x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000047c000)="73657467726f75707300") symlinkat(&(0x7f00000bd000)="2e2f66696c653000", r0, &(0x7f00002c3000)="2e2f66696c653000") getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000611000)={0x0, 0x80000001, 0x30}, &(0x7f00002f4000)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2f) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00003cb000)=0x0) bind$bt_l2cap(r1, &(0x7f0000cc5000-0xe)={0x1f, 0x6, {0x2, 0x101, 0x1ff, 0x8, 0x8, 0x3}, 0x7fffffff, 0x1}, 0xe) mount(&(0x7f000018f000)="2e2f66696c653000", &(0x7f0000aa7000)="2e2f66696c653000", &(0x7f00003fd000-0x4)="62706600", 0x800022, &(0x7f0000b03000)="bab7b45fefd5e11c75070cfdb2edd2cc9a3c561bad13e2ebde114917159c5be94ce0be041ddf28e5f67e2c8d468d080bea9e9e8a26da8a4a635736bf287aab1637e70fc8052110d9f754712812c25fc2c654f84e65a27ac31fea47862a396d090c831c4c5cb550cb2b35e234950b115fb0b67a4214c85f921b38177aeac73ffe87") setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0xe41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendto$inet(r0, &(0x7f000040a000-0x5)="", 0x0, 0x0, &(0x7f00007a8000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000082f000-0x10)={r1, 0x18, &(0x7f0000c3f000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 2017/12/02 04:37:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000047c000)="73657467726f75707300") symlinkat(&(0x7f00000bd000)="2e2f66696c653000", r0, &(0x7f00002c3000)="2e2f66696c653000") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000027a000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xde7000)=nil, 0xde7000, 0x3, 0x20000000032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x806, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000916000-0x20)={@common="6c6f0000000000000000000000000000", @ifru_flags=0xfffffffffffffffd}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000b97000)="2f6465762f70746d7800", 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000aab000)="2f6465762f7663732300", 0x100000040, 0x8a00) mmap(&(0x7f0000de7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000de7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000f22000-0x138)={{0x1001, 0x0, 0x4, 0x80000000, 0x1f, 0xfff, 0xcfa, 0xd, 0x4, 0x400, 0xffffffffffffffff, 0x7, 0x0}, {0x4, 0x100002, 0x4, 0x6ac, 0x0, 0x9, 0x5, 0x10000, 0x10000, 0x0, 0x1, 0x80, 0x0}, {0x106004, 0x6001, 0xf, 0xfffffffffffffff7, 0x30d1, 0x8, 0x10001, 0x81, 0x200, 0x3, 0x81, 0x40, 0x0}, {0x0, 0xf000, 0x10, 0xbdd6, 0x3, 0xfffffffffffffffd, 0x10001, 0x200, 0x0, 0xffff, 0x101, 0x5, 0x0}, {0x100000, 0xf000, 0x0, 0x4, 0x6, 0x7, 0x11738a9f, 0x1, 0x7f, 0x0, 0xb372, 0x4, 0x0}, {0xf002, 0x5000, 0xb, 0x1, 0x441, 0x19, 0x6, 0x20, 0x3, 0x5, 0x8, 0x1126, 0x0}, {0x0, 0xd000, 0xf, 0x100000001, 0xffff, 0x5, 0x5, 0x401, 0x90, 0x9, 0x0, 0x6, 0x0}, {0x6001, 0x0, 0xb, 0x5ff5, 0xffffffff, 0x7, 0x5, 0x5, 0x2, 0x8001, 0x2, 0x3, 0x0}, {0x6000, 0x2000, [0x0, 0x0, 0x0]}, {0x4, 0x1004, [0x0, 0x0, 0x0]}, 0x10010, 0x0, 0x3000, 0x40, 0xb, 0x100, 0x2000, [0xbd6, 0x5, 0x4, 0x7]}) r3 = fcntl$dupfd(r0, 0x80008000000000, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000d02000-0x30)={0x0, 0x3, &(0x7f0000de1000)=[@map={0x9, 0x3, 0x52c, 0x1}, @map={0x7, 0x0, 0x10005, r3}, @generic={0x4, 0x3a, 0x100000001, 0x101}], &(0x7f0000de1000)="6c6f0000000000000000000000000000", 0x100000002000000, 0x19, &(0x7f0000de2000-0x19)="00000000000000000000000000000000000000000000000000", 0x10000000, 0x1}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000de8000-0xb0)={{0x0, 0x0}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet(r5, &(0x7f0000766000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) sendto$inet(r5, &(0x7f0000de3000-0x1)="55", 0x1, 0x20000815, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TIOCGSID(r3, 0x540f, &(0x7f000045e000-0x4)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000312000-0x4)=r7) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00002f2000+0x432)={0x0, 0x1d, "16f6faea5dfca91a6b13c82bffe9dc4446505b77fbdee0bfed9b50da8b"}, &(0x7f0000bf0000-0x4)=0x25) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f000005f000-0xa0)={r8, @in6={{0xa, 0x1, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x40000fff, 0x9, 0x5, 0x0}, &(0x7f0000199000)=0xa0) getgid() fcntl$setsig(r0, 0xa, 0x1d) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000c51000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000ad1000-0x4)=0x1, 0x4) sendto$inet(r5, &(0x7f0000de4000-0x5ab)="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", 0xfff, 0x1, 0x0, 0x0) 2017/12/02 04:37:56 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x3f, 0x0, 0x0, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}}, 0xe8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000508000)="2f6465762f6877726e6700", 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00002ed000)=0x3f, 0x4) sendto$inet(r0, &(0x7f0000500000)="", 0x0, 0xfffffffffffffffc, &(0x7f0000317000)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 04:37:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000047c000)="73657467726f75707300") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000495000-0x118)={0x9, {{0x2, 0x1, @rand_addr=0x47c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x2000000000000000, 0x80, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendto$inet(r0, &(0x7f00000f5000)="", 0x0, 0x0, &(0x7f0000811000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000012e000)={{{@in=@rand_addr=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000966000)=0xe8) 2017/12/02 04:37:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) futex(&(0x7f0000ced000-0x4)=0x4, 0x4, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000027000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000060f000-0x18)={0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000075b000)={0x0, 0x0}) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000bb7000)={0x8, "898fd9cf547c"}) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendto$inet(0xffffffffffffffff, &(0x7f0000ee6000)="", 0x0, 0x100000000000002, &(0x7f00007a8000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 04:37:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000cb2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendto$inet(r0, &(0x7f000040a000-0x5)="", 0x0, 0x0, &(0x7f00007a8000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 116.663245] binder: 21550:21551 got transaction with invalid parent offset or type [ 116.691242] binder: 21550:21551 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 116.719050] binder_alloc: binder_alloc_mmap_handler: 21550 20000000-20002000 already mapped failed -16 [ 116.719295] binder: BINDER_SET_CONTEXT_MGR already set [ 116.719306] binder: 21550:21566 ioctl 40046207 0 returned -16 [ 116.748963] binder_alloc: 21550: binder_alloc_buf, no vma [ 116.755497] binder: 21550:21566 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) futex(&(0x7f0000ced000-0x4)=0x4, 0x4, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000027000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/12/02 04:37:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x7, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 04:37:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000cb2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common="73697430000000000000000000000000", &(0x7f0000000000)=@ethtool_wolinfo={0x0, 0x0, 0x0, "00000006c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 116.800273] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.808060] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000d73000)=0xec65, 0xfffffffffffffffe, 0x0, &(0x7f0000ee0000-0x10)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) r0 = request_key(&(0x7f0000c63000-0x5)="7573657200", &(0x7f00006bd000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000b55000-0x1)="00", 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x23) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x100000000000000, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x4000000000000011, 0x8000000000000803, 0x1) sendmmsg(r1, &(0x7f0000c52000)=[{{&(0x7f0000de9000)=@in6={0xa, 0x2, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x200}, 0x1c, &(0x7f000028a000-0x50)=[{&(0x7f000035f000)="d7bea57dff8ab7d54dbad555212a96fcafdad0fb8fb19baefbfbf5a6136a2894ca70dce5ae2fe14fc2a5d860956b7370a53cf8894b8cf90d672e06d027d4321734543b42fc0170075c115c9bc35aab1a112aae5ae3bb8454e918c670b3be4e23723e5a45b0dd48c869c68ebb2ab685fa0517c506a4416448d68647d395f865f66aeda8137a3eb281fa5c1389e4c8cb5970a85f5cd740aef8de2c4feea8069b5c", 0xa0}, {&(0x7f0000eae000-0xe8)="741b6a1c34ef9258df4a73d29e6dd27a5b00f3e89c66a1545bca19285eeea6492ed29f2b96c061774e4a36b046be581fc44e6a61fa3be7e9ebb711e529d9548fb0bbcb87f8a79de105cb1b4e701f6f236ab098e2ab840cce4fcd3f6c63fc4365098269a3a0f621d00184cde2d376715413817c448dd4a20292edf5b216ed22ef8fe3a92241f487ac6059a59494feee187da28ed75d16495a49d09c3314aefb8893b7e9dca284bcef79d47769745f25ac47bd9f122549807f61062f8ac3de4aeed1373c4c06d456fa6aa938d94584ba0b4864fd0a0425752224dc8c4a1ba8131472f92fa512835247", 0xe8}, {&(0x7f0000113000)="fd364a0f9e8e51fe843cef1de8ee6b2f9fe1b27a4fa880cfbe08c303c8b41e763094275b8399956f8c16f1b79c56af0cc31c946914b03d7726938a6527", 0x3d}, {&(0x7f0000132000-0xd7)="578b8893f17af91cde012c24a8892a5327ceae9841682f379a9a310d3edb1660ec18b135fe2192fa9aec36a821e319678511ac13c245c74c20796ec0e6c5d6dbcf0399fef5ad865191bbc0bd1500da930b0c95bb7e854ae7f33e3331c9dc4cb54ea8c18bcaef2ca60845564be310790ab15ed11f08b4bd88d0414d5b990c21e0e3f16f973b19dd66281aac360ef25eb0631c0b59e87a6aaa155eb6095abf6dfc8a7f323742ade7c123ff73a8b52a32eaed9827a2e365bbe0959582c943a4f39f0e7f605eabe3ab277adc8de6c5263affa7516bafeaedc2", 0xd7}, {&(0x7f0000fec000-0x9c)="c5125a660763686ff1837c56e776070e64260edcf0c54a285099439cecbcb31bb6b10481dc409bf8110c1ff880d014969580e08ad985e4a67b5ec2e73772d58304606b011faddae8301035d2f7404a7d5ac48a7b5634e524917a72450dbfd516f45e746779fa487a6499221639a2cdaf8c0f05ad6f2e30be5725d49cc86c067c6e1f9fe1756e8ff7666f369e05235d0a1d6bfc701a30ba3368d13171", 0x9c}], 0x5, &(0x7f0000d62000)=[{0xc8, 0x10c, 0x1000, "58dc722a634c940f8d5ce9deeaf5fd7fad80467131e061982e8a7cfc970b10ccf77daefde034a2732cc959481ac89308a6a442af8c7b7084b82cbf05b032c996773f2d8757f85b03e268d325fcf2450246ebd282bd466490f96a6c23e51693f2f1e7b4e392a2536a3cc6ecee268ec1bb8bc8706e72d9faca709d72be1f2837d75b2fca24fdb081531f4a59d1798a0ab45294cbcaf02867d7e22ab84ee0d026dd0423e613e551c82ea9a638d4389aab5fc0"}, {0x1010, 0x103, 0x1, "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"}, {0x30, 0x10f, 0x8, "39e9e1c050b01aeebbbe010cd2d2bb86ce40bb4b805ca7fd2100b7"}, {0x40, 0x11f, 0x1, "8df57643488643960d8c281de83bd41b638704dc5377ce621fa10d8c1e0543195791f9f0d6e5e5bd7b6a7fb6ab"}, {0x50, 0x116, 0x8001, "55c15e9451736b7b9d293737f7131f5d47bce24374030191b0cbe3b699529fe690f565019bfe63d5e2652e5c92f0f51459e36c38bdeeac43335f2e"}], 0x5, 0x4000}, 0xffff}, {{&(0x7f00000c8000)=@nfc_llcp={0x27, 0x3, 0x100, 0x0, 0x5, 0x80, "d7f556a0dd73b77890e7f50d31839418e57311ed9600a04798d3d754b661641d458a83474b0705c6cc92d9cfd2d7e431399bb00e1cb0112568dec8e81a17f3", 0x1}, 0x60, &(0x7f00000b0000)=[{&(0x7f0000c0d000-0x25)="a206f437df04cd19f537d6acf6a302d404feb612adfb3b1a9de955dac27ca528549772fc5f", 0x25}, {&(0x7f0000b06000-0xcc)="27c32f2a846ee8a30d8591678720191173ebc2390934d5ef55838236ee7fa6cf63f2ad3efeda44dcf3835fb8332daad24c6bce92971a7b64ed36aa2a4e3e049789167c28e2758b83bece40323506a9333c75f7212f7bd1f58ed14c0b298d6be312f4ee8b521425197969551ee82f771682c8601cfd5f7729eb849e0d9ccc69c6a8bf7bfb46546b194018fa8d7764212d8d9ccd630d4f6e7e30cefd653cdec63a8d41d93bba3a94d07f2d9f912899541a147bdde1d3cea144096dc9e116f0666070ebb66cb1279f5836cae6db", 0xcc}, {&(0x7f0000d43000-0x71)="50d52e346f256b76f3dbc7501fcdb239738930cf26eca7f79efbe890e585f3ac47c92d60b8ddef6722cb93c268e9910597002f29268a75177362b78c4624b8141d96e5f129f8f03cf78d0787d423aada502f2ef63cbf0b8e6d63f73e30c0bd1eb0ae4bd0ac0063c2c41b03b38951d06e6b", 0x71}, {&(0x7f0000907000)="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", 0x1000}], 0x4, &(0x7f00004fc000)=[{0xe0, 0x115, 0xfff, "ec28edba853f918814100cefab33ccf52f4d56c51e1973e12c3da36e486a91de5fb2d942db49ace671b899fa609c0c62678d5ceb78928accae730526d233a036602e58ba06fbaff316b576b23cca0a1e51895aa4e7b4ec1eacdeeb3b68e362abb49dd37120963d7040321ced3dd6df21a578e6f3454dcd123afa06192432c95cca3babdfd12fef7eb6cddb06a5beb8d8b70bf9acd7eb8b0dc53a42e3e91a3134701e401117a714196c122a92d5a7ef54e6fe4fb18350f5af719629aa05c94c31b150d577072391afb4f9ce90cac432"}, {0xd8, 0x10d, 0x1, "a6909a41ba41760ae60b3a0ddc2f02816e9a3d869347885e5cb0108c67c60c933bb1280e78e6832636d71a48d9794031bf356b6215af6a69ca051d5d100c8574843b3d17579132fa459847531a2f459693e813ba98304ed7027bf4ae405adeca8bb25aa327a30a4466a6354b5ed522dba7e29f44edad7057c5d4428bd237e84ed6a7a5e352edd079ee6d47fcdea221fe081e99e9060b3a6cde9613e761589a7ea138d92c1e9851026f721534957d557b9d352161c694cdc8429e105d30602de61c6ad915"}], 0x2, 0x1}, 0x6}, {{&(0x7f0000873000-0xe)=@l2={0x1f, 0x7ff, {0x4, 0x1ff, 0x2, 0xf77e, 0xa600000000000000, 0x1ff}, 0x7, 0x9}, 0xe, &(0x7f0000d05000)=[{&(0x7f00001e3000-0xdc)="e11224d02fc94ee7c0676caf2e55bf8b8a8a6e3982786ea5c57453bbaaf7ba5ddbb3cafb0e01d162e3b75b36e417cba7c8481e74d803cde47539171d9636cab879e9f870faf807ef88e00315dfebdaa0e8d208dcb930628da60ad8dc916f89d5db12323709244a851749a044d12e27c677e7168fa271d4cdfd1c8c14dad55d114b14d414e647f53e82db71d9813b273f0c87bbdd0bdfc46d51882bc765be13aebae0c0cdd310347901d4e68e8525adeee7059f0043f05aa17068c29827c225834999bf504716a4995835e3334f45bd860b662a407883f0d37454eb3b", 0xdc}, {&(0x7f0000736000)="34a09b67b5a9a0b715b92b4baea15beaf48e5d4552b07755efecd210cc7aef63530fdae688654fbf51ffb69cfaecb4cc9e31966a0c32d0db98a01f4d95d0a2329f88a694a3007b6c63a8a1a9466ce02ba87a6da52b7c67ad038ce835ec42afecd9cd29d1d25eaf396c8e4099634fb508e85371bf9f988aca9a458cead1e5daf6af37de3b9efdca2c9d2065efcb39e56879f9439d60fbae25c286c8f865ffe0bfc090cfd4300a3860313b7e439f632fa824e1995bcc317b9932020b7c81bf865fa2ea22a273ad810b215b163cc08fa368201aab9d9ce6d3a4fc8999ca8c5324336374231f973d41b5566f087f87fa", 0xee}, {&(0x7f000029f000)="96ed4b3e3c87d104c9332bce0845cc62778c0e6d5d5af7762bf444faf6508c3b1a08ed83cdd5ae0a2ebb21b68f7f72e3d9e288d2d91b83b99b", 0x39}, {&(0x7f0000892000)="cb3dc002f33f80be0d2197c0ac2ad69842362d767dba60e51179943bedc7d38dd32062f78436f2f2377050bee3935c4ef3c605f84ea3f7b5d900835221a6400ff27b897bd3f6d538fc8f80754461d9d9181dc0a75ffff679c99a4b755c70493031af4de064711de74817204ca6ecaf6488fa15ff44b3095ca6a693a02d47ff3498949db8a6434f7dc87249fc194d28191fd9a14b88", 0x95}, {&(0x7f0000ac5000)="6a928e3c5b1a852f1ab759e8b2ca9f129ca1d5a02a3ff523b33074e8cd", 0x1d}, {&(0x7f0000747000-0x3b)="3bc306e6f7ed9559cdc930456691d20e99e8533e2ed47026af15090c2b083fb389e551ac27e5dd979825bfb58adaae24bac4239c6f9309c1695c5b", 0x3b}], 0x6, &(0x7f00002a7000)=[{0x58, 0x10e, 0x6, "45de1e9c044a9ddccae1595b2822980d521f1ecc13541711c52601ebd1a69ca427277b4bdbfb74293ad60c983b4bcc1f821ff119cd88ebac3819b670a393e388e97afd"}, {0xa0, 0x10c, 0xc74f, "6d2911ff0b6f8229f2773b979798162f1c178e10d2d6c6534d5bd0d5c589f15e8c2dd19529d22d269167f2b69645db8bd54f1921cd5d6a66fb68dfafdebe61d598b222357b8bdf7939d51facc43bfcc0ccf86041c51a96b982fa4654794da196d9f7041acfe3c7a0f1d2d9f2fbb1c61dbf71c3fbcb92da170125f58b094874e4cac07b337a82ae0b60"}, {0x68, 0x103, 0x3f, "7308f320d466e9b8f43cfc76197d1744d46fc1395667adbdf3f525600c41d68acbb3e2fa7bbc0847037ac2cdd9e3717141d772b82d9897b0f49dd7854aecd45821798851346e482c9d12cf1c6b75412c87af4342c3"}, {0xa0, 0x1bd, 0x7ff, "49be169d233de5888f19ad8cabdbf72e305154368659369700a942419cf9a6add820a9112c521ce3eb1ce3f339bed7846ec40c36d9af4120892088f0d72574355ea88f44c82eac7b90291348e6e63af23d18ac6e3fd719fa8cfb4d984b86d938cc98765e87711c3c4190737567771df4172e9d916dee3dc5a768a3caf9c7e5a4dc35999a44664a0770"}, {0x90, 0x108, 0x401, "9271fe17e895535423fa6172cfb96aa107a3f87e1ddbb08e8d233a8bbfd16bbfdb0e12ba53b76f1465e5ed87dc968babb6b564477c9990b1aacf8fd589d27849e054a0e77d59c5800647285348acba00c9dfc5fd75baa9cda16d2fcb066eec539ca9cb8f300550241fd64c84fac26ccd906ae067ff390f5c0c006d"}], 0x5, 0x8000}, 0xfffffffffffffc09}], 0x3, 0x20004000) fremovexattr(0xffffffffffffffff, &(0x7f0000371000-0x27)=@known="73797374656d2e61647669736500") r2 = gettid() bind(r1, &(0x7f0000b00000-0x10)=@nfc={0x27, 0x4, 0x8a8c, 0x4}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x800000000006) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000007d000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x1, @rand_addr=0x71, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r4 = syz_open_dev$sg(&(0x7f00000a2000-0x9)="2f6465762f73672300", 0xfffffffffffffff7, 0x60000) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000c2d000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00008bf000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x301}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000322000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r2) getpgid(r2) mkdir(&(0x7f0000000000)="2e2f66696c653000", 0x0) pivot_root(&(0x7f000005b000)="2e2f66696c653000", &(0x7f0000ff6000)="2e2f66696c65302f66696c653000") bind$inet6(r3, &(0x7f00003b5000)={0xa, 0x2, 0x6, @loopback={0x0, 0x1}, 0x400}, 0x1c) mount(&(0x7f0000061000)="2e2f66696c653000", &(0x7f0000048000-0x8)="2e2f66696c653000", &(0x7f0000060000-0x6)="72616d667300", 0x4000, &(0x7f0000061000)="") r5 = open(&(0x7f0000fca000)="2e2f66696c653000", 0xfffffffffffffffd, 0xff) sched_yield() readv(r1, &(0x7f00006bb000)=[{&(0x7f0000b9a000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00007a9000-0x7a)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7a}, {&(0x7f0000530000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcb}], 0x3) keyctl$revoke(0x3, 0xfffffffffffffffe) mkdirat(r5, &(0x7f00008b7000-0x8)="2e2f66696c653000", 0x0) [ 116.859170] binder: 21605:21610 got transaction with invalid parent offset or type [ 116.867731] binder: 21605:21610 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 116.912792] binder_alloc: binder_alloc_mmap_handler: 21605 20000000-20002000 already mapped failed -16 [ 116.925301] binder: BINDER_SET_CONTEXT_MGR already set [ 116.925316] binder: 21605:21628 ioctl 40046207 0 returned -16 [ 116.948557] binder_alloc: 21605: binder_alloc_buf, no vma [ 116.954481] binder: 21605:21628 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000cb2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) socket(0x3, 0xa, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 117.011691] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.017696] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:37:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) futex(&(0x7f0000ced000-0x4)=0x4, 0x4, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000027000)=0x0, 0x0) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) [ 117.091291] binder: 21660:21661 got transaction with invalid parent offset or type [ 117.100212] binder: 21660:21661 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) 2017/12/02 04:37:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r6, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r6, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 117.174154] binder_alloc: binder_alloc_mmap_handler: 21660 20000000-20002000 already mapped failed -16 [ 117.183846] binder: BINDER_SET_CONTEXT_MGR already set [ 117.183856] binder: 21660:21676 ioctl 40046207 0 returned -16 [ 117.199222] binder_alloc: 21660: binder_alloc_buf, no vma [ 117.204959] binder: 21660:21676 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000cb2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) setsockopt$llc_int(r6, 0x10c, 0x12, &(0x7f000014b000-0x4)=0xe7, 0x4) [ 117.261479] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.268405] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r6, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r6, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 117.311253] binder: 21715:21716 got transaction with invalid parent offset or type [ 117.325907] binder: 21715:21716 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r6, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r6, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 117.360664] binder_alloc: binder_alloc_mmap_handler: 21715 20000000-20002000 already mapped failed -16 [ 117.370254] binder: BINDER_SET_CONTEXT_MGR already set [ 117.370264] binder: 21715:21731 ioctl 40046207 0 returned -16 [ 117.383416] binder_alloc: 21715: binder_alloc_buf, no vma [ 117.383441] binder: 21715:21731 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000cb2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r6, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r6, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000f000)=0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) [ 117.434868] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.440577] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.470994] binder_alloc: 21758: binder_alloc_buf, no vma 2017/12/02 04:37:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 117.484058] binder: 21758:21760 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r1, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r5, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r5, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000435000-0x4)={0x0}, &(0x7f000084a000-0x4)=0x4) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r6, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 117.532769] binder: BINDER_SET_CONTEXT_MGR already set [ 117.538847] binder: 21758:21772 ioctl 40046207 0 returned -16 [ 117.549530] binder_alloc: 21758: binder_alloc_buf, no vma [ 117.561860] binder: 21758:21760 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) gettid() 2017/12/02 04:37:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r1, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r5, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r5, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 117.602518] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.608647] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:37:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000e62000+0x68a)=0xd16, 0x4) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 117.676058] binder: 21801:21807 got transaction with invalid parent offset or type [ 117.684732] binder: 21801:21807 transaction failed 29201/-22, size 80-16 line 3055 [ 117.706225] binder: BINDER_SET_CONTEXT_MGR already set [ 117.711858] binder: 21801:21824 ioctl 40046207 0 returned -16 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r1, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r5, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r5, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r2, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 117.726564] binder_alloc: 21801: binder_alloc_buf, no vma [ 117.733244] binder: 21801:21807 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00002fd000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 117.789272] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.796311] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.816983] binder: 21852:21853 got transaction with invalid parent offset or type 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) signalfd4(r1, &(0x7f0000cd4000)={0x40}, 0x8, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={0xffffffffffffffff, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 117.844330] binder: 21852:21853 transaction failed 29201/-22, size 80-16 line 3055 [ 117.879276] binder: BINDER_SET_CONTEXT_MGR already set [ 117.884924] binder: 21852:21863 ioctl 40046207 0 returned -16 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r3, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f0000076000-0x8)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r4, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 117.891221] binder_alloc: binder_alloc_mmap_handler: 21852 20000000-20002000 already mapped failed -16 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:58 executing program 2: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000065000-0x8)="2e2f66696c653000", &(0x7f00006f0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r4, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 