 0x78}, {&(0x7f0000002000)="a710aab1eb1233594af8997ba5befbe4f2c509f74faecd9003e4a3b7c11a1dd63f8dc2e0c62ae5b2b723c8b1f88b4bb9ea7cff6f97a281d404557d31a7bfff6a5d1d58b94044f0a645fe3cfc7a2ef2e69d30f29961931b7d8087fd154e0dab813c4ac02ee5fdc7976e5208b908aaf801acf5431bb7e3887faaadd26a9595cdf9ea3559999ac0085098bc05fa62590986dcc0269a8dcae4fe4042cdcc623a5156cbcfd1ea65fdd38e0677f7ec45bef72d4b4cea91e6676f698712d945979175244853c6", 0xc3}, {&(0x7f0000002000)="cd64e873f44210abe672f022fb4d13a8edbd755846df65b277228c13d32eabd7d96e35b1cbe46a673028a8f4c295dc3bdda402168d3713a9fe0d248567f5b3fe7db9e181c949ec54dcdf818fcc1b65c27a8d8ec25facec2f254e2d28cfaf129bd33d7009375ed56785010fbac1908e97d422c8fa67cb11ad68f5ecfe2b0ba019ef1479eaa30717ce5231ca443cd8a5ac3a49175bb6de85d641de3fc6c972deba36c223bbb93661fe3b079e2b096b2cef8053e43268959cb3e36d05b97a957f55b1de0bb60fa2", 0xc6}, {&(0x7f0000002000)="", 0x0}, {&(0x7f0000002000-0x4f)="3e0633200f444fb967693d5fffc713e04503ce1c3d3b4c071928d8c9481266c78c10833a7c14adddc0635f5db692fb627ce0791e5be539fed28c42b61281ab25da9f76f5b3496a6860314486ea8013", 0x4f}, {&(0x7f0000001000-0x8f)="52dca9380aac8ae6359e34ce58fcf48d48a95ad5aca3990f76d1b03add2000ede952ca27ffff9b8ec3f9a847509dde3c26660a11dba683f83289330db761305670b4ffc3bb698164e36980c993fec7218028e7cf70be1b5b2851db01e3464b20d2dfcd7b6b24de58020788e54ddffdfa9d586775da7663dc7b2f4e0bfef733e2930175d969c906e83715773f6fbd1b", 0x8f}], 0x7, &(0x7f0000002000)={0xb0, 0x110, 0x2, "1c962bf4e0559e5f6c75501d16535a065c3c5dcfa2f69703e211520d40e44c315c0bbe7dab4d066e519829a7fbc2835519528a59b29b64238a76f8638e237fd542361c57d6c21054a0d149dfebfc8b26f0c57bcecccb767710ac1b6b2e2b3833fbadabc372e70e05ad850ddeab26f357f85bb416fb8fd57b5cd19b9c075c5f73ec798d675202f8ef83a15d3820a36433d93281e4404c4753614f79cc6e14b58652306877"}, 0xb0, 0x40000}, {&(0x7f0000002000)={0x27, 0x5, 0x3, 0x4, 0x6, 0x101, "ed64924eff9866101ebd2d17df874961ad09f2767a784964bff8bb876207c07ec3e745bc51baf8f2a8969411868c85f6413feda4ffb7f72fb7e7271312ac2e", 0x8000}, 0x58, &(0x7f0000001000-0x30)=[{&(0x7f0000001000-0x8b)="0f80ca24016f9e83623ca1494a8a5d9781f1360667d3f0ff43759ef42761481ee9f7b97a2d648c13e94454ec2c46341a0a07613285a611d289eb58eea3024f93e225520f776408abcbb80bb92f150e1a67c9349cda96dd00670708b255ce89d9fc5972614c47784a66132db0460dcdc16653e17a4231934562ce3ed4591d8ec29927ad8b96db8799574dcb", 0x8b}, {&(0x7f0000001000)="da1999c1", 0x4}, {&(0x7f0000000000)="7082035ad40c75546ce40968cfbd99c9a9fa7f3817babaa750f1250329644689245ec5c42b336ce06c53988f7b2148393ff199a8dde1cef80b37df7532b47831f27615070d5d673f0b254143e7e5cef92063d5", 0x53}, {&(0x7f0000000000)="4b72b7e2f6ab4102a80e801cda9837b0bb11d9ceae4d8508c2f9f49475d4671064116f22417d50dea8c628a38d6520663f160462714967b94f145803dd776df5f6b0ae10f78d88c3ad1df3147d4a924a761f4dec818ea6dc2395b76d8141c73203f9b393fa339fac0ea9189c8a5f377d1c8ea237d33bcf09fda0b637dfdce73c3dbe93a95236c71260331e97a5f668621664d05b831e9f156aa3f7e3948625274b2c61d9", 0xa4}, {&(0x7f0000002000)="db070080cb5eefd7a4bfb28594e1fd", 0xf}, {&(0x7f0000002000-0x1000)="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", 0x1000}], 0x6, &(0x7f0000002000)={0xbc, 0x100, 0x1000, "be5174e3ff36dba6999591f6b77b73758b503c816c07d9f7d59e2bccbe2da9d9daded6801aac133e3e5457193d8a5dd06566be8a2b2a398953c926a2e86701d79a145469b46f3c89d7bb87953d91bec44cff288796bd2cd278d548d7cd93c10bffac5479a9279543a2800361c1d3a2b9f0fcf208f15a874a14578f4490c67aade4e2b47ac730126bf6993dfad501800e42cd75012e958239a28f7a12218e17076743852174ded8699627cd333b"}, 0xbc, 0x8040}], 0x9, 0x4040004) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000001000-0x4)=0x100000000, 0x4) 2017/12/10 00:42:17 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x804) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0xffffffffffffffff, 0x78, 0x968, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000d15000)="2e2f66696c653000", 0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000172000)={0x0, 0x1}, &(0x7f0000153000)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00004d5000)={r2, 0x10001, 0x8, 0x7f}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000dd1000)={0x0, 0x0}) r3 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r3, &(0x7f0000ed9000)={0xa, 0x1, 0x8, @loopback={0x0, 0x1}, 0x40}, 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r4 = dup2(r3, r3) listen(r4, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r7 = fcntl$dupfd(r6, 0x0, r4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00009c5000-0x4)=0x9, 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f5400b994e83f0019ff00d6b1206100"}) connect$unix(r6, &(0x7f00004e6000)=@abs={0x1, 0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) write$tun(r7, &(0x7f000049f000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}, 0x46) socket$inet6(0xa, 0x3, 0x7) r9 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) bind$inet6(r9, &(0x7f0000926000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f}, 0x1c) listen(r9, 0xffffffffffff0000) 2017/12/10 00:42:17 executing program 4: pivot_root(&(0x7f0000e1c000)="2e2f66696c653000", &(0x7f0000b17000)="2e2f66696c653000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f6465762f73657175656e6365723200", 0x8080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r0, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f00006b9000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ef1000)={[0x3000, 0x0, 0x1, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) [ 266.853585] entry_SYSENTER_compat+0x51/0x60 [ 266.853593] RIP: 0023:0xf7f16c79 [ 266.853600] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 266.853612] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 266.853618] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 2017/12/10 00:42:17 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002b9000-0x10)="2f6465762f73657175656e6365723200", 0x400000, 0x0) ioctl$TIOCNXCL(r0, 0x540d) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00008d8000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000bb5000-0x4)=0x10, 0x80800) fsetxattr(r1, &(0x7f0000c88000)=@known="73797374656d2e61647669736500", &(0x7f000057c000)="2f6465762f73657175656e6365723200", 0x10, 0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00009fa000-0x6)={0x0, 0x101}, &(0x7f0000a9d000-0x4)=0x6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f000036a000)={r2, @in6={{0xa, 0x3, 0x10001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x8672, 0x5, 0x0, 0x96e}, &(0x7f0000fe9000-0x4)=0xa0) mkdir(&(0x7f0000283000-0x8)="2e2f66696c653000", 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xa00000002, 0x2000000000000, 0x80000001, 0x0, 0x2000, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mount(&(0x7f000022b000-0x8)="2e2f66696c653000", &(0x7f0000b52000-0x8)="2e2f66696c653000", &(0x7f0000b57000-0x4)="6e667300", 0x2, &(0x7f000000a000)="") r4 = dup(r3) mkdirat(r4, &(0x7f0000519000)="2e2f66696c653000", 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$ipx_IPX_TYPE(r5, 0x100, 0x1, &(0x7f0000562000)=0x6c69, 0x4) ioctl$KVM_DIRTY_TLB(r0, 0x400caeaa, &(0x7f0000ce9000-0xc)={0x80000000, 0x4}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000ef9000-0x10)={0x2, 0x106001}) getsockname$packet(r0, &(0x7f0000938000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000bec000)=0x14) 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:17 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) flock(r2, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000004000)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) [ 266.853624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.853630] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 266.853637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/10 00:42:17 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003000-0x1d)="2f73656c696e75782f6176632f63616368655f7468726573686f6c6400", 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)="2f73656c696e75782f6176632f63616368655f7468726573686f6c6400", 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x8, 0x2, 0x3}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000175000)="2e2f66696c653000", &(0x7f00009d2000-0xd3)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd3) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x1], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:17 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001000-0x4)=0x10001) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000003000-0x17)="0000000000000000000000000000000000000000000000") syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x1c, 0x0, &(0x7f0000001000-0x1c)=[@exit_looper={0x630d}, @request_death={0x400c630e, 0x2, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f0000000000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) [ 266.880579] binder: 30495:30500 BC_INCREFS_DONE uffffffffffffffff no match [ 266.880593] binder: 30495:30500 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 266.880612] binder: 30495:30500 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 266.880633] binder: 30495:30500 got transaction to invalid handle [ 266.880646] binder: 30495:30500 transaction failed 29201/-22, size 0-16 line 2775 [ 266.880831] binder: 30495:30500 Acquire 1 refcount change on invalid ref 0 ret -22 [ 266.880857] binder: 30495:30500 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 266.881805] binder: 30495:30500 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 266.881822] binder: 30495:30500 ioctl c0306201 20008fd0 returned -14 [ 266.881957] FAULT_INJECTION: forcing a failure. [ 266.881957] name failslab, interval 1, probability 0, space 0, times 0 [ 266.881969] CPU: 0 PID: 30507 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 [ 266.881977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.881982] Call Trace: [ 266.881997] dump_stack+0x194/0x257 [ 266.882022] ? arch_local_irq_restore+0x53/0x53 [ 266.882062] should_fail+0x8c0/0xa40 [ 266.882087] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.882105] ? check_noncircular+0x20/0x20 [ 266.882138] ? find_held_lock+0x39/0x1d0 [ 266.882181] ? lock_downgrade+0x980/0x980 [ 266.882232] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 266.882256] ? rcu_note_context_switch+0x710/0x710 [ 266.882288] should_failslab+0xec/0x120 [ 266.882303] kmem_cache_alloc+0x47/0x760 [ 266.882321] ? trace_event_raw_event_lock+0x340/0x340 2017/12/10 00:42:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f00009d9000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000ad4000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000a00000-0x16)="2f73656c696e75782f636865636b72657170726f7400", 0x80000, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:17 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001000-0xd8)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000003000-0x8)={0x0, 0x7fff}, &(0x7f0000002000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002000-0xa0)={r2, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x48dc4c08}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x62, 0x2, 0x40, 0x80}, 0xa0) 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00003a8000)="2f6465762f7573626d6f6e2300", 0x1, 0x721480) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000-0x28)={@common="64756d6d793000000000000000000000", &(0x7f00000db000)=@ethtool_pauseparam={0x13, 0x401, 0x6, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00007fa000)={0x0, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x101, 0x1, 0x8, 0x5, 0x0}, &(0x7f00003cb000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000275000)={r1, 0x2}, &(0x7f00005d2000)=0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f27000)="2f6465762f72746300", 0x101800, 0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000518000)={0x0, 0x0, 0x0}, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000040fe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x7, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000f8f000)={0x80000000000002, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000cf5000-0xa)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r6, &(0x7f000039c000)={0x18, 0x1, 0x0, @fuse_bmap_out={0x7}}, 0x18) sendto$inet(r5, &(0x7f00005d5000-0x7e)="c8", 0x1, 