7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f00000b5000)=0x100000000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/16 18:03:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000299000)=0x8, 0x4) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000877000+0x60c)}, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a46000-0x9)='/dev/rtc\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000535000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00007f4000)='/dev/ion\x00', 0x0, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) 2018/02/16 18:03:09 executing program 6: perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x7fffffffffffdffe, 0x2) 2018/02/16 18:03:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000fa000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000550000-0x4)=0x9) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f00005e2000)='./file0\x00', &(0x7f0000023000-0x8)='./file0\x00') ftruncate(r3, 0x0) fcntl$setsig(r0, 0xa, 0xc) dup2(r0, r2) 2018/02/16 18:03:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000001000-0x8)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x100000000004, 0x4, 0xa, 0x0, 0xffffffffffffffff}, 0x1c) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000cfe000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000794000)={0x4, 0x0, [{0x0, 0x0, 0x3}, {0x9, 0x0, 0xfffffffffffffffb}, {0xa27, 0x0, 0x3}, {0x0, 0x0, 0xc72d}]}) 2018/02/16 18:03:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000075000-0x8)='keyring\x00', &(0x7f0000696000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000020f000-0xb)='selfnodev*\x00', 0xffffffffffffffff) r1 = add_key(&(0x7f000017d000)='keyring\x00', &(0x7f0000976000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r0, 0x0) add_key(&(0x7f0000e74000)='big_key\x00', &(0x7f000029f000)={0x73, 0x79, 0x7a}, &(0x7f0000fc7000-0x25)="a0", 0x1, r1) r2 = syz_open_dev$admmidi(&(0x7f0000e4c000)='/dev/admmidi#\x00', 0x1, 0x802) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f00006bf000-0xda)=""/218, &(0x7f000038f000-0x4)=0xda) write$selinux_load(r2, &(0x7f0000e74000)={0xf97cff8c, 0x8, 'SE Linux', "dbea2810341a56a9727d73f2b08c98a9b7bce1749605565923418299863d39195965a4edcb1ad19556ea7fc2fc9ff85624fca137e86beea5dfc086467fd07e3c7b9088a270839fa85b"}, 0x59) 2018/02/16 18:03:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000044000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f000027b000)) memfd_create(&(0x7f0000f7f000)='^\\)\x00', 0x2) 2018/02/16 18:03:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) [ 173.460110] QAT: Invalid ioctl 2018/02/16 18:03:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f0000588000-0x10)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f000035a000-0x19)=""/25, &(0x7f0000d45000)=0x19) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0xffffffffffffff02) 2018/02/16 18:03:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000b2c000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000dda000), &(0x7f000087a000-0x4)=0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000791000-0x103c)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_LINKINFO={0x4, 0x12, [@IFLA_INFO_DATA={0x4, 0x2}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/16 18:03:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r0) getsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000fc1000-0x5c)=""/92, &(0x7f0000851000-0x4)=0x5c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f000040a000-0x15)='/proc/self/net/pfkey\x00', 0x422000, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000bdd000)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) 2018/02/16 18:03:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000872000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c11000/0x18000)=nil, &(0x7f0000a86000-0x18)=[@text32={0x20, &(0x7f0000720000-0x3b)="670f2210b805000000b9f7ffffff0f01c10f060f21e566b85c000f00d866bad004b8a5000000ef0f08260f3566b830000f00d8363e660f38806743", 0x3b}], 0x0, 0x0, &(0x7f0000abe000)=[], 0x3da) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b3e000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) pipe2(&(0x7f0000410000-0x8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000b4c000/0x18000)=nil, &(0x7f000015e000)=[@text16={0x10, &(0x7f0000822000-0x44)="b837008ed06726360f01c966b9130600000f32260fc79a0c4066b9c00a000066b80000000066ba000000000f30670fef4f002e660f7e230f090f0966b8010000000f01d9", 0x44}], 0x1, 0x0, &(0x7f0000e7d000)=[], 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000de2000)={0x0, 0x0, 0x5, &(0x7f0000407000-0x8)}) [ 173.493273] QAT: Invalid ioctl 2018/02/16 18:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004e0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a4000-0x8)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c82000-0x2)) clock_gettime(0x0, &(0x7f00002b0000-0x10)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000c6a000-0x90)=[{0x2, 0x7, 0x3, 0x4678, @tick=0x7e92, {0xac, 0x1}, {0x3, 0xfff}, @connect={{0xc2d3, 0x8}, {0x46254fd5, 0x3}}}, {0x100000000, 0x6, 0x1f, 0x4, @time={r2, r3+10000000}, {0x5, 0x4}, {0x0, 0x91f}, @addr={0x0, 0x6}}, {0x1, 0x366, 0x8e, 0xffffffffffffff81, @tick=0x2f2bc32a, {0x15, 0x40}, {0x1f, 0xffff}, @raw32={[0x0, 0x20, 0x81]}}], 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) fsetxattr(r4, &(0x7f0000c11000-0x6)=@random={'user.', '\x00'}, &(0x7f0000021000-0x2)='%\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000700000)={0x0, 0x0}) write$evdev(r0, &(0x7f00001f6000-0xa8)=[{{0x0, 0x2710}, 0x8001, 0xfe83, 0x7f}, {{0x77359400}, 0x7ff, 0x4, 0x2}, {{0x0, 0x7530}, 0x3, 0x4, 0x101}, {{0x77359400}, 0x0, 0x6, 0x3}, {{}, 0x7fff, 0x3f, 0x4}, {{r5, r6/1000+30000}, 0x3c, 0xd9, 0x8}, {{0x0, 0x2710}, 0x2, 0x6f6a, 0x34fe}], 0xa8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000e22000-0xc)={&(0x7f0000087000)='./file0\x00', r4}, 0xc) creat(&(0x7f000063b000)='./file0\x00', 0x2) vmsplice(r1, &(0x7f0000f56000)=[{&(0x7f0000f56000)="3346c901a4", 0x5}], 0x1, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f000004c000)) 2018/02/16 18:03:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000252000)='/dev/qat_adf_ctl\x00', 0x115200, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f000014d000)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000872000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c11000/0x18000)=nil, &(0x7f0000a86000-0x18)=[@text32={0x20, &(0x7f0000720000-0x3b)="670f2210b805000000b9f7ffffff0f01c10f060f21e566b85c000f00d866bad004b8a5000000ef0f08260f3566b830000f00d8363e660f38806743", 0x3b}], 0x0, 0x0, &(0x7f0000abe000)=[], 0x3da) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b3e000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) pipe2(&(0x7f0000410000-0x8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000b4c000/0x18000)=nil, &(0x7f000015e000)=[@text16={0x10, &(0x7f0000822000-0x44)="b837008ed06726360f01c966b9130600000f32260fc79a0c4066b9c00a000066b80000000066ba000000000f30670fef4f002e660f7e230f090f0966b8010000000f01d9", 0x44}], 0x1, 0x0, &(0x7f0000e7d000)=[], 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000de2000)={0x0, 0x0, 0x5, &(0x7f0000407000-0x8)}) 2018/02/16 18:03:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00002a3000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000888000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0xa, [@local={0xac, 0x14, 0x0, 0xaa}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @loopback=0x7f000001, @rand_addr, @multicast1=0xe0000001, @broadcast=0xffffffff, @rand_addr, @empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}]}, 0x38) r1 = syz_open_dev$usbmon(&(0x7f0000c20000-0xd)='/dev/usbmon#\x00', 0xffffffff, 0x8000) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000796000)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00001f9000)=""/244) r2 = dup(r0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000041000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000a0b000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006ee000)=0x18) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000e1f000-0x8c)={r3, @in={{0x2, 0x1, @loopback=0x7f000001}}}, 0x8c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000cb6000)={r4, 0x10001}, 0x8) 2018/02/16 18:03:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000528000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0xffffffffffffff86) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00005bc000-0x4)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000b09000)=r1) ioctl$int_in(r0, 0x5452, &(0x7f0000e1d000)=0x23) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000c05000-0x4)=0x1ff, 0xbe4f91ed69df7d23) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f000017d000-0x3)="03", 0x1, 0x100000004043, &(0x7f0000ee6000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 18:03:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl(r0, 0x4122, &(0x7f0000006000-0x1f5)) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000a97000-0x1c)={0xa, 0x0, 0x2, @empty, 0x5}, 0x740cbd6b847918d0) listen(r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00009c5000-0x9)='/dev/sg#\x00', 0x5, 0x400000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000036000-0x8)={0x0, 0xd0}, &(0x7f0000a22000)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000f08000-0x14)={r3, 0x800, 0x401, 0x7, 0x1000, 0x6}, 0x14) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x30000001, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000f3c000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendto(r0, &(0x7f0000a6e000-0x1000)='Z', 0x1, 0x0, &(0x7f00003e5000-0x10)=@ax25={0x3, {"c716108b850b3e"}}, 0x10) sendto(r0, &(0x7f0000fca000), 0xfdbf12558da8f98b, 0x0, &(0x7f0000ec7000-0x80)=@generic={0x0, "8921ef79394a92d7c3e502b2429f21f76f854ff1ff288cddc58d6adfd9b41c0428c73faa536977e8159391da5b5693610a5c3b99a7749776a4fa9fe9256804488862269804a60a2e793127079bcf9b9e7ec52d6fd2b6d28138b24ab90cec254620a715c57ebc136f04080036cfbfea78f5a737fa0892ab39813f23d30a5a"}, 0x80) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000e85000+0x9f5)={0x0, 0xffffffffffffffff, @broadcast}, &(0x7f000081d000)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000700000)={0x0, 0x7}, &(0x7f00007cb000)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f000000e000)={r5, 0x5}, &(0x7f00006c9000-0x4)=0x8) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001000-0x4)=0x0) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000872000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c11000/0x18000)=nil, &(0x7f0000a86000-0x18)=[@text32={0x20, &(0x7f0000720000-0x3b)="670f2210b805000000b9f7ffffff0f01c10f060f21e566b85c000f00d866bad004b8a5000000ef0f08260f3566b830000f00d8363e660f38806743", 0x3b}], 0x0, 0x0, &(0x7f0000abe000)=[], 0x3da) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b3e000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) pipe2(&(0x7f0000410000-0x8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000b4c000/0x18000)=nil, &(0x7f000015e000)=[@text16={0x10, &(0x7f0000822000-0x44)="b837008ed06726360f01c966b9130600000f32260fc79a0c4066b9c00a000066b80000000066ba000000000f30670fef4f002e660f7e230f090f0966b8010000000f01d9", 0x44}], 0x1, 0x0, &(0x7f0000e7d000)=[], 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000de2000)={0x0, 0x0, 0x5, &(0x7f0000407000-0x8)}) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b45000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = getpgid(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00006fc000-0x4)=0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0xfffffed1, 0xe2, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15ff, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(r0, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000383000-0x24)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) process_vm_writev(r1, &(0x7f000057d000)=[{&(0x7f0000dc2000)=""/17, 0x11}, {&(0x7f00000ce000-0x2b)=""/43, 0x2b}, {&(0x7f000060d000)=""/41, 0x29}, {&(0x7f0000664000-0x9c)=""/156, 0x9c}, {&(0x7f000017d000)=""/170, 0xaa}, {&(0x7f000022a000-0x7c)=""/124, 0x7c}, {&(0x7f000088d000-0x1b)=""/27, 0x1b}, {&(0x7f00004fd000)=""/5, 0x5}, {&(0x7f00009f0000)=""/193, 0xc1}], 0x9, &(0x7f0000673000-0x40)=[{&(0x7f00005df000-0x96)=""/150, 0x96}, {&(0x7f0000bb9000-0x25)=""/37, 0x25}, {&(0x7f0000759000)=""/250, 0xfa}, {&(0x7f00004b8000-0x86)=""/134, 0x86}], 0x4, 0x0) write(r3, &(0x7f0000fd6000)='z', 0x1) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8000) mmap(&(0x7f0000709000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000709000)=@ioapic={0x0, 0x3ff, 0x3a85d568, 0x3, 0x0, [{0xfff, 0x6fe, 0x7, [], 0x2}, {0x9f6f000000, 0xffffffffffffffc1, 0x5, [], 0x2}, {0x5, 0xfbe, 0x80}, {0x100, 0x1ff, 0x4, [], 0x4}, {0x0, 0x3, 0x0, [], 0x10000}, {0x8, 0x0, 0x7, [], 0x1f}, {0x4, 0xa9, 0x7, [], 0x9}, {0xe2, 0x0, 0x7, [], 0x6}, {0x4, 0xa, 0x81, [], 0xaa}, {0x0, 0x1, 0x9, [], 0x7fff}, {0x90, 0x20, 0x9, [], 0x1e}, {0x2, 0x1, 0x9, [], 0x4}, {0xfffffffffffffffe, 0x8, 0x6, [], 0x5}, {0x3, 0x8, 0x7, [], 0x445}, {0x5, 0x7da, 0x8001}, {0x80000001, 0x3ff, 0x8, [], 0x81}, {0x4, 0x1, 0x7, [], 0x3}, {0xc, 0x20, 0x5, [], 0x1}, {0x45c, 0x2, 0x0, [], 0xc76}, {0x10001, 0x8, 0x80, [], 0xfffffffffffffc00}, {0x1, 0x81, 0xffffffff, [], 0x4}, {0xfffffffffffffffd, 0x0, 0x9, [], 0x200}, {0x856, 0x1, 0x0, [], 0x101}, {0x0, 0x7ff, 0x6, [], 0x3dc2}]}) ioctl(r0, 0x227a, &(0x7f00001ec000-0x1)="82") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000073000-0x4), 0x4) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x800000000000002, &(0x7f0000d15000-0x4)="02000000", 0x4) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) [ 173.815857] binder: 28393:28401 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 173.823692] binder: 28393:28401 got reply transaction with no transaction stack [ 173.831194] binder: 28393:28401 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000001000-0x1)='\x00', 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008a7000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) writev(r0, &(0x7f0000011000)=[{&(0x7f000000b000-0x1000)="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", 0x1000}], 0x1) [ 173.870828] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.908909] binder: 28423:28426 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000217000-0x4)=0x2, 0x4) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f00001a6000)) bind$ax25(r0, &(0x7f0000bb7000-0x10)={0x3, {"ac5ee42075587f"}, 0x7}, 0x10) sendfile(r0, r0, &(0x7f000040a000), 0x100000001) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000439000-0x2)=0x31c, 0x2) 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xf90000)=nil, 0xf90000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8000000000043, &(0x7f0000248000-0x4)=0xfdffffffffffffff, 0x4) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00007d5000)='/dev/ptmx\x00', 0x2000040101, 0x0) write(r0, &(0x7f000022a000)="2f7f4be2b36c5526a5534195cbffffffffffff091715f1ed8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01000000000000ffbf13", 0x5d) ioctl$TCSETS(r0, 0x5402, &(0x7f000055a000)={0xfffffffffffff801, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f0000958000)='/dev/snd/midiC#D#\x00', 0x7, 0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000193000)=0x9, 0x4) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00008d6000-0x14)={0x14, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xd}, []}, 0x14}, 0x1}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000050c000-0x10)='/selinux/policy\x00', 0x0, 0x0) accept4$ax25(r1, &(0x7f000053d000-0x10), &(0x7f0000733000-0x4)=0x10, 0x800) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000e65000)='/dev/snd/timer\x00', 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) [ 173.916733] binder: 28423:28426 got reply transaction with no transaction stack [ 173.924260] binder: 28423:28426 transaction failed 29201/-71, size 0-0 line 2757 [ 173.946813] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d0d000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x40007) sendmsg$alg(r1, &(0x7f0000de0000-0x38)={0x0, 0x0, &(0x7f00003f4000-0x40)=[{&(0x7f000027a000-0x48)='?', 0x1}], 0x1}, 0x8880) sendfile(r1, 0xffffffffffffffff, &(0x7f0000ccb000), 0x357) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000+0xc0a), &(0x7f0000000000), 0x9, &(0x7f0000132000/0x2000)=nil, 0x100) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000063f000-0x4)='/dev/rtc\x00', 0x481, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) semget$private(0x0, 0x0, 0x40) flock(r0, 0x5) [ 173.983205] binder: 28438:28444 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 173.991058] binder: 28438:28444 got reply transaction with no transaction stack [ 173.998551] binder: 28438:28444 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000ae0000-0x15)='/proc/self/net/pfkey\x00', 0x200200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000f71000)={0x2, 0x4, 0x0, 0x40}, 0x2c) 2018/02/16 18:03:10 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000809000-0x10)='/dev/input/mice\x00', 0x0, 0x181042) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000fd5000-0x1)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ax25(r0, &(0x7f00002b7000), &(0x7f0000afe000)=0x10) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) bind$ax25(r2, &(0x7f0000c40000)={0x3, {"cac5dd483019ac"}, 0x6fffffff9}, 0x10083) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000049a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f000015c000-0x10)={r3, 0x1, 0x6, @random="0799bb354be2"}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00008f1000)={@dev={0xac, 0x14, 0x0, 0x16}, @multicast1=0xe0000001, @rand_addr=0x3b5}, 0xc) syz_open_pts(r2, 0x80000) r4 = request_key(&(0x7f0000fd3000-0x6)='rxrpc\x00', &(0x7f0000ff5000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000175000)='/dev/input/mice\x00', 