117.958413] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r3, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r4, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 118.007156] binder: 21903:21907 got transaction with invalid parent offset or type [ 118.015364] binder: 21903:21907 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r3, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000d8d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) [ 118.068792] binder: BINDER_SET_CONTEXT_MGR already set [ 118.080084] binder: 21903:21915 ioctl 40046207 0 returned -16 [ 118.092301] binder_alloc: 21903: binder_alloc_buf, no vma [ 118.098283] binder: 21903:21907 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) lstat(&(0x7f000048c000-0x8)="2e2f66696c653000", &(0x7f000083b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r3, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 118.147995] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.154865] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r3, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 118.207400] binder: 21949:21954 got transaction with invalid parent offset or type [ 118.215708] binder: 21949:21954 transaction failed 29201/-22, size 80-16 line 3055 [ 118.246399] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) fcntl$setstatus(r1, 0x4, 0x4400) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 118.252413] binder: 21949:21954 ioctl 40046207 0 returned -16 [ 118.262158] binder_alloc: 21949: binder_alloc_buf, no vma [ 118.273381] binder: 21949:21954 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r3, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r6, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r5, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r6, 0x9) getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r4, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000ab4000)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000eb9000)="2f6465762f7667615f6172626974657200", 0xa003, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 118.326180] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.332767] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.366173] binder: 22003:22005 got transaction with invalid parent offset or type 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r0, r1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 118.386489] binder: 22003:22005 transaction failed 29201/-22, size 80-16 line 3055 [ 118.424672] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r2, r3) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000087c000-0xc)={0x0, @multicast2=0x0, @empty=0x0}, &(0x7f00002cd000)=0xc) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r0, r1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 118.430183] binder_alloc: binder_alloc_mmap_handler: 22003 20000000-20002000 already mapped failed -16 [ 118.446194] binder: 22003:22017 ioctl 40046207 0 returned -16 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) getresgid(&(0x7f0000b69000-0x4)=0x0, &(0x7f0000c68000)=0x0, &(0x7f00002af000)=0x0) 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) memfd_create(&(0x7f0000ec2000-0x9)="2f6465762f72746300", 0x3) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "a810c18262a17683", "55e7de8f981d08eee2db3e3a7bb763aebed3bfe1ee7053bdec023c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 118.496907] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r0, r1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 118.547480] binder: 22052:22058 got transaction with invalid parent offset or type [ 118.558375] binder: 22052:22058 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:58 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000907000-0x4)=r3, 0x4) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:37:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 118.602819] binder: BINDER_SET_CONTEXT_MGR already set [ 118.608608] binder_alloc: binder_alloc_mmap_handler: 22052 20000000-20002000 already mapped failed -16 [ 118.640137] binder: 22052:22073 ioctl 40046207 0 returned -16 2017/12/02 04:37:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00001f2000)={0x0, 0x0, 0x0}, &(0x7f00001ea000-0x4)=0xc) 2017/12/02 04:37:58 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r0, r1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) socket(0x3, 0xa, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 118.665139] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.694475] binder: 22107:22108 got transaction with invalid parent offset or type [ 118.707906] binder: 22107:22108 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) socket(0x3, 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r0, r1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xa9b0, 0xfb1e, 0xbea5, 0x9, 0x1d1, 0x1ff, 0x5]}) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r0 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 118.760325] binder: BINDER_SET_CONTEXT_MGR already set [ 118.766591] binder_alloc: binder_alloc_mmap_handler: 22107 20000000-20002000 already mapped failed -16 [ 118.780603] binder: 22107:22120 ioctl 40046207 0 returned -16 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x200, 0x0) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000ba6000-0x8)={0x0, 0x0}) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r1, r2) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 118.837116] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 118.877469] binder: 22161:22164 got transaction with invalid parent offset or type [ 118.889624] binder: 22161:22164 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00002fe000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000003, 0x0) r1 = socket(0x3, 0xa, 0x0) setsockopt(r1, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) write(r0, &(0x7f0000ed2000-0x1)="73", 0x1) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x200, 0x0) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 118.918606] binder_alloc: binder_alloc_mmap_handler: 22161 20000000-20002000 already mapped failed -16 [ 118.918609] binder: BINDER_SET_CONTEXT_MGR already set [ 118.918618] binder: 22161:22179 ioctl 40046207 0 returned -16 [ 118.949480] binder_alloc: 22161: binder_alloc_buf, no vma [ 118.957177] binder: 22161:22179 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x14f, 0x40000) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 119.005132] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.011313] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.032884] binder: 22212:22213 got transaction with invalid parent offset or type [ 119.045418] binder: 22212:22213 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 1: syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 119.079399] binder_alloc: binder_alloc_mmap_handler: 22212 20000000-20002000 already mapped failed -16 [ 119.088947] binder: BINDER_SET_CONTEXT_MGR already set [ 119.088956] binder: 22212:22226 ioctl 40046207 0 returned -16 [ 119.111411] binder_alloc: 22212: binder_alloc_buf, no vma 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f000095b000-0x6)={0x0, 0x8, 0x10001}) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 119.111436] binder: 22212:22226 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) [ 119.176607] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.186891] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e36"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, ""}}}}}, 0x0) 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 119.216932] binder: 22262:22267 got transaction with invalid parent offset or type [ 119.237421] binder: 22262:22267 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x44, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db20"}}}}}, 0x0) 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x45, &(0x7f00006c9000)={@random="efa106a7290c", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100029, 0x0, @multicast2=0xe0000002, @empty=0x0, {[]}}, "11409d09db202e"}}}}}, 0x0) [ 119.280993] binder: BINDER_SET_CONTEXT_MGR already set [ 119.286832] binder: 22262:22284 ioctl 40046207 0 returned -16 [ 119.298289] binder_alloc: 22262: binder_alloc_buf, no vma [ 119.306309] binder: 22262:22267 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000, 0x400000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) [ 119.342811] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.349241] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x0, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 119.398931] binder: 22323:22324 got transaction with invalid parent offset or type [ 119.407659] binder: 22322:22331 got transaction with invalid parent offset or type [ 119.407708] binder: 22322:22331 transaction failed 29201/-22, size 80-16 line 3055 [ 119.435912] binder: 22323:22324 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 5: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = socket(0x3, 0xa, 0x0) setsockopt(r0, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) [ 119.441200] binder_alloc: binder_alloc_mmap_handler: 22322 20000000-20002000 already mapped failed -16 [ 119.441241] binder: BINDER_SET_CONTEXT_MGR already set [ 119.441248] binder: 22322:22339 ioctl 40046207 0 returned -16 [ 119.488909] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) fcntl$getown(r3, 0x9) lstat(&(0x7f0000fb7000)="2e2f66696c653000", &(0x7f0000f2a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000cc3000-0x8)="2e2f66696c653000", &(0x7f0000c42000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 119.489801] binder: BINDER_SET_CONTEXT_MGR already set [ 119.489810] binder: 22323:22342 ioctl 40046207 0 returned -16 [ 119.492220] binder_alloc: 22323: binder_alloc_buf, no vma [ 119.492241] binder: 22323:22324 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000e000-0x78)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x80000040fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, 0xffffffffffffffff, 0xe) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) 2017/12/02 04:37:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:37:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 119.529661] binder: 22363:22366 got transaction with invalid parent offset or type [ 119.530212] binder: 22363:22366 transaction failed 29201/-22, size 80-16 line 3055 [ 119.550137] binder_alloc: binder_alloc_mmap_handler: 22363 20000000-20002000 already mapped failed -16 [ 119.550181] binder: BINDER_SET_CONTEXT_MGR already set [ 119.550188] binder: 22363:22372 ioctl 40046207 0 returned -16 2017/12/02 04:37:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000c2b000-0x24)={0xffffffff00000001, 0x4, 0x7, 0x82, &(0x7f00007c0000-0x82)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6, &(0x7f0000a63000-0xd6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b, &(0x7f00006a9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) 2017/12/02 04:37:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) socket(0x3, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 119.556969] binder: BINDER_SET_CONTEXT_MGR already set [ 119.556978] binder: 22371:22373 ioctl 40046207 0 returned -16 [ 119.558973] binder_alloc: 22323: binder_alloc_buf, no vma [ 119.558995] binder: 22371:22373 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:37:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000c2b000-0x24)={0xffffffff00000001, 0x4, 0x7, 0x82, &(0x7f00007c0000-0x82)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6, &(0x7f0000a63000-0xd6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b, &(0x7f00006a9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) 2017/12/02 04:37:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:37:59 executing program 6: r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:37:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000c2b000-0x24)={0xffffffff00000001, 0x4, 0x7, 0x82, &(0x7f00007c0000-0x82)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6, &(0x7f0000a63000-0xd6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b, &(0x7f00006a9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) [ 119.584777] binder_alloc: binder_alloc_mmap_handler: 22371 20000000-20002000 already mapped failed -16 [ 119.584816] binder: BINDER_SET_CONTEXT_MGR already set [ 119.584823] binder: 22371:22381 ioctl 40046207 0 returned -16 [ 119.640991] binder: BINDER_SET_CONTEXT_MGR already set [ 119.641000] binder: 22387:22393 ioctl 40046207 0 returned -16 [ 119.642641] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.642663] binder: 22387:22393 transaction failed 29189/-3, size 80-16 line 2870 [ 119.672500] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/02 04:38:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000c2b000-0x24)={0xffffffff00000001, 0x4, 0x7, 0x82, &(0x7f00007c0000-0x82)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6, &(0x7f0000a63000-0xd6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b, &(0x7f00006a9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) [ 119.672508] binder: 22387:22393 ioctl 40046207 0 returned -16 [ 119.675070] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.675092] binder: 22387:22393 transaction failed 29189/-3, size 80-16 line 2870 [ 119.720468] binder: BINDER_SET_CONTEXT_MGR already set [ 119.720477] binder: 22422:22425 ioctl 40046207 0 returned -16 [ 119.722313] binder_alloc: 22363: binder_alloc_buf, no vma 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2000000003, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) fcntl$dupfd(r0, 0x406, r0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 119.722334] binder: 22422:22425 transaction failed 29189/-3, size 80-16 line 2870 [ 119.742245] binder: BINDER_SET_CONTEXT_MGR already set [ 119.742253] binder: 22422:22425 ioctl 40046207 0 returned -16 [ 119.743083] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.743103] binder: 22422:22425 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r4, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r3, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r4, 0x9) getuid() getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) [ 119.827448] binder: BINDER_SET_CONTEXT_MGR already set [ 119.827457] binder: 22449:22451 ioctl 40046207 0 returned -16 [ 119.830115] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.830173] binder: 22449:22451 transaction failed 29189/-3, size 80-16 line 2870 [ 119.868218] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/02 04:38:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) fcntl$getown(r5, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) [ 119.868227] binder: 22449:22451 ioctl 40046207 0 returned -16 [ 119.870501] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.870524] binder: 22449:22451 transaction failed 29189/-3, size 80-16 line 2870 [ 119.918538] binder: BINDER_SET_CONTEXT_MGR already set [ 119.918547] binder: 22475:22477 ioctl 40046207 0 returned -16 [ 119.921110] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.921132] binder: 22475:22477 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x3) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) [ 119.935796] binder: BINDER_SET_CONTEXT_MGR already set [ 119.935840] binder: 22475:22477 ioctl 40046207 0 returned -16 [ 119.951078] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.951130] binder: 22475:22477 transaction failed 29189/-3, size 80-16 line 2870 [ 119.989472] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000149000-0x4)=0x0, &(0x7f0000138000)=0x0, &(0x7f00006f3000-0x4)=0x0) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) [ 119.989482] binder: 22491:22493 ioctl 40046207 0 returned -16 [ 119.991978] binder_alloc: 22363: binder_alloc_buf, no vma [ 119.992005] binder: 22491:22493 transaction failed 29189/-3, size 80-16 line 2870 [ 120.032533] binder_alloc: binder_alloc_mmap_handler: 22491 20000000-20002000 already mapped failed -16 [ 120.032574] binder: BINDER_SET_CONTEXT_MGR already set [ 120.032582] binder: 22491:22508 ioctl 40046207 0 returned -16 [ 120.106582] binder: BINDER_SET_CONTEXT_MGR already set [ 120.118688] binder: 22532:22535 ioctl 40046207 0 returned -16 [ 120.118775] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.118835] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.118864] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.118910] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:38:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={0xffffffffffffffff, &(0x7f0000763000-0x2)="ffdd", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 120.118940] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.118985] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.119047] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.119092] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.119122] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.119167] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.119218] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.124883] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 120.124934] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.140043] binder: 22532:22555 transaction failed 29189/-22, size 80-16 line 2755 [ 120.243150] binder_alloc: binder_alloc_mmap_handler: 22532 20000000-20002000 already mapped failed -16 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) [ 120.258935] binder_alloc: 22532: binder_alloc_buf, no vma [ 120.264796] binder: 22532:22535 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() lstat(&(0x7f0000f2e000-0x8)="2e2f66696c653000", &(0x7f00004b1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00007d8000)={0x1000000000008c72, 0x4}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00007d8000)={0x1000000000008c72, 0x4}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 120.300306] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.306114] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.334837] binder: 22607:22612 got transaction with invalid parent offset or type 2017/12/02 04:38:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="", 0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00007d8000)={0x1000000000008c72, 0x4}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 120.366727] binder: 22607:22612 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000be7000-0x8)=0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f000081b000-0x10)={0x0, 0x0, 0x0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000106000)={0x2000, 0x100000, 0x0}) r2 = memfd_create(&(0x7f0000274000-0xa)="262b7070703147504c00", 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000f2a000-0x28)={@common="67726574617030000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00005c5000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1f, r3}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000dad000)={0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x14000, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000e88000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8, 0x20, 0x8, 0x0, 0x101, 0x40200042, r3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000115000-0x8)={0x0, 0x0, []}) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00007d8000)={0x1000000000008c72, 0x4}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500", 0x3) [ 120.418929] binder_alloc: binder_alloc_mmap_handler: 22607 20000000-20002000 already mapped failed -16 [ 120.429501] binder: BINDER_SET_CONTEXT_MGR already set [ 120.429510] binder: 22607:22623 ioctl 40046207 0 returned -16 [ 120.464098] binder_alloc: 22607: binder_alloc_buf, no vma [ 120.473236] binder: 22607:22623 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) gettid() fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d5", 0x4) 2017/12/02 04:38:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x0, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00007d8000)={0x1000000000008c72, 0x4}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1000000002, 0x78, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000fc0000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r1 = open(&(0x7f0000f9b000-0x8)="2e2f66696c653000", 0x141046, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000412000)="2f6465762f76637300", 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)="2f6465762f696e7075742f6576656e742300", 0x1, 0x101002) ftruncate(r1, 0x3) write$evdev(r1, &(0x7f0000d19000-0x60)=[{{0x0, 0xab4b}, 0x20000000001, 0x46, 0x2}, {{0x2, 0x6}, 0x965, 0x100000001, 0x87315}, {{0xe3dc, 0x3}, 0x7, 0x7fffffff, 0x0}, {{0x0, 0x0}, 0xfffffffffffffffb, 0x9, 0xf65}], 0x60) ftruncate(r1, 0x2ce4) sendfile(r2, r1, 0x0, 0x72439a6b) socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x0, 0x0) socket(0xa, 0x802, 0x0) r3 = socket(0xa, 0x1, 0x100000000000) sysfs$1(0x1, &(0x7f0000f8f000)="266367726f75702d2e2700") r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000f4f000)="2f6465762f76637300", 0x200481, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000bdd000)={0x10000, 0xfffffffffffffff7}) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x2000000000000000, 0x2011, 0x0, 0x2, 0x0, []}) ioctl(r3, 0x8936, &(0x7f0000000000)="") 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 120.521543] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.531678] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.560948] binder: 22673:22682 got transaction with invalid parent offset or type 2017/12/02 04:38:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000be7000-0x8)=0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f000081b000-0x10)={0x0, 0x0, 0x0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000106000)={0x2000, 0x100000, 0x0}) r2 = memfd_create(&(0x7f0000274000-0xa)="262b7070703147504c00", 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000f2a000-0x28)={@common="67726574617030000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00005c5000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1f, r3}) getxattr(&(0x7f0000d15000-0x8)="2e2f66696c653000", &(0x7f000029e000)=@known="636f6d2e6170706c652e46696e646572496e666f00", &(0x7f00001ab000)="", 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x14000, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000e88000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8, 0x20, 0x8, 0x0, 0x101, 0x40200042, r3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000115000-0x8)={0x0, 0x0, []}) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.580348] binder: 22673:22682 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) openat$rtc(0xffffffffffffff9c, &(0x7f0000e05000-0x9)="2f6465762f72746300", 0x200000, 0x0) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 120.622787] binder_alloc: binder_alloc_mmap_handler: 22673 20000000-20002000 already mapped failed -16 [ 120.632402] binder: BINDER_SET_CONTEXT_MGR already set [ 120.632411] binder: 22673:22702 ioctl 40046207 0 returned -16 2017/12/02 04:38:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:01 executing program 1 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) capget(&(0x7f0000013000)={0x0, r2}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 120.678221] binder_alloc: 22673: binder_alloc_buf, no vma [ 120.687068] binder: 22673:22702 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:01 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:01 executing program 6 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x400, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 120.734854] FAULT_INJECTION: forcing a failure. [ 120.734854] name failslab, interval 1, probability 0, space 0, times 0 [ 120.746438] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.746449] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.773751] binder: 22738:22742 got transaction with invalid parent offset or type 2017/12/02 04:38:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) capset(&(0x7f0000013000-0x8)={0x19980330, r2}, &(0x7f0000002000)={0x200, 0x8, 0x81, 0x4, 0xdb7, 0x7}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:01 