0x3, &(0x7f0000f02000+0x61a)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) prctl$setptracer(0x59616d61, r3) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00008be000-0x8)={0x4, 0x400}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00008fb000-0x20)={@common="67726574617030000000000000000000", @ifru_flags=0xa00}) r7 = socket(0x10000000010, 0x2, 0xc) readahead(r7, 0x10000, 0x4) write(r7, &(0x7f0000a78000)="1f0000000104ff00fd4345bb07000000004000000900010001160103000000", 0x1f) write(r7, &(0x7f00006ea000-0x21)="1f0000000104df00fd432dbb0700000000cb00000900050000000000000000d5be", 0x21) close(r5) setsockopt(r4, 0x100000114, 0x7, &(0x7f000046d000)="02000000", 0x4) 2017/12/10 00:42:17 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2017/12/10 00:42:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f00004d5000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f0000791000-0x7)="70697065667300", 0x40088, &(0x7f0000336000)="5305f251f521da12f9e843f4c71cf90e2af8bf838e9fce1e6f003f398e3d1637d4b0d9465ef2f6c696e67f97") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008ec000)="2f6465762f6877726e6700", 0x1, 0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000bf6000)={0x0, 0x0, 0x0}, 0xc) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x3, r4, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f000012a000-0x4)=0x400, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$tun(&(0x7f0000820000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00005d6000)={@common="67726530000000000000000000000000", @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$KDDELIO(r7, 0x4b35, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000e36000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0xfffffffffffffffe}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000e4e000)={0xffffffffffffffff, 0xa, [@random="c2d574589d70", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="a11939d48394", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="ef81f65e1423", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="050001b80300", @random="5b1d64a7f09a"]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000b55000)={0x0, 0x0, 0x0, 0x0, "38b4324c42fdd6920702815534554467d67f877966017581f894987402f2c679"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000981000)={0x2, 0x78, 0x10d4e3, 0x0, 0x800000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x24, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x11, 0x802, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000f55000)={0x2, &(0x7f0000109000-0x10)=[{0x34, 0xffffffffffff0000, 0x0, 0x7f}, {0x6, 0x1, 0x4000400000, 0x0}]}, 0x8) r9 = socket(0x11, 0x4, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000043d000-0x10)={0x1, &(0x7f0000b71000-0x8)=[{0x200000006, 0x0, 0x0, 0x80000000bab}]}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x20000000000018, &(0x7f00006d8000-0x4)=0x6a4, 0x4) sendto$inet6(r10, &(0x7f0000d42000-0x1000)="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", 0x66c, 0x8804, &(0x7f0000fe9000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) 2017/12/10 00:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000379000)=0x0) write(0xffffffffffffffff, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) [ 266.882333] ? lock_release+0xda0/0xda0 [ 266.882355] alloc_vfsmnt+0xe0/0x9c0 [ 266.882372] ? mnt_free_id.isra.21+0x50/0x50 [ 266.882390] ? avc_has_extended_perms+0x12c0/0x12c0 [ 266.882411] ? avc_has_perm+0x43e/0x680 [ 266.882439] ? find_held_lock+0x39/0x1d0 [ 266.882475] ? lock_downgrade+0x980/0x980 [ 266.882491] ? __get_fs_type+0x22/0xc0 2017/12/10 00:42:17 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000078e000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000c0e000-0xe)="6e25a10fab0000f140a600650786") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r1, &(0x7f0000001000)=@random={"6f73322e00", "00"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000001000-0x4)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000003000-0x8)="2e2f66696c653000", 0x100, 0x320, &(0x7f0000003000-0x100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x3, 0x200020000) getrandom(&(0x7f0000d9d000-0xd5)="00", 0x1, 0x0) [ 266.882504] ? selinux_ipv4_output+0x40/0x40 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:6): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x966, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) r1 = socket$unix(0x1, 0x40000000000007, 0x0) r2 = dup3(r1, r0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) syz_open_pts(r2, 0x8002) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00006c2000-0xa)="2f6465762f70746d7800", 0x2c0000, 0x0) fdatasync(r3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008ae000)=0x2c9f) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000252000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, r6, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(r6, 0x8, &(0x7f000076e000)=0x75) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) dup3(r4, r5, 0x80000) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000d5b000-0x18)={0x0, 0x4, 0x9, &(0x7f0000f54000-0x8)=0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000479000)={0x20, {{0xa, 0x2, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xae6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x4, [{{0xa, 0x3, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0xbe, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x1000000000000000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x1000, @loopback={0x0, 0x1}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x290) getsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000207000-0x4)=0x0, &(0x7f0000894000-0x4)=0x4) r8 = syz_open_dev$mice(&(0x7f0000274000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x41) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00002c8000-0xe)={0x5, [0x800000000, 0x3, 0x7fffffff, 0x4, 0x158]}, 0xe) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000cfc000)=@req={0xffffffffffffffff, 0x356, 0x6, 0xa18b}, 0x10) [ 266.882521] ? module_unload_free+0x5b0/0x5b0 2017/12/10 00:42:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvfrom(r0, &(0x7f0000dd9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d, 0x40010000, &(0x7f0000500000-0x58)=@nfc_llcp={0x27, 0x10, 0x1, 0x5, 0x6, 0x2, "2a5d2f39046f9cdadbc8c8e5f5da647a9debec5b0bca43d4f4def7a2f2914aa0c641f4c9512519ee64b9b375956748877b52a53550bae708fdfb8d4b53895f", 0x2}, 0x58) r1 = accept4(r0, &(0x7f000006e000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f00001ff000-0x4)=0x10, 0x800) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000063000-0x4)=0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) llistxattr(&(0x7f0000c5f000)="2e2f66696c653000", &(0x7f0000558000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000268000-0x11)="2f73656c696e75782f72656c6162656c00", 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00009bb000)={0x100, 0x828}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d08000-0x10)=[@in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) 2017/12/10 00:42:17 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x8, 0x2, 0x100000000, 0xffffffffffffff80, 0x7, 0x8, 0x3ff]}, 0x12) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000002000-0x4)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000002000)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000004000-0x4)=0x0, &(0x7f0000000000)=0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:17 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000002000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:17 executing program 1: mmap(&(0x7f0000000000/0xfed000)=nil, 0xfed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000648000-0x8)={0x0, 0x0}, 0x800) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000d4e000)={0x0, 0x15000, 0x7fc00, 0x8000000000000007, 0x0}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x1, 0x10032, r1, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5d000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x3) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000ff0000-0x4)=0x4, 0x4) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0xfffffffeffffffff}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000272000)={0xa, 0x0, 0x3fc, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffe}, 0x1c) r4 = socket$inet(0x2, 0x6, 0x0) listen(r3, 0xcda6) connect$inet(r4, &(0x7f0000952000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto(r4, &(0x7f0000844000)="", 0x0, 0x0, &(0x7f0000995000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc) recvfrom(r4, &(0x7f0000761000-0x9f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9f, 0x22, &(0x7f000005d000-0x80)=@generic={0x4, "2391f2a74970a4c7304fd45acf71ee06d99aad4c5c53246a1f1ec9291fdd81f878484ca58cba75ee0ed60fef1b81063412ffc27cb0841175e44808c02091820c66755738772e5a532645156f21415aaf647a87e9c1b24571876542b31a7b1074ec049eb2f30a92e10ebe73212333b324b106f317961a5495d7fc75df6ec1"}, 0x80) close(r3) mmap(&(0x7f0000000000/0x1a4000)=nil, 0x1a4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00001a1000-0x26)="2400000052001f0014f9f40700ff03000a15071008000100050000000000000100000000", 0x24) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000692000)="2e2f66696c653000", &(0x7f000058e000-0x1008)={0x1007, 0x9, "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"}, &(0x7f000077d000-0x4)=0x0, 0x1000) readlinkat(0xffffffffffffffff, &(0x7f0000a8a000)="2e2f66696c653000", &(0x7f0000e5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7d) connect$llc(0xffffffffffffffff, &(0x7f0000ff0000)={0x1a, 0xf8, 0x10001, 0xfff, 0x2, 0x2, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001aa000/0x4000)=nil, 0x4000, 0x4, 0x32, r1, 0x0) [ 266.882536] ? lock_release+0xda0/0xda0 [ 266.882547] ? _cond_resched+0x14/0x30 2017/12/10 00:42:17 executing program 0 (fault-call:2 fault-nth:7): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) [ 266.882568] ? selinux_mount+0x2bb/0x4e0 [ 266.882592] vfs_kern_mount.part.26+0x84/0x4a0 [ 266.882612] ? may_umount+0xa0/0xa0 [ 266.882623] ? _raw_read_unlock+0x22/0x30 [ 266.882635] ? __get_fs_type+0x8a/0xc0 [ 266.882663] do_mount+0xea4/0x2bb0 [ 266.882693] ? copy_mount_string+0x40/0x40 [ 266.882706] ? rcu_pm_notify+0xc0/0xc0 [ 266.882736] ? copy_mount_options+0x5f/0x2e0 [ 266.882749] ? rcu_read_lock_sched_held+0x108/0x120 [ 266.882763] ? kmem_cache_alloc_trace+0x459/0x750 [ 266.882774] ? kasan_check_write+0x14/0x20 [ 266.882788] ? _copy_from_user+0x99/0x110 [ 266.882815] ? copy_mount_options+0x1f4/0x2e0 [ 266.882840] compat_SyS_mount+0xd0/0x1070 [ 266.882859] ? show_fd_locks+0x2c0/0x2c0 [ 266.882875] do_fast_syscall_32+0x3ee/0xf9d [ 266.882905] ? do_int80_syscall_32+0x9d0/0x9d0 [ 266.882927] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 266.882947] ? lockdep_sys_exit+0x47/0xf0 [ 266.882963] ? syscall_return_slowpath+0x2ad/0x550 [ 266.882984] ? sysret32_from_system_call+0x5/0x3b [ 266.883007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.883035] entry_SYSENTER_compat+0x51/0x60 [ 266.883044] RIP: 0023:0xf7f16c79 [ 266.883051] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 266.883065] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 266.883073] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 266.883081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.883089] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 266.883098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.911409] binder: 30495:30510 BC_INCREFS_DONE uffffffffffffffff no match [ 266.911427] binder: 30495:30510 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 266.911451] binder: 30495:30510 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 266.911497] binder: 30495:30510 got transaction to invalid handle [ 266.911511] binder: 30495:30510 transaction failed 29201/-22, size 0-16 line 2775 [ 266.913875] binder: 30495:30500 Acquire 1 refcount change on invalid ref 0 ret -22 [ 266.913904] binder: 30495:30500 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 266.923884] binder: 30495:30500 ioctl ae45 296d returned -22 [ 266.923952] binder: 30495:30510 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 266.923971] binder: 