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000c98000)='pkcs7_test\x00', &(0x7f0000959000)='net/arp\x00') 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001000-0x4)=0x40000003) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000002000-0x12)='/dev/input/event#\x00', 0x0, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000b2e000)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00008bc000)=0x3, 0x4) r1 = getpgrp(0xffffffffffffffff) capget(&(0x7f000091e000)={0x20080522, r1}, &(0x7f0000001000)) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfec000)=nil, 0xfec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x1, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) r2 = syz_open_dev$dmmidi(&(0x7f0000be2000)='/dev/dmmidi#\x00', 0x8, 0x200000) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000fed000-0x10)={r0, r2, 0x3, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000c6b000)={r1, &(0x7f0000256000-0x2)="ff", &(0x7f000032a000-0x1)}, 0x20) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000685000-0x139a)=@pi={0x0, 0x8809, @ipv6={0x0, 0x6, "68b317", 0x136e, 0x73, 0x0, @ipv4={[], [0xff, 0xff], @empty}, @loopback={0x0, 0x1}, {[@dstopts={0x17, 0x2, [], [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0xffffffffffffffdf, 0x2, 0xffffffffffffffff, 0xfffffffffffffff8, [0x51e]}}]}, @dstopts={0x16, 0x21c, [], [@generic={0x3f, 0x29, "526fbad9a1bc2b782cb07e0781b35b83af54fc56ce8701108e0fcfbd43d50ec92be1f22ad39d783bb4"}, @calipso={0x7, 0x18, {0x3, 0x4, 0xffffffffffffffff, 0x3, [0x5, 0xffff]}}, @ra={0x5, 0x2, 0x3800}, @hao={0xc9, 0x10, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, @calipso={0x7, 0x58, {0x7, 0x14, 0x3, 0x200, [0x63226414, 0x3e, 0x8, 0x1, 0x800, 0x1f, 0x1, 0x1ff, 0x1, 0x9]}}, @hao={0xc9, 0x10, @mcast1={0xff, 0x1, [], 0x1}}, @generic={0x3, 0x1000, "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"}, @ra={0x5, 0x2, 0xfe}, @calipso={0x7, 0xffffffffffffffa6, {0x5, 0x2, 0x7, 0x5, [0xffffffffffff8000]}}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x7e, 0x0, 0x48b7, 0x8001, 0x0, 0x5, 0x2}, @routing={0x87, 0x10, 0x2, 0x1, 0x0, [@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, @local={0xfe, 0x80, [], 0x0, 0xaa}, @empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}]}, @routing={0xbf, 0x2, 0x0, 0x1449, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}, @dstopts={0xbf, 0x2, [], [@generic={0x8, 0xc, "a60e1d816d2475942595dc37"}, @jumbo={0xc2, 0x4, 0x5}, @pad1={0x0, 0x1}]}, @routing={0x3b, 0x20000000000000c9, 0x2, 0x5, 0x0, [@remote={0xfe, 0x80, [], 0x0, 0xbb}, @empty, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0x0, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0x0, 0xaa}]}, @fragment={0x2f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @routing={0x16, 0x0, 0x3, 0x0, 0x0, []}, @fragment={0x3b, 0x0, 0x20, 0x5, 0x0, 0x6, 0x0}], @udp={0x1, 0x0, 0xff, 0x0, "44a5eee9033c25d7b89f97941a942b43dbffaaa1f915c7427de2ebf1d19af42346f7eeac0a3df507e5a0d0732e4bb7f354a6f5f56a7de07d374f09f4737275e969d62c2a9967bccf4f925bd919fd44d060c06ca132c841502b74b9d078db7ea99d1cb44d5b03dc32680d026e123d84b195400cdce35c9bd0f0704767d697a60234d5844baa09fc6195ba2d2ca3221c3bfa03c19de324e2d37cf33afc613fc296a32f70a2cd1b2094b8ee11cd8aaf4373ea87e63f0e99bb9260911827b3e9327ae7563834958cf406502e44b29bfb61354e523fa6135fafcd7c175071fd56dc63f7a1b4e377e167a95b45c0e8649ef23174f77a2d6dcab1"}}}}, 0x139a) 2018/02/16 18:03:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006bf000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000daf000)={0x0, 0x1000, "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"}, &(0x7f00006d8000)=0x1008) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f000012b000)={r1, 0x8001, 0x10, 0x5, 0x1}, &(0x7f0000424000-0x4)=0x18) r2 = semget(0x2, 0x7, 0x288) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000ec1000)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r3, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000eef000-0x8)={0x6, 0x9}) 2018/02/16 18:03:10 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_getscheduler(r0) mmap(&(0x7f0000000000/0x3ad000)=nil, 0x3ad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, "66736d00000000000000000000000802", "225eecb6d70b7bdaceb36a2658d861a1eff3b029ef504a339970d947ba2ad36d4e0d6b5328cf197cd30f1138e28b60250775d0d48bdc49c5f07871c41c895cbb30dc1065e1ca049ab6e5f35e9c7f37a29fa0753a992aa626d200a9ee7fd68edf88d2e57359942a0ff1fef7a3b917dc483d93f9d782b3ce3da3eb8965fbf6dca4"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) [ 174.091971] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:10 executing program 4: r0 = socket(0x10, 0x10000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000b02000-0x5030)=@newlink={0x38, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VF_PORTS={0x4, 0x18, []}]}, 0x38}, 0x1}, 0x0) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000889000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000018000)={0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000bab000-0x9)='/dev/dsp\x00', 0x460802, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000bc9000)={r1, 0x80000, r2}) rt_sigaction(0x14, &(0x7f0000cad000), &(0x7f000048b000), 0x8, &(0x7f000028c000-0x8)) r3 = syz_open_dev$admmidi(&(0x7f00003bf000)='/dev/admmidi#\x00', 0x5, 0x80280) setsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f000066d000)=0xffff, 0x4) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000069000-0x18)="ff0204000000000100000000000000000000000000000205", 0x18) setsockopt$inet6_buf(r0, 0x29, 0x100000000000003b, &(0x7f00003d6000-0x78)="c500000000000030020000000000008b75bed544017d5cdbb3ffe92774a718cdb92e840900edc044258289d1363587f8f27df0300351c41fa609288d3f00e4ff7fae66075d5b65e19affeb0004e0f7997c08aab82d2fbee79bbd8807f812ab9ede37c41667928927268933648f2a6fe058e69a00d31f6f11", 0xe6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000607000)=@hopopts={0x0, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x20) sendto$inet6(r0, &(0x7f0000d2b000-0x57b)="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", 0x561, 0x0, &(0x7f00004d5000-0x1c)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 174.168329] binder: 28482:28492 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.176197] binder: 28482:28492 got reply transaction with no transaction stack [ 174.183692] binder: 28482:28492 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000596000)='/dev/sequencer\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f00002fd000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000dec000-0x10)={0x0, 0x0}) write$evdev(r0, &(0x7f0000db3000-0x78)=[{{r1, r2/1000+10000}, 0x3, 0x401, 0x1}, {{0x77359400}, 0x7, 0x4, 0x6}, {{0x0, 0x7530}, 0x20, 0xfffffffffffffffc, 0x4}, {{0x77359400}, 0x4, 0x4}, {{r3, r4/1000+10000}, 0x7, 0x81, 0x8}], 0x78) r5 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000d6f000-0xb0)=""/176) [ 174.253263] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000ce3000)='/dev/ashmem\x00', 0x488000, 0x0) fcntl$dupfd(r0, 0x406, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000efb000-0xa8)=[{&(0x7f0000d28000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000f37000-0x18)=[], 0x0, &(0x7f00001bb000-0x24)=[@rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}, @rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}], 0x20}], 0x1, 0x0) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000008000)={0x0, 0x0, 0x2, [0x0, 0x401]}, &(0x7f0000009000-0x4)=0xc) ioctl(r0, 0x800c1004110, &(0x7f0000008000-0x1)) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000009000+0xffa)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000009000)=""/219, &(0x7f0000009000)=0xdb) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x17) r1 = dup2(r0, r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00003bc000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000165000-0xa)=[{{}, 0x0, 0x1, 0x5}, {{}, 0x0, 0x0, 0xc07}], 0x30) fcntl$setownex(r0, 0xf, &(0x7f00006b9000)={0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecb000-0x4)=0x0) wait4(r2, &(0x7f0000ec4000+0x126), 0x0, &(0x7f000025d000-0x90)) 2018/02/16 18:03:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000f3f000-0x4)=0x0) r1 = memfd_create(&(0x7f0000c0e000-0x7)='n$]^$(\x00', 0x3) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = syz_open_procfs(r0, &(0x7f0000667000)='net/mcfilter\x00') r3 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000a8e000-0xc)={r3, r2, 0x5}) syz_open_pts(r2, 0x400) readv(r3, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00007e0000)={0xf9, 0x0, [0x5, 0x20, 0x8, 0x8]}) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0xffffffff) r1 = syz_open_dev$adsp(&(0x7f0000455000)='/dev/adsp#\x00', 0x8, 0x101000) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f000092c000)=@int=0x7, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000796000)={0x3f, 0x6, 0x8, 0x0, 0x0, 0x8, 0x20000000000000, 0x8f, 0x0}, &(0x7f00008af000)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000c9d000-0x98)={r2, @in6={{0xa, 0x2, 0xa15, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x0, 0x8ae1}, 0x98) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000051000)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f000051d000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x400}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='syzkaller1\x00', {}, {}, 0x11, 0x0, 0xffffffffffffffff}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@udp={0x30, 'udp\x00', 0x0, {0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7f676fbef881511c674ea8e59f1f65e16a8eb0683912907533e692f50a71"}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x2], [], @common='ip6_vti0\x00', @syzn={0x73, 0x79, 0x7a}, {}, {0x8000000000000}, 0x100000000}, 0x0, 0xa8, 0x118, 0x0, {}, []}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d83d2d76fc793c69b33415fec4323d2b3e39876612bd7b231c413b881f06cba7f7df4a6a25c0f125c1a70d527cd76eba21a1dc88f1c6dffc4d8ac266ed032e77"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b32000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x6, 0x800, 0x7) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000880000-0x4)=0x177, &(0x7f00005b3000)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) memfd_create(&(0x7f0000809000-0x3)=',\\\x00', 0x1) r3 = eventfd2(0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000a14000-0x10)='/selinux/policy\x00', 0x0, 0x0) timerfd_gettime(r4, &(0x7f0000209000)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000fc2000-0x20)={r3, 0x0, 0x100000100000002, r3}) 2018/02/16 18:03:10 executing program 4: mremap(&(0x7f000035f000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000c11000/0x4000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0xca) ioprio_set$pid(0x2, 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000c14000-0x4)=0x0) ptrace$getenv(0x4201, r1, 0x100, &(0x7f0000c11000)) 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc2000-0x10)='/dev/sequencer2\x00', 0x8002, 0x0) poll(&(0x7f0000fc4000)=[], 0x0, 0x6) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 174.340854] binder: 28521:28526 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.348705] binder: 28521:28526 got reply transaction with no transaction stack [ 174.356217] binder: 28521:28526 transaction failed 29201/-71, size 0-0 line 2757 [ 174.378875] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xf21000)=nil, 0xf21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000dbe000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000f22000-0xa)='/dev/dsp#\x00', 0x0, 0x4180) r1 = getpid() mmap(&(0x7f0000f21000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00002d4000-0x110)={{0x7, 0x0, 0x4, 0x80000000, "5431ca4f6a8c920dfd1a8736cd353d6225e9fd6d0a57cd9a85da79979d23728c49dfe80905bf35509c56fbcf", 0x407}, 0x0, 0x0, 0x1, r1, 0x2c7facee, 0x9b8e, "7f4da07d122eda4883d0fe49eb1010f76dab8e6ce6aea464464e0a37825d8f86537db8f57f333f1bd01285c72e7fce9ff029ce8d5907b569e77eb3e1b4d047f4", &(0x7f0000f21000)='\x00', 0x1, [], [0x8, 0x200, 0x3, 0x1f]}) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xffffffffffffffec, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c3a000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x2, 0x800, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) fcntl$setpipe(r0, 0x407, 0x67) r1 = syz_open_dev$usbmon(&(0x7f0000997000-0x3)='/dev/usbmon#\x00', 0xc8, 0x20000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f000050f000)=""/168) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000fa8000)=@ioapic={0x2000, 0xff4d, 0x3ff, 0x6, 0x0, [{0x80000000, 0x2, 0x400, [], 0x4}, {0x2, 0x1f, 0x7fff, [], 0x9}, {0x7fff, 0x9, 0x100, [], 0xffffffffffffffcb}, {0x9, 0x0, 0x5c55, [], 0x100000000}, {0x3, 0x2df5, 0x2a57, [], 0x8}, {0x1ff, 0xf000000000000000, 0x5, [], 0xbee5}, {0x5, 0x6, 0xd5cc}, {0x9, 0x10001, 0x10001, [], 0x9}, {0x2709, 0x3, 0x1, [], 0x1}, {0x200, 0x7, 0x400, [], 0x6}, {0x81, 0x40, 0x9, [], 0x5}, {0x5, 0x5, 0x101, [], 0x80000000}, {0x0, 0x3, 0x0, [], 0x7}, {0x0, 0x10001, 0x7fff, [], 0x8}, {0x0, 0x497c, 0x3}, {0x0, 0xeb, 0x1c0000000000000, [], 0xff}, {0x8e, 0x8, 0xd754, [], 0x60}, {0x5, 0x0, 0x3, [], 0x2}, {0x9, 0x5b06ed0e, 0x8, [], 0x4}, {0x2, 0x5, 0x5, [], 0x2}, {0x8, 0x5, 0x50, [], 0x1}, {0x7, 0x101, 0x7, [], 0xffffffffffffffff}, {0x2, 0x9, 0x10000, [], 0xfffffffffffffffe}, {0x2, 0x8, 0x1f, [], 0x8}]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000647000-0x3)={0x0, 0xe91}, &(0x7f00001c7000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f000089f000-0x8)={r2, 0x4, 0x7}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00004c7000)) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c95000-0xb), &(0x7f0000ff2000-0x4)=0xb) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f000059d000-0x10)={0x4000}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000fbc000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000e35000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000d9c000-0x1008)={r2, 0x1000, "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"}, &(0x7f0000202000-0x4)=0x1008) 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000068d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c8b000-0x30)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmsg(r1, &(0x7f0000457000)={&(0x7f0000133000)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000c8d000)=[{&(0x7f00000dd000-0xdb)="89", 0x1}], 0x1, &(0x7f000009f000-0x11c8)=[]}, 0x0) sendmsg$alg(r1, &(0x7f0000cae000-0x38)={0x0, 0x0, &(0x7f00001ce000-0x40)=[], 0x0, &(0x7f000013b000)=[@op={0x18, 0x117, 0x3}], 0x18}, 0x0) [ 174.431131] binder: 28545:28547 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.438996] binder: 28545:28547 got reply transaction with no transaction stack [ 174.446573] binder: 28545:28547 transaction failed 29201/-71, size 0-0 line 2757 [ 174.489233] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000008000)={{0xa, 0x3, 0x9, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x6}, {0xa, 0x1, 0x3f, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3ff}, 0x3, [0x2, 0xb0, 0x2, 0x7, 0x8001, 0x1000, 0x28, 0x7f]}, 0x5c) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x80000000, 0x0, 0x0, 0x400, 0x8, 0x3, 0x100000001, 0xfffffffffffffffe, 0xffffffffffffffe0}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000008000-0x38)={&(0x7f0000008000-0xc)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007000)={&(0x7f0000004000-0x30)=@ipv6_delroute={0x30, 0x19, 0x808, 0x3, 0x2, {0xa, 0x0, 0x0, 0xff, 0xff, 0x1, 0xc8, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000001000)={0x0, 0x1, 0xfff, 0x10000, "073200a1f19035db5854e912039d474a8e03438d24646bb8368bd91e81b4955b9e36d87e09fed2e67a3fce1d", 0x9}) ioctl(r0, 0x4148, &(0x7f0000001000-0x182)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005000-0xb)='/dev/hwrng\x00', 0x4, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f000000b000-0x3)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x4, 0x2, {0xa, 0x3, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0xdb}}}, 0x32, &(0x7f000000a000-0x60)=[{&(0x7f000000a000-0x65)="e5b5529c5e7e93b9224f62acce31389b205e0a973c452c49f70db023584d0ca4ce9b3ae2491dbdda4ae9357607b24035d8cba4ab3f2bef5b096671b80a48590b73bcc8bf3b72158bdc5614415829976c3e8f751e9c869fe5298a8d61d9d17c09adf8b1a10d", 0x65}, {&(0x7f0000008000-0x85)="e8566e4c80dbce65f3f94c03dbacc0dbc6e1d7fa54c44778e7c6c7b9055e3012df30e15265efb6d733760b3501af899f1de358ca21cdd0dba17f87b61d0bdc34055930f118efec93e534b3b87a4b195e50477b568000adc91d7223d7e0573d9e10e92d41a7104edbbcbc0fe6a41392aa444d2bf8daa854e0c364f35f9584dc4f8448525a53", 