executing program 6 (fault-call:3 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 120.773795] binder: 22738:22742 transaction failed 29201/-22, size 80-16 line 3055 [ 120.790702] FAULT_INJECTION: forcing a failure. [ 120.790702] name failslab, interval 1, probability 0, space 0, times 0 [ 120.790710] CPU: 0 PID: 22746 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 120.790713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.790716] Call Trace: 2017/12/02 04:38:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) timerfd_gettime(r3, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:01 executing program 6 (fault-call:3 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:01 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 120.790727] dump_stack+0x194/0x257 [ 120.790742] ? arch_local_irq_restore+0x53/0x53 [ 120.790748] ? __fget+0xbb/0x580 [ 120.790779] should_fail+0x8c0/0xa40 [ 120.790794] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 120.790827] ? find_held_lock+0x39/0x1d0 2017/12/02 04:38:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 120.790857] ? lock_downgrade+0x980/0x980 [ 120.790897] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 120.790911] ? rcu_note_context_switch+0x710/0x710 [ 120.790936] should_failslab+0xec/0x120 [ 120.790947] __kmalloc_track_caller+0x5f/0x760 [ 120.790957] ? lock_downgrade+0x980/0x980 [ 120.790967] ? __might_fault+0xe0/0x1d0 [ 120.790973] ? map_lookup_elem+0x28d/0xc20 [ 120.790992] memdup_user+0x2c/0x90 [ 120.791010] map_lookup_elem+0x28d/0xc20 [ 120.791020] ? __check_object_size+0x25d/0x4f0 [ 120.791055] ? bpf_map_get_with_uref+0x110/0x110 [ 120.791072] ? __might_sleep+0x95/0x190 [ 120.791096] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 120.791108] ? selinux_bpf+0xd1/0x110 [ 120.791126] ? security_bpf+0x89/0xb0 [ 120.791157] SyS_bpf+0x600/0x4410 [ 120.791181] ? __fdget_pos+0x131/0x1a0 [ 120.791214] ? bpf_prog_get+0x20/0x20 [ 120.791234] ? perf_trace_lock+0x900/0x900 [ 120.791278] ? lock_downgrade+0x980/0x980 [ 120.791297] ? check_noncircular+0x20/0x20 [ 120.791344] ? find_held_lock+0x39/0x1d0 [ 120.791361] ? check_noncircular+0x20/0x20 [ 120.791403] ? lock_downgrade+0x980/0x980 [ 120.791417] ? __lock_is_held+0xbc/0x140 [ 120.791476] ? find_held_lock+0x39/0x1d0 [ 120.791532] ? lock_downgrade+0x980/0x980 [ 120.791551] ? get_pid_task+0xbc/0x140 [ 120.791569] ? proc_fail_nth_write+0xb5/0x260 [ 120.791588] ? map_files_get_link+0x3a0/0x3a0 [ 120.791596] ? __lock_is_held+0xbc/0x140 [ 120.791633] ? find_held_lock+0x39/0x1d0 [ 120.791689] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 120.791705] ? kernel_read+0x120/0x120 [ 120.791723] ? wait_for_completion+0x7b0/0x7b0 [ 120.791756] ? __lock_is_held+0xbc/0x140 [ 120.791833] ? __sb_end_write+0x9e/0xd0 [ 120.791867] ? fput+0xd2/0x140 [ 120.791885] ? SyS_write+0x184/0x220 [ 120.791932] ? do_fast_syscall_32+0x156/0xf9d [ 120.791960] ? bpf_prog_get+0x20/0x20 [ 120.791979] do_fast_syscall_32+0x3ee/0xf9d [ 120.792020] ? do_int80_syscall_32+0x9d0/0x9d0 [ 120.792058] ? lockdep_sys_exit+0x47/0xf0 [ 120.792073] ? syscall_return_slowpath+0x2ad/0x550 [ 120.792102] ? sysret32_from_system_call+0x5/0x3b [ 120.792137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.792184] entry_SYSENTER_compat+0x51/0x60 [ 120.792193] RIP: 0023:0xf7f0bc79 [ 120.792199] RSP: 002b:00000000f770708c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 120.792211] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000020976fe8 [ 120.792217] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.792222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.792228] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 120.792233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.806532] binder_alloc: binder_alloc_mmap_handler: 22738 20000000-20002000 already mapped failed -16 [ 120.808080] binder: BINDER_SET_CONTEXT_MGR already set [ 120.808088] binder: 22738:22747 ioctl 40046207 0 returned -16 [ 120.850909] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.855578] FAULT_INJECTION: forcing a failure. [ 120.855578] name failslab, interval 1, probability 0, space 0, times 0 [ 120.855589] CPU: 1 PID: 22764 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 120.855595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.855600] Call Trace: [ 120.855614] dump_stack+0x194/0x257 [ 120.855639] ? arch_local_irq_restore+0x53/0x53 [ 120.855651] ? perf_trace_lock_acquire+0x532/0x980 [ 120.855707] should_fail+0x8c0/0xa40 [ 120.855735] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 120.855745] ? map_lookup_elem+0x28d/0xc20 [ 120.855759] ? entry_SYSENTER_compat+0x51/0x60 [ 120.855801] ? find_held_lock+0x39/0x1d0 [ 120.855852] ? lock_downgrade+0x980/0x980 [ 120.855920] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 120.855947] ? rcu_note_context_switch+0x710/0x710 [ 120.855992] should_failslab+0xec/0x120 [ 120.856009] __kmalloc+0x63/0x760 [ 120.856026] ? kasan_check_write+0x14/0x20 [ 120.856038] ? _copy_from_user+0x99/0x110 [ 120.856053] ? map_lookup_elem+0x69b/0xc20 [ 120.856086] map_lookup_elem+0x69b/0xc20 [ 120.856121] ? bpf_map_get_with_uref+0x110/0x110 [ 120.856138] ? __might_sleep+0x95/0x190 [ 120.856164] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 120.856176] ? selinux_bpf+0xd1/0x110 [ 120.856194] ? security_bpf+0x89/0xb0 [ 120.856223] SyS_bpf+0x600/0x4410 [ 120.856239] ? __fdget_pos+0x131/0x1a0 [ 120.856269] ? bpf_prog_get+0x20/0x20 [ 120.856286] ? perf_trace_lock+0x900/0x900 [ 120.856325] ? lock_downgrade+0x980/0x980 [ 120.856343] ? check_noncircular+0x20/0x20 [ 120.856390] ? find_held_lock+0x39/0x1d0 [ 120.856407] ? check_noncircular+0x20/0x20 [ 120.856451] ? lock_downgrade+0x980/0x980 [ 120.856466] ? __lock_is_held+0xbc/0x140 [ 120.856525] ? find_held_lock+0x39/0x1d0 [ 120.856581] ? lock_downgrade+0x980/0x980 [ 120.856600] ? get_pid_task+0xbc/0x140 [ 120.856619] ? proc_fail_nth_write+0xb5/0x260 [ 120.856638] ? map_files_get_link+0x3a0/0x3a0 [ 120.856645] ? __lock_is_held+0xbc/0x140 [ 120.856693] ? find_held_lock+0x39/0x1d0 [ 120.856754] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 120.856772] ? kernel_read+0x120/0x120 [ 120.856791] ? wait_for_completion+0x7b0/0x7b0 [ 120.856829] ? __lock_is_held+0xbc/0x140 [ 120.856907] ? __sb_end_write+0x9e/0xd0 [ 120.856942] ? fput+0xd2/0x140 [ 120.856959] ? SyS_write+0x184/0x220 [ 120.857004] ? do_fast_syscall_32+0x156/0xf9d [ 120.857031] ? bpf_prog_get+0x20/0x20 [ 120.857049] do_fast_syscall_32+0x3ee/0xf9d [ 120.857090] ? do_int80_syscall_32+0x9d0/0x9d0 [ 120.857126] ? lockdep_sys_exit+0x47/0xf0 [ 120.857141] ? syscall_return_slowpath+0x2ad/0x550 [ 120.857169] ? sysret32_from_system_call+0x5/0x3b [ 120.857204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.857244] entry_SYSENTER_compat+0x51/0x60 [ 120.857252] RIP: 0023:0xf7f0bc79 [ 120.857258] RSP: 002b:00000000f770708c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 120.857270] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000020976fe8 [ 120.857276] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.857282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.857288] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 120.857293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.889750] binder: 22765:22766 got transaction with invalid parent offset or type [ 120.889799] binder: 22765:22766 transaction failed 29201/-22, size 80-16 line 3055 [ 120.933460] binder_alloc: binder_alloc_mmap_handler: 22765 20000000-20002000 already mapped failed -16 [ 120.934976] binder: BINDER_SET_CONTEXT_MGR already set [ 120.934985] binder: 22765:22777 ioctl 40046207 0 returned -16 [ 120.974199] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.541570] CPU: 1 PID: 22731 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 121.548894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.558211] Call Trace: [ 121.560770] dump_stack+0x194/0x257 [ 121.564370] ? arch_local_irq_restore+0x53/0x53 [ 121.569005] ? check_noncircular+0x20/0x20 [ 121.573217] should_fail+0x8c0/0xa40 [ 121.576904] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 121.581974] ? check_noncircular+0x20/0x20 [ 121.586184] ? find_held_lock+0x39/0x1d0 [ 121.590223] ? lock_downgrade+0x980/0x980 [ 121.594354] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 121.600207] ? rcu_note_context_switch+0x710/0x710 [ 121.605115] should_failslab+0xec/0x120 [ 121.609066] __kmalloc+0x63/0x760 [ 121.612488] ? __might_sleep+0x95/0x190 [ 121.616434] ? do_dccp_setsockopt.isra.7+0x1b2/0x690 [ 121.621510] do_dccp_setsockopt.isra.7+0x1b2/0x690 [ 121.626410] compat_dccp_setsockopt+0x6a/0x70 [ 121.630875] compat_sock_common_setsockopt+0xb2/0x140 [ 121.636037] ? dccp_setsockopt+0xd0/0xd0 [ 121.640080] compat_SyS_setsockopt+0x17c/0x410 [ 121.644632] ? sock_common_setsockopt+0xd0/0xd0 [ 121.649283] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 121.654017] ? do_fast_syscall_32+0x156/0xf9d [ 121.658483] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 121.663208] do_fast_syscall_32+0x3ee/0xf9d [ 121.667504] ? do_int80_syscall_32+0x9d0/0x9d0 [ 121.672069] ? lockdep_sys_exit+0x47/0xf0 [ 121.676185] ? syscall_return_slowpath+0x2ad/0x550 [ 121.681085] ? sysret32_from_system_call+0x5/0x3b [ 121.685899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 121.690723] entry_SYSENTER_compat+0x51/0x60 2017/12/02 04:38:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000441000)="2f6465762f7663732300", 0x1, 0x8000000000040000) sendto$ax25(r0, &(0x7f00004be000)="759826b4098bed92981cc6f60d42f53281b51b2c0a13c9fc3a17bc6417afb734e67ade3a7366c5501a6469a3268d94a0d959b415cd5672c1d74bc0b0ea9f1ebd3b73477d86188b000b109b3b6fcb0142fa202a0403b6b8e40d06319fd54ea63fa5", 0x61, 0x800, &(0x7f00001f6000)={0x3, {"65dcdfdc86744f"}, 0x8}, 0x10) socketpair$inet(0x2, 0x4, 0x3, &(0x7f0000782000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000030000)=0x7, 0x4) fdatasync(r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00006c9000)={0x0, 0x1d6, 0x2, 0x1, 0x8, 0x7}, &(0x7f0000070000-0x4)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000359000)={r3, 0x1b7b}, 0x6) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000073000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00008c1000-0x4)=0x0, &(0x7f0000b34000)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000653000)={0x7, &(0x7f0000628000)=[{0x43d, 0x3, 0xfff, 0x5}, {0x1, 0x577c, 0x1000, 0x2}, {0x5, 0x40, 0x42, 0x5}, {0x4, 0x58000000000, 0x3ff, 0xffffffffffffff5e}, {0x4, 0x5c9f, 0x2, 0x4}, {0x400, 0x5, 0x9, 0x5}, {0x40, 0x9, 0x4, 0x3}]}, 0x8) fcntl$setflags(r1, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00005c9000-0x8)=@assoc_value={r3, 0x7d990ae}, 0x8) 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) open(&(0x7f0000f8d000)="2e2f66696c653000", 0x40, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) accept4$llc(r4, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000385000-0x4)=0x10, 0x80800) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x0, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x6) 2017/12/02 04:38:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000962000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000)=0xe8) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:02 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 121.695099] RIP: 0023:0xf7f37c79 [ 121.698430] RSP: 002b:00000000f773308c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 121.706105] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 000000000000010d [ 121.713342] RDX: 0000000000000002 RSI: 00000000206fb000 RDI: 0000000000000005 [ 121.720579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.727815] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 121.735049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 04:38:02 executing program 6: r0 = getpgrp(0xffffffffffffffff) prctl$setptracer(0x59616d61, r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() setpriority(0x1, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) r2 = gettid() r3 = dup(r0) setsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(r2, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000be000-0xd)="2f6465762f7573626d6f6e2300", 0x7f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x100007, 0x0, 0x9, 0x4, 0x0, r0, 0x6}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) inotify_init1(0x80800) [ 121.788530] binder: 22804:22812 got transaction with invalid parent offset or type [ 121.800500] binder: 22802:22808 got transaction with invalid parent offset or type 2017/12/02 04:38:02 executing program 2 (fault-call:5 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) gettid() r2 = dup(r0) setsockopt$inet6_int(r2, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) socketpair(0x9, 0x6, 0x41, &(0x7f0000d98000)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000f0a000)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000b79000)={r2, 0x3}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) [ 121.800590] binder: 22802:22808 transaction failed 29201/-22, size 80-16 line 3055 [ 121.827815] binder: BINDER_SET_CONTEXT_MGR already set [ 121.827825] binder: 22802:22808 ioctl 40046207 0 returned -16 [ 121.830200] binder_alloc: 22802: binder_alloc_buf, no vma [ 121.830223] binder: 22802:22808 transaction failed 29189/-3, size 80-16 line 2870 [ 121.844732] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.845285] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.906237] binder_alloc: binder_alloc_mmap_handler: 22804 20000000-20002000 already mapped failed -16 [ 121.906303] binder: BINDER_SET_CONTEXT_MGR already set [ 121.906311] binder: 22804:22844 ioctl 40046207 0 returned -16 [ 121.906958] FAULT_INJECTION: forcing a failure. [ 121.906958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.906968] CPU: 0 PID: 22852 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 121.906974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.906978] Call Trace: [ 121.906993] dump_stack+0x194/0x257 [ 121.907022] ? arch_local_irq_restore+0x53/0x53 [ 121.907039] ? __isolate_free_page+0x8a0/0x8a0 [ 121.907049] ? perf_tp_event+0x7f4/0xae0 [ 121.907087] should_fail+0x8c0/0xa40 [ 121.907114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 121.907133] ? perf_tp_event+0xae0/0xae0 [ 121.907148] ? perf_tp_event+0x7f4/0xae0 [ 121.907219] ? perf_trace_lock_acquire+0x532/0x980 [ 121.907233] ? perf_tp_event+0x7f4/0xae0 [ 121.907292] ? find_get_context.isra.83+0x670/0x670 [ 121.907319] ? print_usage_bug+0x3f0/0x3f0 [ 121.907331] ? tracing_generic_entry_update+0x15a/0x1d0 [ 121.907380] should_fail_futex.part.10+0x1a/0x20 [ 121.907392] get_futex_key+0x3a7/0x1d50 [ 121.907408] ? perf_tp_event+0x7f4/0xae0 [ 121.907427] ? tracing_generic_entry_update+0x15a/0x1d0 [ 121.907460] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 121.907474] ? perf_tp_event+0x7f4/0xae0 [ 121.907513] ? lock_pin_lock+0x370/0x370 [ 121.907543] ? tracing_generic_entry_update+0x15a/0x1d0 [ 121.907570] ? perf_trace_buf_update+0x66/0xb0 [ 121.907590] ? perf_tp_event+0x7f4/0xae0 [ 121.907607] ? tracing_generic_entry_update+0x15a/0x1d0 [ 121.907658] ? tracing_generic_entry_update+0x15a/0x1d0 [ 121.907686] ? perf_trace_buf_update+0x66/0xb0 [ 121.907705] ? perf_tp_event+0x7f4/0xae0 [ 121.907765] ? find_get_context.isra.83+0x670/0x670 [ 121.907792] ? print_usage_bug+0x3f0/0x3f0 [ 121.907800] ? lock_acquire+0x1d5/0x580 [ 121.907811] ? alloc_set_pte+0x1102/0x1880 [ 121.907880] ? print_usage_bug+0x3f0/0x3f0 [ 121.907906] ? rcu_pm_notify+0xc0/0xc0 [ 121.907932] ? memset+0x31/0x40 [ 121.907952] ? __hrtimer_init+0x4e/0x140 [ 121.907976] ? hrtimer_init+0xb6/0x400 [ 121.907997] ? __hrtimer_run_queues+0xe10/0xe10 [ 121.908007] ? print_usage_bug+0x3f0/0x3f0 [ 121.908025] ? find_get_context.isra.83+0x670/0x670 [ 121.908045] ? memset+0x31/0x40 [ 121.908064] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 121.908089] futex_wait_requeue_pi.constprop.19+0x332/0x1300 [ 121.908131] ? futex_requeue+0x2370/0x2370 [ 121.908205] ? perf_tp_event+0xae0/0xae0 [ 121.908234] ? __hrtimer_init+0x140/0x140 [ 121.908297] ? check_noncircular+0x20/0x20 [ 121.908312] ? perf_trace_lock+0x900/0x900 [ 121.908385] do_futex+0x900/0x2280 [ 121.908399] ? check_noncircular+0x20/0x20 [ 121.908453] ? exit_robust_list+0x240/0x240 [ 121.908495] ? find_held_lock+0x39/0x1d0 [ 121.908539] ? lock_downgrade+0x980/0x980 [ 121.908558] ? get_pid_task+0xbc/0x140 [ 121.908577] ? proc_fail_nth_write+0xb5/0x260 [ 121.908593] ? map_files_get_link+0x3a0/0x3a0 [ 121.908600] ? __lock_is_held+0xbc/0x140 [ 121.908632] ? find_held_lock+0x39/0x1d0 [ 121.908678] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 121.908693] ? kernel_read+0x120/0x120 [ 121.908709] ? wait_for_completion+0x7b0/0x7b0 [ 121.908737] ? __lock_is_held+0xbc/0x140 [ 121.908800] compat_SyS_futex+0x27f/0x380 [ 121.908830] ? compat_SyS_get_robust_list+0x300/0x300 [ 121.908838] ? SyS_write+0x184/0x220 [ 121.908859] ? SyS_read+0x220/0x220 [ 121.908880] ? do_fast_syscall_32+0x156/0xf9d [ 121.908903] ? compat_SyS_get_robust_list+0x300/0x300 [ 121.908919] do_fast_syscall_32+0x3ee/0xf9d [ 121.908951] ? do_int80_syscall_32+0x9d0/0x9d0 [ 121.908979] ? lockdep_sys_exit+0x47/0xf0 [ 121.908993] ? syscall_return_slowpath+0x2ad/0x550 [ 121.909020] ? sysret32_from_system_call+0x5/0x3b [ 121.909047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 121.909079] entry_SYSENTER_compat+0x51/0x60 [ 121.909087] RIP: 0023:0xf7facc79 [ 121.909092] RSP: 002b:00000000f778708c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 121.909102] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 121.909108] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 121.909113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.909124] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 2017/12/02 04:38:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000001000-0x1a)={0x57, 0x2, 0x6, {0xb02, 0x3}, {0x6, 0xfffffffeffffffff}, @const={0xc498, {0x0, 0x3, 0xff, 0x10000}}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000b3c000)="0000000000000000000000000000000000000000000000000000000000") setsockopt(r1, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:02 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:02 executing program 3 (fault-call:5 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) gettid() dup(r0) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:02 executing program 2 (fault-call:5 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) [ 121.909130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.909250] binder_alloc: 22804: binder_alloc_buf, no vma [ 121.909274] binder: 22804:22825 transaction failed 29189/-3, size 80-16 line 2870 [ 122.364885] binder: 22804:22812 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f00009e2000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0xa201, 0x4000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sendmsg(r2, &(0x7f0000bd1000-0x1c)={&(0x7f0000db3000)=@nl={0x10, 0x0, 0x8, 0x40}, 0xc, &(0x7f0000a0e000)=[{&(0x7f0000c2d000)="01a164cfdee5468d9ac9b703decb55526972f623044650ec0b473b08af7288394653126844ad557c8e979cada8c33580c862ebf866b3cc0069c802", 0x3b}, {&(0x7f0000635000-0x33)="76053e6b125b83ae6e33d54d1686e1d25280dfd6edd78a4580220d8d770aded637e45c7f18aff39ecd030be693cdbc1eb30366", 0x33}, {&(0x7f0000f64000-0x22)="64114f0aef2607543cfb46081f2b69811094edb71963b0f020967cf758a5bd76603a", 0x22}, {&(0x7f0000094000)="3891acd3b847fbd4e6199d341e3cb87c72b9c3ae29277289246f8c65fc3b07578e4b9819ce081a6ac0ae39ee4ae0f488fcd2e953d85bee82eac2a5cb3d7552b43a2496aa9b5c5c9b32918722ced43bcb4296c71610fd9735a3694431cc13b8373152ef78aa4b19e825989a46d52b1ba62909e868d1d48d51c22f6f7063851ab410d4e469fd61d3bc162a9d990cc82f3b1ebde82a184380310155aa75e24a562b396e3f8bdee927798834bde1819aa349e041a8ee800a05df46d832995c6c377c1acfd55caeadee4cf3c66fb50099b7a68b61aa42790673c090", 0xd9}, {&(0x7f0000d9a000)="c43db62f280478de7c785e44095b092541119ab9c15c934f7b7d28e004aa6a931e56e10769c9400de73c7562eef9ffa60519ccebbd986215d0fa5be5314bf39b759c58bc6678a2dc167f61f0510a11edbb1fa9276d9b5b5e22e93981c299150718cfe9f0c09ff559da2b66e02fc3ac5637d5ddbbfde80b52d1d7b16a1d1c41cf08ec89bb6f85a74f85210cbfd79d481b23475ce3494c969c3bd25f735064271677e82bfe844eeea3d51e2cff3383c7341f9e1bd417fa94edf982196799083554bd74c71c0048364f31e2a69c8c645354b8879faf9ba2f84d75f41bb9", 0xdc}, {&(0x7f0000881000)="44aeaf208e350da4cf974ab6feeeafd5a9723ed31cac9ab83688fb76e23e3ae00bb8f4a55798f6950b5c3e8b52530da42729ae96dbd17948457a5d4ff6563c9b474f05cc1ce042bdae5275f68a8b3de69e35b8f54153858e094a02daf8d8d6ddea754c036c8c01e3d3054179ff07124e7803feb8e60386fe7a90b0fb40301941f81af02f8dc7c5e0327e2739dbfcc6f8386666e71944b3d03b654603", 0x9c}], 0x6, &(0x7f0000c28000-0x30c0)=[{0x100c, 0x104, 0x6, "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"}, {0x100c, 0x100, 0xfa86, "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"}, {0x9c, 0x115, 0x6, "f0710cd96b7df44d811cf636571048b804341db55d1f16b28a829a961d0b4923b7e8616f08133a178218aae54c09b787574d0b7408c498e4f5014ad64d21eabc76a904c65fc81617e31fb8140f90dfeaded0119d90f759689f48e8c8a5ce547a02d4018a82c160f28c98289f1c2845019275bbb6e3c1fae33a179f872d5a9c85b3032075afc24ed4c1508533f14a"}, {0x100c, 0x0, 0xdf, "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"}], 0x30c0, 0x0}, 0x4004004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) poll(&(0x7f0000b0a000-0x20)=[{r0, 0x80, 0x0}, {r0, 0x4, 0x0}, {r0, 0x1103, 0x0}, {r0, 0x2000, 0x0}], 0x4, 0x1) r1 = add_key$user(&(0x7f0000f5a000)="7573657200", &(0x7f00009a3000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000c60000-0xa7)="7076090ac0b58c1f74d5fca6cb5b53550a4e9d88a7065bb91a56b44005790be0e54363b7b5d6e3f25c0c0d347f7190c408932225f454e56969f69ad48bb18607cfa09f8cd293d355b994d5a21f1a266a2ddc8d72165baec8c17ef24f5fdd87fe4e3722d5d571c49d28aa8cf18555c7f372678147190d2b1a1eef85609f1e0b9a02466099e562a8ad489ff56998136fb9f4f25a4b171b8ad9d1bbdc3fd745c0cd20d718fb90adf5", 0xa7, 0xfffffffffffffff9) fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000a25000)="6e65742f707479706500") ioctl$TCSETAF(r2, 0x5404, &(0x7f00005f0000-0x14)={0x2, 0x7, 0xffff, 0x9, 0x100, 0x40, 0xfffffffffffffff7, 0x6, 0x3, 0x10000}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a77000-0xf)="2f6465762f73657175656e63657200", 0x80, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000443000)={0x5, 0x20002000000000, 0x0, 0x633, 0x100}) keyctl$get_security(0x11, r1, &(0x7f000086b000-0x41)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x41) fcntl$setlease(r0, 0x400, 0x3) 2017/12/02 04:38:02 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) gettid() clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 122.391551] FAULT_INJECTION: forcing a failure. [ 122.391551] name failslab, interval 1, probability 0, space 0, times 0 [ 122.399931] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.399943] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000003c000-0x11)="2f6465762f7667615f6172626974657200", 0x80400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000af4000-0x10)={r0, 0x18, &(0x7f00004a3000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) linkat(r0, &(0x7f0000e5b000-0x8)="2e2f66696c653000", r0, &(0x7f0000704000)="2e2f66696c653000", 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f000057c000-0x6)={@multicast1=0x0, @multicast1=0x0}, &(0x7f0000421000-0x4)=0x8) 2017/12/02 04:38:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) [ 122.431585] binder: 22881:22884 got transaction with invalid parent offset or type [ 122.431632] binder: 22881:22884 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:02 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:02 executing program 2 (fault-call:5 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00002f3000-0xc)={0x2, 0xffffffffffffff9c, 0x1}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000ca3000)={0xa9, &(0x7f000098a000-0xa9)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) r2 = dup(r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00005f2000-0x8)={0x0, 0x7ff}, &(0x7f0000d5d000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f000073d000-0x98)={r3, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001, 