30495:30510 ioctl c0306201 20008fd0 returned -14 [ 266.932183] FAULT_INJECTION: forcing a failure. [ 266.932183] name failslab, interval 1, probability 0, space 0, times 0 [ 266.932195] CPU: 0 PID: 30518 Comm: syz-executor4 Not tainted 4.15.0-rc2+ #125 [ 266.932202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.932208] Call Trace: [ 266.932223] dump_stack+0x194/0x257 [ 266.932243] ? arch_local_irq_restore+0x53/0x53 [ 266.932263] ? __kernel_text_address+0xd/0x40 [ 266.932297] should_fail+0x8c0/0xa40 [ 266.932321] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.932343] ? trace_event_raw_event_lock+0x340/0x340 2017/12/10 00:42:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) recvfrom$inet6(r1, &(0x7f0000b57000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x1, &(0x7f0000a12000-0x1c)={0xa, 0x2, 0x64f4b4fe, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, 0x1c) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f000012d000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000040e000)=@ethtool_regs={0x4, 0x7, 0x11, "0def5ecfe1f5dad14ef890393fb64bdc3a"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, 0x0}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) 2017/12/10 00:42:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00006c4000-0xb)="2f6465762f6877726e6700", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000c24000-0x4)=0x400) sched_setaffinity(0x0, 0x8, &(0x7f0000fd7000)=0x75) syz_open_dev$sg(&(0x7f000048b000)="2f6465762f73672300", 0x0, 0x41) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80005, 0x0) modify_ldt$write2(0x11, &(0x7f0000bee000-0x10)={0x8, 0x1000, 0x3400, 0x2, 0x5, 0x0, 0x1, 0x7fffffff, 0x101, 0x1}, 0x10) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001000)=r2) setsockopt(r1, 0x84, 0x20, &(0x7f000041c000-0x2)="53", 0x1) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f000023f000-0x5c)={{0xa, 0x1, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, {0xa, 0x3, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80}, 0xdbed, [0xcf, 0x0, 0xf80000000, 0xfc0, 0xffff, 0x6, 0x100, 0x8000]}, 0x5c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000e0a000-0x8)={0x0, 0x3}, &(0x7f0000002000)=0x8) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000cf2000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000b3000)={r3, 0x71, "67c40ca388f691e5bf3bcd2138d72b70b51c4612ce296a579f97a2222b6603b9d05ff237eaab7a31d31e8a9a1c5645eda2dc6f23c42722d6af9bbacfb174a6e2ba7ee3428e867c8448cdfc408ecf85fdd3be925812f3e80481e28de89730221541dc79cdcd489de2c20ad557587f129e3e"}, &(0x7f0000b27000-0x4)=0x79) perf_event_open(&(0x7f0000f51000-0x78)={0x3, 0x78, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7018273e82f525fa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x1000c) mkdir(&(0x7f0000cb4000-0x8)="2e2f66696c653000", 0x0) r4 = open(&(0x7f0000061000)="2e2f66696c653000", 0x0, 0x0) mkdirat(r4, &(0x7f000003f000+0x154)="2e2f66696c653000", 0x0) open$dir(&(0x7f00001b8000-0x8)="2e2f66696c653000", 0x100fff, 0x2) r5 = openat(r0, &(0x7f00006ea000-0x8)="2e2f66696c653000", 0x87fff, 0xffffffffffffffff) symlinkat(&(0x7f0000020000-0x9)="2e2f66696c65302f66696c653000", r5, &(0x7f0000020000-0x8)="2e2f66696c653000") renameat2(r4, &(0x7f00003a9000-0x8)="2e2f66696c653000", r4, &(0x7f0000a1a000-0x1a)="2e2f66696c65302f66696c65302f66696c65302f66696c653000", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000003000-0x10)={0x4000000000000, 0x0, 0x7, 0x9, r3}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000183000)="2f6465762f6e65742f74756e00", 0x0, 0x101000) 2017/12/10 00:42:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00009d1000)="39700028", 0x0, &(0x7f0000c84000)="01") syslog(0x9, &(0x7f0000168000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:18 executing program 0 (fault-call:2 fault-nth:8): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:18 executing program 2: socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000949000)="2f6465762f7573626d6f6e2300", 0x4, 0x301000) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) [ 266.932357] ? save_stack+0xa3/0xd0 [ 266.932382] ? find_held_lock+0x39/0x1d0 [ 266.932419] ? lock_downgrade+0x980/0x980 [ 266.932465] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 266.932485] ? rcu_note_context_switch+0x710/0x710 [ 266.932496] ? lock_downgrade+0x980/0x980 [ 266.932525] should_failslab+0xec/0x120 [ 266.932542] __kmalloc_track_caller+0x5f/0x760 [ 266.932565] ? do_raw_spin_trylock+0x190/0x190 [ 266.932576] ? kstrdup_const+0x39/0x50 [ 266.932600] kstrdup+0x39/0x70 [ 266.932617] kstrdup_const+0x39/0x50 [ 266.932633] alloc_vfsmnt+0x1a5/0x9c0 [ 266.932651] ? mnt_free_id.isra.21+0x50/0x50 [ 266.932671] ? avc_has_extended_perms+0x12c0/0x12c0 [ 266.932692] ? avc_has_perm+0x43e/0x680 [ 266.932721] ? find_held_lock+0x39/0x1d0 [ 266.932758] ? lock_downgrade+0x980/0x980 [ 266.932774] ? __get_fs_type+0x22/0xc0 [ 266.932787] ? selinux_ipv4_output+0x40/0x40 [ 266.932804] ? module_unload_free+0x5b0/0x5b0 [ 266.932818] ? lock_release+0xda0/0xda0 [ 266.932829] ? _cond_resched+0x14/0x30 [ 266.932850] ? selinux_mount+0x2bb/0x4e0 [ 266.932875] vfs_kern_mount.part.26+0x84/0x4a0 [ 266.932894] ? may_umount+0xa0/0xa0 [ 266.932906] ? _raw_read_unlock+0x22/0x30 [ 266.932920] ? __get_fs_type+0x8a/0xc0 [ 266.932947] do_mount+0xea4/0x2bb0 [ 266.932976] ? copy_mount_string+0x40/0x40 [ 266.932986] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 266.933003] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.933030] ? retint_kernel+0x10/0x10 [ 266.933059] ? copy_mount_options+0x18b/0x2e0 [ 266.933076] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 266.933095] ? copy_mount_options+0x1f4/0x2e0 [ 266.933119] compat_SyS_mount+0xd0/0x1070 [ 266.933146] ? show_fd_locks+0x2c0/0x2c0 [ 266.933165] do_fast_syscall_32+0x3ee/0xf9d [ 266.933192] ? do_int80_syscall_32+0x9d0/0x9d0 [ 266.933217] ? lockdep_sys_exit+0x47/0xf0 [ 266.933230] ? syscall_return_slowpath+0x2ad/0x550 [ 266.933252] ? sysret32_from_system_call+0x5/0x3b [ 266.933276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.933302] entry_SYSENTER_compat+0x51/0x60 [ 266.933311] RIP: 0023:0xf7f16c79 [ 266.933318] RSP: 002b:00000000f771208c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 266.933332] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 266.933339] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 266.933346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.933354] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 266.933361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.999732] binder: 30530:30535 BC_INCREFS_DONE uffffffffffffffff no match [ 266.999748] binder: 30530:30535 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 266.999769] binder: 30530:30535 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 266.999783] binder: 30530:30535 got transaction to invalid handle [ 266.999798] binder: 30530:30535 transaction failed 29201/-22, size 0-16 line 2775 [ 267.000385] binder: 30530:30535 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.000399] binder: 30530:30535 got reply transaction with no transaction stack [ 267.000410] binder: 30530:30535 transaction failed 29201/-71, size 0-72 line 2690 [ 267.001137] binder: 30530:30535 ioctl c0306201 20008fd0 returned -14 [ 267.001561] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.039268] binder: 30530:30535 BC_INCREFS_DONE uffffffffffffffff no match [ 267.039287] binder: 30530:30535 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.039307] binder: 30530:30535 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.039322] binder: 30530:30535 got transaction to invalid handle [ 267.039337] binder: 30530:30535 transaction failed 29201/-22, size 0-16 line 2775 [ 267.040539] binder: 30530:30539 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.040555] binder: 30530:30539 got reply transaction with no transaction stack [ 267.040566] binder: 30530:30539 transaction failed 29201/-71, size 0-72 line 2690 [ 267.048830] binder: 30530:30535 ioctl ae45 296d returned -22 [ 267.048876] binder: 30530:30539 ioctl c0306201 20008fd0 returned -14 [ 267.060679] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.069560] FAULT_INJECTION: forcing a failure. [ 267.069560] name failslab, interval 1, probability 0, space 0, times 0 [ 267.069571] CPU: 0 PID: 30546 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.069578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.069582] Call Trace: [ 267.069599] dump_stack+0x194/0x257 [ 267.069615] ? arch_local_irq_restore+0x53/0x53 [ 267.069646] should_fail+0x8c0/0xa40 [ 267.069662] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.069676] ? lock_downgrade+0x980/0x980 [ 267.069689] ? get_pid_task+0xbc/0x140 [ 267.069707] ? find_held_lock+0x39/0x1d0 [ 267.069734] ? lock_downgrade+0x980/0x980 [ 267.069767] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.069786] ? rcu_note_context_switch+0x710/0x710 [ 267.069795] ? __lock_is_held+0xbc/0x140 [ 267.069818] should_failslab+0xec/0x120 [ 267.069831] __kmalloc_track_caller+0x5f/0x760 [ 267.069848] ? strncpy_from_user+0x430/0x430 [ 267.069859] ? strndup_user+0x62/0xb0 [ 267.069877] memdup_user+0x2c/0x90 [ 267.069890] strndup_user+0x62/0xb0 [ 267.069904] copy_mount_string+0x24/0x40 [ 267.069916] compat_SyS_mount+0x2d/0x1070 [ 267.069931] ? show_fd_locks+0x2c0/0x2c0 [ 267.069945] do_fast_syscall_32+0x3ee/0xf9d [ 267.069966] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.069985] ? lockdep_sys_exit+0x47/0xf0 [ 267.069997] ? syscall_return_slowpath+0x2ad/0x550 [ 267.070014] ? sysret32_from_system_call+0x5/0x3b [ 267.070032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.070054] entry_SYSENTER_compat+0x51/0x60 [ 267.070062] RIP: 0023:0xf7ff9c79 [ 267.070069] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.070081] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.070087] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.070093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.070099] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.070105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.498313] FAULT_INJECTION: forcing a failure. [ 267.498313] name failslab, interval 1, probability 0, space 0, times 0 [ 267.498326] CPU: 0 PID: 30576 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.498333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.498338] Call Trace: [ 267.498353] dump_stack+0x194/0x257 [ 267.498368] ? arch_local_irq_restore+0x53/0x53 [ 267.498380] ? __save_stack_trace+0x7e/0xd0 [ 267.498406] should_fail+0x8c0/0xa40 [ 267.498416] ? check_noncircular+0x20/0x20 [ 267.498430] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.498442] ? kasan_kmalloc+0xad/0xe0 [ 267.498450] ? __kmalloc_track_caller+0x15e/0x760 [ 267.498460] ? memdup_user+0x2c/0x90 [ 267.498467] ? strndup_user+0x62/0xb0 [ 267.498476] ? copy_mount_string+0x24/0x40 [ 267.498484] ? compat_SyS_mount+0x2d/0x1070 [ 267.498494] ? do_fast_syscall_32+0x3ee/0xf9d [ 267.498509] ? find_held_lock+0x39/0x1d0 [ 267.498536] ? lock_downgrade+0x980/0x980 [ 267.498570] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.498586] ? rcu_note_context_switch+0x710/0x710 [ 267.498598] ? __check_object_size+0x25d/0x4f0 [ 267.498617] should_failslab+0xec/0x120 [ 267.498630] __kmalloc_track_caller+0x5f/0x760 [ 267.498650] ? strncpy_from_user+0x430/0x430 [ 267.498659] ? strndup_user+0x62/0xb0 [ 267.498670] ? _copy_from_user+0x99/0x110 [ 267.498686] memdup_user+0x2c/0x90 [ 267.498699] strndup_user+0x62/0xb0 [ 267.498714] copy_mount_string+0x24/0x40 [ 267.498724] compat_SyS_mount+0x49/0x1070 [ 267.498739] ? show_fd_locks+0x2c0/0x2c0 [ 267.498752] do_fast_syscall_32+0x3ee/0xf9d [ 267.498773] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.498793] ? lockdep_sys_exit+0x47/0xf0 [ 267.498805] ? syscall_return_slowpath+0x2ad/0x550 [ 267.498822] ? sysret32_from_system_call+0x5/0x3b [ 267.498841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.498863] entry_SYSENTER_compat+0x51/0x60 [ 267.498871] RIP: 0023:0xf7ff9c79 [ 