0x85}, {&(0x7f0000009000)="d52841163213b715e574eec4a3e8934c79b87c72cd75e6b8b9aa894874fd70bb209875b83e08ff442d2205cad77fda85711e36175896544b7fdd2fac0a56d6e2fad8fc513cee2a3d203fd7d69d156aaadb84180ac635ce45772e9cb8174ca1c66d73b67c6d8cef9aad13a96fdbd6bfac9fc92d0a8ef5469865ab9a8a628e0d4044fa62420457cfd1ad1a9eb1c9d7be2a4ad451e5f9ef04bad677ea1761f93122e1676d8689c92a5bbd2082831d2f24b13d83b67193cf9c0c8b194e980a52be97da1d8b08e14789579ea83bc3c41e62efc0e70b92f0f34f7e140a46c7f95c18731c71e36b077f5122df390d2d9200e3383718d4b44549a92d4255ddd8af9ff25b3cc3087eb6a869d38bed3b23abb2e171a5591ce5272a0d2f34070915f0c7a24b58028f4feac87d69a4d16f82e4fcadb6e9ba7c56bb2e6968e5fd6e1031dcfbc08ff616356c028fad53b05684e3c6a32b9cbfc59aacafb75d85cc651685ff4d54f984a8d92b825e9a87dc14520bb4ab1f5a279505df195b21d348330779721205d8e9c13bbab14e93a4097a36c445d72bfe1f444b777b5e8112e3f369557416e91aa5deb756b2f94c13e2eba7df2035a4376d44c39bca2254f2295f11f83ccbaa5122ac41fff4a96e8895c7474aab60e07b132210f138b5d5d77a77a1b6be6b66ca6da7e658d2cb4ad2d852bfaec023d2797ba1f54a3761a388cfefe461080b1839e7a273d229a2734e0f26b8792e26a97847a03d8410d95aeb7adace08df669aecf0737a366ea563af34b4d23362eb7a2baf402e60d3f6be10b4204a3ea00b935bfd4d279a095a61438d524ed496cf5a5514d366b9b554ea001e28563852217954ded5f7ad64c59cd2749008ff184bc70d76f7754f113b1744102588507c6fcbb7cfdfd40ede5e8944d8120a8754f884230f0119d10ffdce71d4b5858c9b27d103fa708039a2b97ec0e9b9907ec01ff26e32afa4ed25f8717bb09b03f380e7a317eeeab1508b65cf679c993ae8b7e86b747e2d3b36458d0e1a232029d557eca5dadd552767c00a63f0752b407874e8b53a1b53a1d65d8da2c2bdf0b3b8e0e20539e6022abf75921ec40b520d1385ba499cf05935426f352e8d9da8300a38c500c6035081840d677802273e9fed6bce2681f782646e85ecba6ef6fcae2e4cd608eb0e1b47aeb1f6d5f81de1b24b21d843ac2fb1927143369db6206501edc6f10b1e5e928a0f2289e0d83b42d40919c4c7d270c3fc22ba93f9a3db8a81d0a164a3ca9cc6e13ecc7bdfe9b3930985fd33598634269b0277474486b2e944e78215877b3a446e1c60bc517ec858994b30c7c490c9951d30f1ff3f4a26003e8fcc141976160cda264bbf7f4e9003a6b79fa042caadf3c9cbabad38179aa313adfbbdc15535b9e7ed85d932179459e56ead82ebc41f29cda2c6411c46e3df81b58e5e025b19d3aa53cfaaa184ad64d0d4ed841a727daa9ef5e1c98548231c4b49df300c6b49315829ecdebec354e4f2db6b194113e91441ba39e23ff27ac8f55d58d1999429dedb3639d0bf93c0b5aa6e511f50838d04667e0f547fa5e80242bb563a122b4ea384bc13b785acdcd8df2f13706953be9c169be87d745ab20a4bb36fb4b1b845ebfa6bc81e432e58aebde4bc1b8f530acb26b5348b8b9309fed1aa90908e56d35bc0a45dd98ad2d800bddab6dc6a9b4fa0fe24714abc70a71e90ec6da91ba266c04282f58dd1b3db2eff57db94218f6d8c5bec6163049073185323266b5812a98102a82a35f1112aa52a67a57fe1d1574f8bf6ea534a06cd19e681967e86e6359f636f5b45020600735e41d480cc350abdc0cf4c4125511fb05851bc919c095d2ffb2a5bb13121e15e0502324ba48b9984689db7faf8e1e47eba49c810f31f69117c02c49cd3b51eba4169450e0cb5e7cbb438c3db927c83746e8a5156583786b8c4db112e198af8f515c8759fd6038483e5f3f1414522540ce317f514366da44020230360809c9952f8b6829536a93ba9597f58828d392a07dc09bbc4079e6e517ad7ac0a84a974bc4af383d43dbd0866cd04dafa8faa37daee84cbc2fbc92edaaf20ad5122f8b27b27aab1347b8c6663e3fd15ee31ad3d5cffa1bb7e5ebe564fca2867404cb8237d9e505680f18d38458479ef6ebba4fa6e8cad7c2dfb1b15c56bebb33cd2135f676516485a0f4f7b53d0546f9a9028063f032b56edf7e341e5e40b8fcb90b554c667f7f2ff5b49fc26fba7d793c8ccc5f50c00c0f4a0d9458071ee76e9128d3bc9ed68cbb3d4134836b34243e0e3b6949f70d0c848692588921f84e264603fe154485c0f6cc9d6e124aea5a596773ca6433ff5f8820b2034dcadd1d2af059a0746e84e3036282082e5fa5a064253fa658eaf51871c2a5f8716e0934f17154defd4762e290b4894a2d5d0892c2baf6cabb777a12e95ff8b618c22e0bc5fa76c83170902f43516b9654475989d22acd503fd2f965e62ecc17860cfab1c581c8a5bfb40bbbc4bd2688a7c05feb4f3d455b7f5272ee1e4d6c5e9f9e9e1527a4094a5b748438ae7c84abc14eadc366fac7931ef54d2bf64fd760fbed5c5e1414d6b570596dfbf777d656f9dd2466e935c04cea8e98e624a1105cbfecf26dcc9a5f371f05cb180a1c5f828d0775c41c1efe0a7224a83e751990ab2aba60f8746e6e32af3e14550947d74e248616bc508b680ef39a505edab752606dd4e0957d6b8599aac4672409c0da4a49d7a64cccb91e918c290b15e24559131fee7bef7d9f872b5a6f8f55f94d1122b3b4fa36fe19499c15d5fc7848142ce4d66b0e1b846b5a862c17fed410598840e478014220182fc79662eff162ba3bafa866878f81ebe4527fbb4b22c940c276bd2e0282ea99246913705fc7fc4e941ba0454b109389c481101e9ab031ea2de2cb6fdc4dce225786e933c140685b0f6246b34972d59685ef5599a05063bf164daf3bcebb413ee8bc857a6525e1e36d3b53ac53a87bb4b80816cf83f0e54d74a4a4f78bf95986d9f61fe9dd9df7bbcdbbd94bb2a9814d44e470d3993def6a0155d83ff16a9186fed232e1e37324877bf5ac754f03756be0b465731980448f4724d0284269c1fa27d4ea7ad0667e1765225168bf04ede59ccb3052a5b6533379ec7e5412b9fdb908c122576c03ec9b959a44bbf3108cf2175ed0ab96f344e5824f3fb0c56772f825ceba2b6776f4c25cd60bc1852c3279b8a4362b45f353e4c25a0f4e06fbb4b1824d3d74c3cce57f4933e4b65304044f7811b07662e07c8598c168a8e81ddb8a5480089a2184103a9036b4f96ba24834fa8907896304a1c3f163b9a04d2b9d92f6b5c24f0f968f3fc69c5a99fd844d19d49860912639d3086c150ba397a2d5b100276a99bda24e51ac0443331cb39d62c1257aa4227c0a7c678efa771f29a448e063e9cdff9f8dc6db0d33249e157f783c7f2b90ddeafb0ade65c2d0dc383945a8db330e594e2164dbf701c2860ef4213146daa592da72cd99e229d72cdb23dbe01effd8911adff3dea496ef4c97286bfba80f36ac754bc3e9ca206b7853abe4f11af930fa61aa9745f014204632c2f881d083115f7147cf1ca6ada21e51d5411b34cd31412848bcf7e2488b2d848b3bdcdcacbcdacd09f6920ce8deed412d4ddb8de7bcfeaaf4a96a6f2c76c47c7926107097f76e31dd987b84aeb63b9bba680c90ebf78ac5ceed7399ca412fcf0781f576710d61d8e741b673ba5d1cd82d6182f818b059228867141c6a46c42b3caa4220360549ff8c7c3467742f80dad5e4f9ba693bf48ac709eebe4243f9e4c03a38360d9a1e634e94047a38f1efdf546834c1e990b6bfce58462212267947ecf14dcf9ac6ff4e8ba61970fe9dcbdf95de174120a8338a964089733dec80ae1868c060e289168084e149a6d49849ee1e273e2e89e2a9d10cc7b9963f7f7efdbf8c99668e02b14ee0f1bc2618668a183cfadd7c4b6387cd88ace17e0f5cb6fc37721c4b9772f7945bb29976365b452b3d840cff3418c0b7689f90e6c8ebff7a4334acbc298ea0339086f8aa1ff1de3764aef4caabff7e53043a7e775633e27e15630c32bc21eadeba814772d7c13cd48099cf22eb44ca57482075ab3a1d5111279583337e7b90d5a811388cc55264afb5812a4aca67895a2a2ca2f950dfc1c91fd07df143cc40965ec86da85e8f7f9787b6e00a851d20ada315305f0436862cf938f095630fda99b83a7d41d5a9c94f08fd18a85958694d9037ba5cb40b415932670391f543244e070dcf83fa4d0634f708dcba2ed21894575fee8cdb72bdc9665a9659bf57cd94ebdb3d7c671ba7b8335867cc64e740e2a3cce8cdf89e758e396e31a811de3dfa9b229f1b553c37dad827810c24388dc7882a67305582e26d87293c0c35e09e0c7b4269c142313f9b5f444f95fd23e04adae6771cca5634a13ff67f87ebfb60c62220d11c296495c7cf20a7d963fd5a239bb2638ffe0545b8106d767befc601d45dea3d6e7a275e8e6f03237af06d26957f127054f389ceddc5c601b242289966f295b151af9c7b7c312c6159e8ce920f83c25237e98e5e87197d2d6117f6f607ff5998fabc210eb39e7c211955bc325300dc46d798a9c4f5f94b2d5eada347f5b9d49f2e8c44e6274e2c216cdde9ddeb47e5bc11c7f431c66f3f3eda544d4557385bca278ebb4202219b1c7ffa76078bfd220d4fa2d05384a97117f2836425dc98bd3de76bb46e0b5c50bf62505558d43b14a5ccf7e5ea4043988863854ac912a8c1d14bc8af710084b547b5eedfc19ad434e89930b12eef27f8aadda8be62d13c970c8f73546e61ac0d62caeb73b8f96313aee078d050cd39db7c4f4c6b91a5e62538a9db4320734c1d6cba84b07d6a63eec0f64a6991a1b30bcf5cf990a0b72c67bc8056d1c1338cca80adb1c08bad91711d1795920a80ef4d5f2d8bc3ad5c90cb4539f91662df10d8a018a5e25e3e387504c3081d32364921af9f84f681da6439591c29fd497a871395e7b6370d62226ccdf00e4e0e05f7cc1d65392e802ca3b59e1aa1378bc98d5f49c3f774eae87c78bade5e04e83b3b22307f8fc51fcfb66a73d2e96c2f5c81c229715afca1c6044319f1f2ad1d90625fe2a4b574936fe20a98901a0e1ae1491052b745addf1072974eacbe7668e75b2b1f071dbc74ad6601a14fa4e86952478fb51fb4f991169e2564f51de8e297dfddb584a9296e442c022ef41ca0ab28f4bae7a077da2319d04d659e2ccda0a7ac7819929b12bcf8bccdb013378a04e0e602a1bc70d9eb7b9da38486d68b830129fc427ca92286adce728d367c2b59c9b18726c32ad5f7490ef44b433f4ede734c97549fdea7b6ac2875d37eea669ba1397c9ca00cbb8c00ecd49e5c95f8db1f3088d5d8005f9e0007e3ce7d8c79ca4f226915f633db3e03ff05ed7798ffbe9546aab051caed8cda42056366ff6cc886a75c3b863bb228109c0d420c7cae6218a7af10d724a2e26baaa3719636e8d46bbc83ccc08e836feb45ae2c50844bd47a1087faa6f48af5176c3ccecd6800788a7267ab097d154861df73415420087d12d36f824873eac629c3cc1cc0a98be43ee88f4015ea01fda968c1cf16d9f6f0fec18d1e7ceb30fcdbebb1892e3dadce355ce43e08726cad912d9566f0c466693cd990d04a6ae3ab2812aa22f7eb44fd2f0e9cc72de0522bf9b16d530616dcf883952dc6632ebc8bdd7e47ae26865fc22a80a941d9405c121a9af96c2de87c184eacf8c98630ad72b878a964e53e672c67d9c13687a89bfd2f7114f", 0x1000}, {&(0x7f0000002000-0x6f)="aa98c818691c9e127cecf343fe69dfbdedf7de6b35634192bc54f46c87b7431a311a856fbc08ccd9c8c49f5197c09b628e93c3d86c70e321504c878a37fe444fedc27d9f905ef0eb013a0e3b8cd98100551d95a5bf22bdf736180271b1cd2503bb3acb2e73ade9ce4fedc43462ab04", 0x6f}, {&(0x7f0000006000)="d3525a0da7cedce0f7dc71c569ed", 0xe}, {&(0x7f000000a000-0xd6)="1dfb3f161e914f4d84a1f2434541aca416f633a6e47a4a68519606beb4bb4e70a1392dee51bd93db8b0bc9ea08533fbfa394d779f40e0cdeccd0cc41160475ea647fbd0617fb6c1f5ed3e8cce4e4d51c66c2ad3d5daf437077ea2aa3becfc0d44dee84b0ca3a7ed6cfe515eb54a602c29105bfd204b70b16856541c3ddfba3f39bba20e4b677f6950bc20a344a177b13a36c31a876f356c6f1b66c286920deab5443b22c5b2e20fd2dc8e34f6f87c18ce8960d851bf64e4d5597202158716ac321cf886f63ff9ae8411353dc03cd11d12af199e5b41b", 0xd6}], 0x6, &(0x7f0000001000)=[{0xd8, 0x11f, 0xa2e5, "e5fc2d922681c9de5d4058027915b8dee83f4f84222d8da6babb288fa68b77dd051f624e96ef8c209db28df1fd1bdac21f7c6482d3107810b756860fd58e986d423051456409c104ed724700a25ce056a3848dcc50cd55c4cd9fb6245080f09caf73b66a7b0c77a5cf9b97f3a2da21db3f21378b26c6452d0a2ae49999e72745f4bd10a112a469f21a9102e1b443bba8ef51b806de076e32b4a2e31d628fb18f514524477ecf5d9f716635df39ea87e61310dcf0796ffb4a8abd6ee2005404da740a"}], 0xd8, 0x10}, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000007000-0xb)={0x5, 0x6, 0x3, 0xffffffff, 0x9, 0x1ff, 0x80000000, 0xf35, 0x0, 0x8, 0xd6c6}, 0xb) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000001000-0xc)={0xd1, 0x4}) fsetxattr(r0, &(0x7f0000003000)=@known='system.posix_acl_default\x00', &(0x7f0000002000)='@}vmnet1vboxnet1\x00', 0x11, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffff9c, 0x103, 0x2, &(0x7f0000001000)=0x100000001, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) bind$inet6(r0, &(0x7f0000007000-0x1c)={0xa, 0x2, 0x4, @dev={0xfe, 0x80, [], 0x0, 0x12}, 0xdb39}, 0x1c) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000003000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/16 18:03:10 executing program 5: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000008000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f000000a000)={0x0, 0x0, 0x3}, &(0x7f0000010000-0x3)=0x8) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000010000-0x8)={r1, 0x4}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f000000e000)=0x200, &(0x7f000000f000-0x4)=0x4) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000005000)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000003000)) 2018/02/16 18:03:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000585000)=0x7fffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000c9f000)={0x0, 0x9, 0x30}, &(0x7f00003ad000)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000a18000-0x12)={r2, 0x51779956, 0x5, [0x9, 0x1f, 0x3f, 0x6, 0x9]}, &(0x7f0000956000-0x4)=0x12) io_setup(0x10001, &(0x7f0000c76000-0x8)=0x0) io_submit(r3, 0x5, &(0x7f0000ffc000)=[&(0x7f0000d75000)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000493000)="f778b2ae86ba28ff38838fb67b3d5acb7e1075aa778388cc1d", 0x19, 0x38e, 0x0, 0x1, r1}, &(0x7f0000a7f000-0x40)={0x0, 0x0, 0x0, 0x611de0c320932512, 0x100000001, r1, &(0x7f000027a000-0xbd)="12d990cfc28ce9544ba86aba337070f894d5dee22570553222cd181a973ff593e13f1750d3df8b5568aa5e14cad957eea7a30f8055e0d1e8689945659a90047bafc14bd791cbbf8b67ab229b05bb9ad18d496bc009a9bfcad778907fcbf67003be62653b8571b9ac3b885d4fd4c48619e3edba286f378a6834656a8c36d34bf2ebaaac8cdefe4cd2a97596a48408c840f9f5b775b19d3a81f371e8089c2688a09e8ef7a13ba50ce3effbca1eb6912324fc332fbb21001aadd067ac4c8e", 0xbd, 0xfff, 0x0, 0x1, r0}, &(0x7f00004a9000-0x40)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000699000-0xce)="14af1d24afefac63bd149c2b32bfdcd12598ba67f7f2ddd52ef81a7674bc2bb895d1c942440114b4c9101dd70a46238ea665bda87ad444aadcd0e217987df4132f9cc877ac7fa5060a82e9606a18d4c2d44fbf8351d04b1788eb1a73091b3783c55c1340f93d7cbbb81980c387a36f4347494b89bc83d220ec8f030a5616a4447cfeb8cff95781f29c94ed43c036fbed8ab1606d1d06adf3efc981932d52d54961b06b267afdc631912dfc3fd648d9886e1b86eb3c7a805700e9efc9aea3bdf0c958d0ccdb70d50be3cba754cdf5", 0xce, 0x86, 0x0, 0x0, r1}, &(0x7f0000a36000)={0x0, 0x0, 0x0, 0xf, 0x8, r0, &(0x7f000062f000-0xab)="a212f09d10e76b0174c3b0db1d22d39f03442869ce89b661d81bedca3c283c9c923603d88735503447bb5390b3790988676e2f713cd3e43ba814aff9932b1bd67d5236cf83f9d115608dbce0fd64fb251a2bad96a9f29f8ab22495952bdf27b32898d14d3b19144d5fd6f4042f1f88cb758b8f3c0929fab71063904cb6b4d994fcd6929c177332cf319e9632273d05915d8898df34f8cab4d131da9c127219329228ce83d887cecc1607c8", 0xab, 0x9, 0x0, 0x0, r1}, &(0x7f00003af000)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000e64000-0x2e)="a7ed965f1686139bbb7d121a64c7998922a7446bf0a10253cf65b6323028311e5791df43d01a3f57b3272376351a", 0x2e, 0x80000000, 0x0, 0x0, r1}]) readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:10 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000e9c000)='/dev/usbmon#\x00', 0x4, 0xab00) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00003a4000)={0x2, r0, 0x1}) sendto$ax25(r0, &(0x7f0000984000)="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", 0xfd, 0x4, &(0x7f0000721000-0x10)={0x3, {"e804a3beb02d78"}, 0x23}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r1, &(0x7f00001c4000)="6a4271a90573f8ddf76efe600fc678ad6ed58ed31ce61947032f280a2ed80ec3efcf73c7ee8099135e91f6e5187bf0f902be5357f05b0d87b4b2b7ea3647d85a6e1071c999510c208c1e1c11b6496cf32ddf25cfc34456d41feb37869629bee29fde57cc61088464f5e923a2b986de8e6c71bbde24c0d3ddb9f599c0a0c89ddd85f100f95c81ee16661d9ccd8113b460f79e63e574e890131de402ab2b455f1284a936ecd0db47e799d77df84986692697bc7f4ca860a4895f1c6220040067aff4b8947b06cc23f833c49f8a1590fceb184f33822206", 0xd6, 0x8000, &(0x7f0000001000-0x10)={0x3, {"0c64fcbeecaaaf"}, 0x7aa9}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000000)=0x10) 2018/02/16 18:03:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00003af000-0xb)='cifs.idmap\x00', &(0x7f000029a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000d01000), 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f000001c000-0x8)='keyring\x00', &(0x7f0000795000-0x5)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00009b4000-0x8)='keyring\x00', &(0x7f0000464000-0x5)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000aed000)='/selinux/policy\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000753000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000b2c000-0x4)=0x14) add_key(&(0x7f00000af000-0x8)='trusted\x00', &(0x7f0000120000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, r1) 2018/02/16 18:03:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:10 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x800000000000402) read(r0, &(0x7f000000a000-0xbb)=""/187, 0x329) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f000000c000-0x4)=0x2, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000000f000-0x10)=@hopopts={0x0, 0x0, [], []}, 0x8) sendto$inet6(r0, &(0x7f0000002000-0x2), 0x21f, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000011000-0xd)='/dev/net/tun\x00', 0x0, 0x2) 2018/02/16 18:03:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 174.596735] binder: 28581:28594 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.604590] binder: 28581:28594 got reply transaction with no transaction stack [ 174.612099] binder: 28581:28594 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000071000+0x25f)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00001e3000-0x95)=""/149) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00003d0000-0x38)={&(0x7f0000f76000)={0x10}, 0xc, &(0x7f0000256000-0x10)={&(0x7f0000ab2000-0x24)=@setneightbl={0x24, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDTA_NAME={0x10, 0x1, 'vboxnet1\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/16 18:03:10 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000de8000)='/dev/usbmon#\x00', 0xa505, 0x28000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000e20000)={0x0, 0x7}, &(0x7f0000fd9000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000c18000-0xc)={r1, 0x0, 0x20}, &(0x7f00003d7000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x97, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/kvm\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000d01000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ae4000-0x11)=""/17, &(0x7f0000005000)=0x11) r3 = add_key(&(0x7f00009dc000-0x12)='.request_key_auth\x00', &(0x7f0000f71000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00002a8000)="ffeddccc47a7bceec11939de0d05fb5286260eb65690d60c6eeb45c2cb90a7ad054edc049b695bc70cc68159e04a88f6e8876db27f4bf41ecacea2b7f83273a848b5108a8078c6484d526dccaacd701e3f02d6245ac3011ceed09029344342bcec6ff6fdb9881c76bec394d9c728e5737c01f6aeaa0d4e4079406e733fe47e5ad81f00a75fc8b8cfa1eb66c2a960c45929972ffb8b74307b76e82a4104d655d6904b7e7407a52191b628c537d6155f4381cd821e9d769456bb76004122fcfec3452127663331917092c41f74769cf2f1ad7bf22af60130192d52061d3317fa44f9ff00b795c24f726b740b8da803d33a2a67853b99ed0fd8bf97ad6c34705d7f220f83874525750bc3708275bfebcd5e592f92f7d0396bec8ba2c909e77b385a36e5bd81d4edeb4fb141c0d25277fb846a1427df6bbf10485ba1efeb0f04962717fa1be148047ba2bbef44322efd4941ce5eb700955794f4afb497cea8e65f441d3856b62f65047213cc5861cfca6a413ace40924f59d6baab30285ccc526233d9a33299f9e39cbb4f55ca98e0c3027c6c857fa5aa434c1d071c35109af0d032680da1abc2a72740b6b2d4518d4937a3f35b22e65aabecc93222ebab60cd5af8dd28b00ffd7c02186f84ce2ed19684815ece2e775c5e84d5bd307a1f5b56d1e4f34b09be8a3abc673b42d177885e9b1c93b150cc9936f7dbf7c47ac30435630c99447a03fb2dbb94545222abd0309ba0e4db84b3c4f94ab1add46c30575e1974d9bc83ac012a280ecb86a9613889df3b73359406a812b99e5bc8ee4d52ab3b374a6e6e70c253cbf0b32e13b5cc70220cfd4879a839c8bbe6a27aa7f792cb4f482eab2afea85246560de992a4d4a439e66b2ceead460672735d588f24f27778708f16d3dbfcaa20e2802c8a08a754494aba4755b2e4ed016689f20cc3ca546c4b317d10001d718b997074e9dfdd0a0f10353f31fb6fc3c4161047db0995d0052313ea58db6f7621aa8cc6fcb3d44641d7f9d3d65a1d4bbd7b59ddf80d1350f05da05e768e3f142e26c023f2247f1fb0fa7b22469533bab6334f6584d54dde342c6812265871bbc7ad03bdfb50d96378e4d91b6318798f83770b549344a8cff3e0c20b41b7e5566add76cc48e3cc4a4fc6efcce679ad31435660d2a3dc7832cdd93b73ed2ac8f78525136756975025e6669fcfaa085dd12c8a88619b482629f0451c80d0bfcdafd37f5624ef66e35f29a978c1a2fb38133ed2f8d6f37a200cff6fcb29aec39a325524b41e2ae19beefbe384b7f53e9a0cf37c8470189a0d3d7c6145d6289db65f90bd56cd253bc113953aaae87da557b2653b4e074392c63c4f2d488bf661617336d7e268a8abd3ff113ff2537da8354531cddab523c805367a1b7b2c6dd03eb9060dd12375d9d116cc5de31f0420d18c323542f6338d14505219081dce093d5bfb6ce524b7111e848128888af880035e84f9cfef695c1d345b550d8a2a61957ca8f3fcd98365da2d5052aff0839e15692b270ef1eca43a9e2f4312f98a70b469987f9931492b3b144f618a8c408660c0d37dea8d2b5accb4317faa19d3a635196580dcaa0d6c78c1cad420a03495b917608153c25447c4fcd30365fb6da32661210a58a2382c03004872a5602f57d654d1b1eda36c7c8dd6254651f327b79265fda7ab9725e50a304a7aaabe7e626671453237fdc5b706115cc4e5d5e726f79d087325e1ac17370023ba5a37393c67d4e6932f718c9b224c70a156c52f7a525528b1fa65beca1d4f813462d0de51be3f2090ffdde7402d3d62fedaf31f21925c26a2a92cd511982460875839183dcd01