0xfffffffffffffff8}, 0x98) [ 122.447769] FAULT_INJECTION: forcing a failure. [ 122.447769] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.447779] CPU: 0 PID: 22893 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 122.447784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.447787] Call Trace: [ 122.447801] dump_stack+0x194/0x257 [ 122.447817] ? arch_local_irq_restore+0x53/0x53 [ 122.447833] ? __isolate_free_page+0x8a0/0x8a0 [ 122.447859] should_fail+0x8c0/0xa40 [ 122.447875] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 122.447905] ? lock_pin_lock+0x370/0x370 [ 122.447917] ? lock_pin_lock+0x370/0x370 [ 122.447932] ? find_held_lock+0x39/0x1d0 [ 122.447944] ? perf_trace_lock_acquire+0xe3/0x980 [ 122.447954] ? __lock_acquire+0x6e9/0x47f0 [ 122.447981] ? __bpf_address_lookup+0x2b0/0x2b0 [ 122.448003] ? print_usage_bug+0x3f0/0x3f0 [ 122.448013] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 122.448020] ? __free_insn_slot+0x5c0/0x5c0 [ 122.448045] should_fail_futex.part.10+0x1a/0x20 [ 122.448054] get_futex_key+0x410/0x1d50 [ 122.448087] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 122.448119] ? lock_pin_lock+0x370/0x370 [ 122.448140] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 122.448148] ? __lock_acquire+0x6e9/0x47f0 [ 122.448168] ? lock_page_memcg+0x2bd/0x3b0 [ 122.448175] ? perf_trace_lock_acquire+0xe3/0x980 [ 122.448188] ? __lock_acquire+0x6e9/0x47f0 [ 122.448200] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 122.448224] ? __unlock_page_memcg+0x72/0x100 [ 122.448235] ? unlock_page_memcg+0x2c/0x40 [ 122.448246] ? page_add_file_rmap+0x5b7/0xa90 [ 122.448260] ? page_add_new_anon_rmap+0x750/0x750 [ 122.448269] ? print_usage_bug+0x3f0/0x3f0 [ 122.448277] ? print_usage_bug+0x3f0/0x3f0 [ 122.448303] ? perf_trace_lock_acquire+0xe3/0x980 [ 122.448327] ? print_usage_bug+0x3f0/0x3f0 [ 122.448334] ? lock_acquire+0x1d5/0x580 [ 122.448342] ? alloc_set_pte+0x1102/0x1880 [ 122.448371] ? reacquire_held_locks+0x201/0x3e0 [ 122.448379] ? alloc_set_pte+0x1102/0x1880 [ 122.448394] ? print_usage_bug+0x3f0/0x3f0 [ 122.448411] ? rcu_pm_notify+0xc0/0xc0 [ 122.448426] ? memset+0x31/0x40 [ 122.448439] ? __hrtimer_init+0x4e/0x140 [ 122.448454] ? hrtimer_init+0xb6/0x400 [ 122.448468] ? __hrtimer_run_queues+0xe10/0xe10 [ 122.448477] ? print_usage_bug+0x3f0/0x3f0 [ 122.448485] ? wake_up_page_bit+0x530/0x530 [ 122.448506] ? memset+0x31/0x40 [ 122.448521] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 122.448541] futex_wait_requeue_pi.constprop.19+0x332/0x1300 [ 122.448566] ? futex_requeue+0x2370/0x2370 [ 122.448594] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 122.448630] ? check_noncircular+0x20/0x20 [ 122.448649] ? __hrtimer_init+0x140/0x140 [ 122.448665] ? check_noncircular+0x20/0x20 [ 122.448704] ? check_noncircular+0x20/0x20 [ 122.448716] ? perf_trace_lock+0x900/0x900 [ 122.448770] do_futex+0x900/0x2280 [ 122.448783] ? check_noncircular+0x20/0x20 [ 122.448820] ? exit_robust_list+0x240/0x240 [ 122.448850] ? find_held_lock+0x39/0x1d0 [ 122.448883] ? lock_downgrade+0x980/0x980 [ 122.448895] ? get_pid_task+0xbc/0x140 [ 122.448908] ? proc_fail_nth_write+0xb5/0x260 [ 122.448920] ? map_files_get_link+0x3a0/0x3a0 [ 122.448925] ? __lock_is_held+0xbc/0x140 [ 122.448949] ? find_held_lock+0x39/0x1d0 [ 122.448982] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 122.448994] ? kernel_read+0x120/0x120 [ 122.449006] ? wait_for_completion+0x7b0/0x7b0 [ 122.449029] ? __lock_is_held+0xbc/0x140 [ 122.449073] compat_SyS_futex+0x27f/0x380 [ 122.449090] ? compat_SyS_get_robust_list+0x300/0x300 [ 122.449094] ? SyS_write+0x184/0x220 [ 122.449112] ? SyS_read+0x220/0x220 [ 122.449124] ? do_fast_syscall_32+0x156/0xf9d [ 122.449142] ? compat_SyS_get_robust_list+0x300/0x300 [ 122.449154] do_fast_syscall_32+0x3ee/0xf9d [ 122.449179] ? do_int80_syscall_32+0x9d0/0x9d0 [ 122.449200] ? lockdep_sys_exit+0x47/0xf0 [ 122.449211] ? syscall_return_slowpath+0x2ad/0x550 [ 122.449228] ? sysret32_from_system_call+0x5/0x3b [ 122.449249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 122.449274] entry_SYSENTER_compat+0x51/0x60 [ 122.449281] RIP: 0023:0xf7facc79 [ 122.449286] RSP: 002b:00000000f776608c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 122.449295] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 122.449300] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 122.449305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.449309] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 122.449314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.455944] binder_alloc: binder_alloc_mmap_handler: 22881 20000000-20002000 already mapped failed -16 [ 122.455991] binder: BINDER_SET_CONTEXT_MGR already set [ 122.455998] binder: 22881:22892 ioctl 40046207 0 returned -16 [ 122.469435] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.486646] binder: 22901:22903 got transaction with invalid parent offset or type [ 122.486690] binder: 22901:22903 transaction failed 29201/-22, size 80-16 line 3055 [ 122.519946] binder_alloc: binder_alloc_mmap_handler: 22901 20000000-20002000 already mapped failed -16 [ 122.520106] binder: BINDER_SET_CONTEXT_MGR already set [ 122.520114] binder: 22901:22905 ioctl 40046207 0 returned -16 [ 122.541214] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.574472] FAULT_INJECTION: forcing a failure. [ 122.574472] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.574482] CPU: 0 PID: 22922 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 122.574488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.574492] Call Trace: [ 122.574506] dump_stack+0x194/0x257 [ 122.574529] ? arch_local_irq_restore+0x53/0x53 [ 122.574544] ? __isolate_free_page+0x8a0/0x8a0 [ 122.574554] ? perf_tp_event+0x7f4/0xae0 [ 122.574590] should_fail+0x8c0/0xa40 [ 122.574613] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 122.574626] ? perf_tp_event+0xae0/0xae0 [ 122.574638] ? perf_tp_event+0x7f4/0xae0 [ 122.574700] ? perf_trace_lock_acquire+0x532/0x980 [ 122.574713] ? perf_tp_event+0x7f4/0xae0 [ 122.574746] ? get_user_pages_fast+0x277/0x340 [ 122.574765] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 122.574780] ? trace_hardirqs_on+0xd/0x10 [ 122.574791] ? get_user_pages_fast+0x14e/0x340 [ 122.574815] ? __get_user_pages_fast+0x360/0x360 [ 122.574859] should_fail_futex.part.10+0x1a/0x20 [ 122.574869] get_futex_key+0x142f/0x1d50 [ 122.574885] ? perf_tp_event+0x7f4/0xae0 [ 122.574925] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 122.574937] ? perf_tp_event+0x7f4/0xae0 [ 122.574971] ? lock_pin_lock+0x370/0x370 [ 122.575004] ? tracing_generic_entry_update+0x15a/0x1d0 [ 122.575029] ? perf_trace_buf_update+0x66/0xb0 [ 122.575047] ? perf_tp_event+0x7f4/0xae0 [ 122.575064] ? tracing_generic_entry_update+0x15a/0x1d0 [ 122.575117] ? tracing_generic_entry_update+0x15a/0x1d0 [ 122.575142] ? perf_trace_buf_update+0x66/0xb0 [ 122.575161] ? perf_tp_event+0x7f4/0xae0 [ 122.575218] ? find_get_context.isra.83+0x670/0x670 [ 122.575245] ? print_usage_bug+0x3f0/0x3f0 [ 122.575253] ? lock_acquire+0x1d5/0x580 [ 122.575265] ? alloc_set_pte+0x1102/0x1880 [ 122.575340] ? print_usage_bug+0x3f0/0x3f0 [ 122.575363] ? rcu_pm_notify+0xc0/0xc0 [ 122.575387] ? memset+0x31/0x40 [ 122.575406] ? __hrtimer_init+0x4e/0x140 [ 122.575429] ? hrtimer_init+0xb6/0x400 [ 122.575447] ? __hrtimer_run_queues+0xe10/0xe10 [ 122.575457] ? print_usage_bug+0x3f0/0x3f0 [ 122.575474] ? find_get_context.isra.83+0x670/0x670 [ 122.575495] ? memset+0x31/0x40 [ 122.575514] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 122.575540] futex_wait_requeue_pi.constprop.19+0x332/0x1300 [ 122.575575] ? futex_requeue+0x2370/0x2370 [ 122.575658] ? perf_tp_event+0xae0/0xae0 [ 122.575690] ? __hrtimer_init+0x140/0x140 [ 122.575763] ? check_noncircular+0x20/0x20 [ 122.575778] ? perf_trace_lock+0x900/0x900 [ 122.575860] do_futex+0x900/0x2280 [ 122.575875] ? check_noncircular+0x20/0x20 [ 122.575931] ? exit_robust_list+0x240/0x240 [ 122.575974] ? find_held_lock+0x39/0x1d0 [ 122.576022] ? lock_downgrade+0x980/0x980 [ 122.576039] ? get_pid_task+0xbc/0x140 [ 122.576055] ? proc_fail_nth_write+0xb5/0x260 [ 122.576072] ? map_files_get_link+0x3a0/0x3a0 [ 122.576079] ? __lock_is_held+0xbc/0x140 [ 122.576123] ? find_held_lock+0x39/0x1d0 [ 122.576178] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 122.576195] ? kernel_read+0x120/0x120 [ 122.576212] ? wait_for_completion+0x7b0/0x7b0 [ 122.576245] ? __lock_is_held+0xbc/0x140 [ 122.576322] compat_SyS_futex+0x27f/0x380 [ 122.576356] ? compat_SyS_get_robust_list+0x300/0x300 [ 122.576363] ? SyS_write+0x184/0x220 [ 122.576388] ? SyS_read+0x220/0x220 [ 122.576410] ? do_fast_syscall_32+0x156/0xf9d [ 122.576438] ? compat_SyS_get_robust_list+0x300/0x300 [ 122.576454] do_fast_syscall_32+0x3ee/0xf9d [ 122.576492] ? do_int80_syscall_32+0x9d0/0x9d0 [ 122.576528] ? lockdep_sys_exit+0x47/0xf0 [ 122.576543] ? syscall_return_slowpath+0x2ad/0x550 [ 122.576570] ? sysret32_from_system_call+0x5/0x3b [ 122.576601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 122.576638] entry_SYSENTER_compat+0x51/0x60 [ 122.576647] RIP: 0023:0xf7facc79 [ 122.576652] RSP: 002b:00000000f778708c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 122.576662] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 122.576667] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 122.576673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.576678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 122.576683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.431547] CPU: 0 PID: 22872 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 123.438872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.448192] Call Trace: [ 123.450752] dump_stack+0x194/0x257 [ 123.454355] ? arch_local_irq_restore+0x53/0x53 [ 123.459018] should_fail+0x8c0/0xa40 [ 123.462710] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.467795] ? print_usage_bug+0x3f0/0x3f0 [ 123.472008] ? find_held_lock+0x39/0x1d0 [ 123.476066] ? __lock_is_held+0xbc/0x140 [ 123.480128] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 123.485987] ? rcu_note_context_switch+0x710/0x710 [ 123.490905] should_failslab+0xec/0x120 [ 123.494851] kmem_cache_alloc_node_trace+0x5a/0x760 [ 123.499865] __kmalloc_node+0x33/0x70 [ 123.503645] kvmalloc_node+0x99/0xd0 [ 123.507334] iov_iter_get_pages_alloc+0x7be/0x1340 [ 123.512255] ? copyout+0xb0/0xb0 [ 123.515602] ? lock_acquire+0x1d5/0x580 [ 123.519544] ? pipe_lock+0x56/0x70 [ 123.523073] ? lock_release+0xda0/0xda0 [ 123.527028] ? rcu_note_context_switch+0x710/0x710 [ 123.531936] ? __might_sleep+0x95/0x190 [ 123.535882] ? pipe_lock+0x56/0x70 [ 123.539393] ? iov_iter_pipe+0x9f/0x2c0 [ 123.543346] default_file_splice_read+0x1cf/0xae0 [ 123.548160] ? __fget+0xbb/0x580 [ 123.551517] ? do_splice_direct+0x3d0/0x3d0 [ 123.555812] ? __lock_is_held+0xbc/0x140 [ 123.559878] ? __lock_is_held+0xbc/0x140 [ 123.563935] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 123.569796] ? rcu_note_context_switch+0x710/0x710 [ 123.574704] ? __might_sleep+0x95/0x190 [ 123.578654] ? _cond_resched+0x14/0x30 [ 123.582511] ? __inode_security_revalidate+0xd9/0x130 [ 123.587672] ? avc_policy_seqno+0x9/0x20 [ 123.591704] ? selinux_file_permission+0x82/0x460 [ 123.596524] ? security_file_permission+0x89/0x1f0 [ 123.601431] ? do_splice_direct+0x3d0/0x3d0 [ 123.605727] do_splice_to+0x110/0x170 [ 123.609496] ? do_splice_to+0x110/0x170 [ 123.613448] SyS_splice+0x11a8/0x1630 [ 123.617216] ? __sb_end_write+0x9e/0xd0 [ 123.621190] ? compat_SyS_vmsplice+0x250/0x250 [ 123.625750] ? do_fast_syscall_32+0x156/0xf9d [ 123.630224] ? compat_SyS_vmsplice+0x250/0x250 [ 123.634778] do_fast_syscall_32+0x3ee/0xf9d [ 123.639095] ? do_int80_syscall_32+0x9d0/0x9d0 [ 123.643660] ? lockdep_sys_exit+0x47/0xf0 [ 123.647777] ? syscall_return_slowpath+0x2ad/0x550 [ 123.652683] ? sysret32_from_system_call+0x5/0x3b [ 123.657507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 123.662332] entry_SYSENTER_compat+0x51/0x60 [ 123.666707] RIP: 0023:0xf7f28c79 [ 123.670039] RSP: 002b:00000000f772408c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 123.677719] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000000000 [ 123.684958] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000200 [ 123.692196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2017/12/02 04:38:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000a38000)=0x2) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000452000)="73797374656d76626f786e6574316d696d655f7479706500", 0x2) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000001000-0x40)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$llc(r0, &(0x7f0000cfb000)={0x1a, 0x1e, 0x5, 0x0, 0x6, 0x2, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c91000)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = request_key(&(0x7f0000bfc000)="646e735f7265736f6c76657200", &(0x7f0000e65000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000107000-0x18)="73797374656d76626f786e6574316d696d655f7479706500", 0x0) keyctl$assume_authority(0x10, r3) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae64) mlock2(&(0x7f0000565000/0x4000)=nil, 0x4000, 0x1) r4 = request_key(&(0x7f00009e3000)="636966732e73706e65676f00", &(0x7f0000822000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00003fa000-0x2)="2800", 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) keyctl$search(0xa, r4, &(0x7f00002ea000)="6b657972696e6700", &(0x7f0000989000+0xb19)={0x73, 0x79, 0x7a, 0x2, 0x0}, r4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00008a3000)={0xaa, 0x2, 0x0}) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00002a1000-0x2c)={0x55, 0x1f, 0xfffffffffffeffff, {0x80000001, 0x5}, {0x6, 0x8000}, @period={0x5b, 0xff, 0x6, 0x101, 0x4, {0x4, 0x4, 0x0, 0x9}, 0x2, [0x6, 0x2]}}) close(r2) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000441000)="2f6465762f7663732300", 0x1, 0x8000000000040000) sendto$ax25(r0, &(0x7f00004be000)="759826b4098bed92981cc6f60d42f53281b51b2c0a13c9fc3a17bc6417afb734e67ade3a7366c5501a6469a3268d94a0d959b415cd5672c1d74bc0b0ea9f1ebd3b73477d86188b000b109b3b6fcb0142fa202a0403b6b8e40d06319fd54ea63fa5", 0x61, 0x800, &(0x7f00001f6000)={0x3, {"65dcdfdc86744f"}, 0x8}, 0x10) socketpair$inet(0x2, 0x4, 0x3, &(0x7f0000782000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000030000)=0x7, 0x4) fdatasync(r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00006c9000)={0x0, 0x1d6, 0x2, 0x1, 0x8, 0x7}, &(0x7f0000070000-0x4)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000359000)={r3, 0x1b7b}, 0x6) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000073000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00008c1000-0x4)=0x0, &(0x7f0000b34000)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000653000)={0x7, &(0x7f0000628000)=[{0x43d, 0x3, 0xfff, 0x5}, {0x1, 0x577c, 0x1000, 0x2}, {0x5, 0x40, 0x42, 0x5}, {0x4, 0x58000000000, 0x3ff, 0xffffffffffffff5e}, {0x4, 0x5c9f, 0x2, 0x4}, {0x400, 0x5, 0x9, 0x5}, {0x40, 0x9, 0x4, 0x3}]}, 0x8) fcntl$setflags(r1, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00005c9000-0x8)=@assoc_value={r3, 0x7d990ae}, 0x8) 2017/12/02 04:38:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0xf, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00003bc000-0xa)="2f6465762f7663732300", 0x800, 0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00009b3000-0x8c)={0x0, @in6={{0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000274000-0x4)=0x8c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000be1000)={r2, 0xc9}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000fa8000)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:04 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:04 executing program 2 (fault-call:5 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) [ 123.699436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 123.706676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 04:38:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00006a9000)="656e7669726f6e00") r1 = epoll_create(0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001000-0xc)={0x6, r1, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) mq_timedreceive(r0, &(0x7f0000bc8000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x10000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) r3 = syz_open_dev$vcsn(&(0x7f0000342000-0xa)="2f6465762f7663732300", 0x7d61, 0x40) setsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f00006a6000-0xbe)="4777c9513248fc8f87331972cc9f8cac0536302ea00e686b0cc99d7a24dccb3be1c37ae64396ad862faaa121962fe38de62d7d1c043c61bf094e1ca8402f22ce31af6d3ef31699f6d72c81c40a292955741369ad3dd85669963d3258d52e70c1b25062dfab81a59d7e8d4c1a2212f8618851a8f7a392f587051c565f9cc15a87dd61b6e003df230e5e93013062ff93c4e8b92eaa3a6cf422110169aad4d1dfab59c2761c87c8846073e05bfacdb0ea485b1f5d7a408d021ec8d38b95332b", 0xbe) r4 = dup2(r2, r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f000019e000)=@assoc_value={0x0, 0x0}, &(0x7f0000e87000-0x4)=0x8) 2017/12/02 04:38:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000894000)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000ae3000-0x8)={r2, 0x12}) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f00003ce000)={0x9, &(0x7f0000149000-0x48)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00009e6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f000080d000-0x8)={r5, 0xb}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000dd7000-0x14)={0x0, 0x5, 0x3, 0x2, 0x6, 0x5}, &(0x7f0000e37000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000feb000-0x10)={r6, 0x100, 0xd9, 0x7}, 0x10) splice(r0, 0x0, r4, 0x0, 0x200, 0x0) [ 123.754684] binder: 22926:22931 got transaction with invalid parent offset or type [ 123.785589] binder: 22926:22931 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:04 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:04 executing program 2 (fault-call:5 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00003ab000-0x8)="2e2f66696c653000", 0x40000, 0x8) ioctl$TIOCNOTTY(r0, 0x5422) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) fchdir(r0) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 123.795443] FAULT_INJECTION: forcing a failure. [ 123.795443] name fail_futex, interval 1, probability 0, space 0, times 0 2017/12/02 04:38:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r0, &(0x7f00003d5000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f000005c000-0x4)=0x10) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000704000)={0xd, 0xc929, 0x6, 0xffffffffffffffab, 0x5, 0xffffffffffffff9c, 0x3ff}, 0x1c) fremovexattr(r0, &(0x7f0000c5f000-0x1e)=@random={"62747266732e00", "776c616e3173656c66707070302a766d6e6574307b5e00"}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200, 0x0) [ 123.795453] CPU: 1 PID: 22946 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 123.795458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.795462] Call Trace: [ 123.795476] dump_stack+0x194/0x257 [ 123.795494] ? arch_local_irq_restore+0x53/0x53 [ 123.795527] should_fail+0x8c0/0xa40 [ 123.795545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.795576] ? __isolate_free_page+0x8a0/0x8a0 [ 123.795590] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.795612] ? should_fail+0x23b/0xa40 [ 123.795631] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.795663] ? lock_pin_lock+0x370/0x370 [ 123.795676] ? lock_pin_lock+0x370/0x370 [ 123.795692] ? find_held_lock+0x39/0x1d0 [ 123.795704] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.795713] ? rb_next+0x140/0x140 [ 123.795740] should_fail_futex.part.10+0x1a/0x20 [ 123.795749] get_futex_key+0x3a7/0x1d50 [ 123.795761] ? trace_hardirqs_on+0xd/0x10 [ 123.795785] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 123.795797] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 123.795818] ? get_futex_key_refs.isra.11+0x61/0xa0 [ 123.795832] ? get_futex_key+0x34f/0x1d50 [ 123.795867] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 123.795895] ? lock_pin_lock+0x370/0x370 [ 123.795918] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 123.795927] ? __lock_acquire+0x6e9/0x47f0 [ 123.795949] ? lock_page_memcg+0x2bd/0x3b0 [ 123.795957] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.795970] ? __lock_acquire+0x6e9/0x47f0 [ 123.795982] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 123.796009] ? __unlock_page_memcg+0x72/0x100 [ 123.796022] ? unlock_page_memcg+0x2c/0x40 [ 123.796040] ? print_usage_bug+0x3f0/0x3f0 [ 123.796050] ? print_usage_bug+0x3f0/0x3f0 [ 123.796059] ? print_usage_bug+0x3f0/0x3f0 [ 123.796068] ? print_usage_bug+0x3f0/0x3f0 [ 123.796119] ? print_usage_bug+0x3f0/0x3f0 [ 123.796129] ? __lock_acquire+0x6e9/0x47f0 [ 123.796144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 123.796155] ? check_noncircular+0x20/0x20 [ 123.796178] ? __lock_acquire+0x6e9/0x47f0 [ 123.796195] ? print_usage_bug+0x3f0/0x3f0 [ 123.796213] ? rcu_pm_notify+0xc0/0xc0 [ 123.796230] ? memset+0x31/0x40 [ 123.796244] ? __hrtimer_init+0x4e/0x140 [ 123.796261] futex_wait_setup+0xca/0x3d0 [ 123.796291] ? futex_wake+0x680/0x680 [ 123.796302] ? memset+0x31/0x40 [ 123.796318] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 123.796338] futex_wait_requeue_pi.constprop.19+0x3cc/0x1300 [ 123.796363] ? futex_requeue+0x2370/0x2370 [ 123.796391] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 123.796426] ? check_noncircular+0x20/0x20 [ 123.796444] ? __hrtimer_init+0x140/0x140 [ 123.796457] ? check_noncircular+0x20/0x20 [ 123.796494] ? check_noncircular+0x20/0x20 [ 123.796506] ? perf_trace_lock+0x900/0x900 [ 123.796567] do_futex+0x900/0x2280 [ 123.796582] ? check_noncircular+0x20/0x20 [ 123.796621] ? exit_robust_list+0x240/0x240 [ 123.796651] ? find_held_lock+0x39/0x1d0 [ 123.796685] ? lock_downgrade+0x980/0x980 [ 123.796698] ? get_pid_task+0xbc/0x140 [ 123.796712] ? proc_fail_nth_write+0xb5/0x260 [ 123.796726] ? map_files_get_link+0x3a0/0x3a0 [ 123.796733] ? __lock_is_held+0xbc/0x140 [ 123.796758] ? find_held_lock+0x39/0x1d0 [ 123.796794] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 123.796806] ? kernel_read+0x120/0x120 [ 123.796820] ? wait_for_completion+0x7b0/0x7b0 [ 123.796844] ? __lock_is_held+0xbc/0x140 [ 123.796893] compat_SyS_futex+0x27f/0x380 [ 123.796917] ? compat_SyS_get_robust_list+0x300/0x300 [ 123.796924] ? SyS_write+0x184/0x220 [ 123.796941] ? SyS_read+0x220/0x220 [ 123.796956] ? do_fast_syscall_32+0x156/0xf9d [ 123.796976] ? compat_SyS_get_robust_list+0x300/0x300 [ 123.796989] do_fast_syscall_32+0x3ee/0xf9d [ 123.797016] ? do_int80_syscall_32+0x9d0/0x9d0 [ 123.797031] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 123.797046] ? lockdep_sys_exit+0x47/0xf0 [ 123.797057] ? syscall_return_slowpath+0x2ad/0x550 [ 123.797077] ? sysret32_from_system_call+0x5/0x3b [ 123.797099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 123.797125] entry_SYSENTER_compat+0x51/0x60 [ 123.797133] RIP: 0023:0xf7facc79 [ 123.797138] RSP: 002b:00000000f778708c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 123.797148] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 123.797153] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 123.797158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.797162] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 123.797167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.861048] binder_alloc: binder_alloc_mmap_handler: 22926 20000000-20002000 already mapped failed -16 [ 123.861122] binder: BINDER_SET_CONTEXT_MGR already set [ 123.861128] binder: 22926:22967 ioctl 40046207 0 returned -16 [ 123.863599] binder_alloc: 22926: binder_alloc_buf, no vma [ 123.863623] binder: 22926:22950 transaction failed 29189/-3, size 80-16 line 2870 [ 123.955407] FAULT_INJECTION: forcing a failure. [ 123.955407] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.955417] CPU: 1 PID: 22990 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 123.955422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.955426] Call Trace: [ 123.955438] dump_stack+0x194/0x257 [ 123.955455] ? arch_local_irq_restore+0x53/0x53 [ 123.955486] should_fail+0x8c0/0xa40 [ 