267.498877] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.498889] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.498895] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.498902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.498908] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.498914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.507124] binder: 30566:30573 BC_INCREFS_DONE uffffffffffffffff no match [ 267.507138] binder: 30566:30573 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.507157] binder: 30566:30573 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.507215] binder: 30566:30573 got transaction to invalid handle [ 267.507228] binder: 30566:30573 transaction failed 29201/-22, size 0-16 line 2775 [ 267.508671] binder: 30566:30573 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.508695] binder: 30566:30573 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.508971] binder: 30566:30573 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.508988] binder: 30566:30573 ioctl c0306201 20008fd0 returned -14 [ 267.511598] binder: 30566:30573 BC_INCREFS_DONE uffffffffffffffff no match [ 267.511611] binder: 30566:30573 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.511629] binder: 30566:30573 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.511641] binder: 30566:30573 got transaction to invalid handle [ 267.511652] binder: 30566:30573 transaction failed 29201/-22, size 0-16 line 2775 [ 267.511769] binder: 30566:30573 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.511792] binder: 30566:30573 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.516829] binder: 30566:30573 ioctl ae45 296d returned -22 [ 267.516904] binder: 30566:30573 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.516920] binder: 30566:30573 ioctl c0306201 20008fd0 returned -14 [ 267.536280] FAULT_INJECTION: forcing a failure. [ 267.536280] name failslab, interval 1, probability 0, space 0, times 0 [ 267.536338] CPU: 0 PID: 30587 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.536351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.536357] Call Trace: [ 267.536373] dump_stack+0x194/0x257 [ 267.536391] ? arch_local_irq_restore+0x53/0x53 [ 267.536407] ? depot_save_stack+0x12c/0x490 [ 267.536433] should_fail+0x8c0/0xa40 [ 267.536452] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.536462] ? copy_mount_string+0x24/0x40 [ 267.536476] ? do_fast_syscall_32+0x3ee/0xf9d [ 267.536486] ? entry_SYSENTER_compat+0x51/0x60 [ 267.536512] ? find_held_lock+0x39/0x1d0 [ 267.536543] ? lock_downgrade+0x980/0x980 [ 267.536583] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.536596] ? __check_object_size+0x25d/0x4f0 [ 267.536610] ? rcu_note_context_switch+0x710/0x710 [ 267.536636] should_failslab+0xec/0x120 [ 267.536652] kmem_cache_alloc_trace+0x4b/0x750 [ 267.536663] ? kasan_check_write+0x14/0x20 [ 267.536673] ? _copy_from_user+0x99/0x110 [ 267.536696] copy_mount_options+0x5f/0x2e0 [ 267.536716] compat_SyS_mount+0x65/0x1070 [ 267.536732] ? show_fd_locks+0x2c0/0x2c0 [ 267.536746] do_fast_syscall_32+0x3ee/0xf9d [ 267.536770] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.536792] ? lockdep_sys_exit+0x47/0xf0 [ 267.536804] ? syscall_return_slowpath+0x2ad/0x550 [ 267.536823] ? sysret32_from_system_call+0x5/0x3b [ 267.536845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.536866] entry_SYSENTER_compat+0x51/0x60 [ 267.536875] RIP: 0023:0xf7ff9c79 [ 267.536881] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.536895] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.536902] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.536909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.536916] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.536923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.567651] binder: 30586:30589 BC_INCREFS_DONE uffffffffffffffff no match [ 267.567667] binder: 30586:30589 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.567686] binder: 30586:30589 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.567702] binder: 30586:30589 got transaction to invalid handle [ 267.567716] binder: 30586:30589 transaction failed 29201/-22, size 0-16 line 2775 [ 267.567902] binder: 30586:30589 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.567928] binder: 30586:30589 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.570109] binder: 30586:30589 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.570124] binder: 30586:30589 ioctl c0306201 20008fd0 returned -14 [ 267.572031] binder: 30586:30589 BC_INCREFS_DONE uffffffffffffffff no match [ 267.572043] binder: 30586:30589 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.572059] binder: 30586:30589 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.572071] binder: 30586:30589 got transaction to invalid handle [ 267.572087] binder: 30586:30589 transaction failed 29201/-22, size 0-16 line 2775 [ 267.572186] binder: 30586:30589 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.572208] binder: 30586:30589 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.572572] binder: 30586:30589 ioctl ae45 296d returned -22 [ 267.572635] binder: 30586:30589 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.572648] binder: 30586:30589 ioctl c0306201 20008fd0 returned -14 [ 267.585150] FAULT_INJECTION: forcing a failure. [ 267.585150] name failslab, interval 1, probability 0, space 0, times 0 [ 267.585164] CPU: 0 PID: 30592 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.585171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.585177] Call Trace: [ 267.585193] dump_stack+0x194/0x257 [ 267.585210] ? arch_local_irq_restore+0x53/0x53 [ 267.585226] ? trace_hardirqs_on+0xd/0x10 [ 267.585238] ? _raw_spin_unlock_irq+0x27/0x70 [ 267.585261] should_fail+0x8c0/0xa40 [ 267.585273] ? copy_overflow+0x20/0x20 [ 267.585292] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.585336] ? __sched_text_start+0x8/0x8 [ 267.585359] ? lock_downgrade+0x980/0x980 [ 267.585398] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.585407] ? depot_save_stack+0x12c/0x490 [ 267.585439] should_failslab+0xec/0x120 [ 267.585455] kmem_cache_alloc+0x47/0x760 [ 267.585474] ? find_held_lock+0x39/0x1d0 [ 267.585497] getname_flags+0xcb/0x580 [ 267.585519] user_path_at_empty+0x2d/0x50 [ 267.585536] do_mount+0x15f/0x2bb0 [ 267.585558] ? copy_mount_string+0x40/0x40 [ 267.585568] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 267.585583] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.585606] ? retint_kernel+0x10/0x10 [ 267.585630] ? copy_mount_options+0x18b/0x2e0 [ 267.585646] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 267.585661] ? copy_mount_options+0x1f4/0x2e0 [ 267.585682] compat_SyS_mount+0xd0/0x1070 [ 267.585699] ? show_fd_locks+0x2c0/0x2c0 [ 267.585712] do_fast_syscall_32+0x3ee/0xf9d [ 267.585735] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.585746] ? _raw_spin_unlock_irq+0x56/0x70 [ 267.585764] ? lockdep_sys_exit+0x47/0xf0 [ 267.585777] ? syscall_return_slowpath+0x2ad/0x550 [ 267.585794] ? sysret32_from_system_call+0x5/0x3b [ 267.585814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.585837] entry_SYSENTER_compat+0x51/0x60 [ 267.585845] RIP: 0023:0xf7ff9c79 [ 267.585852] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.585864] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.585871] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.585878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.585884] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.585891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.623969] FAULT_INJECTION: forcing a failure. [ 267.623969] name failslab, interval 1, probability 0, space 0, times 0 [ 267.623981] CPU: 1 PID: 30607 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.623989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.623995] Call Trace: [ 267.624015] dump_stack+0x194/0x257 [ 267.624032] ? arch_local_irq_restore+0x53/0x53 [ 267.624062] should_fail+0x8c0/0xa40 [ 267.624080] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.624101] ? lock_release+0xda0/0xda0 [ 267.624124] ? find_held_lock+0x39/0x1d0 [ 267.624155] ? lock_downgrade+0x980/0x980 [ 267.624191] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.624201] ? depot_save_stack+0x12c/0x490 [ 267.624215] ? rcu_note_context_switch+0x710/0x710 [ 267.624239] should_failslab+0xec/0x120 [ 267.624254] kmem_cache_alloc+0x47/0x760 [ 267.624285] getname_flags+0xcb/0x580 [ 267.624306] user_path_at_empty+0x2d/0x50 [ 267.624323] do_mount+0x15f/0x2bb0 [ 267.624347] ? copy_mount_string+0x40/0x40 [ 267.624359] ? rcu_pm_notify+0xc0/0xc0 [ 267.624386] ? copy_mount_options+0x5f/0x2e0 [ 267.624398] ? rcu_read_lock_sched_held+0x108/0x120 [ 267.624411] ? kmem_cache_alloc_trace+0x459/0x750 [ 267.624422] ? kasan_check_write+0x14/0x20 [ 267.624448] ? copy_mount_options+0x1f4/0x2e0 [ 267.624469] compat_SyS_mount+0xd0/0x1070 [ 267.624486] ? show_fd_locks+0x2c0/0x2c0 [ 267.624503] do_fast_syscall_32+0x3ee/0xf9d [ 267.624526] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.624547] ? lockdep_sys_exit+0x47/0xf0 [ 267.624560] ? syscall_return_slowpath+0x2ad/0x550 [ 267.624584] ? sysret32_from_system_call+0x5/0x3b [ 267.624607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.624632] entry_SYSENTER_compat+0x51/0x60 [ 267.624641] RIP: 0023:0xf7ff9c79 [ 267.624648] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.624661] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.624669] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.624675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.624682] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.624689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.644720] binder: 30598:30603 BC_INCREFS_DONE uffffffffffffffff no match [ 267.644734] binder: 30598:30603 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.644751] binder: 30598:30603 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.644766] binder: 30598:30603 got transaction to invalid handle [ 267.644779] binder: 30598:30603 transaction failed 29201/-22, size 0-16 line 2775 [ 267.644914] binder: 30598:30603 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.644937] binder: 30598:30603 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.645456] binder: 30598:30603 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.645470] binder: 30598:30603 ioctl c0306201 20008fd0 returned -14 [ 267.647441] binder: 30598:30603 ioctl 400454d8 20000ffc returned -22 [ 267.648387] binder: 30598:30603 BC_INCREFS_DONE uffffffffffffffff no match [ 267.648401] binder: 30598:30603 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.648419] binder: 30598:30603 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.648432] binder: 30598:30603 got transaction to invalid handle [ 267.648444] binder: 30598:30603 transaction failed 29201/-22, size 0-16 line 2775 [ 267.648579] binder: 30598:30603 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.648604] binder: 30598:30603 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.649138] binder: 30598:30603 ioctl ae45 296d returned -22 [ 267.649203] binder: 30598:30603 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.649217] binder: 30598:30603 ioctl c0306201 20008fd0 returned -14 [ 267.951333] FAULT_INJECTION: forcing a failure. [ 267.951333] name failslab, interval 1, probability 0, space 0, times 0 [ 267.951345] CPU: 1 PID: 30622 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 267.951353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.951358] Call Trace: [ 267.951373] dump_stack+0x194/0x257 [ 267.951390] ? arch_local_irq_restore+0x53/0x53 [ 267.951425] should_fail+0x8c0/0xa40 [ 267.951439] ? __free_insn_slot+0x5c0/0x5c0 [ 267.951455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.951472] ? check_noncircular+0x20/0x20 [ 267.951494] ? find_held_lock+0x39/0x1d0 [ 267.951524] ? lock_downgrade+0x980/0x980 [ 267.951570] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 267.951591] ? rcu_note_context_switch+0x710/0x710 [ 267.951618] should_failslab+0xec/0x120 [ 267.951634] kmem_cache_alloc+0x47/0x760 [ 267.951653] ? lock_release+0xda0/0xda0 [ 267.951673] alloc_vfsmnt+0xe0/0x9c0 [ 267.951690] ? mnt_free_id.isra.21+0x50/0x50 [ 267.951708] ? avc_has_extended_perms+0x12c0/0x12c0 [ 267.951725] ? avc_has_perm+0x43e/0x680 [ 