710bb3c02d4de224a79513e16567f6250811bfcca23da25e0c5529e4e547ac52f801d0f5e796b6cb8bf1b0257ec3b2438fec4b01156bc4ea99aa65598ebd2b6a9ce8e51d07960a7041b773b0e4b241276dd73ae5de04bd45990b9b0e324c36b99070d570efb63b6ca18ce0625819ec23f4d64d9ca5219114c3c3cf4c751ad46ab782dcfb7eb15fd0d983e6928af84e5b79e419433abca2743dc415fcfb8589bef0860946df4c0ffa7566fb7b7d4b113af19c572764a91730bad58587d01f393670004a195bcd243670eee409fad46fbdf89ab15a5328891e2ff4584c03c98646d2ad2212ffcc079ab1c60b8b6e94b14efd765e2518a854c2770ce6589977d3f79874aaedbe9c4ee751a9134e9b7ab103d954745c6b014df3649ae890899aad27f2e3c7e395a8731c79878196b42301b360c92546ceb8ad83296e11b445504fe479d2e27e8e2abc1604a1c73462cc1826d6820c9d2f261b8c98c9426c30e810c6203dc6a342fb39199ba696c66fc7c8deac8d4958d6c9e38cbe507c63006d83174b02c83941e0c0c057d5bd59bd29846dea51b42527bac6af32640f2619eab822d96472449d0771d4f4e8dee8a2319fef3fcd3117b3580ed9cf96072f10366372bb445fac6f28a5eb3320d0f22af7815b41c8a282455ecd6ca9154e1360d028406fe53e1dd6e1ffae6481e88004962f84ed7d4548f80afc52145b8589edd406f781357424dc1eb9b0875ce1ce7e9115dc6abd555604f69c71a2ace04c8b034e979608c600f78e4dbd94ba5f180adcf0d6d9ec4885adb2f7f551dc5860e8726321445fa60c87fbf50f81036230d6d7ad758723ffb890264e1c9d5ddbe0712fcd89328a423aea114ac321acaba8d4270e18d8e00968e0e45a456ec58b7b0d1c19c0e07d8230ef8c956e7d6f76fb27b3b113049603dda505ca596bbd2e4c16e9942155cf6ebbbc312a0766a614f4d85b1126f9134950495b4d0adf8ff61035d8eb3060143d20cdeec5af66aff95f49fc5a574909e104cd003c68af026c460dff6138dd1dc42134a42fa6f08fa8d80baf2ca225882879da79553c737a7de4068d551f0af7c42494070572b80fd603d4fe0ff793d85dd8cdf44f73860de4b2edb8c885dcb4d6b123282c0c5f86b5db20fbc046324863192980ad7cb2ed0663e19122c283fcff4852b54da8bb5c67c6f599c16198a384beb4dbbe6d1b685cfba8aacf45ea3110bd54de0e9fc6b0ac765a2332a7dda6e6ae3b3704ae5d0a3c3542824f01fca0c39e105401d4ccf05c409f0ecf798905c450e99c0fbedd8e23bc4b76972be5e6159207611bcffb33f191182f0f6aa3626d9de1d7bec3d1a91245dde9223264c0b68c4c8274e9b1765565d7fdb797bda96c13eab17a8400e313f9cdcd14a55a114322e48ec1943e6c5c2970916c4b8a9143ebdbfa53610a00b6c1c2c4d1050698cdc6814b4d492451621f15a57d94ed3c0e777da2e1d409c03fe7393771ca3cf284cc0173e0829357000fa96e13094e7f371c0ff195d521ae9a15ac493c302c71663afa292f11fd9a6d0bf911161040c844f8524f07620440e5549bfb9042960dc761dd6e8b46cafc36da8cbd863a03408814b4f04fb14ca6fd3879a8bbc9b0a4a7de3d88f59969bc224711335829ee45267151084952b0245044b2023014d930124b4cdfab90c13fbffa94f8ec1e4ee49ea5b9557eb92cd61363c1e6b942f4e69c57ae2b9adf6f7c51e76dec02fa136e289770a7c7e3ae3cf16381f1be97153fda5b9f7f1ff8f377de3bac7fe0183b5eeee827afe72c516db9731204b3c11bf84dff1d0602ba071ff58f1cd4eaca1950e81622ce562dd91a6198f800d5dda92a5cdb6543524784022089e3938fbad31ef752cd3edc8f85009d0d0f0aa7f12612a16bc13e978565c986a6c4d9ec62b955ea41b35065a28b7b7e73994f31210704edd9ff57c2bf71db44ba53aaf3231af3e695562ce11153aeaf2393554363efd9f1ac3de0fdaf3801821e333aefee1213bdd05fea05a7876f2004d834f6dc25ed8d78269fb105ae17eb45dd7463c8b75eefc6260b4cc6f81e3a67a4633ed7505ea2f283c8f5446ad94d6e86f48d97e8db94d88fb3daf8eaacb19469bcedfe9bd60c39ec717b94d30a7c9072516b489dd990c4f7af3dfc8616332ab244aac6fe50f1f64a437fe26042fed1a2226f562488952fd7dbc9d3631a65d2783e064e8ad0dc349996b707a32f803995b0989287153d468de0c7532a98fced56f839eacc1640dce08ed21afce1290d9f7b56318369fd7d6614a0a2861b8b496a96def2fa861b6b8c009a8af3ee9a941916e31e5d167b6b7ce02ccb80b1c27df2c47530169fc0e70836af756853be5892a75e91e326f6019dd2b61e5dd2172e676f6a1b5f784db8f98efb0341f47b1a15ee4436a469e5e0c72d01b546946c87416eb6fad57fc0cc35b25116c32ef8c7252a9e4117d87356e3d37941eb6711c61742bd3e3b8fb9d261844d43b40cf3c3c7c2e5db44c1475e4236c42cb9244e2f93a2654578af25dca3a340ff3c4511c7239f63f9aa9df5aa4bc9fcacb974a5c0b85b64643dc0e0445b71bb3950b501d2be7b3919bcb3684ddb617a66439593022a5447aed26271ddc5acd8baca09d3a96d37107449baff688cc8bb2488b5543c12523d712ad0691b8368cfa7c27baaa71d5560f843e29d3e3ae22d73a555869395eef38c48b9f1e1aecf27b0cda03aa611827f484e0df18d26e4c634750660cd633a9885a38492b73f35581ce8e378dc0753d2237049b901085f30877ec068146946104c3b9143e53789ed73908a4fbf313491d1edbc1416f916c4a4c572528c1d688e8d1b0984b037e082b1436d8544010630d051f86018bc662bd4b3d510cbf7be9e0ac9d1396efef33b7344a4692ca3f66b1ca367764be8ef6a381d76adb52b6276b3574d8f7973410e678506e22cb446f34d3fd2986ff83569a6e501496b8eac79d4f0c9ed54bf57f64d70c0250553959de5886226698d03a95fd1fd3385ed18fd0fc53ab04aab0baa1b678787f75e81a961fabfff40f74d3b33c2274d23e624a4ebc8201737d5f1ead1a3258e1c432e817aa286ff7ec175225249c98e919e4a6d4b5f8fe9d21bf9ffc2159f140049b96c1befa102f8cce0d7de37742de372e646ccaa8cb54601a2ea24751954812a4d656d62b7fdbfc563556d2453084284a764a871ada31d4da88c2df784cbe5337bfa71b4110a2283eeffdf845a9cedb46c228f489fb15aa7b8696dc92eef26ba3cf54374afb1019bffa98108b02caa9a5af1419c6434abfe39062d67163ed3e0c9a38e8ccaa4734dec82facf96cdfa6e71842edcf9a4f9f445781eb2d8c5112e7487be9638282f8a8383af71bfefb9a8b8db1594ad3fc90ccd03e5a4e2c557255111a8acbbe5fc14a8b7648f0d474053c3e6e722da045ab2b2868ce8c4f90c9e203e609f306ef3984f582e663628b8708bdc53dc1464c52b9a2fed5b1c73fbc8afbfb6065ef7759ad71d88786adb2653862b96ec59bc85619c879a59e21c4b38d3de8aaf48caef292f168f79fbace9701ddaae265498ab8eed14220d5ff919c503efb3b5633bca0213dc013358512e1fcb019df646c94a57db0ae8c3fd36a440869093d902a0b9bad83fe82d3142586dca8930d4b894e98b8872390b576f5edf2c2cdefdb07b2dc2c2decca0baa25b3c6e56bf98107bdc53cf9ec66855dbce019e41d5273d126060201a2cf3c3a4bccfcc7f518fcfa62622c5f6c754dbeb93b014d57e7d0bf927b97606205c5297f0b99b0468f63c34583d22103d6a7239fb86461026b9ba4afc901b586b8d322f88b818f52f2a8d842d4a8e9cc8ee8c3b7b4e0d7065b6027df1c9d5f900eb8ea26013c6bf84f0b7a9a38145f2850fff613aa8fde82656ec99b3d29dcf4ac1a705026fddbfa7aac67f9fe11301b9b507", 0x1000, 0xffffffffffffffff) add_key$keyring(&(0x7f00005d4000-0x8)='keyring\x00', &(0x7f0000e97000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r3) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000005000)=""/20) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00002df000)=&(0x7f00007bd000-0x1)) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000002000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000a93000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000056000)='/dev/vcs\x00', 0x200400, 0x0) r2 = add_key$user(&(0x7f0000beb000-0x5)='user\x00', &(0x7f00003de000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000feb000-0xeb)="1237c38270e8b3f61ff52ef6968c3b7e136f3e48e9b72c1deff248596e245efc2b275fa0d49488d5a26f1a5ef4ba357a38eb5d5defdb3036163980456580d52870c7f681b67493c885142c8aeb330480bdfd95e2c87931b5dceeb9e55d81565525c8e6543fb7e2dee0cb544c325f302e6999be53a09c5abdb54c9b910a45d598c013b3144aa75a6c5374d196ba9db522a8796b91ac66e1f1a8f136645838ee79c8e0c588eb3fee1650c1a0bcd5f3d39620b4c250cb7a0cbdb75a8c1c1f581906f785cfe5277d56089374355a3e6019dea1a0aa206846bcc3be3d4e62e9206f9eaa0062096a9a19b7fbcf6d", 0xeb, 0x0) r3 = request_key(&(0x7f0000441000-0xa)='id_legacy\x00', &(0x7f0000a22000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f000036a000)='&*\'\x00', 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f00009ed000)='user\x00', &(0x7f0000014000)={0x73, 0x79, 0x7a, 0x2}, r3) getpeername$packet(r1, &(0x7f0000398000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000ea000-0x4)=0x14) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0x3ad000)=nil, 0x3ad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003ad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00003ae000-0x12)='/dev/snd/midiC#D#\x00', 0x200, 0x8000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f00003ad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000313000-0x8), r1, &(0x7f00003ad000), 0x4f, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'fsm\x00', "0d00ecb6d70b7bdaceb36a2658d861a1eff3b029ef504a339970d947ba2ad36d4e0d6b5328cf197cd30f1138e28b60250775d0d48bdc49c5f07871c41c895cbb30dc1065e1ca049ab6e5f35e9c7f37a29fa0753a992aa626d200a9ee7fd68edf88d2e57359942a0ff1fef7a3b917dc483d93f9d782b3ce3da3eb8965fbf6dca4", 0x44, 0x3}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000001000-0xc)={0x0, 0xffffffffffffff9c, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000001000), &(0x7f0000002000-0x4)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000002000-0x28)={0x8, 0x44}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000001000)={[], 0xff0, 0x6, 0x5, 0x0, 0x8, 0x2000, 0x5000}) keyctl$search(0xc, 0x0, &(0x7f0000e80000)='blacklist\x00', &(0x7f00007db000-0x5)={0x73, 0x79, 0x7a}, 0x0) syz_open_dev$tun(&(0x7f0000001000-0xd)='/dev/net/tun\x00', 0x0, 0x400) 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00003a4000)={{{@in=@rand_addr, @in6=@empty}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00005e5000-0x4)=0xe8) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0x38000)=nil, 0x38000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000023000)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000033000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {"6263736830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", {0x80000000000, 0x1f, 0x0, 0x0, 0x0, 0x3f, 0x4}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xfffffffffffffffd}}, 0x10) rt_sigreturn() mmap(&(0x7f0000038000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000039000-0xb)='/dev/mixer\x00', 0x400000, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f000000c000-0x20)={0x2}) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() io_setup(0x726, &(0x7f00004d0000)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000c78000-0x80)=[{}, {}, {}, {}], &(0x7f0000cb8000)={0x0, 0x989680}) [ 174.708486] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000e6e000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000cc000-0x14)={0x1, 0x0, 0x0, 0x3}) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00006b6000-0xc)={0x7, r0}) 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', &(0x7f0000001000)={0x8, 0x6}, &(0x7f0000002000-0x4), 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000007000-0x16)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000005000)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x15}}}}, &(0x7f0000002000)=0x8c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000005000-0x98)={r1, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x9}}, 0x2, 0x7fff}, 0x98) r2 = socket(0xa, 0x2000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001000)=0x6, 0x4) getsockopt(r2, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000008000-0x8)={0x0, 0x76b}, &(0x7f0000007000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001000)={r3, 0x3, 0x24, "9167d64d978d703f47cfb16d94a5c680330d79ad1c5cdefd295b752fd11be68b794c8bfd"}, 0x2c) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000007000-0x1)=@common='sit0\x00') [ 174.767467] binder: 28624:28628 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.775301] binder: 28624:28628 got reply transaction with no transaction stack [ 174.782795] binder: 28624:28628 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000d2d000)={0x0, 0x6b, "7deab1d4e0d9c0a619978cd9196b77d119d673752015d34827667d48dd5942197c9b1bf393e6589b5c1e8c9958986293a264e8bac0436ec097863d7393103b7b1b7a4259304f706566b49fb863706980021516a51293b75ee0c652581cffc65e8d36ef97909cb21fbada91"}, &(0x7f0000e74000)=0x73) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000aae000)={r1, @in={{0x2, 0x2, @empty}}}, &(0x7f0000c4d000)=0x8c) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) socket$pptp(0x18, 0x1, 0x2) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ebf000)={@common='vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00002eb000-0x14)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f000000b000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x7, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 174.825167] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000442000-0x7b)="240000004e001f0014f9f4070008f408020806f70d0001dffeff00000400000000040008", 0x24) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00002e0000-0x11)='/dev/qat_adf_ctl\x00', 0x600, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00006fc000)={0xcc64, 0x9, 0x6, 0x10001, 0x400, 0x3ff, 0x2, 0x3de, 0x3, 0x4}) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000eb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) creat(&(0x7f0000b9a000)='./file0/bus\x00', 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2011, r3, 0x0) writev(r1, &(0x7f000078a000)=[{&(0x7f0000000000)='\f', 0x1}], 0x1) close(r1) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x0, 0x1000}) 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000cdf000-0xa)='/dev/vcs#\x00', 0x3, 0xc2001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000278000)='/dev/vcs\x00', 0x0, 0x0) r2 = msgget(0x3, 0x80) lstat(&(0x7f000005d000-0x8)='./file0\x00', &(0x7f0000c90000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000872000-0xe8)={{{@in=@empty, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00006d7000-0x4)=0xe8) getgroups(0x1, &(0x7f0000151000-0x4)=[0x0]) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000d18000-0x4)=0x0) r8 = getpgrp(0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000f7c000-0x78)={{0x9, r3, r4, r5, r6, 0x2, 0x3}, 0x8, 0x10000, 0x0, 0x2, 0x10001, 0x5, r7, r8}) mknodat(r1, &(0x7f0000b4a000)='./file0\x00', 0x8, 0x80000001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00006b2000-0x18)={0x0, 0x7, 0x30, 0xf58a, 0x2}, &(0x7f0000b33000-0x4)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00001c9000)=@assoc_value={r9, 0x466}, 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00006c8000)={0x8, &(0x7f0000d5e000)=[{}, {}, {0x0}, {}, {}, {}, {}, {}]}) mlock2(&(0x7f000017c000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000fef000-0x8)={r10, 0x1}) fcntl$setstatus(r1, 0x4, 0x2800) pwritev(r0, &(0x7f0000f21000)=[{&(0x7f00007b1000)='\b', 0x1}], 0x1, 0x0) 2018/02/16 18:03:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x0, 0x3, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) sendmsg(r0, &(0x7f00009f2000-0x38)={&(0x7f0000db5000)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00007de000-0x70)=[]}, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00002c4000-0x30)={0x9}) rmdir(&(0x7f0000604000)='./file0\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000)="41f06c6148f39518920c0993f7ff33e5865265b33a0ac4b8772ac20120137baf8c0d1d806a9d410f45106a7ea300d522ac654c47c32a4ccbea838afc788c136572e4aeed195a5a127f7bf6af45e76ec92d22b7091c6424ddf0", 0x59, 0x4000014, &(0x7f0000000000)={0xa, 0x2, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x10001}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000471000)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000905000)=0x3e4) [ 174.871197] binder: 28649:28656 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 174.879088] binder: 28649:28656 got reply transaction with no transaction stack [ 174.886599] binder: 28649:28656 transaction failed 29201/-71, size 0-0 line 2757 [ 174.907194] QAT: Invalid ioctl 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x0, 0x1000}) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000016000)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000023000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='bpq0\x00', @common='dummy0\x00'}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'fsm\x00', "09000400000000000000550000f16b122d13cba47a9a0da863016dbdede79f4e9d00000000000000202cae35d82398feecd401f75ce081e5c5d30692a6af144364cec15edde6914d70c90ab3a3cfe07373af9386c484e6edcb0194ee17bee036e3571f660c34548502a4b8f3c59861ec63a0daf2b70698fb3907a2b7a4999364", 0xffffff80}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="c6b6bc295dc0"}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x3f0) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000028000)='/dev/sg#\x00', 0x0, 0x200) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000004000-0x10)={0x0, 0x40ec3e60, 0xff, 0x7}, &(0x7f0000029000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f000001b000-0xa0)={r2, @in6={{0xa, 0x2, 0xffffffffffff8001, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, 0x37f, 0x6, 0x7, 0x1, 0x20}, 0xa0) [ 174.947110] QAT: Invalid ioctl 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000b1000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000194000-0x4)=0x85b) r1 = syz_open_dev$amidi(&(0x7f00004d7000)='/dev/amidi#\x00', 0x34, 0x1c1002) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000863000)={0x3, &(0x7f0000664000-0x18)=[{}, {}, {}]}) r2 = syz_open_dev$sndseq(&(0x7f0000b90000-0xd)='/dev/snd/seq\x00', 0x0, 0x40000000020002) write(r2, &(0x7f0000ea5000)="85f776637918fd4584a7bfea15c88048b4b940230a2a72ebf6665294", 0x1c) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) [ 174.993613] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.042643] binder: 28685:28687 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 175.050519] binder: 28685:28687 got reply transaction with no transaction stack [ 175.058253] binder: 28685:28687 transaction failed 29201/-71, size 0-0 line 2757 [ 175.078981] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00005f5000)='/dev/hwrng\x00', 0x28481, 0x0) poll(&(0x7f0000728000)=[], 0x0, 0x6) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000ddb000-0xc)={0x10}, 0xc, &(0x7f0000f33000)={&(0x7f0000dc1000)={0x14, 0xa, 0x2000000a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) socket$llc(0x1a, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000c2d000-0xc)='/dev/amidi#\x00', 0x101, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000099d000-0x18)={0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffff9c, 0xc0306201, &(0x7f0000330000-0x30)={0xbc, 0x0, &(0x7f00002db000-0xbc)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f000016e000-0x40)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000dcc000-0x1), 0x1, 0x2, 0x1f}], &(0x7f000098d000-0x28)=[0x78, 0x20, 0x48, 0x68, 0x18]}, 0x3}}, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x0, &(0x7f00006bc000)=[@ptr={0x70742a85, 0x0, &(0x7f0000c23000-0x1), 0x1, 0x2, 