123.955501] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.955522] ? __isolate_free_page+0x8a0/0x8a0 [ 123.955535] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.955559] ? should_fail+0x23b/0xa40 [ 123.955575] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.955605] ? lock_pin_lock+0x370/0x370 [ 123.955615] ? lock_pin_lock+0x370/0x370 [ 123.955629] ? find_held_lock+0x39/0x1d0 [ 123.955640] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.955650] ? __lock_acquire+0x6e9/0x47f0 [ 123.955675] should_fail_futex.part.10+0x1a/0x20 [ 123.955683] get_futex_key+0x410/0x1d50 [ 123.955694] ? trace_hardirqs_on+0xd/0x10 [ 123.955725] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 123.955746] ? get_futex_key_refs.isra.11+0x61/0xa0 [ 123.955760] ? get_futex_key+0x34f/0x1d50 [ 123.955795] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 123.955825] ? lock_pin_lock+0x370/0x370 [ 123.955850] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 123.955859] ? __lock_acquire+0x6e9/0x47f0 [ 123.955880] ? lock_page_memcg+0x2bd/0x3b0 [ 123.955887] ? perf_trace_lock_acquire+0xe3/0x980 [ 123.955898] ? __lock_acquire+0x6e9/0x47f0 [ 123.955909] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 123.955930] ? __unlock_page_memcg+0x72/0x100 [ 123.955940] ? unlock_page_memcg+0x2c/0x40 [ 123.955951] ? page_add_file_rmap+0x5b7/0xa90 [ 123.955964] ? page_add_new_anon_rmap+0x750/0x750 [ 123.955975] ? print_usage_bug+0x3f0/0x3f0 [ 123.955983] ? print_usage_bug+0x3f0/0x3f0 [ 123.956028] ? print_usage_bug+0x3f0/0x3f0 [ 123.956034] ? lock_acquire+0x1d5/0x580 [ 123.956042] ? alloc_set_pte+0x1102/0x1880 [ 123.956071] ? reacquire_held_locks+0x201/0x3e0 [ 123.956079] ? alloc_set_pte+0x1102/0x1880 [ 123.956095] ? print_usage_bug+0x3f0/0x3f0 [ 123.956111] ? rcu_pm_notify+0xc0/0xc0 [ 123.956126] ? memset+0x31/0x40 [ 123.956140] ? __hrtimer_init+0x4e/0x140 [ 123.956157] futex_wait_setup+0xca/0x3d0 [ 123.956183] ? futex_wake+0x680/0x680 [ 123.956193] ? memset+0x31/0x40 [ 123.956208] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 123.956226] futex_wait_requeue_pi.constprop.19+0x3cc/0x1300 [ 123.956249] ? futex_requeue+0x2370/0x2370 [ 123.956275] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 123.956309] ? check_noncircular+0x20/0x20 [ 123.956326] ? __hrtimer_init+0x140/0x140 [ 123.956341] ? check_noncircular+0x20/0x20 [ 123.956375] ? check_noncircular+0x20/0x20 [ 123.956387] ? perf_trace_lock+0x900/0x900 [ 123.956437] do_futex+0x900/0x2280 [ 123.956448] ? check_noncircular+0x20/0x20 [ 123.956483] ? exit_robust_list+0x240/0x240 [ 123.956510] ? find_held_lock+0x39/0x1d0 [ 123.956540] ? lock_downgrade+0x980/0x980 [ 123.956557] ? get_pid_task+0xbc/0x140 [ 123.956570] ? proc_fail_nth_write+0xb5/0x260 [ 123.956582] ? map_files_get_link+0x3a0/0x3a0 [ 123.956589] ? __lock_is_held+0xbc/0x140 [ 123.956613] ? find_held_lock+0x39/0x1d0 [ 123.956645] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 123.956655] ? kernel_read+0x120/0x120 [ 123.956667] ? wait_for_completion+0x7b0/0x7b0 [ 123.956688] ? __lock_is_held+0xbc/0x140 [ 123.956732] compat_SyS_futex+0x27f/0x380 [ 123.956754] ? compat_SyS_get_robust_list+0x300/0x300 [ 123.956760] ? SyS_write+0x184/0x220 [ 123.956775] ? SyS_read+0x220/0x220 [ 123.956790] ? do_fast_syscall_32+0x156/0xf9d [ 123.956808] ? compat_SyS_get_robust_list+0x300/0x300 [ 123.956820] do_fast_syscall_32+0x3ee/0xf9d [ 123.956843] ? do_int80_syscall_32+0x9d0/0x9d0 [ 123.956852] ? _raw_spin_unlock_irq+0x56/0x70 [ 123.956874] ? syscall_return_slowpath+0x2ad/0x550 [ 123.956891] ? sysret32_from_system_call+0x5/0x3b [ 123.956910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 123.956933] entry_SYSENTER_compat+0x51/0x60 [ 123.956939] RIP: 0023:0xf7facc79 [ 123.956944] RSP: 002b:00000000f778708c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 123.956953] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 123.956958] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 123.956962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2017/12/02 04:38:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) fcntl$getown(r5, 0x9) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00007b1000-0xb)="2f6465762f766373612300", 0x7, 0x400082) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000413000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e4d000)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00005b0000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6, 0x3, 0x8001, 0x400, 0x0, 0x10, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:05 executing program 4: r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00006f8000-0x8)="2e2f66696c653000", 0x100, 0xd53b5169d832f500) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f00002e6000)="54", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00002bb000)=0x0, &(0x7f0000a86000)=0x4) 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000874000-0xc)="2f6465762f72666b696c6c00", 0x4000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000b15000-0x18)={0x0, 0x800, 0xbf46, &(0x7f0000700000)=0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:05 executing program 2 (fault-call:5 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000441000)="2f6465762f7663732300", 0x1, 0x8000000000040000) sendto$ax25(r0, &(0x7f00004be000)="759826b4098bed92981cc6f60d42f53281b51b2c0a13c9fc3a17bc6417afb734e67ade3a7366c5501a6469a3268d94a0d959b415cd5672c1d74bc0b0ea9f1ebd3b73477d86188b000b109b3b6fcb0142fa202a0403b6b8e40d06319fd54ea63fa5", 0x61, 0x800, &(0x7f00001f6000)={0x3, {"65dcdfdc86744f"}, 0x8}, 0x10) socketpair$inet(0x2, 0x4, 0x3, &(0x7f0000782000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000030000)=0x7, 0x4) fdatasync(r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00006c9000)={0x0, 0x1d6, 0x2, 0x1, 0x8, 0x7}, &(0x7f0000070000-0x4)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000359000)={r3, 0x1b7b}, 0x6) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000073000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00008c1000-0x4)=0x0, &(0x7f0000b34000)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000653000)={0x7, &(0x7f0000628000)=[{0x43d, 0x3, 0xfff, 0x5}, {0x1, 0x577c, 0x1000, 0x2}, {0x5, 0x40, 0x42, 0x5}, {0x4, 0x58000000000, 0x3ff, 0xffffffffffffff5e}, {0x4, 0x5c9f, 0x2, 0x4}, {0x400, 0x5, 0x9, 0x5}, {0x40, 0x9, 0x4, 0x3}]}, 0x8) fcntl$setflags(r1, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00005c9000-0x8)=@assoc_value={r3, 0x7d990ae}, 0x8) [ 123.956966] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 123.956970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.805211] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.810700] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:38:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c44000-0xc)="2f6465762f6175746f667300", 0x200, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000b37000-0xa0)={0x0, @in6={{0xa, 0x0, 0x40, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x16afe8fa, 0x4, 0x9, 0x2}, &(0x7f0000116000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000e33000-0x20)={0x2, 0x100000000, 0x203, 0x401, 0x3, 0x4, 0xe06, 0x5, 0x0}, &(0x7f0000157000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000e8a000)={0x0, 0x6}, &(0x7f0000bb6000-0x4)=0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f000029b000)={0x0, @in6={{0xa, 0x3, 0xac6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x1, 0xfffffffffffffff8, 0x100000, 0x0}, &(0x7f0000275000-0x4)=0xa0) sendmsg$inet_sctp(r1, &(0x7f000034f000-0x1c)={&(0x7f00000e3000)=@in6={0xa, 0x0, 0x80000001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, 0x1c, &(0x7f0000a29000-0x18)=[{&(0x7f000071f000-0x1000)="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", 0x1000}, {&(0x7f0000b60000-0xba)="59025ed3473926d8b2bcda711191c640a5adf3242dafd06853cce65e8d91d25255262caef5551de3e572f5b6069345ece61c36732ef431c992e1df9f2a249ba95b0d978828cacf094ca3bc39f7debc336bd1e851eb2642a937a6c9d05f3f4ce4747b6431ec473fc94cf30130053c549d83dcc3c230d80776cbf076b051b18d38833a18c61ac5aebc4b17d68b47fa98863e0141b57e8cfefdc782acba699d05bd04629c90d050e60057bdc1e3757f427e62d841e9e3df37d44d02", 0xba}, {&(0x7f0000f7b000)="8ceaf4020fe812196cf7820497649a4d5789af218bd7cd69e82f87772247f89ffd0bdaab574cd7e701df1092aac61be639b776009d6a7e4e0c40ac3712c4a34e63d4c311a124510173e27841dd96e3235b0d0cd5dc9f981727d39a2bcaad039f331f703d83c6e65225c027b8967cd0bd97c4", 0x72}], 0x3, &(0x7f00004a6000-0x134)=[@init={0x14, 0x84, 0x0, {0x1, 0x8, 0x1f, 0x20}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0xfffffffffffffffe, 0x800c, 0x0, 0x7acb, 0xaf, 0x40, 0x0, r2}}, @init={0x14, 0x84, 0x0, {0x4, 0xee, 0x200, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x4e, 0x8000, 0x206, 0x86f0, 0x1, 0x240000000000000, 0x6, 0x8, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0x7, 0x4c, 0x2, 0x7f, 0x6f13, 0x4, 0x8, 0x1, r4}}, @sndrcv={0x2c, 0x84, 0x1, {0xbf, 0x7, 0x8004, 0x50eb7e63, 0x20, 0x6, 0x0, 0x557d768a, r5}}, @init={0x14, 0x84, 0x0, {0x200, 0x3, 0xb93, 0x80}}], 0x134, 0x4040000}, 0x4000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f000053c000-0x10)={0x6, [0x8, 0xd8, 0x2, 0x0, 0x8000, 0x4]}, &(0x7f0000561000)=0x10) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) r6 = open(&(0x7f0000f8b000)="2e2f66696c653000", 0x40003, 0x29) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000269000-0x4)=r6, 0x4) 2017/12/02 04:38:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00006f4000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000c6f000-0xa8)={{0xc1, 0x101}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x88, 0x2, 0xff, 0xffffffffffffffff, 0x1000, 0x5, 0x3000, 0x0, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000bde000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x541000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000619000-0xb8)={0x0, 0x3b0, 0x0, 0x7, 0x101, 0x6, 0xffffffff00000000, 0x5, {0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x2, 0x0, 0xffff, 0x100}}, &(0x7f00001eb000-0x4)=0xb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000550000-0xa0)={r1, @in6={{0xa, 0x3, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, 0x798402fe, 0x80000001, 0x19}, &(0x7f000067c000-0x4)=0xa0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f000020b000)=@int=0x8, 0x4) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x4, 0x8000000000000200, 0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000035000-0x4)=0x1) [ 124.845105] binder: 22998:23006 got transaction with invalid parent offset or type [ 124.866853] binder: 22998:23006 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:05 executing program 2 (fault-call:5 fault-nth:6): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000721000-0x8)={0x2, &(0x7f0000d52000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc008641d, &(0x7f000084e000-0x8)={r1, &(0x7f0000001000-0xf8)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000023d000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000cb9000)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00001fd000)={r2, @in6={{0xa, 0x3, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x1, 0x1, 0x5, 0x7}, &(0x7f0000293000-0x4)=0xa0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00003fb000)=@req3={0x1f, 0xb5, 0x0, 0x1, 0x0, 0x10000, 0x9}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000c13000-0x4)=0x0, &(0x7f000033a000-0x4)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000717000-0x1c)=@req3={0x9, 0x3, 0x8, 0x3, 0xedd, 0x5, 0x5}, 0x1c) r4 = syz_open_dev$vcsa(&(0x7f0000aea000-0xb)="2f6465762f766373612300", 0x5, 0x84000) ioctl$KVM_DIRTY_TLB(r4, 0x400caeaa, &(0x7f000080b000-0xb)={0x8, 0x6}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r4, &(0x7f0000a78000-0x2)="9a31", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000021f000)={r3, 0x9}, &(0x7f0000ff0000-0x4)=0x8) 2017/12/02 04:38:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00009c6000)="2f6465762f72746300", 0x200, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00003a5000-0x4)=0xfffffffffffffff8, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000af4000-0x8)={0x0, 0x4cc}, &(0x7f0000f14000-0x4)=0x8) fstatfs(r1, &(0x7f0000130000-0x1c)="00000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000389000)={r2, @in={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x0, 0x4, 0x1, 0x1}, &(0x7f000050b000-0x4)=0xa0) pwritev(r1, &(0x7f0000681000)=[{&(0x7f0000858000-0xf5)="d1b786d9bdf7ca10a7b9de41d0299f7cb2f4f00ff3b7a77564af92bc9fbd2a85ecbba89ed845e4fa518a17059bc9a81de21128620f7afd2e679ed8d0f4feea0e3e0afd4dca6c25d295fab0d55128babecd878f9b8c7a6fb0a99c7ec835fde794f917a4331709161bb9f25f196280937c2d53ee148874e0a655b845e72d2f485a46264de6b0e919d94a79da9315a16e961311515d7de1b133cf99af0f5197854effd04579c3c28fc969224bb1bd0066c8eaa94d67aea20d599bd92c4bda7fd92c582b3aaa640b63a90a336eb4910024dc7f9a5b563a053090e793ad467b46929596a1132707269e3af263b43fac626b888bbff2f274", 0xf5}], 0x1, 0x0) setsockopt(r0, 0x2, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) [ 124.883442] FAULT_INJECTION: forcing a failure. [ 124.883442] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.883453] CPU: 0 PID: 23016 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 124.883459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.883463] Call Trace: [ 124.883479] dump_stack+0x194/0x257 [ 124.883503] ? arch_local_irq_restore+0x53/0x53 [ 124.883516] ? perf_tp_event+0x7f4/0xae0 [ 124.883564] should_fail+0x8c0/0xa40 [ 124.883589] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 124.883622] ? __isolate_free_page+0x8a0/0x8a0 [ 124.883666] ? should_fail+0x23b/0xa40 [ 124.883692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 124.883707] ? perf_tp_event+0xae0/0xae0 [ 124.883721] ? perf_tp_event+0x7f4/0xae0 [ 124.883743] ? get_user_pages_fast+0x277/0x340 [ 124.883766] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 124.883783] ? trace_hardirqs_on+0xd/0x10 [ 124.883796] ? get_user_pages_fast+0x14e/0x340 [ 124.883824] ? __get_user_pages_fast+0x360/0x360 [ 124.883832] ? perf_tp_event+0x7f4/0xae0 [ 124.883879] should_fail_futex.part.10+0x1a/0x20 [ 124.883891] get_futex_key+0x142f/0x1d50 [ 124.883909] ? trace_hardirqs_on+0xd/0x10 [ 124.883956] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 124.883987] ? get_futex_key_refs.isra.11+0x61/0xa0 [ 124.884017] ? get_futex_key+0x34f/0x1d50 [ 124.884036] ? perf_tp_event+0x7f4/0xae0 [ 124.884083] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 124.884098] ? perf_tp_event+0x7f4/0xae0 [ 124.884138] ? lock_pin_lock+0x370/0x370 [ 124.884173] ? tracing_generic_entry_update+0x15a/0x1d0 [ 124.884201] ? perf_trace_buf_update+0x66/0xb0 [ 124.884222] ? perf_tp_event+0x7f4/0xae0 [ 124.884240] ? tracing_generic_entry_update+0x15a/0x1d0 [ 124.884296] ? tracing_generic_entry_update+0x15a/0x1d0 [ 124.884324] ? perf_trace_buf_update+0x66/0xb0 [ 124.884345] ? perf_tp_event+0x7f4/0xae0 [ 124.884411] ? find_get_context.isra.83+0x670/0x670 [ 124.884442] ? print_usage_bug+0x3f0/0x3f0 [ 124.884450] ? lock_acquire+0x1d5/0x580 [ 124.884461] ? alloc_set_pte+0x1102/0x1880 [ 124.884537] ? print_usage_bug+0x3f0/0x3f0 [ 124.884565] ? rcu_pm_notify+0xc0/0xc0 [ 124.884593] ? memset+0x31/0x40 [ 124.884615] ? __hrtimer_init+0x4e/0x140 [ 124.884643] futex_wait_setup+0xca/0x3d0 [ 124.884690] ? futex_wake+0x680/0x680 [ 124.884708] ? memset+0x31/0x40 [ 124.884730] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 124.884759] futex_wait_requeue_pi.constprop.19+0x3cc/0x1300 [ 124.884801] ? futex_requeue+0x2370/0x2370 [ 124.884895] ? perf_tp_event+0xae0/0xae0 [ 124.884933] ? __hrtimer_init+0x140/0x140 [ 124.885026] ? check_noncircular+0x20/0x20 [ 124.885044] ? perf_trace_lock+0x900/0x900 [ 124.885141] do_futex+0x900/0x2280 [ 124.885159] ? check_noncircular+0x20/0x20 [ 124.885225] ? exit_robust_list+0x240/0x240 [ 124.885276] ? find_held_lock+0x39/0x1d0 [ 124.885333] ? lock_downgrade+0x980/0x980 [ 124.885354] ? get_pid_task+0xbc/0x140 [ 124.885373] ? proc_fail_nth_write+0xb5/0x260 [ 124.885392] ? map_files_get_link+0x3a0/0x3a0 [ 124.885400] ? __lock_is_held+0xbc/0x140 [ 124.885441] ? find_held_lock+0x39/0x1d0 [ 124.885501] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 124.885518] ? kernel_read+0x120/0x120 [ 124.885538] ? wait_for_completion+0x7b0/0x7b0 [ 124.885575] ? __lock_is_held+0xbc/0x140 [ 124.885658] compat_SyS_futex+0x27f/0x380 [ 124.885697] ? compat_SyS_get_robust_list+0x300/0x300 [ 124.885705] ? SyS_write+0x184/0x220 [ 124.885732] ? SyS_read+0x220/0x220 [ 124.885756] ? do_fast_syscall_32+0x156/0xf9d [ 124.885785] ? compat_SyS_get_robust_list+0x300/0x300 [ 124.885803] do_fast_syscall_32+0x3ee/0xf9d [ 124.885844] ? do_int80_syscall_32+0x9d0/0x9d0 [ 124.885881] ? lockdep_sys_exit+0x47/0xf0 [ 124.885897] ? syscall_return_slowpath+0x2ad/0x550 [ 124.885926] ? sysret32_from_system_call+0x5/0x3b [ 124.885960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 124.886001] entry_SYSENTER_compat+0x51/0x60 [ 124.886014] RIP: 0023:0xf7facc79 [ 124.886020] RSP: 002b:00000000f778708c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 124.886032] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 124.886037] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 124.886043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.886049] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 124.886054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.987527] binder: BINDER_SET_CONTEXT_MGR already set [ 124.987537] binder: 22998:23028 ioctl 40046207 0 returned -16 [ 124.990751] binder_alloc: binder_alloc_mmap_handler: 22998 20000000-20002000 already mapped failed -16 [ 124.996795] binder_alloc: 22998: binder_alloc_buf, no vma [ 124.996818] binder: 22998:23021 transaction failed 29189/-3, size 80-16 line 2870 2017/12/02 04:38:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cd7000+0x25d)={0x0, 0x0, 0x0}, &(0x7f0000845000)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r5, 0x9) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) readahead(r0, 0x0, 0xff) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000543000-0x8)={0x6, 0x6, 0x7, 0x2}) exit(0x0) 2017/12/02 04:38:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0xff, 0x6, &(0x7f000019b000-0x5)="0000e6005c", 0x5) 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000240000)=0x0, &(0x7f00002b8000-0x4)=0x4) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:05 executing program 5 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0xa0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) r1 = syz_open_dev$mice(&(0x7f0000ee6000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x200) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000a29000)={0x4, &(0x7f00000c8000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 125.417088] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.422659] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000c0b000)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000335000-0xe3)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000dfd000-0x4)=0xe3) splice(r0, 0x0, r0, 0x8, 0x200, 0x0) 2017/12/02 04:38:05 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f000031e000)=@ax25={0x0, {"00000000000000"}, 0x0}, &(0x7f0000000000)=0x10, 0x80000) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000fe3000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00007ba000)=0x1000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x7, &(0x7f0000130000)=0x0, &(0x7f00008f4000-0x4)=0x4) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000288000-0x6)="14050808005a", 0x6) geteuid() 2017/12/02 04:38:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 125.463049] FAULT_INJECTION: forcing a failure. [ 125.463049] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.466638] binder: 23063:23068 got transaction with invalid parent offset or type [ 125.466680] binder: 23063:23068 transaction failed 29201/-22, size 80-16 line 3055 [ 125.498840] binder: BINDER_SET_CONTEXT_MGR already set [ 125.498850] binder: 23063:23076 ioctl 40046207 0 returned -16 2017/12/02 04:38:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00008a0000-0x4f)="0d16e503078cd3643fc6ecdd44e222c074ec447b3810c1b7095c97eb6e4a690c8b5a5f78130a155f0e1fe726cfd08479a637e9fa7d57387c5f7a13a3d55124b343893cecb29d5acd37a447dc86bd85") setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:05 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003b3000)="2f6465762f70746d7800", 0x200240, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000d54000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f000059d000-0x40)={{0x3, 0x2, 0x80000001, 0x3, 0x7f}, 0x10000, 0x8, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r0, r1, &(0x7f0000445000-0x8)=0x0, 0x2d7715df) [ 125.498979] binder_alloc: binder_alloc_mmap_handler: 23063 20000000-20002000 already mapped failed -16 [ 125.523351] CPU: 0 PID: 23074 Comm: syz-executor5 Not tainted 4.15.0-rc1+ #114 [ 125.530704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.540042] Call Trace: [ 125.542620] dump_stack+0x194/0x257 [ 125.546244] ? arch_local_irq_restore+0x53/0x53 [ 125.550906] ? __isolate_free_page+0x8a0/0x8a0 [ 125.555478] ? __free_pages_ok+0x12ac/0x31c0 [ 125.559889] should_fail+0x8c0/0xa40 [ 125.563603] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 125.568726] ? rb_erase_cached+0xf50/0x3540 [ 125.573043] ? find_held_lock+0x39/0x1d0 [ 125.577095] ? perf_trace_lock_acquire+0xe3/0x980 [ 125.581929] ? rb_next+0x140/0x140 [ 125.585477] ? __bpf_address_lookup+0x2b0/0x2b0 [ 125.590136] ? print_usage_bug+0x3f0/0x3f0 [ 125.594344] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 125.599511] ? __free_insn_slot+0x5c0/0x5c0 [ 125.603837] should_fail_futex.part.10+0x1a/0x20 [ 125.608582] get_futex_key+0x3a7/0x1d50 [ 125.612565] ? __lock_acquire+0x6e9/0x47f0 [ 125.616779] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 125.621445] ? lock_pin_lock+0x370/0x370 [ 125.625492] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 125.630652] ? __lock_acquire+0x6e9/0x47f0 [ 125.634875] ? lock_page_memcg+0x2bd/0x3b0 [ 125.639079] ? perf_trace_lock_acquire+0xe3/0x980 [ 125.643902] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 125.649947] ? __unlock_page_memcg+0x72/0x100 [ 125.654416] ? unlock_page_memcg+0x2c/0x40 [ 125.658625] ? page_add_file_rmap+0x5b7/0xa90 [ 125.663097] ? page_add_new_anon_rmap+0x750/0x750 [ 125.667912] ? print_usage_bug+0x3f0/0x3f0 [ 125.672117] ? print_usage_bug+0x3f0/0x3f0 [ 125.676344] ? perf_trace_lock_acquire+0xe3/0x980 [ 125.681175] ? print_usage_bug+0x3f0/0x3f0 [ 125.685380] ? lock_acquire+0x1d5/0x580 [ 125.689325] ? alloc_set_pte+0x1102/0x1880 [ 125.693555] ? reacquire_held_locks+0x201/0x3e0 [ 125.698196] ? alloc_set_pte+0x1102/0x1880 [ 125.702413] ? print_usage_bug+0x3f0/0x3f0 [ 125.706631] ? rcu_pm_notify+0xc0/0xc0 [ 125.710501] ? memset+0x31/0x40 [ 125.713759] ? __hrtimer_init+0x4e/0x140 [ 125.717801] ? hrtimer_init+0xb6/0x400 [ 125.721665] ? __hrtimer_run_queues+0xe10/0xe10 [ 125.726304] ? print_usage_bug+0x3f0/0x3f0 [ 125.730511] ? wake_up_page_bit+0x530/0x530 [ 125.734817] ? memset+0x31/0x40 [ 125.738074] ? debug_rt_mutex_init_waiter+0x17/0x50 [ 125.743075] futex_wait_requeue_pi.constprop.19+0x332/0x1300 [ 125.748860] ? futex_requeue+0x2370/0x2370 [ 125.753088] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 125.758280] ? print_usage_bug+0x3f0/0x3f0 [ 125.762497] ? __hrtimer_init+0x140/0x140 [ 125.766623] ? check_noncircular+0x20/0x20 [ 125.770860] ? check_noncircular+0x20/0x20 [ 125.775072] ? perf_trace_lock+0x900/0x900 [ 125.779311] ? retint_kernel+0x10/0x10 [ 125.783185] do_futex+0x900/0x2280 [ 125.786699] ? check_noncircular+0x20/0x20 [ 125.790936] ? exit_robust_list+0x240/0x240 [ 125.795252] ? find_held_lock+0x39/0x1d0 [ 125.799309] ? lock_downgrade+0x980/0x980 [ 125.803432] ? get_pid_task+0xbc/0x140 [ 125.807296] ? proc_fail_nth_write+0xb5/0x260 [ 125.811769] ? map_files_get_link+0x3a0/0x3a0 [ 125.816233] ? __lock_is_held+0xbc/0x140 [ 125.820284] ? find_held_lock+0x39/0x1d0 [ 125.824344] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 125.829162] ? kernel_read+0x120/0x120 [ 125.833031] ? wait_for_completion+0x7b0/0x7b0 [ 125.837599] ? __lock_is_held+0xbc/0x140 [ 