267.951749] ? find_held_lock+0x39/0x1d0 [ 267.951777] ? lock_downgrade+0x980/0x980 [ 267.951792] ? __get_fs_type+0x22/0xc0 [ 267.951805] ? selinux_ipv4_output+0x40/0x40 [ 267.951820] ? module_unload_free+0x5b0/0x5b0 [ 267.951834] ? lock_release+0xda0/0xda0 [ 267.951844] ? _cond_resched+0x14/0x30 [ 267.951862] ? selinux_mount+0x2bb/0x4e0 [ 267.951883] vfs_kern_mount.part.26+0x84/0x4a0 [ 267.951900] ? may_umount+0xa0/0xa0 [ 267.951911] ? _raw_read_unlock+0x22/0x30 [ 267.951925] ? __get_fs_type+0x8a/0xc0 [ 267.951947] do_mount+0xea4/0x2bb0 [ 267.951970] ? copy_mount_string+0x40/0x40 [ 267.951979] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 267.951994] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.952020] ? retint_kernel+0x10/0x10 [ 267.952053] ? audit_kill_trees+0x430/0x430 [ 267.952070] ? copy_mount_options+0x1f4/0x2e0 [ 267.952093] compat_SyS_mount+0xd0/0x1070 [ 267.952111] ? show_fd_locks+0x2c0/0x2c0 [ 267.952128] do_fast_syscall_32+0x3ee/0xf9d [ 267.952149] ? do_int80_syscall_32+0x9d0/0x9d0 [ 267.952172] ? lockdep_sys_exit+0x47/0xf0 [ 267.952186] ? syscall_return_slowpath+0x2ad/0x550 [ 267.952204] ? sysret32_from_system_call+0x5/0x3b [ 267.952225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.952247] entry_SYSENTER_compat+0x51/0x60 [ 267.952257] RIP: 0023:0xf7ff9c79 [ 267.952264] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 267.952277] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 267.952285] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 267.952293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.952301] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.952308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.954343] binder: 30616:30621 BC_INCREFS_DONE uffffffffffffffff no match [ 267.954354] binder: 30616:30621 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.954369] binder: 30616:30621 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.954382] binder: 30616:30621 got transaction to invalid handle [ 267.954393] binder: 30616:30621 transaction failed 29201/-22, size 0-16 line 2775 [ 267.954837] binder: 30616:30621 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.954862] binder: 30616:30621 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.957876] binder: 30616:30621 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.958178] binder: 30616:30621 ioctl c0306201 20008fd0 returned -14 [ 267.990828] binder: 30616:30629 BC_INCREFS_DONE uffffffffffffffff no match [ 267.990847] binder: 30616:30629 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 267.990870] binder: 30616:30629 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 267.990886] binder: 30616:30629 got transaction to invalid handle [ 267.990899] binder: 30616:30629 transaction failed 29201/-22, size 0-16 line 2775 [ 267.992196] binder: 30616:30621 Acquire 1 refcount change on invalid ref 0 ret -22 [ 267.992227] binder: 30616:30621 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 267.994833] binder: 30616:30629 ioctl ae45 296d returned -22 [ 267.996189] binder: 30616:30621 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.996208] binder: 30616:30621 ioctl c0306201 20008fd0 returned -14 [ 268.024842] FAULT_INJECTION: forcing a failure. [ 268.024842] name failslab, interval 1, probability 0, space 0, times 0 [ 268.024857] CPU: 0 PID: 30635 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 268.024865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.024872] Call Trace: [ 268.024890] dump_stack+0x194/0x257 [ 268.024913] ? arch_local_irq_restore+0x53/0x53 [ 268.024934] ? __kernel_text_address+0xd/0x40 [ 268.024969] should_fail+0x8c0/0xa40 [ 268.024993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.025015] ? trace_event_raw_event_lock+0x340/0x340 [ 268.025030] ? save_stack+0xa3/0xd0 [ 268.025063] ? find_held_lock+0x39/0x1d0 [ 268.025107] ? lock_downgrade+0x980/0x980 [ 268.025164] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 268.025187] ? rcu_note_context_switch+0x710/0x710 [ 268.025198] ? lock_downgrade+0x980/0x980 [ 268.025231] should_failslab+0xec/0x120 [ 268.025249] __kmalloc_track_caller+0x5f/0x760 [ 268.025275] ? do_raw_spin_trylock+0x190/0x190 [ 268.025285] ? kstrdup_const+0x39/0x50 [ 268.025312] kstrdup+0x39/0x70 [ 268.025330] kstrdup_const+0x39/0x50 [ 268.025348] alloc_vfsmnt+0x1a5/0x9c0 [ 268.025368] ? mnt_free_id.isra.21+0x50/0x50 [ 268.025389] ? avc_has_extended_perms+0x12c0/0x12c0 [ 268.025412] ? avc_has_perm+0x43e/0x680 [ 268.025446] ? find_held_lock+0x39/0x1d0 [ 268.025487] ? lock_downgrade+0x980/0x980 [ 268.025504] ? __get_fs_type+0x22/0xc0 [ 268.025518] ? selinux_ipv4_output+0x40/0x40 [ 268.025536] ? module_unload_free+0x5b0/0x5b0 [ 268.025552] ? lock_release+0xda0/0xda0 [ 268.025563] ? _cond_resched+0x14/0x30 [ 268.025587] ? selinux_mount+0x2bb/0x4e0 [ 268.025613] vfs_kern_mount.part.26+0x84/0x4a0 [ 268.025635] ? may_umount+0xa0/0xa0 [ 268.025647] ? _raw_read_unlock+0x22/0x30 [ 268.025661] ? __get_fs_type+0x8a/0xc0 [ 268.025692] do_mount+0xea4/0x2bb0 [ 268.025726] ? copy_mount_string+0x40/0x40 [ 268.025740] ? rcu_pm_notify+0xc0/0xc0 [ 268.025777] ? copy_mount_options+0x5f/0x2e0 [ 268.025792] ? rcu_read_lock_sched_held+0x108/0x120 [ 268.025807] ? kmem_cache_alloc_trace+0x459/0x750 [ 268.025820] ? kasan_check_write+0x14/0x20 [ 268.025833] ? _copy_from_user+0x99/0x110 [ 268.025867] ? copy_mount_options+0x1f4/0x2e0 [ 268.025894] compat_SyS_mount+0xd0/0x1070 [ 268.025915] ? show_fd_locks+0x2c0/0x2c0 [ 268.025933] do_fast_syscall_32+0x3ee/0xf9d [ 268.025960] ? do_int80_syscall_32+0x9d0/0x9d0 [ 268.025979] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 268.025996] ? lockdep_sys_exit+0x47/0xf0 [ 268.026010] ? syscall_return_slowpath+0x2ad/0x550 [ 268.026031] ? retint_user+0x18/0x18 [ 268.026062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.026094] entry_SYSENTER_compat+0x51/0x60 [ 268.026104] RIP: 0023:0xf7ff9c79 [ 268.026112] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 268.026127] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 268.026134] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 268.026142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.026149] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.026157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.051568] binder: 30640:30643 BC_INCREFS_DONE uffffffffffffffff no match [ 268.051584] binder: 30640:30643 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 268.051608] binder: 30640:30643 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 268.051623] binder: 30640:30643 got transaction to invalid handle [ 268.051636] binder: 30640:30643 transaction failed 29201/-22, size 0-16 line 2775 [ 268.051809] binder: 30640:30643 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.051837] binder: 30640:30643 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 268.054227] binder: 30640:30643 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 268.054246] binder: 30640:30643 ioctl c0306201 20008fd0 returned -14 [ 268.072886] FAULT_INJECTION: forcing a failure. [ 268.072886] name failslab, interval 1, probability 0, space 0, times 0 [ 268.072900] CPU: 1 PID: 30650 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 268.072907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.072913] Call Trace: [ 268.072930] dump_stack+0x194/0x257 [ 268.072952] ? arch_local_irq_restore+0x53/0x53 [ 268.072993] should_fail+0x8c0/0xa40 [ 268.073012] ? trace_event_raw_event_lock+0x340/0x340 [ 268.073035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.073056] ? perf_trace_lock+0x900/0x900 [ 268.073086] ? find_held_lock+0x39/0x1d0 [ 268.073127] ? lock_downgrade+0x980/0x980 [ 268.073180] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 268.073190] ? sget_userns+0x157/0xe20 [ 268.073206] ? rcu_note_context_switch+0x710/0x710 [ 268.073238] should_failslab+0xec/0x120 [ 268.073255] kmem_cache_alloc_trace+0x4b/0x750 [ 268.073298] sget_userns+0x2a3/0xe20 [ 268.073308] ? get_anon_bdev+0x2a0/0x2a0 [ 268.073324] ? rcu_pm_notify+0xc0/0xc0 [ 268.073354] ? destroy_unused_super.part.7+0xd0/0xd0 [ 268.073364] ? __free_pages+0x107/0x150 [ 268.073380] ? free_unref_page+0x9d0/0x9d0 [ 268.073406] ? alloc_pages_current+0xbe/0x1e0 [ 268.073430] ? free_pages+0x51/0x90 [ 268.073448] ? selinux_sb_copy_data+0x4a1/0x610 [ 268.073480] ? selinux_task_setrlimit+0x470/0x470 [ 268.073502] ? find_held_lock+0x39/0x1d0 [ 268.073537] mount_pseudo_xattr+0x12c/0x560 [ 268.073566] ? move_cursor+0x720/0x720 [ 268.073610] pipefs_mount+0x32/0x40 [ 268.073625] mount_fs+0x66/0x2d0 [ 268.073651] vfs_kern_mount.part.26+0xc6/0x4a0 [ 268.073672] ? may_umount+0xa0/0xa0 [ 268.073684] ? _raw_read_unlock+0x22/0x30 [ 268.073698] ? __get_fs_type+0x8a/0xc0 [ 268.073729] do_mount+0xea4/0x2bb0 [ 268.073761] ? copy_mount_string+0x40/0x40 [ 268.073774] ? rcu_pm_notify+0xc0/0xc0 [ 268.073811] ? copy_mount_options+0x5f/0x2e0 [ 268.073825] ? rcu_read_lock_sched_held+0x108/0x120 [ 268.073841] ? kmem_cache_alloc_trace+0x459/0x750 [ 268.073855] ? kasan_check_write+0x14/0x20 [ 268.073868] ? _copy_from_user+0x99/0x110 [ 268.073902] ? copy_mount_options+0x1f4/0x2e0 [ 268.073929] compat_SyS_mount+0xd0/0x1070 [ 268.073951] ? show_fd_locks+0x2c0/0x2c0 [ 268.073969] do_fast_syscall_32+0x3ee/0xf9d [ 268.074000] ? do_int80_syscall_32+0x9d0/0x9d0 [ 268.074029] ? lockdep_sys_exit+0x47/0xf0 [ 268.074043] ? syscall_return_slowpath+0x2ad/0x550 [ 268.074067] ? sysret32_from_system_call+0x5/0x3b [ 268.074095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.074127] entry_SYSENTER_compat+0x51/0x60 [ 268.074137] RIP: 0023:0xf7ff9c79 [ 268.074144] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 268.074160] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 268.074167] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 268.074175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.074182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.074190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.076822] binder: 30640:30643 BC_INCREFS_DONE uffffffffffffffff no match [ 268.076838] binder: 30640:30643 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 268.076859] binder: 30640:30643 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 268.076876] binder: 30640:30643 got transaction to invalid handle [ 268.076891] binder: 30640:30643 transaction failed 29201/-22, size 0-16 line 2775 [ 268.076990] binder: 30640:30648 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.077077] binder: 30640:30648 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 268.081550] binder: 30640:30643 ioctl ae45 296d returned -22 [ 268.081626] binder: 30640:30648 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 268.081643] binder: 30640:30648 ioctl c0306201 20008fd0 returned -14 [ 268.671463] binder: 30671:30675 BC_INCREFS_DONE uffffffffffffffff no match [ 268.671478] binder: 30671:30675 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 268.671497] binder: 30671:30675 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 268.671520] binder: 30671:30675 got transaction to invalid handle [ 268.671536] binder: 30671:30675 transaction failed 29201/-22, size 0-16 line 2775 [ 268.671769] binder: 30671:30675 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.671798] binder: 30671:30675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 268.672467] binder: 30671:30675 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 268.672484] binder: 30671:30675 ioctl c0306201 20008fd0 returned -14 [ 268.678097] 9pnet_virtio: no channels available for device ./file0 [ 268.678349] FAULT_INJECTION: forcing a failure. [ 268.678349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.678362] CPU: 0 PID: 30674 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 268.678371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.678377] Call Trace: [ 268.678394] dump_stack+0x194/0x257 [ 268.678416] ? arch_local_irq_restore+0x53/0x53 [ 268.678460] should_fail+0x8c0/0xa40 [ 268.678481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.678514] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 268.678529] ? perf_trace_lock+0xd6/0x900 [ 268.678563] ? perf_trace_lock+0xd6/0x900 [ 268.678578] ? check_noncircular+0x20/0x20 [ 268.678597] ? trace_event_raw_event_lock+0x340/0x340 [ 268.678619] ? check_noncircular+0x20/0x20 [ 268.678634] ? lock_acquire+0x1d5/0x580 [ 268.678648] ? should_fail+0x23b/0xa40 [ 268.678657] ? trace_event_raw_event_lock+0x340/0x340 [ 268.678685] __alloc_pages_nodemask+0x338/0xd80 [ 268.678693] ? perf_trace_lock+0x900/0x900 [ 268.678717] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 268.678725] ? find_held_lock+0x39/0x1d0 [ 268.678761] ? lock_downgrade+0x980/0x980 [ 268.678812] ? sget_userns+0x157/0xe20 [ 268.678829] ? rcu_note_context_switch+0x710/0x710 [ 268.678854] cache_grow_begin+0x72/0x3f0 [ 268.678882] kmem_cache_alloc_trace+0x3f3/0x750 [ 268.678922] sget_userns+0x2a3/0xe20 [ 268.678932] ? get_anon_bdev+0x2a0/0x2a0 [ 268.678945] ? rcu_pm_notify+0xc0/0xc0 [ 268.678971] ? destroy_unused_super.part.7+0xd0/0xd0 [ 268.678979] ? __free_pages+0x107/0x150 [ 268.678992] ? free_unref_page+0x9d0/0x9d0 [ 268.679018] ? alloc_pages_current+0xbe/0x1e0 [ 268.679039] ? free_pages+0x51/0x90 [ 268.679056] ? selinux_sb_copy_data+0x4a1/0x610 [ 268.679087] ? selinux_task_setrlimit+0x470/0x470 [ 268.679108] ? find_held_lock+0x39/0x1d0 [ 268.679143] mount_pseudo_xattr+0x12c/0x560 [ 268.679164] ? move_cursor+0x720/0x720 [ 268.679202] pipefs_mount+0x32/0x40 [ 268.679214] mount_fs+0x66/0x2d0 [ 268.679238] vfs_kern_mount.part.26+0xc6/0x4a0 [ 268.679256] ? may_umount+0xa0/0xa0 [ 268.679267] ? _raw_read_unlock+0x22/0x30 [ 268.679280] ? __get_fs_type+0x8a/0xc0 [ 268.679307] do_mount+0xea4/0x2bb0 [ 268.679336] ? copy_mount_string+0x40/0x40 [ 268.679348] ? rcu_pm_notify+0xc0/0xc0 [ 268.679381] ? copy_mount_options+0x5f/0x2e0 [ 268.679393] ? rcu_read_lock_sched_held+0x108/0x120 [ 268.679407] ? kmem_cache_alloc_trace+0x459/0x750 [ 268.679420] ? kasan_check_write+0x14/0x20 [ 268.679431] ? _copy_from_user+0x99/0x110 [ 268.679460] ? copy_mount_options+0x1f4/0x2e0 [ 268.679484] compat_SyS_mount+0xd0/0x1070 [ 268.679503] ? show_fd_locks+0x2c0/0x2c0 [ 268.679518] do_fast_syscall_32+0x3ee/0xf9d [ 268.679546] ? do_int80_syscall_32+0x9d0/0x9d0 [ 268.679573] ? lockdep_sys_exit+0x47/0xf0 [ 268.679586] ? syscall_return_slowpath+0x2ad/0x550 [ 268.679606] ? sysret32_from_system_call+0x5/0x3b [ 268.679630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.679657] entry_SYSENTER_compat+0x51/0x60 [ 268.679666] RIP: 0023:0xf7ff9c79 [ 268.679673] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 268.679685] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 268.679692] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 268.679699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.679705] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.679711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.685214] 9pnet_virtio: no channels available for device ./file0 [ 268.697745] binder: 30671:30675 BC_INCREFS_DONE uffffffffffffffff no match [ 268.697762] binder: 30671:30675 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 268.697784] binder: 30671:30675 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 268.697802] binder: 30671:30675 got transaction to invalid handle [ 268.697817] binder: 30671:30675 transaction failed 29201/-22, size 0-16 line 2775 [ 268.697913] binder: 30671:30676 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.697952] binder: 30671:30676 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 268.706989] binder: 30671:30676 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 268.707052] binder: 30671:30676 ioctl c0306201 20008fd0 returned -14 [ 272.166354] rpcbind: RPC call returned error 22 2017/12/10 00:42:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x400], 0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:21 executing program 0 (fault-call:2 fault-nth:9): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") inotify_rm_watch(0xffffffffffffffff, 0x0) 2017/12/10 00:42:21 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000007000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f000000e000-0x18)={0x0, 0xffff, 0x7ff, &(0x7f000000c000-0x8)=0x0}) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0x28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000aaa000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0xfffffffffffffffc, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000518000-0xa)="2f6465762f6375736500", 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000efd000-0xc)={0x0, 0x80000, r3}) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000724000-0x4)=0x2, &(0x7f0000773000-0x8)=0x4) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000bcf000)={0x1, 0xb1, 0xfffffffffffffffd, 0x7fd, 0x10, 0x1}) write$fuse(r3, &(0x7f00009eb000)={0x30, 0x6, 0x0, @fuse_notify_retrieve_out={0xa, 0x0, 0x7, 0x9}}, 0x30) dup3(r3, r4, 0x7ffff) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000e56000-0x4)=0x0) ioctl$TIOCGSID(r1, 0x540f, &(0x7f00002f0000)=0x0) timer_create(0x3, &(0x7f00008ac000)={0x0, 0x3a, 0x1, @tid=r5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00007f3000-0x4)=0x0) getrusage(0x1, &(0x7f00002fd000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f00007a7000)={{r7, 0x989680}, {0x77359400, 0x0}}, &(0x7f0000220000)={{0x0, 0x0}, {0x0, 0x0}}) fcntl$setown(r0, 0x8, r5) syz_open_dev$loop(&(0x7f0000ca9000-0xb)="2f6465762f6c6f6f702300", 0x3, 0x20100) syz_open_dev$urandom(&(0x7f0000794000)="2f6465762f7572616e646f6d00", 0x0, 0x10000) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f000070b000)=r5) socket$bt_l2cap(0x1f, 0x5, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000c7000)="2f6465762f72746300", 0x1003e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000881000)={0x8001, 0x0, 0x2, 0xe2a}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00002d4000-0xc2)="002943d22d00ae2de9c595ef418f8ebef52f30aaa4142647513e67aef1dbe9aa5cab9653d21ed16c18ea10eb04e1ac7da94688a0c999566867c9e89372e09bf2df3c2b7c23df53151a185011bb47e85a98496b53cffb673600d1b049339c37386a1effdcf46d85acd10786dafc38457800ce35de110a6671229a4371a914c9509f297d5d2eb7708169a1778558b174757ec52315bab14b5b9595833c08f801fb1442cf5089bd241b8949909d1d42016e56cc15cf00033dbfb2be143c32a2fe03fcf3") perf_event_open(&(0x7f0000f29000)={0x2, 0x78, 0xe2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x440, 0x4, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000022f000)={0x0, 0x0, 0x0}, &(0x7f00001cd000-0x4)=0xc) r10 = syz_open_procfs(r9, &(0x7f0000ff7000)="656e7669726f6e00") pipe2(&(0x7f00001cb000-0x8)={0x0, 0x0}, 0x800) preadv(r10, &(0x7f0000331000)=[{&(0x7f0000724000-0xe0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7f}], 0x1, 0x2) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00001cc000-0x10)={r8, 0x2009}) openat$kvm(0xffffffffffffff9c, &(0x7f000096b000)="2f6465762f6b766d00", 0x3fffa, 0x0) 2017/12/10 00:42:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x2) pipe(&(0x7f0000ce1000)={0x0, 0x0}) read(r0, &(0x7f00006c0000-0x18)="00000000000000000000000000000000", 0x10) write$evdev(r0, &(0x7f000025d000-0x30)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clock_getres(0x100000000, &(0x7f0000520000)={0x0, 0x0}) ppoll(&(0x7f00002a4000)=[], 0x0, &(0x7f0000e93000-0x8)={0x0, r2}, &(0x7f000044f000)={0x0}, 0x8) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x8003, &(0x7f000050a000-0x8)=0x8, 0x80, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000a1c000-0x4)=0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000cee000)=0x3) mlock(&(0x7f0000952000/0x3000)=nil, 0x3000) 2017/12/10 00:42:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000379000)=0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00006c0000)="170000001a001bed0000132100f404008100000000018d", 0x17) 2017/12/10 00:42:21 executing program 3: r0 = creat(&(0x7f000020d000)="2e2f66696c653000", 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00001fb000-0x9)="2f6465762f6b766d00", 0x1000000000000004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xcdfc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000c6b000-0x61)="792e01217793623d8640bfc4830e4f18c0c51620dc9fa52700704e3be6aece9197a05b560b3dad24c4a1291d836f19445179c212871b72a7bf6d3dceee21f7c74cd7eb47140f17f192f72f21dd6f6caa23aa89461c777043f87c44cfb182dee74d") ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000401000-0x8)=0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000977000)={0x10000000000000, 0x6, 0xf000, 0x2000, &(0x7f000063e000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000cb0000-0x48)={0x7ffff, 0x0, [0x4, 0x4, 0x80, 0x5, 0x24f0, 0x80, 0xfffffffffffffffe, 0x1]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f000050e000-0x400)={"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"}) timer_create(0x5, &(0x7f0000f88000)={0x0, 0x6, 0x5, @thr={&(0x7f000078a000-0x5)="05000000e5", &(0x7f0000c5f000)="38a8a28241a407d060d92f8a1be12f39f006a62e7a8a79e2c3305cff52351999e716c86301b92d9580fa0eb2dc0ffce43b5d76ea804c34dadb9861cdd86e101a7013aac1c2f87a1f5e88eb29a792b1e92cc7ab13357dc382de0bdd93e85470e665ad4e66bb101c37d2406f43bcdd3506255b829325d84fcdd22c47dd69d254f3d75d87a4acd7d6568d73f07813228e7e376e4af4f979fa1d2f44487a739d9563833c98f6876fa5b1f98ac16380f0e013997809c65f907c4455fdb5103ba748fceae62246a1801b466ea6c5a327906f2a32f35e1d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00002da000-0x4)=0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000764000-0x1c)={0x1, 0x8000008, 0x1b, 0x0, 0x40, 0x100, 0x5, 0x40000002, 0x7ffffffe, 0x8, 0x7, 0x20000000000002, 0x0, 0x1, 0x7, 0x4, 0x1, 0xe7a, 0x2}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000d1c000-0x8)={0x0, 0x10001}, &(0x7f0000b5b000)=0x8) clock_gettime(0x4, &(0x7f00008a1000)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000495000)={{0x0, r6}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000664000-0x90)={[0xdd98, 0x2, 0x3, 0x7, 0x105, 0xc, 0xa0, 0x8, 0x400, 0x8005, 0xffff, 0x2, 0x0, 0xffff, 0x8, 0x5], 0x4, 0x1fffe}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000a0c000)=0x10000) mmap(&(0x7f000070d000/0x4000)=nil, 0x4000, 0x2000001, 0x8011, r3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000d32000-0x158)={0x7, 0x0, [{0x9, 0x2, 0x0, 0x0, @sint={0x2, 0x4}}, {0x9, 0x0, 0x0, 0x0, @adapter={0x5, 0xf10f, 0x2, 0x10000, 0x8}}, {0x1, 0x6c6f9818728b7cd4, 0x0, 0x0, @msi={0x6, 0x9, 0x3}}, {0x100000001, 0x0, 0x0, 0x0, @irqchip={0x8, 0x2}}, {0x9, 0x0, 0x0, 0x0, @sint={0x400, 0x9}}, {0x2, 0x3, 0x0, 0x0, @adapter={0xab, 0x6, 0x2f, 0x0, 0x2}}, {0x100, 0x3, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) r7 = inotify_init1(0xfffffffffffffffc) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000fe2000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xdf, 0x3, 0x0}, {0x1f000, 0x3002, [0x0, 0x0, 0x0]}, {0x4, 0x4000, [0x0, 0x0, 0x0]}, 0x62689cc022a97de7, 0x0, 0xd000, 0x22003, 0x3, 0x500, 0x3000, [0x0, 0x0, 0x3cc, 0x6]}) prctl$setendian(0x14, 0x2) r8 = dup(r7) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00003ac000)={r5, 0x81}, 0x6) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000c08000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000a0a000-0x11)="2f6465762f7667615f6172626974657200", 0x10fffffffe, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000c32000)={0x90000, 0x0, [0x6, 0x7, 0x3000000000000, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xffff]}) 2017/12/10 00:42:21 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000)={0x0, 0x5, 0x100, 0x2, 0x8, 0x1000, 0x26, 0x800, {0x0, @in={{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x8, 0xa211, 0x5, 0x9}}, &(0x7f0000003000-0x4)=0xb8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={r0, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) 2017/12/10 00:42:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x7, 0x100007) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000949000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xd17000)=nil, 0xd17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000bb4000)="2f6465762f72666b696c6c00", 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00004c9000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00007d4000-0x4)=0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f000095f000-0x9)="2f6465762f73672300", 0x1, 0x24000) ioctl(r3, 