0x2e}], &(0x7f00008fa000)=[]}, 0xffffffff}}, @acquire_done={0x40106309, r2, 0x1}], 0x1, 0x0, &(0x7f0000d61000)="fc"}) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x0, 0x1000}) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) 2018/02/16 18:03:11 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000dc000-0x12)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40080) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000001000-0x2), 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001000-0x10)={r1, &(0x7f0000001000-0xe)=""/14}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x5, {{0xa, 0x3, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0xff}}, 0x1, 0x3, [{{0xa, 0x2, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, {{0xa, 0x3, 0x2, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xc66}}, {{0xa, 0x2, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x72}}]}, 0x210) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x17}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0xfb, r2}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001000-0x2e)={@l2={0x1f, 0x1, {0xb02, 0x7ff, 0x79227929, 0x6, 0x3, 0x8}, 0x100000001, 0x2}, {&(0x7f0000002000-0xfd)=""/253, 0xfd}, &(0x7f0000001000), 0x4}, 0x2e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000002000)="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", 0x1000, 0x10, &(0x7f0000003000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r3 = semget$private(0x0, 0x4, 0x10) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000002000)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001000-0x10)={0x1, &(0x7f0000003000+0x864)=[{0x9, 0x0, 0x7, 0x100000000}]}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000004000), &(0x7f0000003000)=0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002000)={0x2, &(0x7f0000002000-0x10)=[{0x8000, 0x81, 0xfffffffffffffff7, 0x1}, {0x0, 0x9, 0x9, 0x1}]}, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001000-0xe8)={{{@in6=@mcast1, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000005000)=0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000006000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000004000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000002000)={{0x3, r4, r5, r6, r7, 0x0, 0x6}, 0x9, 0x7a7, 0x2}) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000984000-0x9)='/dev/kvm\x00', 0x4003fffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000d02000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000633000-0x18)=[@text64={0x40, &(0x7f0000187000-0x71)="b9800000c00f3235000800000f3066b803010f00d0f2420f20d3b9fb0a00000f3226664d0f388131b805000000b9e50000000f01c148b800000100000000000f23c80f21f835080050000f23f866baf80cb896278f8fef66bafc0cb000eeb9040a0000b845710000ba000000000f300f07", 0x71}], 0x1, 0x0, &(0x7f00009c3000)=[], 0x0) keyctl$session_to_parent(0x12) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00003e3000-0x20)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f48000/0x2000)=nil}) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000c68000-0xe)='/dev/admmidi#\x00', 0x7ff, 0x6535701f37485468) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000edf000)={0x100000000, 0x5, 0x9}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000a91000-0x10)={0x9, &(0x7f000033e000-0x24)=[{0x2a89, 0x3}, {0x4, 0x7}, {0x100000000, 0x8}, {0x1, 0xb15}, {0x9, 0x1}, {0x9, 0x6}, {0x4, 0x3}, {0x1, 0xffff}, {0x3, 0x6}]}) syz_emit_ethernet(0x7e, &(0x7f000000c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@ssrr={0x89, 0x13, 0x0, [@empty, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [{[]}]}, @end, @ssrr={0x89, 0xf, 0x0, [@loopback=0x7f000001, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}]}, @ra={0x94, 0x6}, @generic={0x0, 0xc, "107777ff0010020003f4"}]}}}}}}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000794000)={0x0, 0x0}) lstat(&(0x7f0000b43000)='./file0\x00', &(0x7f00009c6000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = semget$private(0x0, 0x7, 0x406) semop(r3, &(0x7f0000ba3000-0xc)=[{0x1, 0x10001, 0x800}, {0x3, 0x7, 0x1800}, {0x3, 0x6, 0x1000}, {0x0, 0x9, 0x800}, {0x0, 0x8, 0x1000}, {0x0, 0x7460c999, 0x800}], 0x6) lstat(&(0x7f0000af7000)='./file0\x00', &(0x7f000095f000)={0x0, 0x0, 0x0, 0x0, 0x0}) write$selinux_user(r0, &(0x7f000095d000)={'system_u:object_r:tmpreaper_exec_t:s0', 0x20, 'staff_u\x00'}, 0x2e) r5 = getpgrp(0x0) r6 = getuid() stat(&(0x7f0000e0c000-0x8)='./file0\x00', &(0x7f0000410000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000a2d000-0x8)={0x0, 0x0}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00003a9000-0xe8)={{{@in6=@mcast2, @in6=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000b23000-0x4)=0xe8) getgroups(0x1, &(0x7f0000518000-0x1)=[0x0]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000486000-0x4)=0x0) getresuid(&(0x7f000045b000)=0x0, &(0x7f000092d000-0x4), &(0x7f00001a4000-0x4)) r13 = getgid() sendmsg$netlink(r0, &(0x7f0000137000)={0x0, 0x0, &(0x7f000037e000)=[{&(0x7f000033e000)={0x1a4, 0x31, 0x410, 0x4, 0x0, "", [@typed={0x30, 0x72, @str="766d6e657431766d6e65743073656375726974792e5b2d21282d6c6f6d643573756d28f000"}, @typed={0xa0, 0x41, @binary="0dd9d68de116a44c821cc78475fedb595c222f86acfecb807f1d158aa3d68c71bf50a67dc2b187a791feaaca1a545374a95f171c08dd0fc4ef3fa3b00cf2da7452178e868ecc26fd023311b174d2d11d94a9be3b3b4353fdb1b074203b6540057e871122922912f5381fe6e13bc1d2d41453cfdf5fb99fc5f6b446d95a8de2d5436ecef9b11438294b6637b8e6c1a11fdcfaae9e747d1b"}, @typed={0xc4, 0x67, @binary="91c26c7517708b383c3e427601f78d3c29a3cb14edf33c86a702f2862f8bfcd1af958506257d6e6ad87ba30589487587a79d88eb584672cc201e3533d6b193cadee7525e7c2d1151163b46dcb2247bac88bcf0c17e3ac975d64f0430ac30c9c9ed6daf0ecd984e4d580f7570d388208221ced87a4bb3888a47b02fea0495e5345be08898ac27b7d7388edfd13f0a62be86cadbb3e2c0b283879db07100be6a4c5e8faa330e444446a2e363c95aa6452680fb79047bae6e30ff"}]}, 0x1a4}, {&(0x7f0000425000-0x1c8)={0x1c8, 0x17, 0x302, 0x3, 0x0, "", [@generic="433a592b6f71b41f82e146b82cdaeff18ec516ef750a5cc515fa9be273a77557c8c32c821afc2abeaf09187fe8068859b2da2c11495c003713706439068b2b6bb73b45c9be0baca0797e91bf6666b4f16e51fb1c7d10e6e2240fa192dbe7e1de6ae8f86734a8ec8484a96c315385faef628b5948030bebc1127323fe1d4d073d19cf41d23c84a9c934940fbe5ebe084354e47984aa98bf51df1bf73edf55e82c1a2e062fd8a69dee78adbc3cc4a4f41e803a19dbbd7f8be28b3c3539de5d45c3f270fa229ff35a47a3db8c0727d12f2320c5514d483034d50d151f18b04f3f50ba52f3", @nested={0xd4, 0x93, [@typed={0x18, 0x2d, @ipv6=@dev={0xfe, 0x80, [], 0x0, 0xc}}, @typed={0xc, 0x4, @fd=r0}, @generic="9f7cd1a3e4056beacc57d63a8b0972f68aa6d048e3cc0052b4559325164f9f894cb270fa35427ec5c65f94cc70fd90cd9dc13d2441cbacb08cdd866a98667719eeeb4b291d557dac7465b0a0476e734d92e48f45c66d903348af62576a73c4fa520f60d499f51693335f9fed8ead25a48667e0f1fa770a9b0d369846b470a87e2cb4c08ac21faea4077e117ffbaac1c2d139622ad2f537916b20869d1e", @typed={0xc, 0x4, @fd=r0}]}]}, 0x1c8}, {&(0x7f000061c000-0x230)={0x230, 0x16, 0x4, 0x5, 0x2, "", [@typed={0xc, 0x79, @u32=0x2}, @nested={0xa4, 0xd, [@generic="ad5de93a279c4c61e106d6de0d85605d0ce908a04c71f5f2779bf474d5eed58928433153773b286e4d01de3f87024a0335ab9eb51c2d2d670015625c2546ac56c7c51d6e53f586ab8bc7dc42e9367b7cf11045995738f6ee71f6e5afcdaee9ffb1f0edf6c53301eb22cc8f5f829dc23f9f302de897fabaddc446a344140d9e0c618fd7d8e4d665bfc94fba06bfbf7f365433a7", @typed={0xc, 0x6f, @pid=r1}]}, @nested={0x68, 0x58, [@typed={0xc, 0x60, @u32=0x7}, @generic="ecf5795bf46ec68abd1f7429528137a0171b414732ade8306d7f43fe7d6ec78eb443c6f7a3f0cd86980030d0a31f88e9d43bf2d7be3b0b45e5b4c5d4b71d24", @typed={0xc, 0x54, @fd=r0}, @typed={0xc, 0x2, @uid=r2}]}, @generic, @nested={0xf0, 0x51, [@generic="31397ae2f309635d0d10f7c70bfa8937181ee4470df5a5a6c1551087740adba26984f675cf768d166bb784295bb9a1e7f5f33875cc374304a719d9dc0ac363aa04acdb8b79a8792178ee497c6de42ef8b121ee2546267e", @typed={0xc, 0x45, @str='\x00'}, @typed={0x18, 0x6a, @str='/dev/admmidi#\x00'}, @generic="d707a24b37a7e8fcb6e3d10ebc0aba134dc1ec18aa267fa2aa1bcdc63c0b54ff6193af35f75ddf1432c12b00f5e1cff8035b5d417326cf591e66d12b93c2bb37117d6784ab7490e2103f9be1443e518dcf9c27aa59592a038fbb154525d5560a", @typed={0x10, 0x3a, @u64=0x9}]}, @typed={0xc, 0x3e, @u32=0x8}, @typed={0xc, 0x38, @uid=r4}]}, 0x230}], 0x3, &(0x7f00001ab000-0xb8)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0xb8, 0x1}, 0x20000800) 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) r1 = getpgid(0x0) r2 = geteuid() fcntl$getownex(r0, 0x10, &(0x7f0000376000-0x8)={0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000d4b000-0x38)={&(0x7f000044d000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000278000-0x10)={&(0x7f0000024000-0x15e8)={0x15e8, 0x40, 0x4, 0x7, 0x3, {0xf}, [@typed={0x1c, 0x1b, @binary="f77340e26505421d45aab3f4d423634591"}, @nested={0x1118, 0x7c, [@typed={0x1008, 0x76, @binary="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"}, @generic="0feb87dba16278a99a5c014236954c75203d125ad1b00457df3f3ae9b43cfeff06c83c0755ef7f3b722ffccdc3b13b85e5183427eab7374b1647ddaec8be585ada3b6667495469a1f141da69d5cffdec5cf78a6efe3e4c89a4a13522ae4730d2e97e7eee69b9b08b5320feafb0dfeef35ae83b073100892521d631a68e0b2f124b368cfd615c7643c0af6e4e7d1719edbf8c73a2a5b7da385cff00b43c907083ca72b953d7d5f28ca1315800ad2ea1082c3f652e8d86b5d2d6cb96ba8c5be0077657a629a0b9e7fbb6f06716ae0c2a67725ab5", @typed={0x8, 0x72}, @generic="e3fb67970c8afd2184c2f176d528f81a0b2232a996da8a", @typed={0xc, 0x7d, @pid=r1}, @typed={0xc, 0x5, @uid=r2}]}, @nested={0xdc, 0x36, [@generic="f392d4a7f36ae519387709da5dccfc8358661be228a583f0df9a95f7d994170ce5a54b3038fe1a9405c003130a9359b41446a4766647f084ddf60a106a8363b6d6b1eb643b4c6869ecd7d1431bb413d515ce58373c8db691bb9f49102166b6a1fbb6b2a46160b3dc0802a96afa15349afc065e07d9589fb7a504d750f1bebe005a8c29e3268c7d6d81037222ab6475b36c6e01e0562e77265d85088a83bd9b23e8bab5a84ac9ff1a88cca5df004dae8d44520843fc0d5f8768b48fec37c0ef6d4912fce23096cfc1", @typed={0x10, 0x81, @u64=0x7}]}, @generic="abff91a90141735b559082e6e7150feaac61bfdceded25a57d29b018b30decb6249a8e067debc793affa9b47b96376368afa6898304d87ef40f17cb8f622878ccde8b76ee3d6e0d7f89e5cb238c61c90", @nested={0xe4, 0x10, [@typed={0xc, 0x31, @pid=r3}, @typed={0x10, 0x3, @str='net/arp\x00'}, @typed={0xc, 0xf, @ipv4=@rand_addr=0x2}, @generic="afbdb35f7e518595067eebc8e66de9ef77a8918bd1c002c5d4509b01465bc8a8ca9979207bd3d53d4eb5496f58ca766dca2db2902f4aa2f494e3f3a2d627b26ca94e76d50d65f67ddea6d72a1aba3fce6b9f30c016d7d5f14b843a8ba6af7f87bcbdced5e5cba8daf64c620fefc9d71a8d96d0", @typed={0x10, 0x8c, @str='net/arp\x00'}, @typed={0x8, 0x59}, @typed={0x2c, 0x38, @str='posix_acl_access:vmnet1wlan0ppp0\x00'}, @generic]}, @nested={0x1b8, 0x4b, [@generic="c5d7807c2cb41ffbcbee9e3cb914fe62f5e1d17a06098a6ed329dd1c8decb120dd6e54e483e9f73a311d4cfc0e3d626a80a0c0648e50b5bc031309643391b8873d395052b408e54f555aa134c41a5c7c709c3fa5d5b6f84ce67ef69f9c4df4762a19ad1364901417a5e8090cad528ee4ca951e8865e2a6bcc20f984e76702b8b3d58a1048bfa5abd06c3d5341a8961726656076af8c2fb0e6440223b0a151f1d865d347fa28dddbe1ca08248a8326a81d1", @typed={0xc, 0x47, @u32=0x713}, @typed={0x8, 0x2f}, @typed={0xc, 0x71, @ipv4=@loopback=0x7f000001}, @typed={0x24, 0xf, @str='selinuxvmnet1usersecurity\x00'}, @typed={0xc, 0x68, @u32=0x1}, @generic="87f90ff16da94452ec66169cdfa1f7900c34a10bcc931550e3cdde11abf40ac0fdf49fe212ee615e1af1ba10f32c789913dfba5b410a296620ea49d059e8c461fcf8861eab2b2100b0574acc6dda6a1bb2efd66a9edaa449d6cc0d51c4bc51e74533df7f1685acaf97a999b6bcbc2dc4893174995da1908387088425618e324f8bcae51400191a8bc4dbc3b28a158afd8211c81a1715335d4b79214f7787bc9d31b688d356476281d48113fdd69a8867a4b3"]}, @nested={0xd8, 0x15, [@generic="79f26c46a53cc1e8c69db2555470a094dea682730b1ce266ffbaaf3fba914b8b461e892836b409a39283533abe0b3d6fb0650d6de0b07b0becdc64799974923351224a6d925f514f1e969e91182f53c2569b5b61ef5b547d980e2907f4ac6d54b3eefdac80f0f86b81d4de3340248bb95a890d06b2894981f044697d4a6c8fc3c8be267d15eef057d088cb455052eb7d8486b0fef9e6500035567f7d76165e01ca1be08970539652f9a014c56a4a0bd9bab3dc26055a861f0f1b82c086b644a96e4da2f885581d4698cab4a55580339ef09ccf2b"]}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9}) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f000023d000-0x3e)=""/62) r1 = syz_open_pts(0xffffffffffffff9c, 0x200380) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000d9f000-0x28)={0x5, 0x9, 0x6c, 0xfffffffffffff000, 0x963}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00003f3000)={0x17, 0x1000, &(0x7f0000bfa000)="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"}) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9}) 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000888000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f000038b000), &(0x7f0000184000)=0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_dev$dspn(&(0x7f000092e000-0xa)='/dev/dsp#\x00', 0x7, 0x0) sendto$inet6(r1, &(0x7f0000352000)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000214000-0x8)={0x0, 0x2}, 0x8) write(r1, &(0x7f0000686000)="9a", 0x1) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) setns(r0, 0x0) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000827000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x20000400) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00006b9000-0x68)={0x3, 0x7, 0x80000000, {0x77359400}, 0x7, 0xff}) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1}, 0x0) accept$ax25(r0, &(0x7f0000dc1000), &(0x7f000014f000)=0x10) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000c47000)={@common}) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000daa000-0x20)={0x9, 0x5, 0x8, 0x5, 0x2, 0x800}) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) listen$netrom(r0, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000a3a000-0x4c)={0x1, 0x63, 0x9}) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f000000a000)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x193}}]}, 0xd0}, 0x1}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000084000-0x42)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @empty, 'I'}}}}}, &(0x7f0000d48000-0xc)={0x0, 0x1, [0x0]}) r1 = syz_open_dev$mouse(&(0x7f0000d21000-0x12)='/dev/input/mouse#\x00', 0x1, 0x200000) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f000014c000)=0xffffffffffffffff, 0x4) getdents(r1, &(0x7f000040f000-0x6f)=""/111, 0x6f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000808000)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, @in={0x2, 0x0, @empty}, @in6={0xa, 0x1, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x1, 0x6, @ipv4={[], [0xff, 0xff], @empty}}, @in6={0xa, 0x1, 0x8000, @empty, 0x3}, @in6={0xa, 0x3, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x100000000}], 0xbc) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000e82000)='/dev/admmidi#\x00', 0xe7b, 0x288302) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000a87000-0xb8)={0x0, 0x9, 0x100, 0x5, 0x81, 0xc1, 0x8, 0x101, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x1, 0x4, 0x88aa, 0x9, 0x8}}, &(0x7f0000a30000)=0xb8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000757000)={r2, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, 0x8c) fremovexattr(r0, &(0x7f00007bb000)=@known='security.capability\x00') ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000035000-0x50)={@common='sit0\x00', @ifru_data=&(0x7f00008e8000-0x20)="01002e00faffffdf82030800f308eb000000000000000000100000eb7e000423"}) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9}) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x44, 0x0, &(0x7f0000fa6000-0x50)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d39000)=@raw={'raw\x00', 0x9, 0x3, 0x388, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, &(0x7f000084a000-0x30), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@socket1={0x28, 'socket\x00', 0x1}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xf, 0x0, 0x0, 0x0, "707074700000010000000000002000", 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}, @common=@unspec=@ipvs={0x48, 'ipvs\x00', 0x0, {@ipv4=@multicast2=0xe0000002}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3e8) syz_emit_ethernet(0x11b, &(0x7f0000353000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "650ac4", 0x38, 0x1011, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[@hopopts={0x0, 0x1, [], [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0x0, 0x5}, @fragment, @fragment={0x0, 0x0, 0x8, 0x7, 0x0, 0xdd7, 0x3}], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x24, []}) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000574000-0x4)=0x0) lstat(&(0x7f0000226000)='./file0\x00', &(0x7f000076e000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000095a000)={0x0, 0x0, 0x0}, &(0x7f0000150000-0x4)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000acd000-0xc)={r1, r2, r3}, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f000025d000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) [ 175.372549] binder: 28746:28750 got reply transaction with no transaction stack [ 175.380141] binder: 28746:28750 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b16000)="6e65ff2f526f75746500") readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000f50000)='/dev/input/event#\x00', 0x10001, 0x2000) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000018f000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000f50000)={0x100000000}) r2 = syz_open_dev$adsp(&(0x7f0000dcf000)='/dev/adsp#\x00', 0x3ff, 0x22000) connect(r2, &(0x7f0000d16000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x4, 0x2, {0xa, 0x3, 0x5, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x9}}}, 0x32) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000003000-0x4)) 2018/02/16 18:03:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000805, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c81000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f000091a000-0x4)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000e5c000-0x8)) userfaultfd(0x800) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000101000-0xb0)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000d000-0x1c)={0xa, 