125.841673] compat_SyS_futex+0x27f/0x380 [ 125.845809] ? compat_SyS_get_robust_list+0x300/0x300 [ 125.850968] ? SyS_write+0x184/0x220 [ 125.854665] ? SyS_read+0x220/0x220 [ 125.858270] ? do_fast_syscall_32+0x156/0xf9d [ 125.862750] ? compat_SyS_get_robust_list+0x300/0x300 [ 125.867917] do_fast_syscall_32+0x3ee/0xf9d [ 125.872230] ? do_int80_syscall_32+0x9d0/0x9d0 [ 125.876789] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 125.882303] ? lockdep_sys_exit+0x47/0xf0 [ 125.886426] ? syscall_return_slowpath+0x2ad/0x550 [ 125.891339] ? sysret32_from_system_call+0x5/0x3b [ 125.896166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 125.901002] entry_SYSENTER_compat+0x51/0x60 [ 125.905385] RIP: 0023:0xf7f49c79 [ 125.908721] RSP: 002b:00000000f772408c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 125.916404] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000b [ 125.923644] RDX: 0000000000000004 RSI: 0000000020edfff0 RDI: 0000000020048000 [ 125.930886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.938128] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 125.945367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 04:38:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r0, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r4, 0x9) getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:06 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000a7b000-0x8)=@req={0x28, &(0x7f0000fc3000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000302000)={@generic="7da5d61914a2be7d5870412701e09032", @ifru_flags=0x1000}) r2 = syz_open_dev$mouse(&(0x7f0000912000)="2f6465762f696e7075742f6d6f7573652300", 0x31c, 0x2080) connect$bt_l2cap(r2, &(0x7f00001e6000-0xe)={0x1f, 0x1000, {0x3d6, 0x8, 0x10001, 0xff, 0x44dbf74a, 0x7fff}, 0x8, 0x48dc}, 0xe) getsockname(r1, &(0x7f00004f7000+0xcf)=@in={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000093c000)=0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000d9b000)={0x400, 0x4, 0xffff, 0x4, 0x5, 0x9, 0x2}, 0xc) setsockopt(r1, 0x800000010d, 0x2, &(0x7f00009c4000-0x5)="140500d54a", 0x5) 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003e5000-0xc)="2f6465762f72666b696c6c00", 0x10000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f000099e000-0xc)={&(0x7f0000ef3000)="2e2f66696c653000", r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:06 executing program 5: futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00001de000-0x5)="7573657200", &(0x7f00007da000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000000000)="dfb6ff5375877c0eb640df9e9d7035fb2aeca884e6a5243561d6a074c5173b74f68eda764b4e3925aa571abb1d0cc9ceb853ceed4cdc687e9cb5fb5df4f6eba33a56cca9853b5c6ce57b7e299af087909ef4db79a3eb211c88308c91c82e693e0273ad9cbb3965ec59bcdc8f282f1603be85fdb09ad8cadc53f9ebaa02e09c9010369310aa5c9ea7cac7069c9798b9532d76772867bac476f0ec1adb28309079d5cee430d794f4c7fafe1416b315cd2eec4493815e5eda73fa339f910efb4bdd7f5e93b48bd55aa569cb2f780076c12f554e97a44b3363e77a56435ae57f6d792962", 0xe2, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x8) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x4, 0xa, &(0x7f00007ad000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) [ 125.974055] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x400, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000c0000)={0x5, [0xffffffffffffff00, 0x0, 0x4f, 0x0, 0x7]}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x80000, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00001b6000)={0x28, 0x2, 0x1a, 0x8000, 0xffffffffffff6c0e, 0x3312, 0x0, 0x4719, 0x3, 0x81, 0x6}, 0xb) splice(r1, 0x0, r3, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000f18000-0x8)={0x0, 0x0}) setsockopt(r0, 0x800000010d, 0x6, &(0x7f00006fb000)="000001014a", 0x5) lgetxattr(&(0x7f000074c000)="2e2f66696c653000", &(0x7f00000b7000)=@random={"6f73782e00", "a200"}, &(0x7f000017b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb6) 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f0000d32000)=""}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000766000-0xb)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000f9a000-0x8)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000e4e000)=@ioapic={0xf002, 0x800000, 0x7, 0x5, 0x0, [{0x2, 0x5, 0x41c7, [0x0, 0x0, 0x0, 0x0], 0x3}, {0x7, 0x81, 0x45ac, [0x0, 0x0, 0x0, 0x0], 0x6}, {0x2, 0x8, 0x100000000, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x10000, 0xfffffffffffffffe, 0x7, [0x0, 0x0, 0x0, 0x0], 0x7ff}, {0x1f, 0x7fffffff, 0x1, [0x0, 0x0, 0x0, 0x0], 0x7}, {0x7, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x4, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0], 0xffffffff80000001}, {0x5, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x0, 0x6, 0xc, [0x0, 0x0, 0x0, 0x0], 0x5}, {0xffffffffffffffff, 0xbd, 0x8, [0x0, 0x0, 0x0, 0x0], 0x6}, {0x10000, 0xdf35, 0xfffffffffffff01b, [0x0, 0x0, 0x0, 0x0], 0x7}, {0x7, 0x1f, 0x1d, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x9, 0x9, 0xffffffff, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x11, 0x39a9, 0x7fff, [0x0, 0x0, 0x0, 0x0], 0x2}, {0x1000, 0x200, 0x4, [0x0, 0x0, 0x0, 0x0], 0xce8}, {0x8, 0x3f, 0x7, [0x0, 0x0, 0x0, 0x0], 0x2}, {0xffffffff00000001, 0x1f, 0x9, [0x0, 0x0, 0x0, 0x0], 0x1ff}, {0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x70e, 0x1ff, 0x7, [0x0, 0x0, 0x0, 0x0], 0xc000000000000000}, {0x3, 0x3b10, 0x1ff, [0x0, 0x0, 0x0, 0x0], 0x100}, {0x7f, 0x7, 0x20, [0x0, 0x0, 0x0, 0x0], 0x3}, {0x4, 0x9, 0x4, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x3, 0x7f, 0x2, [0x0, 0x0, 0x0, 0x0], 0x6}, {0x802, 0x31, 0x5, [0x0, 0x0, 0x0, 0x0], 0x401}]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f3e000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000b6b000-0x4)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00004e6000)={0x0, r2}) [ 126.017491] binder: 23117:23125 got transaction with invalid parent offset or type [ 126.026829] binder: 23117:23125 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) pipe(&(0x7f0000b80000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) exit(0x0) 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = accept4(r0, &(0x7f0000ae9000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00004ac000-0x4)=0x14, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f000043d000-0x14)={r0, 0x5, 0x4, "84dd18c82955f243012c"}) setsockopt(r0, 0x1000800000010f, 0x2, &(0x7f0000207000)="140500d54a", 0x5) 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 126.058974] binder: BINDER_SET_CONTEXT_MGR already set [ 126.066312] binder_alloc: binder_alloc_mmap_handler: 23117 20000000-20002000 already mapped failed -16 [ 126.077179] binder: 23117:23141 ioctl 40046207 0 returned -16 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) io_setup(0x4b, &(0x7f0000ad0000-0x4)=0x0) io_destroy(r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r0, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fcntl$getownex(r0, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r4, 0x9) getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000e57000)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x40) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000409000-0x8)={0x6b23, 0x1}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x9ba, &(0x7f00006fb000)="1428ff1500", 0x5) accept4(r1, &(0x7f0000704000)=@hci={0x0, 0x0, 0x0}, &(0x7f0000057000)=0x6, 0x80000) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00004f6000-0x10)=[{&(0x7f0000802000)="6092685152a5079102357f3b7701029214ca81719f51588be3", 0x19}, {&(0x7f0000352000)="0dda1aefd3189a8cb9195d996346686df33d888ee89ddab5b765548e1b1fab6951", 0x21}], 0x2, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000421000)="2f6465762f6175746f667300", 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000546000-0xa0)={0x0, 0x98, "faa1dd6c16e15d88501d18e943d923deee8e57cc857c6c813164e52b705b9b39d004232ce276032f921ac8fa4ce145a9eb45610b4a07f773121597ad8d929d35f2e438c0483f4aefbbbf671b35443e5c25b3430e7e664898a8d825b06771f8b41f5cca5f134cdd3342d947c10c8b3fcedc8072233a4684a980e2a801b958099200dbbd63e981898a7b1d086fe60db81d22883649f55b9aec"}, &(0x7f0000eef000)=0xa0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f000030d000-0x108)={r3, @in6={{0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x3774, 0x800, 0x9a5, 0x3, 0x8, 0x4, 0x8, 0x100000001, 0x100000001, 0x1, 0x6613143c, 0x20, 0x400, 0x0, 0x1]}, &(0x7f0000605000)=0x108) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000106, 0x15, &(0x7f000056a000)="e106", 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000e32000)={0x4, 0x0, [{0x411, 0x0, 0x0}, {0x28b, 0x0, 0x2}, {0x37b, 0x0, 0x1}, {0x3be, 0x0, 0xffffffffffff8000}]}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) futex(&(0x7f0000fcf000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 126.117246] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.156047] binder: 23170:23173 got transaction with invalid parent offset or type 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000b58000-0xc)={0x0, 0x0, 0x0}, 0xc) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f76637300", 0x2080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x80, &(0x7f0000000000)=0x4) ioctl$TIOCSBRK(r0, 0x5427) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt(r1, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000b7000)="2f6465762f73657175656e63657200", 0x4000, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40d, &(0x7f0000837000)=0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000ce4000-0xc)={0x0, @multicast2=0x0, @broadcast=0x0}, &(0x7f0000b99000-0x4)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x8, 0xffffffffffffffff, 0x9, 0x4, 0x4, r0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 126.185157] binder: 23170:23173 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000099000)=0x0) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) clock_gettime(0x5, &(0x7f0000acd000)={0x0, 0x0}) r0 = add_key$keyring(&(0x7f0000063000-0x8)="6b657972696e6700", &(0x7f00008ef000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x5) exit(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000670000)="2f6465762f76637300", 0x40, 0x0) setsockopt$sock_str(r1, 0x1, 0x19, &(0x7f000064b000-0xa)="5e766d6e6574312f2300", 0xa) 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) signalfd4(r0, &(0x7f0000ba5000)={0x0}, 0x8, 0x80000) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 126.226877] binder: BINDER_SET_CONTEXT_MGR already set [ 126.232799] binder: 23170:23187 ioctl 40046207 0 returned -16 [ 126.249990] binder_alloc: 23170: binder_alloc_buf, no vma 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$inet6(0xa, 0x0, 0x3, &(0x7f00001fc000-0x8)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000ce7000)=0x4550, 0x4) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r3, 0x9) getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCGSID(r1, 0x540f, &(0x7f00000f5000)=0x0) r4 = geteuid() r5 = getgid() sendmsg$netlink(r2, &(0x7f0000c7b000)={&(0x7f0000e49000)={0x0, 0x0, 0xfffffffffffff3ca, 0x3}, 0xc, &(0x7f0000695000)=[{&(0x7f0000348000-0x1010)=[{0x1010, 0x0, 0x10, 0x2, 0x10000, "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"}], 0x1010}, {&(0x7f0000722000-0x1398)=[{0xb2, 0x8a, 0x8, 0xfffffffffffff1a7, 0x4, "51840664120e998eb28b657770cc6eb843a4d31cdb1644a2ddab40552c44ff7cfd0aa65aa72a3eefb1e236678e5b7b3fb4167aac548a28f06f69fc657bfeb77ce397bcd002b9ded4f421943f4db63e3e84c98500843fca8bb71a573bc1a4254a4744e21cb104973d574ea9442325dc8d7a2a84b095af53c94b98b322934ba24bdeb285bd0c1108fe88766ad50cfc8b742193e7f27929342ab8be0c677bc7f805755e"}, {0xbf, 0xffff, 0x4, 0x114, 0x200, "84fa551be1e57672f9f21a9197209a60f320313b9fce65b5e6cef524d6766519d3ce66d2fefc3590d3d00fc9d61bdabf81c0d86e02bdf5041ae9affa5dd9258a8fd2bece8b0e9318525eae4b0f969ad35fc5c2e8a907e1ea807049a63c26c31d1fbf2511bd98732fbd8ff219192e576d2b3bffe482501d116b5555d5b9dfbfc3142c083d14bd2fe59659830e8239b82a9cdbb6724fa32ee41cb824a98e6f65ca6e4a5601bc2d8d29cbc211d6712cca"}, {0x47, 0x8, 0x10, 0x3, 0x9, "b12507c86a4d6192501e511b8cc514f55c00fd0c33b5a0640963ac3160e5adac9304c4cccae43d0193fcc293e8f5ad0b5b30e82877fe7b"}, {0x51, 0x800, 0x400, 0x1c8, 0x3f, "ac56fde5bc7974bc96676fef4260c1a5fc555fe4703816f3d6337c30edfce17248521760f0284028cc3a3dd5a0640d7a8ae3d7d8180572378c0418ffcd60b27296"}, {0xaf, 0x1, 0x100, 0x3, 0x4, "0a7069f6cf519796b6472da2d2b25e2834c1593ea8fd5f4bfcc9231c3086aac850b5ea32277177cf460564a50e3185c05b2ed0ac4e7853c464c77c83b59e8721bf2ebf15a12735482ec6be3741fbca41df17c4baffd26145a6d955794fd70befdcf3bc56faa4757617113e3470b87d9e408183081e63db3ea4a8790bfb2e115ad8ffb488174c5c350c1d8b06540642ece0ba020a4fadc201183b8d1fa01004"}, {0xd0, 0x8, 0x412, 0x24, 0xff, "c7ebce91f4cee9498707572642537380f841e8370fd1615b6fe45aa9dac8ada66517b5a07fafcdde59f59e9ea72ad1aabe150f80fc9bbd22d6f342258e0e5072d4346b62f690baf8e3c43f42da17ba2f7ab00d24178ed14610385c8437658cda1ea407ec862c8f07c0567438d12f5bc59f3ff6ef076aa1beb7a8272b8b607f41633dcb99c0577e29badf4067cab172afd7131d88fe4de3a7d8c6f68ba8a591d503e4fb5e1a8967f1d55d2d2f8ff138c0f284d0bd0346eec0750d730b10cacbec"}, {0x1010, 0x4, 0x120, 0xc65d, 0x81, "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"}], 0x1398}, {&(0x7f0000f59000)=[{0x24, 0xd39, 0x100, 0x7, 0xaf06, "351e4cae7c0a9f0aec1d42d42d2afe89966e9e6d"}], 0x24}, {&(0x7f0000617000-0x233d)=[{0x66, 0x101, 0x10, 0x7, 0x9, "a00386e7bfcf6e826571902cf21c80b4c5a03be53967cb9a36dd241b8d4c894de31f2000600ba001095c819bea1ceabab8e582345006dfc603b326baae5552976a8e709f48a184d694771a60c7b9abd3facc66c39e28"}, {0x10, 0x40, 0x100, 0x0, 0x20, ""}, {0x1010, 0x9, 0x4, 0x7, 0x2, "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"}, {0x5d, 0x4d8, 0x111, 0x4, 0x401, "fea16b3acecfd99988bc02c89c181a2b86519f6e8db37faa2b55dbf2317c6f5fe74ad7211f615ad3f7c6971460dc11acfd0a4369c96d10892971a9b44f5a255839e35d8fa980d05de82e969358"}, {0xed, 0x101, 0x400, 0x3f, 0x0, "6aa5aa5deb838fb44e0674b48c33bcd7a41a12790f3a1c4a7dac6808a4e813cfa77fe1cb3c90121d0fe978e32993994e16d3effbdbbbf0ce28ec642592d31fc2af8848b14defeb23f31d90e47a53fa900b414cb0d4b8ce1cdc5e1405321b22639c638d7483b3031f7a486b3126365880bacd496a788b68a7e2eacde568408ef92eaef66eb9e8fbb2c827af5f004c15cd6835c562d21330d9b4c9b0fb6d044ffc928e9aec2c8d75630a03dce1d1b7fcc3a56cd6dd8179c516a8e0077764d3b885c2cb4d8cea60753c1d8252dc5f7782421fe8f0a4350c3b33f6cff882e6"}, {0x1010, 0xacc, 0x5, 0x1, 0x6, "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"}, {0x76, 0xffff, 0x8, 0x5, 0x7, "6a07f883d114a747e364f8b6ccea81c434cfbb25559d107f80c85c7b5c933688f6505c740d456d8c30150180056053b00b3285b956820e7ab2fb29559165ee2109d2f444f84fb917bf1f589cef4047ae000c8266ce085b6effc0cd83fe584abe902237224dc8"}, {0xe7, 0x5, 0x100, 0xfffffffffffffffe, 0x3, "b9bb9064ba807b5c0685b1feed1e885a6ec9ccbffe81e1b7ed8a743b701c156496d92b08dc216e2bd9bd006027a1b0f6d9048a5c2720fae2672f93741b0e3741da636a8541eecf8a80030b1680f7d367c64651107746955bd0a9d8cf106d43cbce1e58759d4d9558e1cbb7f63753f6ebfa1d997f3518e4a5157f8b092e40825849203807f61e0c90d1fbe94eedf99d11215886eb8abb4a7a54f21f5aa9de5b9299b172909c09e91721957ce091cb4122242316a51a77552ca083f7bfc856b87d051186e037a6259810658116122d802c4458cd2f8906d8"}], 0x233d}, {&(0x7f00002fd000)=[{0x96, 0x0, 0x308, 0x2, 0x8, "91dc6d6ec1fcbb6925ceeb96e1d3cb6cc67587dcc98260e760b96af451bf485d69c6a1491c5147fe4dbce9b9d3f5c6358035eb2c102a524dd5f0e26a9c45f56a01fb16654c7ac31602c601202819604f1d2a7e472d8f230a7c7ed612076934e6bacf10d8b49c8b8555818cd98ff224ca149cb8b9e6b7f08eacfbd77be7be7d4c64c0e63f9a99"}, {0x41, 0x3, 0x4, 0x80, 0x0, "a5b802a99b779277e6a1606f5fa8c917278ff6d3fca908f43fcafa2cac67e486b59ce66bebf4efd595859cc457daa9c882"}, {0x75, 0x7, 0x100, 0x4, 0x1000, "230ee174b60faa3bfa66f93ba000ccac8230d0450420926c43800129209b5c491541ce2c1bed3a6d8abc01b908050381ec4eee57ca02f884b2ba8242f8dc4f5ffc82c8f68c3d1d326c19e573c1765f3afb59921c33ae0a7251d04100e2098d0c8555d9d2da"}, {0x49, 0x7fffffff, 0x300, 0x80, 0x2, "39e94fe89463162f7d1c55726d628d59b1aeaed94841eea24b34cb5930f8910a067f7af7184d9294e05bb73bc86ede1821364898fc22132590"}], 0x195}, {&(0x7f0000e18000-0x468)=[{0x28, 0xfffffffffffffffa, 0x309, 0x5, 0xb8b0, "b9d571ebef63b4e0981f635e9a43fa186c866055fd563fb4"}, {0x6e, 0xfff, 0x402, 0x2, 0x81, "41ee750d9fae55551234d46cc8ae4446e86bd41b3a0df64f48289a9eddcddbb7bccfc06b0cc1369f5bd2fef7eee2c6b35ec825d7528e2038e14bd34626a5106593724257252435b2410a4f94cc650d08a92e3362b543d29bfc85eef78b7e"}, {0xf7, 0x5, 0x801, 0xff19, 0x40, "0cbf4ab3df7e45d1983d40107a005e2224cfca22b4002a8cb65ae6d7d355c346c4a5ff6e22a6aab54494501ca02e454df4c0526fbd4dcec87f0d6ce18e1544cefb8cd38e8d66240f3bf6153e241fc66d7be6346f1a66dd6dcaa821bbc2150e8c600609b5e9d6ff540fbbcd5561f64170ef8d6f8a432d7236fbb4ff2376ef02f92ebb9b569f2b16faf18d000cafd7bb5251aa05c83f9aaa93a8dd529d1c68003b86fbcb377e073f41bb2d8acb437ae3d60d76d81f6d9b86d6d0f787c9ec1873a5bc54f8b969e3e3d19c49e365ea2e2c37e9bb3e34d5cdeb67c8c2bc6cdb2df02e3b462b7ab4b8db"}, {0x3d, 0x100, 0x302, 0xffffffffffffff49, 0x79, "4fabb028c0cac6f14d001fa114c54e34cbcd3329634039942cbbe0641cab1982b082f3824298030a3f6fa9b985"}, {0xca, 0x1, 0x328, 0x10001, 0x1, "e16f9c25acffcc428391f38e50b4ac7779580056cbcfc9d230955b8a1f1a8f1d4f6ebf3a0fe051f7d8784a88da14fd4ef20148ef6a8587d8d6c25392b3efc7925508233076539878b351a7c3b4ee09d15651815ea7641b8783e50b87d47b5d2f2af3f53dd2b0ba7b030622597503fbb733de98b6a5963b7e08de81ef3c7de81fea6eb35a5377d86aa3ed31370f2cfe5a9151bed7e9929209d17249a9b737ca0b8a824540701a974263fc212eed92d3137c536b8536d69b2e6955"}, {0xf6, 0x9, 0x0, 0x9, 0xffffffffffff0000, "a219806e3901ece80b74dadc32c79ba5975eb9626d226f6b3fe6e7be8b9cb176fbb94d110aa53f7414ea2773260076b1cade0be81f4f03bb044b5e3f468426de3c07d9c87c5c6f60de4a87552a30cf602eadd59b7dcf20ed83c9fdbc4bb570f7ede4e09532653a7e03f8a28dbddfd9f7b52c9440f50842da43d4a69e4160fe957dddd62303b00304e1fe9dc28c9dd9f2132898c3cc6892177e8164f0afb3a88f3e723eb654fb46889a917a5816dd26ca64f2f8a4ce252530d969f13ed936ee60f4d721e39c6ff6a91703819ddfbe371bdcd515e4a369dcb1d22cb3651b27fb5453330cc60841"}, {0x46, 0x7, 0x4, 0x149, 0x6, "b53f266a9332d866b80dbdf8d2aba83fe4e1b2a8f256d0d045b857f54021bed95f41a5f5840781c54ee79db34dea20f8c12e404a5489"}, {0x18, 0x1, 0x4, 0x3ff, 0x80000001, "5fb314e853f60f67"}, {0x80, 0x0, 0x320, 0xaf, 0x1800000000000000, "344cf03f8d4d74012d538a4fb881992622f7df5e35233486a72c1b8eccd2235686774d399cdac1505f4c7348b0afcf4765909051dc5185698c81981a97375ceaaf17bf7acfce37ad8de1fef164dc987f720ac5e1f0f2241856f3409438abad08af2b44d18d26b5f249df451313c28e22"}], 0x468}, {&(0x7f00004bc000-0x12f2)=[{0x37, 0x1, 0x200, 0x1, 0xffffffffffffffc0, "0103dbf2c6239ca6a5fe2d52b4700a2c8e0a067899d44c15372e62e77b52c2d56b67116faa164c"}, {0x5c, 0x1, 0x0, 0x2, 0x1, "a9eb5c2c4f130c4794280ecee52c83f5e35d2ddc279c62ac4110551c3ebf78e41a83753c31f2bf968564fb9e0f15f769551e58ecf10650f841fa56792d326f864b821a330866afbdd5d96f05"}, {0x5d, 0x10001, 0x400, 0x9, 0x1, "951ddfd5e6ed13928f4c6b9287d66eb5c6bed2607b17c92927c9cfb8108d1acfbabac1203d80323f27fe673b85bb25e76c6275ebc6bc1b8e2314632be2df9021ffc7a5bae7a751ad97e949d712"}, {0x78, 0x0, 0x330, 0x24000000000000, 0x1f, "85f5f3ffd5624c7a9e46c172947fe1cbc3347bfd4a638c589ef4bc8225f8b6a768aefab42f375203c58bee6e1cc3db5373a672da5ebb87ae97e90cd44fddb0c6c646c56d6cf25affddf567d1e6b1808220d250d634b66784af28ad3216e6b37693b60d246eac6175"}, {0x2c, 0x7fff, 0x100, 0x7, 0x4, "fe10afbdc24c0850373a78380792b12b400621b4cdb5975b88265925"}, {0xb2, 0x6, 0x1, 0x4, 0x52a, "6ec2833f83f51c98ab1fa7702a65c42ec4224d4ba2d122915af176a538328a3848312833db9af62798e275f6ef72d7abf0c35fc7e96f1873cce5c5080287015efcc8ef6e4e7dc826b61bfa6975f9fc880a80917303df3cb593a4e75f091d50debe16bff04cea1d0f8b37314cfb915ec19040cc2d6facc126dfd9e2e3fe6263d5ac7549110d9aa942335fdc40022e0a5c7c95d2b62532b8ba869decde5103bf499f81"}, {0x1010, 0x7, 0x100, 0x1, 0x61b, "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"}, {0x9c, 0x4, 0x3, 0x100000001, 0x0, "d4a63282b7b29b0ae9f8e353d80e94e4a47e65a72e11b4cd18779d0ac7f6c3d7b70d3c65e093e0200f8e1de1a25f3d88b81a2af28c5e3dc72079b0aabc386c61bc2344ecca9873a2a5bc0669aff3f655b3f101323c40b19435efdc8893fbabb657423649617890dc6dc8499349b464c9f656f6d19be0ec3da37f88050a0a628e3cc0bd09a37639bff7367aed"}], 0x12f2}, {&(0x7f00006d7000-0x334)=[{0x45, 0x8, 0x200, 0x100000000, 0x4, "e330c42b3c5bcae86ee3a2878c5e67fe9a0d6ba97955bc9da47ede2c77893e2c391b111afb45dcd22af2e6191e7b0a2e264c37feaa"}, {0xa8, 0x90000000000, 0x220, 0x8a84, 0xa5, "fc5bed516859fe251863a210fb0a1cb0aebb8c2173e5b7cde65591ecb71b3d2137c93af5faec71fe4ec3200269d3c4e5f7fb93fae9b2eda20d8bdb3009e101e225df0221c97bff25ed1679ea745ccf977b2818bd9f3ca37de960f11f5be19fb18cfdc8468beb117af25460dcee9b914e334d0fb1439b98f27f741ef2c61377c961055c0d3090515dc34c992cfd2fc2a051d4ce5fba79a078"}, {0xfd, 0x5, 0x0, 0x10001, 0x8, "fd32a4712f56584cc07fbc55bb909ccc7f1d3403832050667043f601b537e72939d292e0e041f1de6525ca9c44ec95ffa849e0ebb651593df7a915e1c383f9167ad6a834f959e3ef23890d6470b668ce59f339dbb74c4beb16cf219d7c5c33b0b2171d24bc7f4ad07481248298a713d4545bbb0ea28ac7a89004ec257f4a02bce04ce8cd3658275fe3654f293133bb18d529a335f022fc5c5cfbaea4d588a427d48f4087026610604f525c682b9ef0668cddc8ac3f0f04da50b4d4fcf56775349752dd99514d97e6c129dec4200ed7f8df4296c9a3020065874e4e628fb5572b2c2f2bf40aa98215ea2a1133b0"}, {0x4e, 0x0, 0x704, 0x9, 0x80, "550dabb531e2b20bc4a4defe64e0b1e0eb8d3b9d0750516747f30fb566957b13fdbe2ebad63fb61900dd802fa42ec1cd7f945eee2ad4a6a67bd2bf655383"}, {0xfc, 0x800, 0x0, 0x100, 0x81, "98e2387380a98ed769a0e388a7b5ff3e053f03e89217b0b12a9065f9a08c1126a261c51e9c128095d71fbd850d84622ede0b98697ec60f73350434029932999526d801bc3a4581231284d51f4d70aa093aeaca2a4dd12f0fd8835d5462c8a95081818e40006296fa795bfa9b254e356ba1e34af862ebb38ffed01b878de1ae9bdd12e42ed961b2067bc09f95fb4f3a3cf0701a9087340d310d19eaaca4de66293720c71336780f25873649f5d59584b4e31e39d6504d4d6586b82c079b9897c6abd5076ba1937a90b313fff09dd1d635f9d0c58539b9232d2ff781700aeebf0b330302b32cdbaff2447f959b"}], 0x334}, {&(0x7f000080d000)=[{0x9a, 0x9, 0x201, 0x5711, 0x8, "e79c078a4f28535899a8297e05f29dde915b8af049f9eaab01f33c272d2164aa91926c81445fc556ae6a8ff7c4c7e6f36c4b2879fa7db69a44f16204afe3546e446d8ee724262340fe05dc40cf162e7f5cda5fd0c0351d924785961e7bdc64ee53cb58ce2ec8e3ed2ce9299463945b1ea49d0323a32c2a3a5aeaece607d9afd380c657f87a6bf330d7cc"}, {0xde, 0x90, 0x315, 0x7fff, 0x2, "55d5102e9f1441bc65963b2445896980a94a946d6ea32ae6b7d34f13c8c5775be7baadff4ae3294333b5146577ec1f39c4af27f1b269e51738d979965a35fff2bcce4f066683cb6b1321978be3efb50c6787d3cd59c3904b2c5c8cd88a74498ae4b62f2891f0066b987df2188bc55ba8eb0f707214a804740d6f87ae77b3c0ebb70d3d05ad5109d8525feb16a24def2b55110ac9842d3977ce3a39c96eef4d95d6b757739659c11f7670f6bcbf6a10d8e13e50c179a505e8fdbde87775355b9886887eb0938d1519e430516fbada"}, {0x75, 0x1000, 0x8, 0x7, 0x1, "835564cee9220885fa5a92ad048857afcdcd09428626186dcbbc0a6c9c0038cadca4621494254e1791c88c13a547bc4fe3161190350fba18603260727af50b63f443f659223329b7d35addf47661546ecbe98760fdeaa504d24b0fb4b22810a9df3fae26bf"}, {0x30, 0x7fffffff, 0x3, 0x0, 0x4, "67a3982ba15e241aa629160359642871223bf45feb22d0bb0b81b97e986d90ea"}, {0x6d, 0x49c7, 0x10, 0xfff, 0xba, "434d58e8faca6679dd92ce32ff0784a42a57ae9919f8e11621f9005a69491521405e2601c01e101803b8016043425e57366173ed07e16120364ed4aeb6a0153d1ea7856574b0351189741f84730f1769813b1e3d5406e7c3d24b7b6a33"}, {0xd2, 0x3, 0x300, 0x8, 0x4, "e201773d8cf227ffe385cee85780c603e8f1a6e6bf916f00d131e5e447ab6cafdaacbe3b035e8aacd5dff84afc1da52da2f981af4ec5d1254e2e653cc8ed8a66e5e143c1ce3e07b291398abe22a4c59b53cd675a6d8215ae8fb40c23b1819bc1320ee9dc805cf78ae84de3bf0fccc7458de1ea526c2deee97d22ae0deb6cb4e54eb56f93fde47c099bbf04a0a24713114f0e0ee52539c79c297bc33dc026edacc8566ff073deb91b86451aa20059cb14ef56b43b72a46d2aa005af2f83fa3a1b8cd9"}, {0xa5, 0x7fffffff, 0x100, 0x6, 0x9, "220bed5b11b363f21e167107717c17fe253ddf85294ef73c51e04f765707c3f53459a902d3ddc9927a5ca4018d29dfeac6c6e5cc84b116883daadfbf60b4012783976a0e4d99ea0edc1dcc22f8557a6b79905ee02d15bdc05da59e06476c2cede3c53b634daeca06c83628f4db41fbca597cfefb32450b73b17e53ad00cb3bda07eb5b162e203739ebe96b5f2fe681275d6bdf9822"}, {0xfe, 0x4c45, 0x710, 0x3, 0xfff, "97944b6a9e8a5288bba3b196a41a459f444fc806ad038031940499fa26d33cffa5c3409c95ff6ab3865d93455cb3b1e678c61bfff42bf2af1964e4c6a81f00f1d2003f06bbd50b7248a904addec13a9f5d1cfe8fc19738d3af8c39b55416f9a71c7b94c0356c6e59013be291dcb70b118431d39b66a88fe99050e9d9172d59036b1cf3ead3d882a5c1ac39f7ee7ec84510c6106ebf9e1ecdc64216225dd16c19c4eeae282d84a33297a98a8bf4edafe3543c2d264199c3dc5b4d53efc02e41a5968667073459ce95135cf7e9cee8b0ee99157dcd56b2f69039f2f33bbe8db9446eafe73a22dc90521ec05682f88e"}, {0x12, 