0x4000000002283, &(0x7f000005d000-0x1)="ef") write$tun(r3, &(0x7f0000af4000-0x354)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "7154e7", 0xe1, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @udp={0x0, 0x0, 0xe1, 0x0, "b4c058b3cc7a22677dbd26c2a86998f801168953e5b8063608471f05716db56b8671349342ff9fbad3fc76804e76a42dc3ea25974bc3f141376a90abff28be1d98fb7b32257764c8e12cc88556322188e9eb3d6c644dfe2c1ae125bdb857a3a352cd7550b9c59d6bb2c8ae00dd7609a8e1d6d820ddf52eb4f61f9021621a555858a7de20b61abf0bd23e0d5eaf24e0de58dee077ebbe964033b6eeabc37139ac49f8fdb8107df690ed5580ceda56510489ff249499e04b9598b913ab43e6fd55a39abb32dd50ea6a848e2a16c60bc8a3ebdf6ec062977a3a2b"}}}}, 0x113) syz_open_dev$sndseq(&(0x7f000055a000-0xd)="2f6465762f736e642f73657100", 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x200000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000db8000-0x50)={{0x400, 0x1}, {0x5, 0x6}, 0x40, 0x1, 0x3db, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$OBJ_GET_PROG(0x7, &(0x7f000029c000)={&(0x7f0000178000-0x8)="2e2f66696c653000", 0x0}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000129000)={0x0, 0x0, 0x0}, &(0x7f0000d50000)=0xc) perf_event_open(&(0x7f0000067000)={0x2, 0x78, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x100000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000276000-0xd)="fb63707573657470707031a700", 0x3) connect$ipx(r6, &(0x7f0000057000-0x10)={0x4, 0x401, 0xfffffffffdfffffa, "030008000400", 0xffffffffffff8000, 0x0}, 0x10) r7 = dup2(r4, r6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00009a0000)={0x0, 0x3f}, &(0x7f000047f000-0x4)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001000-0xc)={r8, 0x200, 0x30}, &(0x7f000036c000-0x4)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00009af000-0x7e)={r9, 0x76, "ee9522747dd8b884dae4373f3e93fdc79794cf5683636f4a13d2d6fcd68ad9eb2b6962a90bac63d487c5bbc683ab3de0d4e994aa50bfdcbdfe3d12578149b2b8099bb41e667d5ed40029b490f32c4847c289533f365a2df70c5979ff1a4de48fa8255a06a26326932d280fb52bc3d9c6658021ee45bb"}, &(0x7f0000512000)=0x7e) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000062000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000ae0000)={r8, 0xd05}, &(0x7f0000022000-0x4)=0x8) clone(0x4000000000800000, &(0x7f000082c000-0x1)="b1", &(0x7f0000783000-0x4)=0x0, &(0x7f0000227000-0x4)=0x0, &(0x7f0000fda000-0x1)="36") [ 272.351668] FAULT_INJECTION: forcing a failure. [ 272.351668] name failslab, interval 1, probability 0, space 0, times 0 2017/12/10 00:42:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000705000)="2f6465762f7161745f6164665f63746c00", 0x20000, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xfe) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000435000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00006bb000)="2e2f66696c653000", 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = fcntl$dupfd(r0, 0x40a, r1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f000061f000-0x8)={0x2, &(0x7f0000a00000)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000088d000)={r3, 0x3}) setsockopt$inet_mreq(r2, 0x0, 0x26, &(0x7f0000ec5000)={@multicast1=0xe0000001, @empty=0x0}, 0x8) 2017/12/10 00:42:22 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) r1 = geteuid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)="727872706300", &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r1, r2) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001000)=0x0, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002000)=0x0) fdatasync(r0) [ 272.401904] binder: 30690:30702 BC_INCREFS_DONE uffffffffffffffff no match [ 272.401918] binder: 30690:30702 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 272.401938] binder: 30690:30702 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 272.401952] binder: 30690:30702 got transaction to invalid handle 2017/12/10 00:42:22 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x1110, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)="2e2f66696c653000", 0xfffffffffffffffc) r2 = perf_event_open(&(0x7f0000df7000-0x78)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x772, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000848000-0xc)={0x0, 0x0, 0x0}, 0xc) getpgid(r3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x800e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fe2000-0x78)={0x2, 0x78, 0xe2, 0xfffffffffffffffe, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000a4000-0x8)=0x0, 0x40) perf_event_open(&(0x7f00005d0000-0x78)={0x1, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x8000000200000004, 0x0, 0xfffffffffffffffe, 0x1000000000000000, 0x0, 0x400000000000, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000c4000)="2e2f66696c653000", 0x10000000003) mount(&(0x7f0000550000)="2e2f66696c65302f66696c653000", &(0x7f0000344000-0x8)="2e2f66696c653000", &(0x7f0000fb6000-0x4)="6e667300", 0x3, &(0x7f0000d3d000)="") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x0, 0x0}) uselib(&(0x7f0000981000)="2e2f66696c653000") setrlimit(0xf, &(0x7f0000dcb000-0x10)={0x7, 0x7fff}) recvmmsg(r4, &(0x7f0000263000)=[], 0x0, 0x40000100, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x800000002, 0x3, 0x1) sendmsg$unix(r5, &(0x7f0000e99000-0x1c)={&(0x7f000002c000-0x10)=@file={0x0, "200000000000000009000001f2dc"}, 0x10, &(0x7f0000906000-0x8)=[{&(0x7f0000000000)="dd98ed81", 0x4}], 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/10 00:42:22 executing program 2: mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bcc000-0x9)="2f6465762f73672300", 0x1ffc00, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000001000-0x18)={0x100000000, 0x9, 0x7, 0x23d3c863, 0x5, 0x6}) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xd, &(0x7f0000001000-0x95)="25ade72b674dc2b4b071fe5a4e1bc92f74785017f278f77fb14f36d3d0bd8f05d1be961b56e45de83548f7069f433f634e658f8ddbdb039f870f772a88ac5a374258a3d967860710fecf9734c494b85690b7dd60fb333dc743f9d49a96f1e8f909f3806b00234b932eff5d3e4b83a82438f9b7ce568fd23934f237c08f12897674ccadf55c38cac91a4b9ac2b781f0a2b3f2a44a52", 0x95) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f000000d000-0x20)={0x34f1cdf86e4b492, 0x102000, 0x1, 0x20000000000, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000000d000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x74, 0x0, &(0x7f000000f000)=[@increfs_done={0x40106308, r1, 0x4}, @dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f000000e000)=[], &(0x7f000000f000-0x10)=[0xe9ea94cedc39d86, 0x68]}}, @exit_looper={0x630d}], 0x48, 0x0, &(0x7f0000006000)="e2884ab115f878feb37a809f59945745f6382fba24ecba6fafcdba3dbe1b7af3c4dec55f078083284fbec90a18750ff85ef59a6a9afe7a0e4d85a03e8a2b3100045ae8e440f5d3eb"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000003000-0x8)={r4, 0x5}, &(0x7f0000003000-0x4)=0x8) syz_open_dev$binder(&(0x7f0000006000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) poll(&(0x7f0000008000-0x10)=[], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x296d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x1, 0x0, &(0x7f0000009000-0x1)="01"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x14, 0x0, &(0x7f0000007000-0x14)=[@exit_looper={0x630d}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f000000a000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2017/12/10 00:42:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000efa000)="2e2f66696c653000", 0x0) mount(&(0x7f000088b000-0x8)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f00002e6000)="70697065667300", 0x0, &(0x7f000000a000)="") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000ede000)={[0x3000, 0x0, 0x0, 0x0], 0x2, 0x20000000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/10 00:42:22 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$netlink(r0, &(0x7f00007b8000)={0x10, 0x0, 0x3ff, 0x7}, 0xc) sysfs$1(0x1, &(0x7f0000000000)="7070703000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00004e0000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r1, 0x87) syz_emit_ethernet(0x36, &(0x7f000001e000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x10000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}, 0x0) r2 = creat(&(0x7f000071d000-0x8)="2e2f66696c653000", 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000a34000)={@loopback={0x0, 0x1}, 0x4, 0x0, 0x0, 0x8, 0x1e694eaf, 0x717, 0x4}, &(0x7f0000175000)=0x20) select(0x40, &(0x7f0000066000)={0xbea, 0x7ff, 0x4, 0x200, 0x8d, 0x5, 0xfffffffffffffffa, 0x3}, &(0x7f00008c4000-0x40)={0xc7, 0x1, 0x8001, 0x9, 0x100000000, 0x100000000, 0x7, 0xc0b2}, &(0x7f00004c8000-0x40)={0x7, 0x8, 0x4, 0x4, 0x7f, 0x4, 0x2, 0x7}, &(0x7f0000ace000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00003e9000-0x8)={0x0, 0x40}, &(0x7f000074c000)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000b5f000)={r4, 0x6, 0x10, 0x3, 0x1ff}, &(0x7f00009be000-0x4)=0x18) r5 = socket(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x3ff) r7 = getpgrp(0x0) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f0000557000-0xc)={r2, r2, 0x100}) r9 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r10 = fcntl$dupfd(r9, 0x0, r9) fcntl$notify(r5, 0x402, 0x5) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00007d7000-0x4)=0x0, &(0x7f0000c65000-0x4)=0x4) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) write$tun(r10, &(0x7f0000ef3000)=@hdr={0x100d, 0x0, 0x3f, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x0, 0x0, 0x4d, 0x0, "0330936fee7091ab920712397a82a7c3e58af8e7421d7c483319effcd884c775e8d9ebf2567793bb218f45ee9688ab7226d0ca0fe318d2c4482e1f59afb01dd78daf0dc5fa"}}}, 0x6b) pipe2(&(0x7f00008c6000)={0x0, 0x0}, 0x80000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000115000-0x4)=0x8, 0x4) [ 272.401965] binder: 30690:30702 transaction failed 29201/-22, size 0-16 line 2775 2017/12/10 00:42:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000724000-0x14)={0x0, 0xfb, 0xfffffffffffffff9, 0x1fc, 0x2, 0x82}, &(0x7f0000d35000)=0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000e84000)={0x0, 0x1, &(0x7f0000000000)=[@generic={0x0, 0x0, 0xffffffffffff8000, 0x0}], &(0x7f00004bf000-0x2)="2b00", 0x20000000, 0x0, &(0x7f0000a3f000)="", 0x3, 0x0}, 0x30) socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000186000)={r2, r0}) r3 = socket(0x1e, 0x2, 0x0) bind(r3, &(0x7f0000fb8000)=@generic={0x20000000001e, "0103000000000001000000003a00000009bf79f321b30c7bc8790405c7bad62e0a53a632ed4938d30006fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r4 = socket(0x1e, 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8e) bind(r4, &(0x7f0000aa5000-0x80)=@generic={0x20000000001e, "0103000000000001000000003a00000009bf79f321b30c7bc8790405c7bad62e0a53a632ed4938d30006fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000269000)={0x2, {{0xa, 0x2, 0x400, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) r5 = socket(0x10, 0x2, 0x10) write(r5, &(0x7f0000109000)="1c0000001e000720271622081d00000001000000000000020500f70000020019", 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000de3000-0x108)={0x0, @in6={{0xa, 0x3, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x100000001, 0x8, 0x0, 0x401, 0x100, 0x1e6, 0xfff, 0x4, 0xfffffffffffffffe, 0x100000000, 0x0, 0x3, 0xf98, 0x28a, 0x3f]}, &(0x7f0000d97000-0x4)=0x108) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f000020a000-0x20)={0xffff, 0x4, 0x202, 0x7ff, 0x100000000, 0x200, 0x100000001, 0x9, r6}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f000018d000)={r6, 0xa3, "d488fd06adc7518a9f5dc653fceca2c726b67f5121008db5a80096917479f27949cb11c2d346daf2f7a68818a2a5890b86b2400740b2fe21cc89377678f58422dd490abcfa42c8e79f079b934a897cd74bc63848391809b1b3c0b836134b87fc8ab04df8b74334e77a162df04b8b128f9a557cda02a8ade3a060964d608f2181a2038abeeb8812829341db285106370b85eea165e2559a424458938016a60858266dc8"}, &(0x7f0000040000-0x4)=0xab) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00002f1000-0xc)={0x0, @loopback=0x0, @loopback=0x0}, &(0x7f0000562000)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f000043c000+0x791)={{{@in=@multicast2=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00004fb000)=0xe8) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000145000-0x11)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) ioctl$EVIOCRMFF(r10, 