0xffffffffffffffff, 0x807, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f000067c000)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x0, &(0x7f0000bff000)=[], 0x0, &(0x7f0000cc4000-0x18)=[{0x10}], 0x10}}], 0x1, 0x0) 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3b) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [0x0, 0x0, 0x1], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}, {}, {}, 0xffffffffffffffff}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x3b, 0x0, 0x5}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x0, 0x8000000}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) sendto$inet6(r0, &(0x7f0000003000), 0x312, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 18:03:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 2018/02/16 18:03:11 executing program 3 (fault-call:6 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x44, 0x0, &(0x7f0000fa6000-0x50)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:11 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000fbe000)='/selinux/member\x00', 0x2, 0x0) remap_file_pages(&(0x7f00007f4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x4003, &(0x7f000095a000)=0x101, 0x3ff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000039000/0x2000)=nil) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8003, &(0x7f000082e000-0x8)=0x40000000003, 0x7, 0x0) [ 175.421367] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.458514] binder: 28763:28769 got reply transaction with no transaction stack 2018/02/16 18:03:11 executing program 5: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000008000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000000d000), 0x4000) ioctl(r0, 0x40084149, &(0x7f0000003000-0x1)) 2018/02/16 18:03:11 executing program 1 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000ef2000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000906000-0x4), &(0x7f0000517000-0x4)=0x4) 2018/02/16 18:03:11 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/vcs\x00', 0x80100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001000-0x4)=0xe, 0x4) mmap(&(0x7f0000000000/0xd17000)=nil, 0xd17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f000050d000)=0x7, 0x4) mmap(&(0x7f0000d17000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(r1, 0x0, &(0x7f0000d18000-0x4)) 2018/02/16 18:03:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 175.466128] binder: 28763:28769 transaction failed 29201/-71, size 0-0 line 2757 [ 175.488671] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.514229] FAULT_INJECTION: forcing a failure. [ 175.514229] name failslab, interval 1, probability 0, space 0, times 0 [ 175.526307] CPU: 0 PID: 28781 Comm: syz-executor1 Not tainted 4.16.0-rc1+ #315 [ 175.533705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.543070] Call Trace: [ 175.545674] dump_stack+0x194/0x257 [ 175.549315] ? arch_local_irq_restore+0x53/0x53 [ 175.554002] should_fail+0x8c0/0xa40 [ 175.557715] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.562809] ? print_irqtrace_events+0x270/0x270 [ 175.567558] ? memset+0x31/0x40 [ 175.570821] ? check_noncircular+0x20/0x20 [ 175.575059] ? find_held_lock+0x35/0x1d0 [ 175.579116] ? __lock_is_held+0xb6/0x140 [ 175.583199] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 175.589071] ? rcu_note_context_switch+0x710/0x710 [ 175.593989] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 175.599183] should_failslab+0xec/0x120 [ 175.603154] kmem_cache_alloc+0x47/0x760 [ 175.607214] ? copy_vma+0xd80/0xd80 [ 175.610847] __split_vma+0x10b/0x7b0 [ 175.614548] ? find_vma_prev+0x140/0x140 [ 175.618587] ? vmacache_find+0x5f/0x280 [ 175.622568] ? find_vma+0x30/0x150 [ 175.626100] do_munmap+0xb54/0xdf0 [ 175.629664] mmap_region+0x59e/0x15a0 [ 175.633527] ? SyS_brk+0x6f0/0x6f0 [ 175.637052] ? arch_get_unmapped_area_topdown+0xba/0x920 [ 175.642497] ? arch_get_unmapped_area+0x760/0x760 [ 175.647348] ? lock_acquire+0x1d5/0x580 [ 175.651308] ? vm_mmap_pgoff+0x198/0x280 [ 175.655364] ? selinux_mmap_addr+0x1f/0xf0 [ 175.659597] ? security_mmap_addr+0x79/0xa0 [ 175.663913] ? get_unmapped_area+0x265/0x300 [ 175.668335] do_mmap+0x6c0/0xe00 [ 175.671705] ? mmap_region+0x15a0/0x15a0 [ 175.675748] ? vm_mmap_pgoff+0x198/0x280 [ 175.679794] ? down_read_killable+0x180/0x180 [ 175.684275] ? security_mmap_file+0x143/0x180 [ 175.688768] vm_mmap_pgoff+0x1de/0x280 [ 175.692662] ? vma_is_stack_for_current+0xa0/0xa0 [ 175.697514] ? __sb_end_write+0xa0/0xd0 [ 175.701492] SyS_mmap_pgoff+0x462/0x5f0 [ 175.705461] ? find_mergeable_anon_vma+0xd0/0xd0 [ 175.710199] ? SyS_read+0x220/0x220 [ 175.713889] ? do_syscall_64+0xb6/0x940 [ 175.717855] ? align_vdso_addr+0x60/0x60 [ 175.721903] SyS_mmap+0x16/0x20 [ 175.725172] do_syscall_64+0x280/0x940 [ 175.729044] ? __do_page_fault+0xc90/0xc90 [ 175.733263] ? finish_task_switch+0x1c0/0x860 [ 175.737738] ? finish_task_switch+0x181/0x860 [ 175.742220] ? syscall_return_slowpath+0x550/0x550 [ 175.747136] ? syscall_return_slowpath+0x2ac/0x550 [ 175.752054] ? prepare_exit_to_usermode+0x350/0x350 [ 175.757060] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.762423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.767268] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.773315] RIP: 0033:0x453a59 [ 175.776488] RSP: 002b:00007f2c9339ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.784181] RAX: ffffffffffffffda RBX: 00007f2c9339b6d4 RCX: 0000000000453a59 [ 175.791432] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020000000 [ 175.798683] RBP: 000000000071bea0 R08: 0000000000000014 R09: 0000000000000000 [ 175.805937] R10: 0000000000020011 R11: 0000000000000246 R12: 0000000000000015 [ 175.813191] R13: 00000000000003d9 R14: 00000000006f5cf8 R15: 0000000000000000 2018/02/16 18:03:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x44, 0x0, &(0x7f0000fa6000-0x50)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e79000-0x10)='/selinux/policy\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000523000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00001c3000)={{r1, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000318000)) unshare(0x24000200) unshare(0x20020000) mkdir(&(0x7f0000c58000)='./file0\x00', 0x0) pivot_root(&(0x7f0000cf8000)='./file0\x00', &(0x7f000061e000-0x8)='./file0\x00') 2018/02/16 18:03:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00006fa000)='/dev/ashmem\x00', 0x4000, 0x0) sync_file_range(r0, 0x8, 0x8, 0x6) 2018/02/16 18:03:12 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000006000-0x11)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0,c1023', 0x20, 0x35}, 0x3ae) 2018/02/16 18:03:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000096c000)={0x9, 0x1000}) 2018/02/16 18:03:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xffffefffffffffff, 0x1f0c000000000) 2018/02/16 18:03:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00003d5000-0x9)='/dev/vcs\x00', 0x26400, 0x0) write$selinux_load(r0, &(0x7f0000369000-0x9c)={0xf97cff8c, 0x8, 'SE Linux', "58c3fae70243b76bfe8d9fefc4413be790cec281ac540c4fe99bfbdac78bcf498c17a9935b6ba79a713edfbda7da3844050194d966d776d9e43dca3dc2ba300b80c0f06790955221bd951a55b75591d75082953ce6aca3dc6df3d6163e1699b8a87b091748e77d2a0c3cd179e3bc42812d5c53c66247acb8b4fd75ae69f7ffec9555493675c4517f2fd9a352"}, 0x9c) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1000000000000221) 2018/02/16 18:03:12 executing program 4: mmap(&(0x7f0000000000/0x3f000)=nil, 0x3f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000037000)=@filter={'filter\x00', 0xe, 0x4, 0xffffffffffffff02, 0xffffffff, 0x178, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, &(0x7f0000038000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1d, 0x65, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, 0x0, 0x0, @generic="d559ede88c1efb719c7ec973923a3a29", @generic="234da36709e2ed77000000007b337ec4", {}, {}, 0x0, 0x0, 0xc}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0xfd63, 'REJECT\x00'}}], {{[], 0x0, 0xffffffffffffffda, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) 2018/02/16 18:03:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) getuid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000a66000-0x1c)={0x3, 0x4, 0x4, 0x5}, 0x1c) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ef5000-0xe)='/selinux/user\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000782000-0x8)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f3000-0x20)={r0, &(0x7f000082a000-0x1), &(0x7f0000571000-0x1)}, 0x20) 2018/02/16 18:03:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x18, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00009ae000-0xc)={0x7, 0xffffffffffffffff, 0x1}) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000384000)="8a00bee30ebe08761958f2150e127e4a918dd4fcbcb13c6ae4645d4d7f2f98e7c9016d43e4c3c422461c87af8b0b30f8b71e5cbf00acebde39868ebd113520fcaab2ae75c5db9ee19d8029675e1844f2072d3867a4e084fc03b1e2b9e0927a9e9acec70bcd2715c59c1cb36fca29007d2c7603e234f4a15a9da3b35fc8eb68a1f7c8db62c3289c8aeda84c7d9011f1e9dc78942bf4e8460582de93ec7bb3ca0016e4ab5d4d183ddac4bcbe7d9e2340de2319c984c52996799a997980af336fdd066f51efd5971b5a7fe3b31ff153669e8918c753109822253301f915cfa1372bc8", 0xe1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000853000), &(0x7f0000d56000-0x4)=0x4) [ 175.882675] binder: 28797:28810 got reply transaction with no transaction stack [ 175.890343] binder: 28797:28810 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000d17000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000a62000-0x4)=0x10001, 0x4) listen(r0, 0xfffffffffffffffe) 2018/02/16 18:03:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x8, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f000082d000-0x14)={0x5, 0xfffffffffffffea7, 0x100000001, 0x5, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000b59000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:12 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000c12000-0xd)='/dev/net/tun\x00', 0x0, 0x200) read(r0, &(0x7f0000546000)=""/48, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x200) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 175.963183] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.019163] binder: 28832:28835 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 177.511857] syz-executor4: vmalloc: allocation failure, allocated 2777133056 of 4294971392 bytes, mode:0x14010c0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null) [ 177.525992] syz-executor4 cpuset=/ mems_allowed=0 [ 177.530912] CPU: 0 PID: 28819 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #315 [ 177.538260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.547600] Call Trace: [ 177.550184] dump_stack+0x194/0x257 [ 177.553811] ? arch_local_irq_restore+0x53/0x53 [ 177.558468] ? idr_get_free+0xfd0/0xfd0 [ 177.562457] warn_alloc+0x19a/0x2b0 [ 177.566090] ? zone_watermark_ok_safe+0x400/0x400 [ 177.570939] ? rcu_note_context_switch+0x710/0x710 [ 177.575882] __vmalloc_node_range+0x482/0x650 [ 177.580385] ? xt_alloc_table_info+0x63/0xe0 [ 177.584794] __vmalloc_node_flags_caller+0x50/0x60 [ 177.589719] ? xt_alloc_table_info+0x63/0xe0 [ 177.594123] kvmalloc_node+0x82/0xd0 [ 177.597834] xt_alloc_table_info+0x63/0xe0 [ 177.602062] do_ipt_set_ctl+0x29b/0x5f0 [ 177.606034] ? translate_compat_table+0x1b90/0x1b90 [ 177.611064] ? mutex_unlock+0xd/0x10 [ 177.614778] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 177.620053] nf_setsockopt+0x67/0xc0 [ 177.623765] ip_setsockopt+0x97/0xa0 [ 177.627487] udp_setsockopt+0x45/0x80 [ 177.631283] ipv6_setsockopt+0xa0/0x130 [ 177.635253] tcp_setsockopt+0x82/0xd0 [ 177.639055] sock_common_setsockopt+0x95/0xd0 [ 177.643557] SyS_setsockopt+0x189/0x360 [ 177.647535] ? SyS_recv+0x40/0x40 [ 177.650985] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 177.656505] ? do_syscall_64+0xb6/0x940 [ 177.660462] ? SyS_recv+0x40/0x40 [ 177.663889] do_syscall_64+0x280/0x940 [ 177.667753] ? __do_page_fault+0xc90/0xc90 [ 177.671966] ? finish_task_switch+0x1c0/0x860 [ 177.676435] ? finish_task_switch+0x181/0x860 [ 177.680907] ? syscall_return_slowpath+0x550/0x550 [ 177.685812] ? syscall_return_slowpath+0x2ac/0x550 [ 177.690718] ? prepare_exit_to_usermode+0x350/0x350 [ 177.695715] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.701060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.705884] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.711045] RIP: 0033:0x453a59 [ 177.714210] RSP: 002b:00007f43877b8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.721894] RAX: ffffffffffffffda RBX: 00007f43877b96d4 RCX: 0000000000453a59 [ 177.729139] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000013 [ 177.736379] RBP: 000000000071bea0 R08: 00000000000002c0 R09: 0000000000000000 [ 177.743623] R10: 0000000020037000 R11: 0000000000000246 R12: 00000000ffffffff [ 177.750869] R13: 00000000000004d5 R14: 00000000006f7498 R15: 0000000000000000 [ 177.758312] warn_alloc_show_mem: 1 callbacks suppressed [ 177.758316] Mem-Info: [ 177.766125] active_anon:88671 inactive_anon:63 isolated_anon:20 [ 177.766125] active_file:1002 inactive_file:1023 isolated_file:5 [ 177.766125] unevictable:0 dirty:178 writeback:0 unstable:0 [ 177.766125] slab_reclaimable:10443 slab_unreclaimable:95618 [ 177.766125] mapped:18264 shmem:200 pagetables:711 bounce:0 [ 177.766125] free:28053 free_pcp:237 free_cma:0 [ 177.800105] Node 0 active_anon:354684kB inactive_anon:252kB active_file:4008kB inactive_file:4092kB unevictable:0kB isolated(anon):80kB isolated(file):20kB mapped:73056kB dirty:712kB writeback:0kB shmem:800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 231424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 177.828149] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.854292] lowmem_reserve[]: 0 2868 6378 6378 [ 177.858898] Node 0 DMA32 free:43416kB min:30316kB low:37892kB high:45468kB active_anon:6144kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129292kB managed:2939944kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.886320] lowmem_reserve[]: 0 0 3510 3510 [ 177.890659] Node 0 Normal free:52920kB min:37100kB low:46372kB high:55644kB active_anon:348676kB inactive_anon:252kB active_file:4040kB inactive_file:4084kB unevictable:0kB writepending:712kB present:4718592kB managed:3594328kB mlocked:0kB kernel_stack:4352kB pagetables:2844kB bounce:0kB free_pcp:956kB local_pcp:248kB free_cma:0kB [ 177.920119] lowmem_reserve[]: 0 0 0 0 [ 177.923941] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 177.937534] Node 0 DMA32: 3*4kB (UM) 5*8kB (UM) 3*16kB (UM) 5*32kB (UM) 2*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 9*4096kB (UM) = 43652kB [ 177.952620] Node 0 Normal: 1568*4kB (UME) 779*8kB (UME) 494*16kB (UM) 378*32kB (UM) 194*64kB (UM) 47*128kB (UM) 4*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 52984kB [ 177.968369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 177.976936] 2272 total pagecache pages [ 177.980824] 0 pages in swap cache [ 177.984272] Swap cache stats: add 0, delete 0, find 0/0 [ 177.989628] Free swap = 0kB [ 177.992637] Total swap = 0kB [ 177.995653] 1965969 pages RAM [ 177.998759] 0 pages HighMem/MovableOnly [ 178.002727] 328424 pages reserved [ 178.066250] syz-executor4: vmalloc: allocation failure, allocated 2869514240 of 4294971392 bytes, mode:0x14010c0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null) [ 178.080371] syz-executor4 cpuset=/ mems_allowed=0 [ 178.085268] CPU: 0 PID: 28831 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #315 [ 178.092613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.101954] Call Trace: [ 178.104541] dump_stack+0x194/0x257 [ 178.108165] ? arch_local_irq_restore+0x53/0x53 [ 178.112817] ? idr_get_free+0xfd0/0xfd0 [ 178.116799] warn_alloc+0x19a/0x2b0 [ 178.120420] ? zone_watermark_ok_safe+0x400/0x400 [ 178.125270] ? rcu_note_context_switch+0x710/0x710 [ 178.130212] __vmalloc_node_range+0x482/0x650 [ 178.134713] ? xt_alloc_table_info+0x63/0xe0 [ 178.139114] __vmalloc_node_flags_caller+0x50/0x60 [ 178.144037] ? xt_alloc_table_info+0x63/0xe0 [ 178.148439] kvmalloc_node+0x82/0xd0 [ 178.152147] xt_alloc_table_info+0x63/0xe0 [ 178.156373] do_ipt_set_ctl+0x29b/0x5f0 [ 178.160342] ? translate_compat_table+0x1b90/0x1b90 [ 178.165345] ? kcov_ioctl+0x56/0x1b0 [ 178.169070] ? mutex_unlock+0xd/0x10 [ 178.172776] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 178.178047] nf_setsockopt+0x67/0xc0 [ 178.181761] ip_setsockopt+0x97/0xa0 [ 178.185473] udp_setsockopt+0x45/0x80 [ 178.189269] ipv6_setsockopt+0xa0/0x130 [ 178.193234] tcp_setsockopt+0x82/0xd0 [ 178.197035] sock_common_setsockopt+0x95/0xd0 [ 178.201533] SyS_setsockopt+0x189/0x360 [ 178.205500] ? lock_downgrade+0x980/0x980 [ 178.209644] ? SyS_recv+0x40/0x40 [ 178.213092] ? security_file_ioctl+0x7d/0xb0 [ 178.217494] ? security_file_ioctl+0x89/0xb0 [ 178.221895] ? do_syscall_64+0xb6/0x940 [ 178.225871] ? SyS_recv+0x40/0x40 [ 178.229319] do_syscall_64+0x280/0x940 [ 178.233193] ? _raw_spin_unlock_irq+0x27/0x70 [ 178.237683] ? finish_task_switch+0x1c0/0x860 [ 178.242168] ? finish_task_switch+0x181/0x860 [ 178.246661] ? syscall_return_slowpath+0x550/0x550 [ 178.251587] ? syscall_return_slowpath+0x2ac/0x550 [ 178.256517] ? prepare_exit_to_usermode+0x350/0x350 [ 178.261529] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.266900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.271757] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.276935] RIP: 0033:0x453a59 [ 178.280112] RSP: 002b:00007f4387776c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.287814] RAX: ffffffffffffffda RBX: 00007f43877776d4 RCX: 0000000000453a59 [ 178.295073] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000013 [ 178.302332] RBP: 000000000071c010 R08: 00000000000002c0 R09: 0000000000000000 [ 178.309591] R10: 0000000020037000 R11: 0000000000000246 R12: 00000000ffffffff [ 178.316854] R13: 