0xffffffff, 0x104, 0x7fffffff, 0x32a19dc1, "0a01"}], 0x511}], 0x9, &(0x7f00006d9000)=[@rights={0x18, 0x1, 0x1, [r1, r1, r0]}, @cred={0x18, 0x1, 0x2, r3, r4, r5}], 0x30, 0x20000000}, 0x40000) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r6, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$ipx(0xffffffffffffff9c, 0x0, &(0x7f0000754000-0x4)=0x0, 0x80000) sendmsg(r1, &(0x7f0000af7000-0x1c)={&(0x7f0000e23000)=@l2={0x1f, 0x686, {0x9, 0xffffffff, 0x6, 0x4, 0x1, 0x8}, 0x7fff, 0x1000}, 0xe, &(0x7f0000914000)=[{&(0x7f00000d0000)="3ba85028dfd8b3268fefcf816a9c9ff82ee90dbfd723a8aa6958433d2a3086a3944a8063cea6b1873f53aea95a3d8be063991086ffec47d0e9767d137d2ae708d918badc88", 0x45}, {&(0x7f0000646000-0xd2)="6a5c4b521bb7f26d73a127e7d1104242825beb8e4cf2c3b1fc39e7e610ee7e8637d2b25e65ae4516c60d5bba02c6df4c4b8687cd9d876c49fce863db85f6f318d5007fade18d88d517a461de9bf70dd034bb81c9f9fd5abe84998ea64c838b1465a218213e058a16f5ff078c4024f092df609f6c708e60040d35b3da45b5876b69e1e0001d129da6968d6af2b0e734793b88778d8b47eb5e078831497ce0bb3fa4945d9f3ef8a1e356faadda826fa062808e64fad26d586fcb249cc6fa3497be7db2a10895913651a52d09bdd891e92d8eb0", 0xd2}], 0x2, &(0x7f0000e87000)=[{0x94, 0x11f, 0x0, "8ad3193587905db35d2198999368a6e08debd0369b1c3c8493360d26b91f78bc3ad761962528a028c1eb199d6cd06412b908b99e61eb80cf984beb477f27e3c3671ed7d76bcf37d75ff860d2ef0b3b76e6c6b1ab6172f5a59598426a5950d13d3286a42970a25f035f8c10ed37e429fc602d18584a65935eae26a9b5de103bda639da2137050fbe3"}, {0xc0, 0x0, 0x6, "12d9325507d6e9b2e5594f348dfb5ad6d32d8dd1377491defe542c628a2a07da9b6129e3d9c9a0d9141643a74a0ff5d5890585fd18fa9778a6e276fce5e4782818aeded261c4b1c63ea47681bb7eaa9f6413d326ca4acb1ee3ee3955f5662f8d3b98da6efc18d9a2ffe0ea1105b2c101271021a8b79977c60e6c6f0b7954dbd301da391e5a4ad261b2fc40cfa8230e20318af41223c0fb90f0235665ff5b210d62b73a494cb78ff74356b53d65ff4d1f79e0dd46"}, {0x30, 0x116, 0x6, "bb2e44caec7d89f20e8a8508529d5ed06ed4876dc69df3325b6b22a8156c52622aea"}, {0x7c, 0x84, 0x0, "bbd76209eed697700154ff2a5aa7d6e10a113802d1d3ecd79d8488245ecf821b3b9e8c3c66c593fbc26d93351be62234396c26edbcfa4457be370812c72a8d66df7d020ef013ff1e7ffd40c5dae799d59495e03da5a5ce796f17abd281a30efc1abe03b40270fb6e281f3b1ef6"}, {0x28, 0x114, 0x9, "82b8d418ee18dc51b534ffc3ef5667920cc51ba58b8a563091142a77"}, {0x98, 0x10d, 0x40, "73d91b5b6b0bae031b3831ceafb4bb8dfaac52f017f7133c0092da44cd50ee46ba7e7843912cebf635adc73a6c7513db35e51ea8fed90b77ff09a96a56ee5812573cc55d22a17a06aa45015d00740de6a56cac1ea1e60605b1fcc057a361b92fb7efa130cfce8ccb1f64c259a534ed90d6d11c875944336d00909f2a9fb5ebaa2a4022cd51905fe595"}], 0x2c0, 0x4}, 0x4040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008c1000-0x10)="2f6465762f73657175656e6365723200", 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f000059e000-0x8c)={0x7fff, 0xfffffffffffffffc, 0x9, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000a98000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000822000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00008ea000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dd3000)=0xe8) stat(&(0x7f000084d000)="2e2f66696c653000", &(0x7f0000033000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() stat(&(0x7f00007cd000)="2e2f66696c653000", &(0x7f0000ec6000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000989000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000d12000-0x4)=0x0) r11 = getuid() getresgid(&(0x7f00007e1000-0x4)=0x0, &(0x7f0000941000-0x4)=0x0, &(0x7f00001e6000-0x4)=0x0) r13 = getpgrp(0x0) r14 = getuid() getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000d58000-0xc)={0x0, 0x0, 0x0}, 0xc) r16 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000b05000-0xe8)={{{@in=@multicast1=0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ed3000-0x4)=0xe8) r18 = getegid() r19 = getpid() r20 = geteuid() fstat(r0, &(0x7f0000335000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f000091c000)=[{&(0x7f0000ed6000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f00006a8000)=[], 0x0, &(0x7f0000080000-0x3c)=[@rights={0xc, 0x1, 0x1, []}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}], 0x3c, 0x4000080}, {&(0x7f0000ada000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000894000-0x30)=[{&(0x7f0000588000)="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", 0x1000}, {&(0x7f0000286000)="4ce2e1e86deb485fe1d8f053d87cd6de3dc736918a67e0021f47a691404190f94b90ce1e", 0x24}, {&(0x7f0000a36000)="5c15704daf87f3df0311bc93ad1e09708d3030e722fe735b084da3958656a79aebfa337d2168f6f6d7062c3b4dfda9c1567f8f97e891d330c14c4d7422d5b0215e4f829ccfcf64df6574f313dcc8f7b7850ba84c5fc57ed225aa0aa41f17fae0cac1782a05690062fd82b17b5d2a78619e16c56a59fb4d9829f0047241d77e590658c27d85810f83110c156a81c70a46b987501092294f72c9bd6a18601eebefaf6efc66a838513d7c5ca7be3cf1649132b8af81f88287b5252be5dfaca1829cce47c6d10e57b7b2c4aa58508aba12e4c7e7aa0e1c19b16b38fecee5d887230f7edff38741c8e24d94aa5af2d0e7974bb8c13a", 0xf3}, {&(0x7f0000b46000-0x1000)="a2d5e8a4a34b2b288972d3ef0345d1f705f278e076682d18a1b55ed260296066982214f6ca00bbeb51911306db87beb64405364f8a686e7fae6c721a33a79ea411119f4a4e6bcbdfbb380f15f789664e2a79ff03f58b339025c6db8d4c380cc0f8c922e5e9f773c3bf2ca8fc883ef1a9c3a9c1a3295c62f916d19febfa6b0fe8fdbccd12653a1cc23cfd136ed5b3f71cc5d017a5d96ea203cda2c1b27628af8778dea05c48ab8646b10e5189f2f7b8e35858dbe5fbf06e16511875278462c29e0ee7f78ad0395b515499702442ac5aeeeb862e33030dfb766ab2b7d475c7c0980e1fa53f6a0741cf9af6af06616ebd5e35006a2b0f131d70c6e839d3d253fe2854f3330844314550cb1471ef54e81016d9b4d699139fd009004984502213bd874059be6a107ef35ec203bb8b93362bf313c7cb158720a5b389194e1a6e00d4a0982c722297ea4947700244eff011e465daa39c072b508b13864c7851a5f0d4f61c490e9695c37f90a596148a15401810d2b45dcf04f36701f3ef14cafafc99f9f6673e48f9d1f74ef44a4fc053f062e6ee2af71b0f0ffc7342cc95fc00a9e4b96812443a7b8a8f0052503f9082db0814fc6cf27d2540630b515a5ab04f71cadd8e62fcfafcf5d139d7ca427a9185c4bf21bf6355b4489bfa671903c9208f4583dff0f96f0b816701cf2c2f3d56844ad1a5238a2606754dfa57ea07422fb0e1861ca018cb4afb03cddfc34fe10c24917a85fbb26ff9a9c277087a966a71db9d3642be94823a953b9e50c71b92a8d9c5813299a949242363bb456d12d7a545a264f1e2ada49cab2f23937ca18fe3514d694bf21e430a2f350108aa1012724ea7873ac347405256781486593c7b9777e7d9e8952984ffc2db2045036875b475a6b032e7ab27d0bfdeb99206f6ef52b8b2ddfe2db6c8b06851a6ba66648368f19473f78e744686dbeeb8ab52e18c8666f80f33681639c5ae1bb4c72ddd8cc98e9c00de1e51dc7498032238f956e3ef401a8d874f0526575fefe80a77b63de6a06dc27befd1c990d10bd7f77b88d97d18ac0a53f796d3dead8534a490dfa666050cc3b04680d2d18cbbff08a874fa3ae89439dff78514bbb81155e554ebd443cfc2a0627d8682a854fb1710789fd816cbc989bc70f29790360ca550089b905a6872d3a0d7d8135065f2feb2f573744662a4d8645c0dbcb8ba1bf60ccc5073e3e17aa15d7efa63744f7f0115799965fa8364803b105c5adf2260795e0aaa5e8f54ff2833a7ff3902f2209e24018ffcabdf69ba77fefc3347757267d2e12065ef26594b0a714f4eb3f9afc1a8fe5555954d576f1694959f9612ee750423a3877d5b5d145841ffabfd443ec04bdcb8f2cde19e6eb53bee55cfdc99f7124cc451e0883a11f5c597fff84eade4325a37092d49875cec730ae1d88c444da38c78898261d1141d9831115e6eaed784e42161826e19092fa2c3a51235980d596359c46b04c6229bdcf1820a8cf1e91f28ce7d59088ee45fc6d23acb444e63311342bf685c4fa879b6dffd19f737dbd28045f115a43a17f62bfdde889d604ae9b938a32427e9c0787c2757b7bb87faba5bae5c98755bff9d0feef40d37c7877cace40b4098b9a63ed09396f01ac1b040799d523754d631c1dcf0245c66ae660b37d835414e435a9c24a399df779905e4737103b63c90a53d29b5597ee9fab86cb911c8a33cd492325ed4e8f60f2674ce419f3bfe653546a982c5fe6dd86584c4b3516c687491d1556162be15ae962cfd083b16099366393eac8e476849f4674a97dda0fbc2bc7feb61b991bcc744f0a08419fff07a70047d33d2f7bf792375056170eaf01e6ff827817f383d1657d007b047480486924d71a10248e1fa75fc60d665b51ec7cb09d3318f630cd71b46debaecbfd71467a39f0f8abeaa9e2bdc6cb227abf62268ea5d77fdcf6b449d69f35db3738cb961c8b7fe91e210c9106d4fa52ff22b5a15be7d23929748084fd7001b84fad70a227616306823ccfcc012b8dc0af7bbaa2877089aef40894f64605c7fab1f97e526a8b6aae15c53fa6ea5d134e754e531deed24378d2aa8feea1032061f0c4b08bc0fa38fb8b30b5689857e799f2e8ffd8d68eda9bbc8f18e768a8554b0fd4cd12e09d05294aa348816680d1e6e2b3d63de70ab8dfa4141170b9d66a0ec72ed5332d313810050a3aa3c4914430b965a4d8fc9467cdfcf3cfe3a6e51be543dcb8e8d243315d74e15d70d6a1dcb0127d13f97871309a0fa978edea75798e093fea524b77dde1268f05025bed357436f20a929843cd121e82c5976b0c08e14a91a102b988d211c10050451f6cc4c211f7852dbfca4a9809b6f02b230951e2289faba3f7584505e5edb976b81eb42dbec5626b39c2cf62e821a04d89292fdce1f9cf5c11fa2067878deea9a4e1a9422d04781a69f24dd029917dbf528007f907fca40317cfd122c9a626f8567bd16115fa405affbe03726a8cdcc07cafe1bcbd783662f4f44decd182e9ff582c15d89f14b902ccb2e73eb7421cd8dfadc7e212568cd091b9a60e6792b3cd07757776890aec1e66532e769f760ca1f0b8ab37e0afb8f94394b0b7a4da7a182ff22a32abcb15d60e28596d4ecfdab040a7359e10bba3778d533a15109448cf6283e3438dc55bb240f193670cf303441c543ec5633ea91aea6b80ec8e0624fce7c11317804c8890952190c5a59265dd458a7149526a50aa04c9ea7f16195e4ff1307fad34051c6c413a714b36a35f6de4a3bd801b200beca52acb7b5d92146e14445baa9c44204df1e969fd6e4bc7b538dabce07ae89a84a5d9db6c01362284845cd3072bcdae0ffae9f8fa975a3b14786834111e869c77bc52b485af3a58edfbfa709138781abdd37e9341f5768930051016c7d21d77238e2750fd03f6e8f725f2ec4d3065646bb2e53278b8f77154d027d7684b4986bd18af4ea9a754ee94f9e842ae20e0889f781e307d36cdb1e2b0854d2a0778de06730341a40097413141229e1841e6f98a824622ee39221502a5cc92ba7252f888f3891198714796d7e55084f83b0817a5af42397dd04df9cbd203a666f449355ad3c68f15b6f3134c7f224a83b66663c92b4563fa289f0738c56abe78dd1e6767e41f2ba7ca3bb5ab5b1a27f48225b2a420624cd9fe13297f6a2d35964c3d56d9c6d40b2b0dbe80e7220dacdee7f0164a5ef061e512f151559dd63f0b96d771a5583fefeed840c0f3332c85e2e680f1c63a8bc5acb75f87d2171bd7529af7c42cb7f3e62acfe4102e11be6233cc4a37d125dc078a9e71a64b773dfbf449e4787c3b8417fc2edfefd7d0a188fd629b94866b1c11b93684255b44eba5001657437d93b60b01f020bd1a1ed66ddc3eb07baab95a4208e61d7020df1914a06ecec78b4438549a80ecff1c881d432bc56e616edc11ffb11e7de99780909875a7f4015b4a6ff9de585a6629ce0c3652221a2f33833d33ddd581b353f3b4b05b3f69edf12c655a848e715e69ccb8ae3c3e38c0a8597786289add8fc1ff99ef9b332b409d0fb14ecad0131011408d34b5d2c4ddec0b6799a0cd738bd671a346ff4938aa2b14396f880e614142860d736310b333b2dfd97b268237beb5a6e0bca102f26da6f0f5f7133ecbbd9c2662c67396bb35c61621f14466979958f8de9edd2c66ceddbb013808b0b1062a985a3517c1e7e47366348eaf4669f4683004b29773ff0350e92fa1b0e39f621145b57cdd78211516fc2707f0887960c22a259e3ff9b5e3f9c21a5745ffdf14a623cb564515d33a7a7076a10d81f241cf346f858e654c1b7a0e2acb9705fd02e37fd33eb966208379797add30ac1a4d26af0b263dcb00109246d4e1346526c3048681ccf24238f470375f4393b6937404365f63208f36b1b4317b1ff76031a5752284821a934ad0ffef393f2f18d9eef214e6e4390f182fb1b28a7d50a3d0b00af8bc270d65ad01c5607823982705aa06ad34865081781b17c20b71455237d309cfcee53ec6c5968e093dcff536584b27c95bf902b0fd850c9a114cff02f78ecb5695bd76dd42a11dce2ce64b0a1216a3f0c765dbef339d4ca3461366f0175d2794b5e7a91875c54decaecc59106b61793d2d0807c54c5dcd1ae251d7e4989772708c696a7a219709c5d9a4e5c7962a9bd41fbf90399e4f660e8872dfdd71ca1260cd5ce81a09c276861fd3f22b3b4857cf14e34500a9ae173f747ccd5169245bfd0cd754fe46aad9ec88edd751e547a21d9b323bc109b438a88bf9d470a5a00c21798b288ef0958dd6212c2e6559c93605bafa2a0e94961b5fd91787797ef3acfe5b4916432e4bb2eee66852d25734a3bfa9176667539e3e3acb0ca209756f66cf5b70b4894220749f58241c22e209c293af5a186a1762964f5808a00846698ba50e11dbd78ed9806433c21a729ecdf06e9d94f6bf877db5473da4e4bc5b549cb1743a868f22e66d162e6c959ebeccf4184156fa9b761cb643d3c1fb24ce0797dbf390aeb30b0263ef0c36c86f7de190510f6995c1390f420b0de255a6ddc0c2e6193781881e01b59a8d37b939c1da0a172364d0e72d6abb9637d0b7818d4c9e0d4be25b7625c0aa4e37750546b22b4e719b3cd11ad2307ce443ceddb6768b6b6d73e0580efb8434bf59997bc6c264e46ba707e0749a6a93b891c8322b783d39194464605a921e1f862d09b391c69592a81499041653b09297d02add79a55bbb258cab699f6bc3d58d8e5eb3458d7995c6327bfffb3b0651efaf4f944dc8572c4725c9fd633b0741df7e872179e7488e62993710e407309c1ae18465fb2299c6ac959afaa3b15cde3d7ad5cbea666201d147c4bc0eaa3ab8689763cedd61c89cc2fd802db0220425f403c8f8436fe5c0e3d4f6419c48079c853c0b39bfee4948260e8646d87256dd6ee148fc67bd71b19a5be526b5155ab4fbadf437d086e96ecffecc8d46ac6b475a6290e122f2f689bb0553b797c3f2eb8c900f59adee349bdaeb05b702a1dc065689399673d1025f8b2d0419e65e6182bd222976fd90d4d5b1c89f21fa4710f0b38c83e36d63c00c4dfc99651a08a94d8402fa6b1cc612929f8f79975ac12dad1b75a78cb2c147795667b86c6353946c617752df58e5899b1f415afae080c8dc830bddb4ee070e6cd7415fc891f946572ae6f5f0907d9436d9abaf7a3f3fba2f72733466cd2fd6496fc40c024e41ef87a94a2cef4159dd216d41fc5e0e3f1eca009ca386a0d7346c3c2d15ea4522c8438e0cb3d14ebceb9acf05a0cdc075c87bc047468dc88deeb7d5bb0535ce5637ae1b13c60547cc5a3335c4d27449ab8270d3684392e69d8b01b016e968036362af2b2c5db5bf2a8ad27d4ba416b2aa37e1f7b3587ed79f7e95ab3470c6f001e3d70438eed0643493f868b2ae9c27f8040c1fe4db5338d7aafc091699864f64f2a72884441570b9f1dd4820580f8adaa2f7750908312d4804942ddc5084698b3e11e0ea436df33e3ca4ed36bfc767e79843c5faf32991cdd9f5421731df955b24816e4b3df93d1b3027a13ba1ba6aa018dc7434aa97c736003c5b72bfc5ddffc251ffad40ae0c28eb0bd60b2dab6e12177d0607fd627ccaefa353d941f7990490fe795020e15f08038b81f61a79254c6497c2052e3dc8873b4e24061694d50101e35d54bd31a062449b5d60b5a8f71b347518e0efb06bb9de2b7afa70d11e7453fb0847272104af2a4dff3044a98a078966b2f424a11594fb7ea7739d405eca36bd1df2fd186d20d7a494317b594946df52c85", 0x1000}, {&(0x7f0000d99000-0x63)="e445dd963b182bd0fba141cbbea22466afad593e032baac5d19b97567187733bcd2abd7ffc38dc62f978462a62f61e3ef8f23935326459184ab2a70c73ef58db7c1f140a625c97a4575ef61e0ca76a38bbde1493c26a64be80df23eab5d0d177e143aa", 0x63}, {&(0x7f00003a0000-0xcd)="f6e9fc75dd9c8afbbc50a0a870bacedc7a72a037f439231638e67910ef28e88e468d74657f6660ee4bed4328851e1140a47051ee86d74dacce1ceac726b938f8ec805ceab5cce14f9d37055c48f20845681bb8a6186bba45f596303fad6a2ddbf45d0310a48db3b7d77488f102d4e6497abddd7f8391b666b051a89cc425b076376c5635df13fba7458416dc6273607046480b5964bd8ad6fa96749af70f4ea669e627d12e8191bf316c2230f33f390780da703497523f681e43da743a559c779677f24919349b0f886b29a9a0", 0xcd}], 0x6, &(0x7f00006e6000-0x90)=[@cred={0x18, 0x1, 0x2, r10, r11, r12}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @rights={0x14, 0x1, 0x1, [r0, r1]}, @rights={0xc, 0x1, 0x1, []}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @rights={0x10, 0x1, 0x1, [r2]}], 0x90, 0x40000}], 0x2, 0x4000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r2, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) 2017/12/02 04:38:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x0, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 126.250042] binder: 23170:23173 transaction failed 29189/-3, size 80-16 line 2870 [ 126.285210] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.291359] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 04:38:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) r0 = request_key(&(0x7f000097f000)="6c6f676f6e00", &(0x7f00002b4000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a37000-0x11)="656d3027656d302c2673656c696e757800", 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000c83000+0x96d)="7573657200", &(0x7f0000750000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000577000)="bfbb75558481", 0x6, 0x0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000df3000-0x30)=[{&(0x7f00006b2000)="77a9da295c472d0e49da691e22abf86bcf188d19ac5f6a864872436f4c6c4b59617e78a2602f1592667e", 0x2a}, {&(0x7f0000c34000)="508a3a88af5eb5928866f63d99d13fc447b57ef92924f8af2da8669b5aa4b718e419ebe8489d0971976ec0e5ff4e667ff94a3eafb7b86b02a62540e3d89955b56eb450b5705040e862fbb9b893c1a56992c75c9530306c71aee5e7db9b15e4f301dc1c3495194a0d39e6aaf2c708f9cf937e", 0x72}, {&(0x7f0000bb6000)="", 0x0}, {&(0x7f0000daf000)="a6cdf1f8588f07abd097c5466c4c27e4e08cae067cd4d64dbbe96604813c73d12198c184d207c93b49a2073dfafdb2f74adc877296e5aa45f8b014ae967f72a2e71c92739822053a4b513e703591c6137a4120401e79ea95b8fd4da3a241da0537d1da08894fb590ba1c4ce771f8e5abe38bf2810685a58f533e604e846d7d5f395e1979a17e514c98dff077d690bf9aa0c438ff8ba720a73f27b77c2dff9ae2c46d70c9d7c7cb42ab7bfd8362e2b44a5ba560f669414938a7", 0xb9}, {&(0x7f0000b0f000)="3c5c88e1a8b3543d7ca997fd7bf0ebe0045f78691dc40bc013577bd61148ee21cc982dc4f83329dceba09d363dea15e0249d4ddc93dd42880535034beb8cf4ebef31c9e4db8c3012777c27ed9dddda48ea72c83a", 0x54}, {&(0x7f000066b000-0x1000)="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", 0x1000}], 0x6, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x10, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:06 executing program 7 (fault-call:4 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 126.344196] binder: 23231:23241 got transaction with invalid parent offset or type [ 126.379407] binder: 23231:23241 transaction failed 29201/-22, size 80-16 line 3055 2017/12/02 04:38:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f6e000-0xa)="2f6465762f70746d7800", 0x0, 0x0) r2 = dup(r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000a0c000)="731aba94824ce2af70dd732dd1caf32ac93e65baf1c9ff2d714e63f51f40c909e525d197c524599322544ae728fddf48afbed232e6f6ef8da7488adeae00dccb9dc51f4dc80f2c74f2d9ba73890640508bf18566d5f52c355fad46e6dc269b029414010cf79899e59c7124db792da2ace3d93075c4285f668b27b87eefa04191dead4c0b877051f7458a0b6a56ab75221eea278aa2b08d4c74e1321221f20335310ee6") ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00007ed000)={0x7, 0x1de}) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00006fb000)="140500d54a", 0x5) 2017/12/02 04:38:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008df000)={0x0, 0x0}, 0x80800) ioctl$DRM_IOCTL_VERSION(r0, 0xc0246400, &(0x7f00009c5000-0x24)={0x7f, 0x7fff, 0x6, 0xa5, &(0x7f0000a9c000-0xa5)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdf, &(0x7f0000116000-0xdf)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68, &(0x7f00009b6000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 2017/12/02 04:38:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:06 executing program 7 (fault-call:4 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 126.386120] FAULT_INJECTION: forcing a failure. [ 126.386120] name failslab, interval 1, probability 0, space 0, times 0 [ 126.386129] CPU: 1 PID: 23262 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 2017/12/02 04:38:06 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)="2f6465762f73672300", 0x2, 0x2000) syncfs(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) [ 126.386134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.386137] Call Trace: [ 126.386149] dump_stack+0x194/0x257 [ 126.386165] ? arch_local_irq_restore+0x53/0x53 [ 126.386196] should_fail+0x8c0/0xa40 [ 126.386211] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 126.386229] ? lock_page_memcg+0x2bd/0x3b0 [ 126.386237] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.386255] ? find_held_lock+0x39/0x1d0 [ 126.386284] ? lock_downgrade+0x980/0x980 [ 126.386326] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 126.386333] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.386347] ? rcu_note_context_switch+0x710/0x710 [ 126.386373] should_failslab+0xec/0x120 [ 126.386385] kmem_cache_alloc_node+0x56/0x760 [ 126.386403] ? reacquire_held_locks+0x201/0x3e0 [ 126.386424] copy_process.part.36+0x1a6a/0x4ae0 [ 126.386437] ? __lock_acquire+0x6e9/0x47f0 [ 126.386470] ? __cleanup_sighand+0x40/0x40 [ 126.386496] ? print_usage_bug+0x3f0/0x3f0 [ 126.386505] ? wake_up_page_bit+0x530/0x530 [ 126.386520] ? __lock_is_held+0xbc/0x140 [ 126.386568] ? __lock_acquire+0x6e9/0x47f0 [ 126.386598] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 126.386626] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 126.386636] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 126.386648] ? check_noncircular+0x20/0x20 [ 126.386660] ? perf_trace_lock+0x900/0x900 [ 126.386672] ? print_usage_bug+0x3f0/0x3f0 [ 126.386688] ? check_noncircular+0x20/0x20 [ 126.386710] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.386718] ? __fdget_pos+0x131/0x1a0 [ 126.386735] ? check_noncircular+0x20/0x20 [ 126.386746] ? perf_trace_lock+0x900/0x900 [ 126.386768] ? lock_downgrade+0x980/0x980 [ 126.386780] ? check_noncircular+0x20/0x20 [ 126.386805] ? find_held_lock+0x39/0x1d0 [ 126.386816] ? check_noncircular+0x20/0x20 [ 126.386841] ? lock_downgrade+0x980/0x980 [ 126.386850] ? __lock_is_held+0xbc/0x140 [ 126.386882] ? find_held_lock+0x39/0x1d0 [ 126.386912] ? lock_downgrade+0x980/0x980 [ 126.386925] ? get_pid_task+0xbc/0x140 [ 126.386937] ? proc_fail_nth_write+0xb5/0x260 [ 126.386949] ? map_files_get_link+0x3a0/0x3a0 [ 126.386955] ? __lock_is_held+0xbc/0x140 [ 126.386977] _do_fork+0x1ef/0xff0 [ 126.386998] ? fork_idle+0x2d0/0x2d0 [ 126.387015] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 126.387027] ? kernel_read+0x120/0x120 [ 126.387039] ? wait_for_completion+0x7b0/0x7b0 [ 126.387060] ? __lock_is_held+0xbc/0x140 [ 126.387100] ? __sb_end_write+0x9e/0xd0 [ 126.387118] ? fput+0xd2/0x140 [ 126.387129] ? SyS_write+0x184/0x220 [ 126.387138] ? __do_page_fault+0x3d6/0xc90 [ 126.387154] ? SyS_read+0x220/0x220 [ 126.387176] SyS_clone+0x37/0x50 [ 126.387187] ? entry_INT80_compat+0x40/0x40 [ 126.387201] do_fast_syscall_32+0x3ee/0xf9d [ 126.387227] ? do_int80_syscall_32+0x9d0/0x9d0 [ 126.387250] ? lockdep_sys_exit+0x47/0xf0 [ 126.387261] ? syscall_return_slowpath+0x2ad/0x550 [ 126.387280] ? sysret32_from_system_call+0x5/0x3b [ 126.387303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 126.387325] entry_SYSENTER_compat+0x51/0x60 [ 126.387332] RIP: 0023:0xf7f5fc79 [ 126.387337] RSP: 002b:00000000f775b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 126.387346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000209a9000 [ 126.387351] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 126.387356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.387360] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 126.387365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.448365] FAULT_INJECTION: forcing a failure. [ 126.448365] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 126.448375] CPU: 0 PID: 23278 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 126.448381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.448384] Call Trace: [ 126.448397] dump_stack+0x194/0x257 [ 126.448413] ? arch_local_irq_restore+0x53/0x53 [ 126.448445] should_fail+0x8c0/0xa40 [ 126.448461] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 126.448488] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 126.448502] ? __lock_acquire+0x6e9/0x47f0 [ 126.448534] ? __lock_acquire+0x6e9/0x47f0 [ 126.448562] ? check_noncircular+0x20/0x20 [ 126.448573] ? perf_trace_lock+0x900/0x900 [ 126.448585] ? should_fail+0x23b/0xa40 [ 126.448610] __alloc_pages_nodemask+0x338/0xd80 [ 126.448619] ? lock_page_memcg+0x2bd/0x3b0 [ 126.448626] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.448642] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 126.448648] ? find_held_lock+0x39/0x1d0 [ 126.448677] ? lock_downgrade+0x980/0x980 [ 126.448716] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.448730] ? rcu_note_context_switch+0x710/0x710 [ 126.448749] cache_grow_begin+0x72/0x3f0 [ 126.448769] kmem_cache_alloc_node+0x443/0x760 [ 126.448802] copy_process.part.36+0x1a6a/0x4ae0 [ 126.448815] ? __lock_acquire+0x6e9/0x47f0 [ 126.448844] ? __cleanup_sighand+0x40/0x40 [ 126.448869] ? print_usage_bug+0x3f0/0x3f0 [ 126.448877] ? wake_up_page_bit+0x530/0x530 [ 126.448891] ? __lock_is_held+0xbc/0x140 [ 126.448935] ? __lock_acquire+0x6e9/0x47f0 [ 126.448970] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 126.448998] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 126.449011] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 126.449022] ? check_noncircular+0x20/0x20 [ 126.449035] ? perf_trace_lock+0x900/0x900 [ 126.449048] ? print_usage_bug+0x3f0/0x3f0 [ 126.449064] ? check_noncircular+0x20/0x20 [ 126.449086] ? perf_trace_lock_acquire+0xe3/0x980 [ 126.449097] ? __fdget_pos+0x131/0x1a0 [ 126.449117] ? check_noncircular+0x20/0x20 [ 126.449128] ? perf_trace_lock+0x900/0x900 [ 126.449152] ? lock_downgrade+0x980/0x980 [ 126.449165] ? check_noncircular+0x20/0x20 [ 126.449191] ? find_held_lock+0x39/0x1d0 [ 