0x40044581, &(0x7f0000378000)=0xbc3a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000447000)={r7, 0x64, &(0x7f00005bf000-0x64)=[@in6={0xa, 0x3, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, @in6={0xa, 0x3, 0xc6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x8a, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200}]}, &(0x7f0000971000)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000fd5000-0xe8)={{{@in=@rand_addr=0x100, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3, 0x8, 0x3, 0x4f8f, 0x18, 0x20, 0x20, 0x9, r8, r9}, {0xfffffffffffffffa, 0x2, 0x6, 0x0, 0x4, 0x2, 0x8, 0x9}, {0x1ff, 0x23d3, 0x8b, 0xfffffffffffffff8}, 0x8, 0x0, 0x4, 0x0, 0x40, 0x2}, {{@in=@multicast2=0xe0000002, 0x6, 0x1000000000000000}, 0x4, @in=@multicast2=0xe0000002, 0x40, 0x3, 0x2, 0x7fff, 0x290a311d, 0xffffffffffffff7c, 0x3}}, 0xe8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00005ac000-0x6)={r11, 0xf3e9}, &(0x7f0000f62000-0x4)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000d89000-0xc)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000c10000-0x10)={0xa, &(0x7f00003e0000-0x50)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r12, 0xc010641d, &(0x7f0000c67000)={r13, &(0x7f0000324000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f00004c0000)=0x0, &(0x7f000044d000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x80000000000008) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x93b000)=nil, 0x93b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 272.403816] binder: 30690:30702 Acquire 1 refcount change on invalid ref 0 ret -22 [ 272.403843] binder: 30690:30702 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 272.408242] binder: 30690:30702 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.408259] binder: 30690:30702 ioctl c0306201 20008fd0 returned -14 [ 272.445122] QAT: Invalid ioctl [ 272.446456] QAT: Invalid ioctl [ 272.449505] binder: 30690:30706 BC_INCREFS_DONE uffffffffffffffff no match [ 272.449520] binder: 30690:30706 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 272.449541] binder: 30690:30706 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 272.449558] binder: 30690:30706 got transaction to invalid handle [ 272.449572] binder: 30690:30706 transaction failed 29201/-22, size 0-16 line 2775 [ 272.451067] binder: 30690:30702 Acquire 1 refcount change on invalid ref 0 ret -22 [ 272.451096] binder: 30690:30702 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 272.452182] binder: 30690:30702 ioctl 4018aee1 2000dfe8 returned -22 [ 272.457391] binder: 30690:30702 ioctl ae45 296d returned -22 [ 272.457435] binder: 30690:30706 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.457453] binder: 30690:30706 ioctl c0306201 20008fd0 returned -14 [ 272.459344] QAT: Invalid ioctl [ 272.478101] QAT: Invalid ioctl [ 272.519701] binder: 30717:30721 BC_INCREFS_DONE uffffffffffffffff no match [ 272.519717] binder: 30717:30721 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 272.519743] binder: 30717:30721 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 272.519757] binder: 30717:30721 got transaction to invalid handle [ 272.519772] binder: 30717:30721 transaction failed 29201/-22, size 0-16 line 2775 [ 272.520310] binder: 30717:30721 Acquire 1 refcount change on invalid ref 0 ret -22 [ 272.526103] binder: 30717:30721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 272.533918] binder: 30717:30721 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.533936] binder: 30717:30721 ioctl c0306201 20008fd0 returned -14 [ 272.549125] binder: 30717:30727 BC_INCREFS_DONE uffffffffffffffff no match [ 272.549141] binder: 30717:30727 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 272.549160] binder: 30717:30727 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 272.549177] binder: 30717:30727 got transaction to invalid handle [ 272.549192] binder: 30717:30727 transaction failed 29201/-22, size 0-16 line 2775 [ 272.550448] binder: 30717:30721 Acquire 1 refcount change on invalid ref 0 ret -22 [ 272.550472] binder: 30717:30721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 272.553200] binder: 30717:30727 ioctl ae45 296d returned -22 [ 272.555575] binder: 30717:30721 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.555590] binder: 30717:30721 ioctl c0306201 20008fd0 returned -14 [ 272.897369] CPU: 0 PID: 30691 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 272.897376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.897382] Call Trace: [ 272.897397] dump_stack+0x194/0x257 [ 272.897413] ? arch_local_irq_restore+0x53/0x53 [ 272.897425] ? _raw_spin_unlock_irq+0x27/0x70 [ 272.897451] should_fail+0x8c0/0xa40 [ 272.897467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.897484] ? __schedule+0x8f3/0x2060 [ 272.897494] ? find_next_zero_bit+0x2c/0x40 [ 272.897514] ? find_held_lock+0x39/0x1d0 [ 272.897544] ? __lock_is_held+0xbc/0x140 [ 272.897577] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 272.897588] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 272.897601] ? rcu_note_context_switch+0x710/0x710 [ 272.897627] should_failslab+0xec/0x120 [ 272.897640] __kmalloc+0x63/0x760 [ 272.897650] ? lockdep_init_map+0x3d/0x70 [ 272.897664] ? debug_mutex_init+0x2d/0x60 [ 272.897674] ? __list_lru_init+0xcf/0x750 [ 272.897693] __list_lru_init+0xcf/0x750 [ 272.897717] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 272.897731] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 272.897739] ? __lockdep_init_map+0xe4/0x650 [ 272.897755] ? lockdep_init_map+0x3d/0x70 [ 272.897777] sget_userns+0x64f/0xe20 [ 272.897785] ? get_anon_bdev+0x2a0/0x2a0 [ 272.897810] ? destroy_unused_super.part.7+0xd0/0xd0 [ 272.897819] ? __free_pages+0x107/0x150 [ 272.897831] ? free_unref_page+0x9d0/0x9d0 [ 272.897848] ? alloc_pages_current+0xbe/0x1e0 [ 272.897864] ? free_pages+0x51/0x90 [ 272.897879] ? selinux_sb_copy_data+0x4a1/0x610 [ 272.897900] ? selinux_task_setrlimit+0x470/0x470 [ 272.897915] ? find_held_lock+0x39/0x1d0 [ 272.897940] mount_pseudo_xattr+0x12c/0x560 [ 272.897957] ? move_cursor+0x720/0x720 [ 272.897985] pipefs_mount+0x32/0x40 [ 272.897996] mount_fs+0x66/0x2d0 [ 272.898018] vfs_kern_mount.part.26+0xc6/0x4a0 [ 272.898033] ? may_umount+0xa0/0xa0 [ 272.898043] ? _raw_read_unlock+0x22/0x30 [ 272.898054] ? __get_fs_type+0x8a/0xc0 [ 272.898075] do_mount+0xea4/0x2bb0 [ 272.898097] ? copy_mount_string+0x40/0x40 [ 272.898108] ? rcu_pm_notify+0xc0/0xc0 [ 272.898133] ? copy_mount_options+0x5f/0x2e0 [ 272.898145] ? rcu_read_lock_sched_held+0x108/0x120 [ 272.898157] ? kmem_cache_alloc_trace+0x459/0x750 [ 272.898167] ? kasan_check_write+0x14/0x20 [ 272.898177] ? _copy_from_user+0x99/0x110 [ 272.898199] ? copy_mount_options+0x1f4/0x2e0 [ 272.898218] compat_SyS_mount+0xd0/0x1070 [ 272.898233] ? show_fd_locks+0x2c0/0x2c0 [ 272.898247] do_fast_syscall_32+0x3ee/0xf9d [ 272.898269] ? do_int80_syscall_32+0x9d0/0x9d0 [ 272.898289] ? lockdep_sys_exit+0x47/0xf0 [ 272.898301] ? syscall_return_slowpath+0x2ad/0x550 [ 272.898318] ? sysret32_from_system_call+0x5/0x3b [ 272.898336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.898358] entry_SYSENTER_compat+0x51/0x60 [ 272.898366] RIP: 0023:0xf7ff9c79 [ 272.898372] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 272.898384] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 272.898390] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 272.898396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.898402] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 272.898408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.898494] ------------[ cut here ]------------ [ 272.898496] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 272.898542] WARNING: CPU: 0 PID: 30691 at kernel/locking/lockdep.c:3766 lock_release+0x5de/0xda0 [ 272.898545] Kernel panic - not syncing: panic_on_warn set ... [ 272.898545] [ 272.898551] CPU: 0 PID: 30691 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #125 [ 272.898554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.898556] Call Trace: [ 272.898561] dump_stack+0x194/0x257 [ 272.898568] ? arch_local_irq_restore+0x53/0x53 [ 272.898575] ? vsnprintf+0x1ed/0x1900 [ 272.898582] panic+0x1e4/0x41c [ 272.898588] ? refcount_error_report+0x214/0x214 [ 272.898595] ? show_regs_print_info+0x18/0x18 [ 272.898602] ? __warn+0x1c1/0x200 [ 272.898609] ? lock_release+0x5de/0xda0 [ 272.898614] __warn+0x1dc/0x200 [ 272.898620] ? lock_release+0x5de/0xda0 [ 272.898628] report_bug+0x211/0x2d0 [ 272.898639] fixup_bug.part.11+0x37/0x80 [ 272.898646] do_error_trap+0x2d7/0x3e0 [ 272.898652] ? __down_trylock_console_sem+0x10d/0x1e0 [ 272.898660] ? math_error+0x400/0x400 [ 272.898665] ? vprintk_emit+0x3ea/0x590 [ 272.898676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.898684] do_invalid_op+0x1b/0x20 [ 272.898689] invalid_op+0x18/0x20 [ 272.898695] RIP: 0010:lock_release+0x5de/0xda0 [ 272.898698] RSP: 0018:ffff880192b7f558 EFLAGS: 00010082 [ 272.898703] RAX: dffffc0000000008 RBX: 1ffff1003256feb0 RCX: ffffffff815a047e [ 272.898710] RDX: 0000000000010000 RSI: ffffc900037c4000 RDI: 0000000000000000 [ 272.898713] RBP: ffff880192b7f6c8 R08: 0000000000000001 R09: 0000000000000000 [ 272.898717] R10: ffff8801d7e884c0 R11: fffffbfff0e89463 R12: ffff880192b7f5a0 [ 272.898721] R13: ffff880192b7f6a0 R14: ffff8801cf1ce418 R15: ffffffff8748ad20 [ 272.898730] ? vprintk_func+0x5e/0xc0 [ 272.898738] ? lock_release+0x5de/0xda0 [ 272.898745] ? destroy_unused_super.part.7+0x18/0xd0 [ 272.898751] ? lock_downgrade+0x980/0x980 [ 272.898760] ? rcu_read_lock_sched_held+0x108/0x120 [ 272.898766] ? __kmalloc+0x471/0x760 [ 272.898771] ? lockdep_init_map+0x3d/0x70 [ 272.898779] ? up_read+0x1a/0x40 [ 272.898785] ? memcg_put_cache_ids+0x10/0x20 [ 272.898791] ? __list_lru_init+0x35c/0x750 [ 272.898799] up_write+0x6b/0x120 [ 272.898804] ? up_read+0x40/0x40 [ 272.898809] ? __lockdep_init_map+0xe4/0x650 [ 272.898816] ? lockdep_init_map+0x3d/0x70 [ 272.898823] destroy_unused_super.part.7+0x18/0xd0 [ 272.898830] sget_userns+0x905/0xe20 [ 272.898835] ? get_anon_bdev+0x2a0/0x2a0 [ 272.898845] ? destroy_unused_super.part.7+0xd0/0xd0 [ 272.898850] ? __free_pages+0x107/0x150 [ 272.898855] ? free_unref_page+0x9d0/0x9d0 [ 272.898862] ? alloc_pages_current+0xbe/0x1e0 [ 272.898869] ? free_pages+0x51/0x90 [ 272.898875] ? selinux_sb_copy_data+0x4a1/0x610 [ 272.898884] ? selinux_task_setrlimit+0x470/0x470 [ 272.898891] ? find_held_lock+0x39/0x1d0 [ 272.898901] mount_pseudo_xattr+0x12c/0x560 [ 272.898908] ? move_cursor+0x720/0x720 [ 272.898918] pipefs_mount+0x32/0x40 [ 272.898923] mount_fs+0x66/0x2d0 [ 272.898932] vfs_kern_mount.part.26+0xc6/0x4a0 [ 272.898939] ? may_umount+0xa0/0xa0 [ 272.898944] ? _raw_read_unlock+0x22/0x30 [ 272.898951] ? __get_fs_type+0x8a/0xc0 [ 272.898958] do_mount+0xea4/0x2bb0 [ 272.898968] ? copy_mount_string+0x40/0x40 [ 272.898974] ? rcu_pm_notify+0xc0/0xc0 [ 272.898982] ? copy_mount_options+0x5f/0x2e0 [ 272.898990] ? rcu_read_lock_sched_held+0x108/0x120 [ 272.898996] ? kmem_cache_alloc_trace+0x459/0x750 [ 272.899005] ? kasan_check_write+0x14/0x20 [ 272.899012] ? _copy_from_user+0x99/0x110 [ 272.899020] ? copy_mount_options+0x1f4/0x2e0 [ 272.899027] compat_SyS_mount+0xd0/0x1070 [ 272.899034] ? show_fd_locks+0x2c0/0x2c0 [ 272.899041] do_fast_syscall_32+0x3ee/0xf9d [ 272.899050] ? do_int80_syscall_32+0x9d0/0x9d0 [ 272.899057] ? lockdep_sys_exit+0x47/0xf0 [ 272.899064] ? syscall_return_slowpath+0x2ad/0x550 [ 272.899072] ? sysret32_from_system_call+0x5/0x3b [ 272.899080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.899089] entry_SYSENTER_compat+0x51/0x60 [ 272.899092] RIP: 0023:0xf7ff9c79 [ 272.899095] RSP: 002b:00000000f77f508c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 272.899101] RAX: ffffffffffffffda RBX: 000000002088aff8 RCX: 0000000020026ff8 [ 272.899104] RDX: 00000000202e6000 RSI: 0000000000000000 RDI: 000000002000a000 [ 272.899108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.899111] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 272.899114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.905139] Dumping ftrace buffer: [ 272.905142] (ftrace buffer empty) [ 272.905145] Kernel Offset: disabled [ 273.649026] Rebooting in 86400 seconds..