00000000000004d5 R14: 00000000006f7498 R15: 0000000000000002 2018/02/16 18:03:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x4, 0x2000000000d, &(0x7f0000321000-0x4)=""/4, &(0x7f0000d5f000)=0x4) 2018/02/16 18:03:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000556000-0x10)=""/16) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x8, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000f77000)='/dev/audio\x00', 0x10200, 0x0) write$selinux_access(r0, &(0x7f000005d000)={'system_u:object_r:clock_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x33, 0x33}, 0x4c) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) flock(r0, 0xf) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000e7000-0x15)='/proc/self/net/pfkey\x00', 0x220040, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00003d1000)=0x7, 0x4) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000b1e000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x800000000000003, 0x10000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000653000)='/dev/hwrng\x00', 0x2f429cf90b801b8f, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000c36000)='/dev/dsp#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000e71000-0x30)={0x0, 0x3f, 0xffff, 0xfff, 0x8, 0xf2}) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0x31f000)=nil, 0x31f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002c1000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) mmap(&(0x7f000031f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000320000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000321000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000322000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000324000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$alg(r1, &(0x7f000025e000-0x38)={0x0, 0x0, &(0x7f000005e000-0x60)=[{&(0x7f000013c000-0x32)="8a12c78c335da4bf998364d286d4a4d663d9718c40690e38e462b4b325a0438a0f93ace3579b3975403b4ecc605188395618", 0x32}, {&(0x7f0000320000-0x18)="7fd1031e90916d8c65a22de1ae995f71d43ec07af0c61347", 0x18}, {&(0x7f0000320000)="368233d42b179677284c3adaf6e1097266898a78f49306f6227f33b2e9cc06a803f9abacdafb905875352efbae9da4d6d93ffcc4b1722eb1f2761a6cf85b505f4a0a000100008106c507d5ab4847b70a1e7c744c7b47b10ecbf132baa47a163cc03a8ea22e1a91effc9935c0480ca2120cff0095acb962c4987ffb58fb96d326aa", 0x81}, {&(0x7f0000322000-0x78)="3603681305f6a81e4266bf5ee9b7632963ae54df4f6a776f87a7346da57a039b4f17e4ab0e676e1c5dd49240c9eb04312973a929b6582276bb0870ee98d3e85fde60644aecbcbc39a2b976dfee3107aab90d7ba19dd8633c070aed271a781259968a67718079527e5aaa886e3c1b9e2d8b94525c052a6350", 0x57}, {&(0x7f0000324000)="bde36b2e7ebed7e28148c868698aef8d6abbd0533e654481010000000000000063a9a4de4cca171630d80de7f66a7785d232f9be58838746af9ab7eedd86830c26a2e30860ee6dcae388727ed233318fecc71340c426f2649bb01f3b95c562102848ace47863a566f9673150960b71f0a6e507cb45aaa087adfe10b05eca1cb506a518405457fc53872ff7869f150dc43ce54beed80bb721fb2384b8f77118033b3bc291bac64d5e2ed5a2afd6619c9e53454ea750cae9", 0xb7}, {&(0x7f0000324000-0x50)="d852eb804b16d7f872b69297d947faa45b1b8ac2e6f11fb87b5819867b0eac4a0fe99ee6364c2293981a0dcc89851dccca6842f224db9c34dc8dc5103195e87cc949128b1ed549800380fb8e8f3d2bdc", 0x50}], 0x6}, 0x8001) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[], 0x0, &(0x7f0000319000)}, 0x0) unlink(&(0x7f00000a7000)='./file0\x00') 2018/02/16 18:03:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00004d5000-0xb)='/dev/mixer\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000b23000-0x18)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1, 0x4}], 0x1000, 0x0, &(0x7f0000000000)="7569f05902e3aa8d31ec01a56f31b86fe1ad75c6ba343398427e9cbe8c7ae5a85d7bac191b4b89efc199647d21b44cb5dead3d2de29a23fbbc18f412943d8c58a167778162109cd36b49e58b9ef76aaa9b7f25984c0888c0361ff64910416235114928646f89ae253ec9fd1470d657f701f842c5f7394c1f9986420f9afbd516fbfd4f0afef286b8efe9b36ee887c321257fec2a2eab9d5e7e720bf59878ce016dd70704ecbb2130586067d3a67291e38aba527155a03863d70adcccdc5d4d70ba2d1bcbfd2cef08fb9000a6472cc6ae31fbc7b365dbf2f9c81df861cb35b131e399ef52b8846cbce14ae6872657cfbb568eb81088ac60ac1c4841ee800c2f1d49c0a5037a189cae73b5e6bfee3f9b1e8e8f13ad2970f419d928a50896e3597d85286f313324dcb044d236841a994cb0b8fde74d68b33f27732f13d6adc125c0c61d8aec4f877aee9c994d8dadcc57005a000a3a8b786e2dcdd5e155812784b09e47f0009f5ea2bd9b3a2907872d4b5bd6c8bf44fc2e8aba893312fbdaf37d4ed8ef5b69b1a8681cfc6aae14dac93a1fbff88f4059da7f139ed20ca2acf46bebf072854d63512aef349b55d4d5d073af1648e48eea59f5101aa38b804502506e83f8e3be7407d94678fc7ea608276b3e5d357d9bf8747e8f6bff5da11a4fab8de2986305cd9831dc920db89e5ed7b4b829193cde85298edc65a5c52a76b8c251b7ef63cfb2caee4ca9c45e059bff6bc8292080d317d263347ac6f1137dd54fc72dea2ecf9d284e495bdaf56461964cee46f9990ba0114d871f6ff6c9069113cb3a87508c183130b4503b68cdf7e3ee50c423638e6b6ee554c28244829b7a55cd694a5a0c1e35069f19ce7b50863a96665d130dab35d2f6e43b37f9b6826cd6a8d783e1da90851d4c54edb134af26a95bfb161c3e03d5a32435f17d42526722db873779f251f6aeea5c835daa99179e066a150bd255eb11600f2ae56515380685f83ead5317987f34da17b8fb579df95266c6bedbf8c12672cdbb0b18a2dd3d663bad407c8e7e2c6d791f6e4628dd71d00ccfc392b06af6af4e9e0350162cd8218f311d2899a759e73ccc796b9d089c4d0c0a60b870eb2dc55786913a63e96f25f645ec7d0007da5fc47a6c3840438481c2f49d94aa90221767533cc19a13c72f87364c528f0ccd2ed106f61d21d64c6a5af298d83978dd4cfc912ae9da260037106a26dda7081c590aa94133c23798e35c7df8837d134fe0c8bfd71133e0b81c8fcc4440d012823bb772bc134fce1d8ea6bfd04a8ecfac917b68c45ef6d4e76f7886036cc67dc33fbd837e2b0fa9677cdb9272056abf247bbf3ed9dfd11ec73c4d5b16aa30f8a9ad9b39326c926193dd4db883a981a2530867ed1292efd4ebd242c22f708360de23dc7cd0e6e2dcfdfd5fcaed99560d91cb4085c11a3a93c86243921c26e4db5a2b4ba372d9218adcee6a73bf08828fb8738bc84dbe6ded761f46f0c8d5bf4931a6c2d52d9a61ce27cd5a74e0e4f27e97465f221c8788ebd1671a26fa6b2ddb6cb4251ff19a984fcbf049c414d27b1ee933d396306dd6e4280459bdc24aa227c587115a96c6e845ef2958903d3eaf0b3c9620fbbcbe0911fec5cd8b4c96accc5cabbabe2439a780ceff1628d8e5521d99a2abae3cc3a4639a5816f64be97bbe83fccce435bb41e425ac92db156edaacd285c202051aa56477d1c7359f913b715e3d4a3b8e60196884244f5b074b7d27dde5e494f0b4d969096b602f93132f9feea8f51921c1b99830e7e95f0032452685141459be224d04b78434d8bd3e9005f7ee4e9e2f5b31d99a33774f647212f63b6a5530098811280fd52d18c7d7a101c3928b44c4a45b6740dde604cbc096e5bbff61ceedd0779f35627a9af06f631eec1066cd694464f9bcdd36ddb9aad5248bbb53287008c671715a2266edae79d40625ff4c02cd757231350eba753236d0ed1c0da295f9af586be56f440e3e458a6b01118d34fd028d93c1ba6b20f626cee3c3fef77fbf4c6eaf5635627a67f2204b6aa8a2cb5d99f1cef44aaecf8462590b7f8df7ce10e1421c3516b8b9bd76f705dc2e0436c8513d47d44ec0b91ca48a5127fd214cc240d28513f1949cd75dff639457a1a84083f6f8b02a317921e3db306a10b9771896a108a96deccbc6b0096642979384ceccb5819316a7de28feb480b72d287e0179f915e78f8efa956abba3d6a3879c9ce9a5055c8db1c2497af4092b7f9dd7b379473a829f15744e207508987b32b5cfac749c942d6834477df5e92d9528e8a4d72d5b007053049d86304fd65fc5019192a35fdccee26f6f3d314891ee4d0b70bbec927725d790347c6877b0f13b3cf7c8d625c559502900bddcd0ca242d14bce9d3f4ade8b4d64dd2938308e3f091180e175ff81a4934f686db531f01d90fa141c2f528b10df972ac27e01cda24bdb755d06c74c654f668c8b38e26d8ebc33fda5003155f9b5765e901350ce6215af3430fd19b3cc979eef5f7a10e4294644ca31e4e0ea7751af5e066d8fd4f4674b9fdbc4d9a85835aa672828e28459dad2932448748c8b63819995df2caf2bc88976afd1e654396da77bc48a0886b943c7605f310658c20c4f1e9699cfe44a15f914ca92e23e19f48ba75a5891df13a5503d364f9d06deaa7c54c74e338ccc5831a7d7160d350d4c61693c19aa407684e12b9a1788df596b9107001c3d3d6b2f167d7fcc9787cf197261a3767d97fde0bb496fd39a06049bf8c1faaec36988d7278b6a5b12b8ba15fac715e4ed63153f958898072815f07f8adca8d01536c03a7851473f704e2273f2f439a43eebf6f1e6d0fc0b6dbb9d4923cf234b4a0b30ce9c5cd6d12be817f917d34cdc5340366e0a762f26606feb7316b0e40614ab10df1fd3d711299bd76fa7c4eece665f51d5656fb19f263523e40d19d785ebd2c7b65ff677a18d50981d2dda4eb84efec3f7ec96aef110ffae06e38771fdcf82913d4c06cfea43a960542a8cd1ad4adb8bcb9f63254539c0fad66f8c3dbe820b0760821b854f710784b12a57acd2c11604ac6fc149259f0624b6a30d236983e2ca40438b7bffe063eb7df34047a2d4371ad656bae127e698ef140b89c23cfe30b34aeb8293291670894913c8109d7825e813149a611a6217e903fe5dcc134ae9c32e48bfbe95c4063cf7736df131eefa077746271a6eb1ddb725cbc98ba4a352afc66e64335860f2be2d55018c3fed9cdc7c8d298c21bfa7358cd6411b7d5a825957eefbec2eb805032adb84662606323c1af33c03399c4a6b7e9a7a42f09c18ab3d4ac27678eb8b849a709842c9e37a9f0bb3f506b90777060e7bcdedaf86a114732c1d93b8b4ed973cf632f192e1e8c8d5f77debb0c4bb0b1fb230ea51823f32c75b6b27feed8206a53d97a52042ebd5ea03b65409dc0c6b164ac026c981fcde9e130fa32f89d863cc2267972bf03d2691a0a2cc7248a2703a9c99da17971e4d13eb214dd356009d6acb55e2540c11d6037821d2203fe51af5addb16541a347e29cafbb07e5f6f644a6d2a776653b16eb459e2d747751d61ddfe837a2e7f4a192de4c5e3a1e670e739976f3ff93c91435b1fde47dd5e658eb6ff4fa05fa976740407e7849eda69cd3043fc2608e07fb1eee086f31434b8848e0784547b5cc67ca46c3a6b7377cebe6e72c41e81dc830a821e36ddd42488d4b85993d39cc514392b588ad622911f702de1b89a40efcd0f1ee95b43f4189050adfdda49163e02c7e8b9de9f154cac2aa2e4a0ff50b0e404a8371d0a4e34116613bf152d91031aa235e07b67e15a641998e0897875c845e4bb24c1f0b41f27df4753a46556be816a62a8608d002bb9069ab77e3714e312e9dc77007677a450d6fce70914746f1382682f0d714337b496455d4aade76a2ed0ddeb04215f747416075780940b592e01b23fd5d2c7ab509b651e46265e558a207fd8d5edda3ad594f2b359ac3e29efec2eeda2f75e4de7be927f1fed1875918998ae6901e6b6c37dbb8e000f70e2a39dfaae9f2cb71a71aff7ebf8c64365644db2db76991d512ef48a27fe68c1d47c5978f6419f3ec6e2a639b9e5d3c139a190c644e4bc85d9d69c567efd35e4c34914fe0ad57a0c092bbb3c2264004f486a1dbb14bd183b5fb81ab52d37918b696c215f6aad85f5d9b8bbe6ac01df010ba216662ae7346f5860728556de28ff26dcc910d8b87aa5a1a664c58a4537574f875761e0841151cb26d8c8dba1cfc95425ea3547af0f6409aaf604949c296760350d861e83075d4f92dae11574142fd448ccf3ed9e23ab27d840487eeebc94487fcfa254fc582b7a1b9b27fef85dbd6ca29e0b9126a933dad8305058a5bda8500ff35450cfd3374358dd6c7d9563f75cf3bb44845ed751562b0ddae6057663325157f7ed85e691d47c5fae7b6627359d8e922278cf288f9e48588bf967e7956317d769573e1eeda45599a5795a457d37ada598bdc97386ffa706d042950616647537f5850de9bec48da9c2c086ef6d15b51e89f580208ffa1e169d894bb97e1e73ee3f963871ba7ebe61158a8faea42544cd6ef0f119c58ed89e544de12f18bc35ebb26c2cbc9345f25452afc36b655a076011407fa96e0de5d9cd79caf280ad68ce115251fd33856fbeb529b22d3c72026aedf1766451c1693bcb6a8de9dc75c8f3f1b5ee5232d3072f93ecd4456b15a2e26802e20c73e480b64296361d40d0468f151c07ae5d84b1c527597d2a1ccbd2681251c2130afbe9ae2aa72b7cde263dc1a658a5be5bd57c22656b8a00cf91340397cdb05d81f26fe16de4a1b48ccfbdfe6b0856996355233b1be595a611854f36c50c4e9c5cc562f818b55672cb0ec1364401cfb03a4a6d6294e05205e8ca027fe694a1b50420748595cb86ca54c15377ea009e9d81beee984e8be20d8dfa67fce4812577389d24e82b0b5e40d845c61b1243ad76f39c1b3f0d5173d5e251d123f697e638b5bf013e86c6a012a3df77c284ce68aaf91628ab06f50b566becdeb838bed857c6fc31566ac6f8c338de887895d535e5ccc233fe82a9838d00a93ee9dcaa3093f3e937ccb9e9142b84e27d14c2fc2433c7aacd4991e465ff6176ba8bc6c41b6ba8088ac669b382d48a51c9588695591f629dc6cab3aebb4b5116f321af347c50e63415b49144181e494f50d6689425ebc7ad8d87d066426f212f6db98f81a19a743b958383c1934df62178a39784df75dfb5a2cf65ae195ddfbeba15baa2e92106555848589a66b5384a21fa5d6c7b338980701300fbe2cc57d35385e0a9291e3bca177a91a673877095c1c1441290132b9e36ca617540cb8875fb5ed8ebc72476aaa2fb71a2579a3a5799d6a9048194fd4358c40f0da60d2868ee01c804fef8a5173cb62442ae8964dfdb0e4e713092c6756d56d0ea659ce88d9bf76996eefb64a560984c73c8ac494694e1560966c3d9f63d9a7c7d4489859c528e6542958231bd848ab35ce6f6acca44dbde28b15ee117b74fe01bd0bf469ccca759fd09bad0cbd98235419887c11a1ae4e79d86bf23ed53b9a175998333fc21c8e94a9099c04863c02e0673933f77ae72c597200f2f3600bcdd00ebb009d8898af55997da61c963dd76912af7840d80506e606134f67287bda3d2ab26467c5db9c81dba0d25f961edf7b2b06f9c05c1ce8e47429c736ef53360275c850ccfdc96dd82aefce89e864f7fc7f81bca49bc3f60989c017ed40d37ebd3b840543cd7706b5ac985c561d8ee8f95d80ade8bd0d80256a270a783b"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:17 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000a31000-0x4)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001000-0x38)={&(0x7f0000e8b000-0x10)=@ethernet={0x306, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f00001bb000)="b89022a1102164338223920b313e7cdf8d7095e13b725fb1051e32baa84e7a5b4be71525643bdc196d8f5235de0d53d0b94549ee168479ff58d72a0329bd148c88fb8d0a77e195c0fe1ce33202b9d8951b5ac28ffcb124891cfe424db61625e7c766f1c96ba324951ca0c29c8943c45c40bfa650429181ae0c4902a0d00ff5248e8e34b3161d65169e3881d24e649940323b86eca745470a8ea1499937074f", 0x9f}, {&(0x7f0000ca0000-0xdb)="34e26f265719d49ae464785deaf33863ad8775744bace22d7c580e4dca7ddf7bb60ad57e95ec4713f7e6447ef60a30f2dfb9189512f5606d04e8bc9ea5a10713172ca6ec3830c0446b7a1fe4b12b04d4d0a3a1da4d57bc2260e2ff41dfa39ed805bc09598c11616f708c1ec7363e7eb7219198f02e5a745fa79b5f438eccfab5a8b2549227c09885e9e77bdd266775ec83f71fff4e095ebd56940a989dd69b458cf67f22f50fee225faee6665e91f80111d24372a1d109ded82b2fdf7aa8a1fff150807777ff94957dd3124d0847d4f24aa51322afbf5039e6a667", 0xdb}, {&(0x7f0000672000-0x52)="925b2522faf8bc83a13eb2a8f92f52e8ec419e617ed80cbadb59f7c9c0c73d4d034873ade8f4a4ba63d9f875040ef052a2fb69c1040b9e40938594d0190fb8d06f2badaffd51c3ac0aa354deb6b95fc13516", 0x52}, {&(0x7f0000001000-0x47)="68fd7fbda0d1d212a452a06b5209a683aca0c2d6ecfbc5aecbea98bcb2ab521b728b7bc05df99a27d15cfa9a87f899463098d59bcd8c2af7012da6d75584f3aaabb66c10fff1b8", 0x47}, {&(0x7f0000c5f000)="46c22fc7090d5f2ae06d97c0", 0xc}, {&(0x7f00003bb000-0x4f)="84713751d8f3d123de2317c93497cb99f2108d121c168bb4211a95cebbafb11cf612a5304d9ff6813209227605c59533dd3b1c540abc4f0f89dc7250028696aaba3de3f82f5e351d6d382e26be81b2", 0x4f}, {&(0x7f0000a26000-0x76)="203ef160c046cb91b3fc4cfd217a972dc7ad3604a7347ead3fbb45b1dac6927075528c4fc4ee718c6571f035abbadf4aa15f67cd7a937738180983a094e204efc654766a514a521d38f7b19d22d3a12f31e2136acf7d274cb5e35b4059b5e1a92fbb448c781859afe041b4eb41add2a5f92516c82fa8", 0x76}], 0x7, 0x0, 0x0, 0xc0}, 0x10) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000f92000-0xe8)={{{@in=@multicast2=0xe0000002, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@empty}}, 0xe8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000ff7000)={0xa, 0x1, 0x5, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000f92000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f24000-0xb)='/dev/hwrng\x00', 0x400100, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003e5000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) linkat(r1, &(0x7f00001ef000-0x8)='./file0\x00', r2, &(0x7f000085a000)='./file0\x00', 0x1400) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000bd6000)={@common='ipddp0\x00', @ifru_flags}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x4) accept4$inet6(r2, &(0x7f00008de000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f000073a000-0x4)=0x1c, 0x800) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000711000-0x4), 0x4) 2018/02/16 18:03:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000612000-0x8)='net/tcp\x00') readv(r1, &(0x7f00009c5000)=[{&(0x7f0000061000-0xe1)=""/225, 0xe1}, {&(0x7f000090a000)=""/218, 0xda}, {&(0x7f0000b2a000-0x9a)=""/154, 0x9a}], 0x3) [ 180.845299] binder: 28844:28852 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/02/16 18:03:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000d69000)='/dev/vcsa#\x00', 0x362d, 0x200) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000de3000-0x1c)={0x1, 0x4, [@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x14}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x17}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000-0x8)='./file0\x00', 0x4400, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000ca6000)={0x1000}, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000899000)=[{{&(0x7f00003ee000)=@nl=@unspec, 0xc, &(0x7f0000811000)=[], 0x0, &(0x7f00007de000-0xa5)=""/165, 0xa5, 0xfffffffffffffff7}, 0x2}, {{&(0x7f0000b99000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @empty}}}, 0x2e, &(0x7f0000268000-0x10)=[{&(0x7f0000fca000-0x1000)=""/4096, 0x1000}], 0x1, &(0x7f00006e1000)=""/4096, 0x1000, 0xf1c}, 0x1}, {{&(0x7f0000dac000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10, &(0x7f0000727000-0x20)=[{&(0x7f0000a78000)=""/216, 0xd8}, {&(0x7f0000699000)=""/31, 0x1f}], 0x2, 0x0, 0x0, 0x4}, 0x86}, {{&(0x7f000031f000-0x8)=@sco, 0x8, &(0x7f0000db8000-0x20)=[{&(0x7f000077f000)=""/231, 0xe7}, {&(0x7f0000298000-0x42)=""/66, 0x42}], 0x2, 0x0, 0x0, 0x525}, 0xffff}], 0x4, 0x10000, &(0x7f000097c000)={0x0, 0x989680}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f000075e000-0xc)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f000030c000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000a6c000-0x8)={r1, r2}) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 2018/02/16 18:03:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) recvmmsg(r0, &(0x7f000040c000-0xf0)=[{{&(0x7f0000c96000+0x4e3)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x10, &(0x7f00001eb000)=[{&(0x7f000035d000)=""/190, 0xbe}, {&(0x7f00003c6000)=""/103, 0x67}, {&(0x7f0000f3e000-0x1b)=""/27, 0x1b}, {&(0x7f0000eaa000)=""/124, 0x7c}, {&(0x7f000023b000-0x32)=""/50, 0x32}, {&(0x7f00004a7000-0x1000)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x6}, 0x7ff}, {{&(0x7f0000279000-0xe)=@l2, 0xe, &(0x7f0000984000-0x40)=[{&(0x7f0000f5a000-0xbe)=""/190, 0xbe}, {&(0x7f0000033000-0x478)=""/4096, 0x1000}, {&(0x7f0000596000-0xd1)=""/209, 0xd1}, {&(0x7f000014a000-0x5a)=""/90, 0x5a}], 0x4, &(0x7f00006db000)=""/175, 0xaf, 0x7}, 0x7}, {{&(0x7f000060d000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @remote}}}, 0x2e, &(0x7f0000bd5000+0xead)=[{&(0x7f0000b85000)=""/243, 0xf3}, {&(0x7f0000cb1000)=""/144, 0x90}, {&(0x7f00009d5000)=""/116, 0x74}], 0x3, &(0x7f0000a54000-0x44)=""/68, 0x44, 0x4}, 0x3f}, {{&(0x7f0000283000)=@in={0x0, 0xffffffffffffffff, @loopback}, 0x10, &(0x7f00009aa000-0x50)=[{&(0x7f0000d04000-0x6)=""/6, 0x6}, {&(0x7f00007f3000-0x74)=""/116, 0x74}, {&(0x7f000092f000-0xed)=""/237, 0xed}, {&(0x7f00008f6000-0x19)=""/25, 0x19}, {&(0x7f000054b000-0x4c)=""/76, 