126.449203] ? check_noncircular+0x20/0x20 [ 126.449226] ? lock_downgrade+0x980/0x980 [ 126.449236] ? __lock_is_held+0xbc/0x140 [ 126.449268] ? find_held_lock+0x39/0x1d0 [ 126.449298] ? lock_downgrade+0x980/0x980 [ 126.449310] ? get_pid_task+0xbc/0x140 [ 126.449323] ? proc_fail_nth_write+0xb5/0x260 [ 126.449334] ? map_files_get_link+0x3a0/0x3a0 [ 126.449341] ? __lock_is_held+0xbc/0x140 [ 126.449362] _do_fork+0x1ef/0xff0 [ 126.449383] ? fork_idle+0x2d0/0x2d0 [ 126.449400] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 126.449411] ? kernel_read+0x120/0x120 [ 126.449423] ? wait_for_completion+0x7b0/0x7b0 [ 126.449444] ? __lock_is_held+0xbc/0x140 [ 126.449480] ? __sb_end_write+0x9e/0xd0 [ 126.449501] ? fput+0xd2/0x140 [ 126.449517] ? SyS_write+0x184/0x220 [ 126.449532] ? __do_page_fault+0x3d6/0xc90 [ 126.449548] ? SyS_read+0x220/0x220 [ 126.449575] SyS_clone+0x37/0x50 [ 126.449585] ? entry_INT80_compat+0x40/0x40 [ 126.449596] do_fast_syscall_32+0x3ee/0xf9d [ 126.449613] ? do_int80_syscall_32+0x9d0/0x9d0 [ 126.449630] ? lockdep_sys_exit+0x47/0xf0 [ 126.449637] ? syscall_return_slowpath+0x2ad/0x550 [ 126.449650] ? sysret32_from_system_call+0x5/0x3b [ 126.449665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 126.449682] entry_SYSENTER_compat+0x51/0x60 [ 126.449688] RIP: 0023:0xf7f5fc79 [ 126.449692] RSP: 002b:00000000f775b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 126.449699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000209a9000 [ 126.449702] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 126.449705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.449709] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 126.449712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.460533] binder_alloc: binder_alloc_mmap_handler: 23231 20000000-20002000 already mapped failed -16 [ 126.460582] binder: BINDER_SET_CONTEXT_MGR already set [ 126.460591] binder: 23231:23272 ioctl 40046207 0 returned -16 [ 126.463157] binder_alloc: 23231: binder_alloc_buf, no vma 2017/12/02 04:38:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x800000000008, 0x4, &(0x7f0000ee0000-0x10)={0x0, 0x0}, &(0x7f00004f9000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0x0) 2017/12/02 04:38:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x4) exit(0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000143000)="2f6465762f7667615f6172626974657200", 0x400000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000356000-0x4)=0x9) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00002c2000-0x10)=@generic="137b18b37ff87ebef4eadfd01c946530") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000004000)={0x0, 0xfc}, &(0x7f00006be000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000943000-0x8)=@assoc_value={r2, 0x0}, 0x8) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000da6000)="2f6465762f6375736500", 0x183000, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f000015d000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000010b000-0x4)=0xb) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000b8e000-0x4)=0x0, 0x4) connect(r4, &(0x7f0000a70000)=@nfc_llcp={0x27, 0x7, 0x3, 0x2, 0x8, 0x5, "a1ae0082b9607fe13f77f2757f5ce0d743441daa2b5cc4d7412124a039a7a0fd2d8ae55dc6a1b9fe7a7c49390379394ab22e7ababd6a03812acaf296dc98c3", 0x20}, 0x58) preadv(r4, &(0x7f0000774000)=[{&(0x7f00005d2000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8}, {&(0x7f000057b000-0xff)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xff}, {&(0x7f00003a2000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x3, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f00006fb000)="ea06d504", 0x4) 2017/12/02 04:38:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) r2 = memfd_create(&(0x7f000092e000-0x9)="76626f786e65743100", 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000cca000-0x108)={0x0, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xd0, 0x2, 0x2b3c, 0x7, 0x0, 0x0, 0x8, 0x6, 0xea2d, 0x7c2, 0xea, 0x1, 0x100, 0x0, 0x3]}, &(0x7f000059d000-0x4)=0x108) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000af9000-0x20)={0x8, 0x401, 0x4, 0x3ff, 0x1, 0x20, 0xfc4, 0x6, r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) ioctl$TIOCSBRK(r2, 0x5427) 2017/12/02 04:38:07 executing program 7 (fault-call:4 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000cbb000-0x20)={@generic="bca11353b296aae4748742f012948947", @ifru_flags=0x101}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000d63000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000a0f000-0xc)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a89000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000afb000-0x4)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000062e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f0000dde000-0x14)={0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000f1c000)=&(0x7f0000a43000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000781000-0x8)=0x18) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000070000-0x8)={0xe2, 0x1ff}) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000a09000-0xe8)={{{@in=@loopback=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001b8000)=0xe8) getgid() getpid() lstat(&(0x7f0000b3e000)="2e2f66696c653000", &(0x7f0000873000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000baa000-0x8)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000fce000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003f7000)=0xe8) lstat(&(0x7f000067c000-0x8)="2e2f66696c653000", &(0x7f000056a000+0x345)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00003cd000-0x4)=0x0, &(0x7f00009f7000)=0x0, &(0x7f00005e8000)=0x0) fcntl$getown(r4, 0x9) getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000774000)={0x0, 0x0, 0x0}, &(0x7f0000907000)=0xc) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000884000-0xe8)={{{@in=@empty=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000033000-0x4)=0xe8) getresgid(&(0x7f0000a70000-0x4)=0x0, &(0x7f00001cc000-0x4)=0x0, &(0x7f0000d14000-0x4)=0x0) 2017/12/02 04:38:07 executing program 3: r0 = open(&(0x7f000015c000-0x8)="2e2f66696c653000", 0x4000, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000068c000)={{0x6, 0x1}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40, 0x180000, 0x7, 0x80000001, 0x6, 0x4, 0xffff, 0x0, 0x7, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f000078a000)={0x0, 0xffff, 0x30, 0x1ff, 0x6}, &(0x7f000016f000-0x4)=0x18) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001000-0x8)={r1, 0x380}, &(0x7f00004d0000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x17, 0x108000b, 0x10001, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004e7000)="2f6465762f70746d7800", 0x20802, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1d, &(0x7f00005ed000-0x21)="c4ca288f3d0a2a09abdc135e013a2292e37ba91bcf7ffba8defe40f33f62bc6025", 0x21) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r5, 0x0, 0x200, 0x0) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000faa000)=0x101, 0x4) 2017/12/02 04:38:07 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 04:38:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x10000000107, 0x12, &(0x7f0000000000)="", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) exit(0xa) 2017/12/02 04:38:07 executing program 7 (fault-call:4 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") 2017/12/02 04:38:07 executing program 7 (fault-call:4 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clone(0x0, &(0x7f00009a9000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003c2000)="") [ 126.463179] binder: 23231:23255 transaction failed 29189/-3, size 80-16 line 2870 [ 127.210786] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.216583] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.221070] FAULT_INJECTION: forcing a failure. [ 127.221070] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 04:38:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000663000)={0x5, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r1, &(0x7f0000763000-0x2)="", &(0x7f00003fd000-0xd7)=""}, 0x18) dup3(r0, r0, 0x80000) 2017/12/02 04:38:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a2b000)={0x0, 0x0}, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000a4a000-0x8)=@assoc_value={0x0, 0x1}, &(0x7f00000cf000)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000368000)={r2, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000cee000)={@local={0xac, 0x14, 0x0, 0xaa}, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x8) ioctl$TIOCGSID(r0, 0x540f, &(0x7f000051b000)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x20000000000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a12000-0xa)="2f6465762f70746d7800", 0x20802, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000b17000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) utimensat(r5, &(0x7f0000dc5000)="2e2f66696c653000", &(0x7f0000d15000)={{0x77359400, 0x0}, {0x77359400, 0x0}}, 0x100) splice(r4, 0x0, r7, 0x0, 0x200, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000f59000-0x10)={r2, 0x3, 0x2, 0x5}, 0x10) 2017/12/02 04:38:07 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x4000000000040, 0x200001) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000005000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") prctl$seccomp(0x16, 0x2, &(0x7f0000013000)={0x3, &(0x7f0000003000-0x18)=[{0x200, 0x4, 0x4, 0x6}, {0xfffffffffffffff8, 0x1d, 0x2, 0x6}, {0x400, 0x400000000000f28, 0x80000001, 0x1f}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000005000)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000012000)={0x30, 0x3, 0x1, 0x2, 0xfffffffffffffffa, 0x6, 0x2e1, 0xfffffffffffffffe}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x6, 0x3d1b, 0x10000000008000, 0xffffffff, 0x83f, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005ab000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 127.221079] CPU: 0 PID: 23294 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 127.221084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.221088] Call Trace: [ 127.221100] dump_stack+0x194/0x257 [ 127.221114] ? arch_local_irq_restore+0x53/0x53 [ 127.221141] should_fail+0x8c0/0xa40 [ 127.221155] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 127.221166] ? depot_save_stack+0x12c/0x490 [ 127.221190] ? find_held_lock+0x39/0x1d0 [ 127.221216] ? lock_downgrade+0x980/0x980 [ 127.221249] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 127.221262] ? rcu_note_context_switch+0x710/0x710 [ 127.221285] should_failslab+0xec/0x120 [ 127.221296] __kmalloc_track_caller+0x5f/0x760 [ 127.221303] ? rcu_pm_notify+0xc0/0xc0 [ 127.221317] ? prepare_creds+0x78/0x360 [ 127.221324] ? selinux_cred_prepare+0x43/0xa0 [ 127.221341] kmemdup+0x24/0x50 [ 127.221352] selinux_cred_prepare+0x43/0xa0 [ 127.221364] security_prepare_creds+0x7d/0xb0 [ 127.221379] prepare_creds+0x2b1/0x360 [ 127.221388] ? abort_creds+0x130/0x130 [ 127.221400] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 127.221406] ? __lockdep_init_map+0xe4/0x650 [ 127.221424] copy_creds+0x7b/0x3a0 [ 127.221441] copy_process.part.36+0xb28/0x4ae0 [ 127.221453] ? __lock_acquire+0x6e9/0x47f0 [ 127.221478] ? __cleanup_sighand+0x40/0x40 [ 127.221500] ? print_usage_bug+0x3f0/0x3f0 [ 127.221508] ? wake_up_page_bit+0x530/0x530 [ 127.221521] ? __lock_is_held+0xbc/0x140 [ 127.221558] ? __lock_acquire+0x6e9/0x47f0 [ 127.221581] ? mark_held_locks+0xb2/0x100 [ 127.221603] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 127.221615] ? check_noncircular+0x20/0x20 [ 127.221630] ? print_usage_bug+0x3f0/0x3f0 [ 127.221643] ? check_noncircular+0x20/0x20 [ 127.221660] ? lock_acquire+0x256/0x580 [ 127.221677] ? check_noncircular+0x20/0x20 [ 127.221702] ? lock_downgrade+0x980/0x980 [ 127.221712] ? check_noncircular+0x20/0x20 [ 127.221733] ? find_held_lock+0x39/0x1d0 [ 127.221743] ? check_noncircular+0x20/0x20 [ 127.221764] ? lock_downgrade+0x980/0x980 [ 127.221772] ? __lock_is_held+0xbc/0x140 [ 127.221799] ? find_held_lock+0x39/0x1d0 [ 127.221824] ? lock_downgrade+0x980/0x980 [ 127.221835] ? get_pid_task+0xbc/0x140 [ 127.221847] ? proc_fail_nth_write+0xb5/0x260 [ 127.221857] ? map_files_get_link+0x3a0/0x3a0 [ 127.221864] ? __lock_is_held+0xbc/0x140 [ 127.221882] _do_fork+0x1ef/0xff0 [ 127.221900] ? fork_idle+0x2d0/0x2d0 [ 127.221916] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 127.221930] ? kernel_read+0x120/0x120 [ 127.221942] ? wait_for_completion+0x7b0/0x7b0 [ 127.221959] ? __lock_is_held+0xbc/0x140 [ 127.221993] ? __sb_end_write+0x9e/0xd0 [ 127.222009] ? fput+0xd2/0x140 [ 127.222019] ? SyS_write+0x184/0x220 [ 127.222027] ? __do_page_fault+0x3d6/0xc90 [ 127.222039] ? SyS_read+0x220/0x220 [ 127.222058] SyS_clone+0x37/0x50 [ 127.222068] ? entry_INT80_compat+0x40/0x40 [ 127.222079] do_fast_syscall_32+0x3ee/0xf9d [ 127.222100] ? do_int80_syscall_32+0x9d0/0x9d0 [ 127.222120] ? lockdep_sys_exit+0x47/0xf0 [ 127.222130] ? syscall_return_slowpath+0x2ad/0x550 [ 127.222145] ? sysret32_from_system_call+0x5/0x3b [ 127.222163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 127.222183] entry_SYSENTER_compat+0x51/0x60 [ 127.222189] RIP: 0023:0xf7f5fc79 [ 127.222194] RSP: 002b:00000000f775b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 127.222202] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000209a9000 [ 127.222207] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 127.222211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.222215] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.222220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.250544] FAULT_INJECTION: forcing a failure. [ 127.250544] name failslab, interval 1, probability 0, space 0, times 0 [ 127.250554] CPU: 0 PID: 23308 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 127.250560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.250567] Call Trace: [ 127.250580] dump_stack+0x194/0x257 [ 127.250596] ? arch_local_irq_restore+0x53/0x53 [ 127.250627] should_fail+0x8c0/0xa40 [ 127.250643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 127.250656] ? depot_save_stack+0x12c/0x490 [ 127.250678] ? find_held_lock+0x39/0x1d0 [ 127.250706] ? lock_downgrade+0x980/0x980 [ 127.250747] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 127.250764] ? rcu_note_context_switch+0x710/0x710 [ 127.250791] should_failslab+0xec/0x120 [ 127.250805] __kmalloc_track_caller+0x5f/0x760 [ 127.250812] ? rcu_pm_notify+0xc0/0xc0 [ 127.250830] ? prepare_creds+0x78/0x360 [ 127.250838] ? selinux_cred_prepare+0x43/0xa0 [ 127.250860] kmemdup+0x24/0x50 [ 127.250874] selinux_cred_prepare+0x43/0xa0 [ 127.250888] security_prepare_creds+0x7d/0xb0 [ 127.250907] prepare_creds+0x2b1/0x360 [ 127.250918] ? abort_creds+0x130/0x130 [ 127.250940] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 127.250948] ? __lockdep_init_map+0xe4/0x650 [ 127.250973] copy_creds+0x7b/0x3a0 [ 127.250998] copy_process.part.36+0xb28/0x4ae0 [ 127.251012] ? __lock_acquire+0x6e9/0x47f0 [ 127.251044] ? __cleanup_sighand+0x40/0x40 [ 127.251070] ? print_usage_bug+0x3f0/0x3f0 [ 127.251077] ? wake_up_page_bit+0x530/0x530 [ 127.251093] ? __lock_is_held+0xbc/0x140 [ 127.251134] ? __lock_acquire+0x6e9/0x47f0 [ 127.251160] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 127.251185] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 127.251198] ? check_noncircular+0x20/0x20 [ 127.251209] ? perf_trace_lock+0x900/0x900 [ 127.251220] ? print_usage_bug+0x3f0/0x3f0 [ 127.251234] ? check_noncircular+0x20/0x20 [ 127.251254] ? perf_trace_lock_acquire+0xe3/0x980 [ 127.251262] ? __fdget_pos+0x131/0x1a0 [ 127.251279] ? check_noncircular+0x20/0x20 [ 127.251289] ? perf_trace_lock+0x900/0x900 [ 127.251311] ? lock_downgrade+0x980/0x980 [ 127.251322] ? check_noncircular+0x20/0x20 [ 127.251345] ? find_held_lock+0x39/0x1d0 [ 127.251357] ? check_noncircular+0x20/0x20 [ 127.251379] ? lock_downgrade+0x980/0x980 [ 127.251389] ? __lock_is_held+0xbc/0x140 [ 127.251418] ? find_held_lock+0x39/0x1d0 [ 127.251447] ? lock_downgrade+0x980/0x980 [ 127.251459] ? get_pid_task+0xbc/0x140 [ 127.251471] ? proc_fail_nth_write+0xb5/0x260 [ 127.251482] ? map_files_get_link+0x3a0/0x3a0 [ 127.251489] ? __lock_is_held+0xbc/0x140 [ 127.251509] _do_fork+0x1ef/0xff0 [ 127.251530] ? fork_idle+0x2d0/0x2d0 [ 127.251549] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 127.251561] ? kernel_read+0x120/0x120 [ 127.251575] ? wait_for_completion+0x7b0/0x7b0 [ 127.251597] ? __lock_is_held+0xbc/0x140 [ 127.251641] ? __sb_end_write+0x9e/0xd0 [ 127.251663] ? fput+0xd2/0x140 [ 127.251675] ? SyS_write+0x184/0x220 [ 127.251683] ? __do_page_fault+0x3d6/0xc90 [ 127.251698] ? SyS_read+0x220/0x220 [ 127.251718] SyS_clone+0x37/0x50 [ 127.251730] ? entry_INT80_compat+0x40/0x40 [ 127.251743] do_fast_syscall_32+0x3ee/0xf9d [ 127.251764] ? do_int80_syscall_32+0x9d0/0x9d0 [ 127.251777] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 127.251790] ? lockdep_sys_exit+0x47/0xf0 [ 127.251799] ? syscall_return_slowpath+0x2ad/0x550 [ 127.251815] ? sysret32_from_system_call+0x5/0x3b [ 127.251836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 127.251861] entry_SYSENTER_compat+0x51/0x60 [ 127.251868] RIP: 0023:0xf7f5fc79 [ 127.251872] RSP: 002b:00000000f775b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 127.251879] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000209a9000 [ 127.251883] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 127.251887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.251891] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.251894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.265771] binder: 23300:23306 got transaction with invalid parent offset or type [ 127.265816] binder: 23300:23306 transaction failed 29201/-22, size 80-16 line 3055 [ 127.298035] FAULT_INJECTION: forcing a failure. [ 127.298035] name failslab, interval 1, probability 0, space 0, times 0 [ 127.298045] CPU: 0 PID: 23320 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 127.298051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.298054] Call Trace: [ 127.298067] dump_stack+0x194/0x257 [ 127.298083] ? arch_local_irq_restore+0x53/0x53 [ 127.298115] should_fail+0x8c0/0xa40 [ 127.298132] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 127.298149] ? find_held_lock+0x39/0x1d0 [ 127.298172] ? find_held_lock+0x39/0x1d0 [ 127.298202] ? lock_downgrade+0x980/0x980 [ 127.298242] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 127.298258] ? rcu_note_context_switch+0x710/0x710 [ 127.298269] ? kvm_clock_get_cycles+0x25/0x30 [ 127.298291] should_failslab+0xec/0x120 [ 127.298304] kmem_cache_alloc_trace+0x4b/0x750 [ 127.298312] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 127.298319] ? __lockdep_init_map+0xe4/0x650 [ 127.298332] ? __lockdep_init_map+0xe4/0x650 [ 127.298351] lockdep_init_task+0x187/0x210 [ 127.298364] copy_process.part.36+0x16eb/0x4ae0 [ 127.298402] ? __cleanup_sighand+0x40/0x40 [ 127.298428] ? print_usage_bug+0x3f0/0x3f0 [ 127.298436] ? wake_up_page_bit+0x530/0x530 [ 127.298450] ? __lock_is_held+0xbc/0x140 [ 127.298494] ? __lock_acquire+0x6e9/0x47f0 [ 127.298522] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 127.298549] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 127.298562] ? check_noncircular+0x20/0x20 [ 127.298573] ? perf_trace_lock+0x900/0x900 [ 127.298584] ? print_usage_bug+0x3f0/0x3f0 [ 127.298599] ? check_noncircular+0x20/0x20 [ 127.298620] ? perf_trace_lock_acquire+0xe3/0x980 [ 127.298627] ? __fdget_pos+0x131/0x1a0 [ 127.298645] ? check_noncircular+0x20/0x20 [ 127.298673] ? lock_downgrade+0x980/0x980 [ 127.298684] ? check_noncircular+0x20/0x20 [ 127.298710] ? find_held_lock+0x39/0x1d0 [ 127.298721] ? check_noncircular+0x20/0x20 [ 127.298745] ? lock_downgrade+0x980/0x980 [ 127.298755] ? __lock_is_held+0xbc/0x140 [ 127.298786] ? find_held_lock+0x39/0x1d0 [ 127.298816] ? lock_downgrade+0x980/0x980 [ 127.298828] ? get_pid_task+0xbc/0x140 [ 127.298841] ? proc_fail_nth_write+0xb5/0x260 [ 127.298852] ? map_files_get_link+0x3a0/0x3a0 [ 127.298859] ? __lock_is_held+0xbc/0x140 [ 127.298881] _do_fork+0x1ef/0xff0 [ 127.298902] ? fork_idle+0x2d0/0x2d0 [ 127.298942] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 127.298955] ? kernel_read+0x120/0x120 [ 127.298970] ? wait_for_completion+0x7b0/0x7b0 [ 127.298992] ? __lock_is_held+0xbc/0x140 [ 127.299035] ? __sb_end_write+0x9e/0xd0 [ 127.299055] ? fput+0xd2/0x140 [ 127.299067] ? SyS_write+0x184/0x220 [ 127.299078] ? __do_page_fault+0x3d6/0xc90 [ 127.299093] ? SyS_read+0x220/0x220 [ 127.299112] SyS_clone+0x37/0x50 [ 127.299123] ? entry_INT80_compat+0x40/0x40 [ 127.299136] do_fast_syscall_32+0x3ee/0xf9d [ 127.299159] ? do_int80_syscall_32+0x9d0/0x9d0 [ 127.299173] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 127.299186] ? lockdep_sys_exit+0x47/0xf0 [ 127.299197] ? syscall_return_slowpath+0x2ad/0x550 [ 127.299214] ? sysret32_from_system_call+0x5/0x3b [ 127.299234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 127.299257] entry_SYSENTER_compat+0x51/0x60 [ 127.299264] RIP: 0023:0xf7f5fc79 [ 127.299269] RSP: 002b:00000000f775b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 127.299278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000209a9000 [ 127.299282] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 127.299287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.299291] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.299295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.303698] binder_alloc: binder_alloc_mmap_handler: 23300 20000000-20002000 already mapped failed -16 [ 127.303747] binder: BINDER_SET_CONTEXT_MGR already set [ 127.303755] binder: 23300:23316 ioctl 40046207 0 returned -16 [ 127.319703] kasan: CONFIG_KASAN_INLINE enabled [ 127.319706] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 127.319714] general protection fault: 0000 [#1] SMP KASAN [ 127.319719] Dumping ftrace buffer: [ 127.319723] (ftrace buffer empty) [ 127.319725] Modules linked in: [ 127.319734] CPU: 0 PID: 23327 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 127.319737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.319742] task: 00000000a6e58703 task.stack: 00000000727bdba8 [ 127.319753] RIP: 0010:lockdep_invariant_state+0xd6/0x120 [ 127.319757] RSP: 0018:ffff8801c71b7e48 EFLAGS: 00010002 [ 127.319763] RAX: dffffc0000000000 RBX: 0000000000001d88 RCX: ffffffff81008dab [ 127.319767] RDX: 00000000000003bc RSI: 0000000000000000 RDI: 0000000000001de0 [ 127.319770] RBP: ffff8801c71b7e58 R08: 0000000000000000 R09: 0000000000000000 [ 127.319774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.319778] R13: ffff8801c71b7f20 R14: ffff8801c71b7f58 R15: ffff8801d138a100 [ 127.319784] FS: 0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000f775bb40 [ 127.319788] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 127.319791] CR2: 0000000008d3e968 CR3: 00000001d28c3000 CR4: 00000000001406f0 [ 127.319796] Call Trace: [ 127.319805] lockdep_sys_exit+0x47/0xf0 [ 127.319815] syscall_return_slowpath+0x240/0x550 [ 127.319823] ? prepare_exit_to_usermode+0x340/0x340 [ 127.319833] ? copy_overflow+0x20/0x20 [ 127.319857] ret_from_fork+0x15/0x30 [ 127.319862] RIP: 0023:0xf7f5fc79 [ 127.319865] RSP: 002b:00000000209a9000 EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 127.319871] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000209a9000 [ 127.319875] RDX: 0000000020ea9ffc RSI: 0000000020bf2ffc RDI: 00000000203c2000 [ 127.319878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.319882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.319885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.319905] Code: 83 90 11 00 00 83 e0 3f 48 89 c2 48 c1 e2 04 48 29 c2 48 b8 00 00 00 00 00 fc ff df 49 8d 1c d4 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 48 c7 43 58 00 00 00 00 5b 41 5c 5d c3 0f ff [ 127.320041] RIP: lockdep_invariant_state+0xd6/0x120 RSP: ffff8801c71b7e48 [ 127.320051] ---[ end trace db094b3f10ffe85a ]--- [ 127.320054] Kernel panic - not syncing: Fatal exception [ 127.322161] Dumping ftrace buffer: [ 127.322164] (ftrace buffer empty) [ 127.322167] Kernel Offset: disabled [ 128.656138] Rebooting in 86400 seconds..