0x4c}], 0x5, 0x0, 0x0, 0x2}, 0xfffffffffffff800}], 0x4, 0x40010000, &(0x7f00003de000)={0x77359400}) connect$bt_l2cap(r1, &(0x7f0000365000)={0x1f, 0x3, {0x4, 0xcc, 0x800, 0x4, 0x1f, 0x8d}, 0x3ff, 0x3}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000c0e000)=[{{&(0x7f00005cd000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000757000)=[], 0x0, &(0x7f000080d000)=""/171, 0xab}}, {{0x0, 0x0, &(0x7f0000a69000-0xa0)=[], 0x0, &(0x7f0000f34000)=""/16, 0x10}}], 0x2, 0x0, &(0x7f0000dd6000-0x10)={0x77359400}) recvfrom$inet(r0, &(0x7f00004c5000), 0x0, 0x0, &(0x7f0000019000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/16 18:03:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000088e000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000cad000)={0x7fff, 0x5, 0x6, 0xfffffffffffffb8e, 0x7fff, 0x1ff, 0x1, 0x1, 0x5, 0xffffffffffffffc9, 0x1, 0x9}) r1 = socket$key(0xf, 0x3, 0x2) r2 = accept(r1, &(0x7f0000ea4000)=@ethernet={0x0, @remote}, &(0x7f0000ee3000)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002000)={0x0, 0x22, "7e1036ebf9c97a8518894abab2224c8a62be955f43848f57e37b7f29dd14674c3952"}, &(0x7f00002cd000-0x4)=0x2a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00005a6000-0x8c)={r3, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0xe}}}}, 0x8c) sendmsg$key(r1, &(0x7f0000dc8000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x50}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000768000-0x1d)=""/29) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000326000-0x4)=0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ae0000)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x0, 0x120, 0xffffffff, 0x218, 0x0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000945000-0x9), {[{{@ip={@empty, @multicast2=0xe0000002, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='dummy0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x0, 0x4}}, @common=@set={0x40, 'set\x00'}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@empty, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @port, @gre_key}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @gre_key, @gre_key}}}}, {{@ip={@multicast2=0xe0000002, @dev={0xac, 0x14}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}, @common=@set={0x40, 'set\x00'}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, @gre_key, @port}}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80}, @ipv4=@empty, @gre_key, @icmp_id}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x548) 2018/02/16 18:03:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000341000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f000000c000)={0x20, 0x10, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x1, @fd=0xffffffffffffffff}]}, 0x20}, 0x1}, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000029f000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f00000ab000-0xf2)=""/242) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000ee2000-0x8)) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00001ca000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000012f000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000511000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00001c9000-0x4)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000ba7000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000926000-0x10)={0xa958e500ab9c02e1, 0x1000, &(0x7f00000dd000)="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"}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x8, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) statx(r0, &(0x7f00007be000-0x8)='./file0\x00', 0x800, 0x400, &(0x7f0000213000-0x100)) bind$alg(r1, &(0x7f0000149000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002d2000)={0x0, 0x0, &(0x7f00002ef000)=[{&(0x7f00002ef000)="f33c0925", 0x4}], 0x1, &(0x7f000089d000-0x178)=[]}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000c23000-0x4)=0x0) ptrace$setopts(0x4206, r3, 0x401, 0x8) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f000027d000)={0x2, r0, 0x1}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000110000-0x4)=0x3, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x6f, &(0x7f000096e000-0x5f)="3c1676b11fa7a3ff3f1f6a7ffd74cb88c1cb2f1c867dfe1a7c8033cd7ac01806d3b6d4013682d9b01ecda3eba441b6dc1e252d332fca6babee1b77fc8e0e376b2ea3d74c93e01cd00983fee903a450ef976020346c1d0ffc6f5335861aae2d", 0x5f) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000773000), 0x4) 2018/02/16 18:03:17 executing program 2: keyctl$read(0xb, 0x0, &(0x7f00007b6000+0xa39)=""/229, 0xe5) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001000-0x10)={0x2, &(0x7f0000001000-0x8)=[{0x9f0}, {0xfd2d, 0x9}]}) 2018/02/16 18:03:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 181.011135] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 181.027912] binder: 28888:28895 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 181.032126] binder_alloc: binder_alloc_mmap_handler: 28878 20000000-20002000 already mapped failed -16 2018/02/16 18:03:17 executing program 6 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000ec000-0x10)={&(0x7f0000d6d000)='./file0\x00'}, 0x10) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:17 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)='/dev/usbmon#\x00', 0xffff, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002000-0xa0)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x0, 0x10}, 0x4}}, 0x100, 0xf93, 0x2, 0x80000000, 0x1}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001000)={r1, 0x8dc}, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0x100000001, 0xbd5}, &(0x7f0000001000)=0x8) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) io_setup(0x0, &(0x7f00006a1000-0x8)) [ 181.102892] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 181.116779] FAULT_INJECTION: forcing a failure. [ 181.116779] name failslab, interval 1, probability 0, space 0, times 0 [ 181.128165] CPU: 0 PID: 28911 Comm: syz-executor6 Not tainted 4.16.0-rc1+ #315 [ 181.135538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.144909] Call Trace: [ 181.147514] dump_stack+0x194/0x257 2018/02/16 18:03:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x4) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000149000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000022a000-0x40)=""/64) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000dbd000)=""/35, 0x23) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#p\x00', 0x81, 0x40000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000dab000)=0x14, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001000-0xc)={@empty, @empty, r2}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001000-0xc)=@sack_info={0x0, 0x800, 0x6}, &(0x7f0000002000-0x4)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x0, 0x5, 0x200, r3}, &(0x7f0000002000-0x4)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000003000-0x12)='/dev/snd/pcmC#D#p\x00') mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000004000-0xb), &(0x7f0000001000)=0xb) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = accept4$packet(r1, &(0x7f0000005000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000+0x780)=0x14, 0x80000) sendto$inet(r0, &(0x7f0000004000)="77e917092c90b8e5fbb7ccffc6ebb1f9676bbd0d528f9e3ac6d1431f5d4854370cacff267a86b08f210cbfade032d3e6f021fe24951dbbba9f3714324bd9f8fd67b07ddd26a752c69e6714413fcf152efc5003eab90ac53d973450dc8895714bdafb6eff39b6dfbc6e62aeaff2996de16aa9991411a874296b5fd11f3d492f416504d95f7427ee439f41637d9d9eef725a7d60eb551473f39d37a7cccb50057a2dac5314797d144d77eee417aa", 0xad, 0x40, 0x0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000006000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000004000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000007000-0x8)='./file0\x00', &(0x7f0000003000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006000)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x2, 0x0, 0x3, 0x0, 0xa, 0x0, 0x80, 0x67, 0x0, r5}, {0x3, 0x9, 0x101, 0x7, 0x8000, 0x100000000, 0x0, 0x5}, {0x40, 0x9d86, 0xd69, 0x2}, 0xfffffffffffffff7, 0x1, 0x1, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x0, 0x11}, 0x1, 0x7f}, 0xa, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x5, 0x3f169aed, 0x2}}, 0xe8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000007000)={0xa, 0x3, 0x81, @dev={0xfe, 0x80, [], 0x0, 0x12}, 0x100000000}, 0x1c) restart_syscall() 2018/02/16 18:03:17 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000000d000-0x4)=0x0) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r2, 0xc, &(0x7f000000c000-0x10)={0x1e, 0x80000000, 0x3ff}) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f0000005000-0x264)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @policy_type={0xc, 0x10, {0x4}}]}, 0xd0}, 0x1}, 0x0) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') splice(r0, &(0x7f00003aa000), r0, &(0x7f0000a7b000-0x8), 0x200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000098000)={r0, 0x0, 0x8c, 0xfe, &(0x7f0000a22000)="6d701c44e529a37c28b14287aa6a448e84d0728da867808210ad1761cf99a0a7be5a045399392ce7a756a8613cab7a69ff434a441e32cf78fe054f612bed7eb0eb8f3c9a36aa1ad0fca5ef0153cc6c180b7164bd53ef137e96ba0a03b9cc1954517148d42bc2703e99dfb84dddde148910b55e7504da9ce789fda509b61ec48519b3ecb9b61793bd2a434a5a", &(0x7f0000935000-0xfe)=""/254, 0x0, 0x1}, 0x28) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00001b7000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000ab0000-0x4)) bind$alg(r0, &(0x7f000053b000)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) r3 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x9) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000c6c000-0xec)=""/236) sendfile(r2, r3, &(0x7f0000e65000-0x8), 0x8) [ 181.151165] ? arch_local_irq_restore+0x53/0x53 [ 181.155889] should_fail+0x8c0/0xa40 [ 181.159632] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.164747] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 181.169854] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 181.175072] ? check_noncircular+0x20/0x20 [ 181.179338] ? find_held_lock+0x35/0x1d0 [ 181.183501] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 181.189390] ? lock_downgrade+0x980/0x980 [ 181.193540] ? debug_check_no_locks_freed+0x3c0/0x3c0 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000714000-0x15)='/proc/self/net/pfkey\x00', 0x121000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00003f9000)=""/250, &(0x7f0000161000-0x4)=0xfa) r1 = userfaultfd(0x0) socket$packet(0x11, 0x0, 0x300) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000216000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$dmmidi(&(0x7f0000e41000-0xd)='/dev/dmmidi#\x00', 0x64, 0x2000) fcntl$getownex(r2, 0x10, &(0x7f00007e4000)={0x0, 0x0}) wait4(r3, &(0x7f000080b000), 0x5, &(0x7f0000ed0000-0x90)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000008000-0x4)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 181.198744] ? rcu_note_context_switch+0x710/0x710 [ 181.203680] ? lock_release+0xa40/0xa40 [ 181.207656] ? perf_tp_event+0xae0/0xae0 [ 181.211743] should_failslab+0xec/0x120 [ 181.215728] kmem_cache_alloc_trace+0x4b/0x740 [ 181.220312] ? memset+0x31/0x40 [ 181.223645] binder_get_thread+0x1cf/0x870 [ 181.227898] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 181.232826] ? avc_has_extended_perms+0x6e5/0x12c0 [ 181.237777] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 181.243681] ? rcu_note_context_switch+0x710/0x710 [ 181.248642] ? __might_sleep+0x95/0x190 [ 181.252643] binder_ioctl+0x20c/0x1417 [ 181.256549] ? avc_has_extended_perms+0x7fa/0x12c0 [ 181.261500] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 181.267168] ? avc_ss_reset+0x110/0x110 [ 181.271160] ? find_held_lock+0x35/0x1d0 [ 181.275244] ? lock_release+0xa40/0xa40 [ 181.279257] ? __lock_is_held+0xb6/0x140 [ 181.283414] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 181.289314] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 181.294168] ? rcu_note_context_switch+0x710/0x710 [ 181.299098] ? vfs_write+0x374/0x510 [ 181.302846] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 181.308485] do_vfs_ioctl+0x1b1/0x1520 [ 181.312407] ? ioctl_preallocate+0x2b0/0x2b0 [ 181.316830] ? selinux_capable+0x40/0x40 [ 181.320898] ? __sb_end_write+0xa0/0xd0 [ 181.324869] ? fput+0xd2/0x140 [ 181.328067] ? security_file_ioctl+0x7d/0xb0 [ 181.332466] ? security_file_ioctl+0x89/0xb0 [ 181.336868] SyS_ioctl+0x8f/0xc0 [ 181.340220] ? do_vfs_ioctl+0x1520/0x1520 [ 181.344351] do_syscall_64+0x280/0x940 [ 181.348218] ? __do_page_fault+0xc90/0xc90 [ 181.352438] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 181.357962] ? syscall_return_slowpath+0x550/0x550 [ 181.362876] ? syscall_return_slowpath+0x2ac/0x550 [ 181.367799] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 181.373158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.377998] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 181.383170] RIP: 0033:0x453a59 [ 181.386339] RSP: 002b:00007fc18be09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.394031] RAX: ffffffffffffffda RBX: 00007fc18be0a6d4 RCX: 0000000000453a59 2018/02/16 18:03:17 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003ae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00003af000-0x8)={0x0, 0x0}) mmap(&(0x7f00003ae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00003ae000)=""/221, 0xdd) r1 = socket$inet(0x2, 0x200000000000003, 0x9) mmap(&(0x7f00003ae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00003ae000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f00003ae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$ax25(r2, &(0x7f0000357000), &(0x7f00003ae000)=0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x0, 0xffffffffffffffff}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2=0xe0000002, @empty, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14}, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) [ 181.401277] RDX: 000000002092a000 RSI: 00000000c0306201 RDI: 0000000000000014 [ 181.408698] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 181.415944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 181.423191] R13: 0000000000000185 R14: 00000000006f2518 R15: 0000000000000000 [ 181.444773] ipt_REJECT: ECHOREPLY no longer supported. 2018/02/16 18:03:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) socket$pptp(0x18, 0x1, 0x2) 2018/02/16 18:03:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f00005c9000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "9249df", 0x14, 0x2c, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}}, 0x0) 2018/02/16 18:03:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dc0000-0x4)=0x3, 0x4) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000a28000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="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", 0x540, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$sndseq(r1, &(0x7f0000802000-0xc0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0xc0) waitid(0x1, 0x0, &(0x7f0000fdd000), 0x2, &(0x7f0000f12000)={{0x0, 0x0}}) write$evdev(r1, &(0x7f00001d1000)=[{{0x0, 0x2710}}, {{0x0, r2}, 0x0, 0x0, 0x4}, {{0x0, 0x2710}}], 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000f06000)={0x9}, 0x10) write$eventfd(r1, &(0x7f000057c000-0x8), 0x8) readv(r1, &(0x7f0000865000-0x80)=[{&(0x7f0000142000)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f000093b000)=[@in6={0xa, 0x1, 0x6, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x353c}, @in6={0xa, 0x1, 0xffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}, @in6={0xa, 0x2, 0x7fffffff, @loopback={0x0, 0x1}, 0x7fff}, @in={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x3, @rand_addr=0x20}, @in={0x2, 0x0, @broadcast=0xffffffff}, @in6={0xa, 0x3, 0x9, @empty, 0xe8}], 0xa0) write$eventfd(r1, &(0x7f000061f000), 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00007e5000-0x10), 0x10) write$eventfd(r1, &(0x7f00006d5000), 0x8) 2018/02/16 18:03:17 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/cuse\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ipx(r0, &(0x7f0000000000), &(0x7f0000cd4000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8010000400000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000b39000)={r0, &(0x7f0000113000)="ff89f5bdaec99c7b624bb3fb90f9ef432f27eb16a8d16964524d5a3703fcd6ad76f2ba385b84eeed983814da82a3adf6fe2174c0d9a24226a2fca60a08ad2c843f3e5904ccf939d237ef458782e4cfca2ebde5f47b92376b6858a438b10f9f8fcd12de4db9b0920c45b608aaa5af25162009bab8a422f3b5fd80d389e389164018b34e016fb486c8eb3fa61e0d8bc6309adb370899d889dbd8a706b78dc09ae9c7ab1f89e23b753a50c80fbad9", &(0x7f00003d1000-0x47)=""/71}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00008a6000)={0x0, 0x8}, &(0x7f0000e16000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000b70000)={r2, 0x5}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002bf000)={r0, &(0x7f00007ac000-0xd0)="0dc72936b0478501e036c13411e052e6d312adaca8ac97292b915ff8acfbf53ee5868ca29a497ffcfd2999c7e982d0add593a630001d057af97dafddf44b5a8d22d3a708723a664685daf841d58d27004208bd23efc14f52871dacceda6f53eb586f38d8edf49aed7d423135eaa224328a4804e91d6876f7ebd771bf146a5245620d2449363ada45aeaa5210ef27c90074b44f40d753f7eac10cee6f1699d2dbcf33d90827c7e37a767c3337d4f16d47f850a078aa2c8348772f3654f607938045ac66124cd65e6aff3ff1db872004b5", &(0x7f00006cd000)="acd9716d4ac4282c659b6b927f434afad9286928146723641d9cd8a3a4663421a975f7efa58bb34b81ad6398eafe230dce37bce3c0f813a10197819bca61346b2ebc9becf4a2c4dac18fed7085c707efa65bf37c7dcb5e4a1f099c58b33a41de2e24edc48d7546ebfce9f060c4dd1621c38133497a4c30e648ec26853c84dee5246f395c527d93a59fa09f1cb0500b941bbfff262c2cccfa"}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00005a6000)={r2, 0x80000001, 0x30}, &(0x7f0000ee6000)=0xc) recvmsg(r1, &(0x7f00001c3000-0x38)={0x0, 0x0, &(0x7f000087f000)=[{&(0x7f0000ce4000-0xd1)=""/209, 0xd1}, {&(0x7f0000c39000-0x61)=""/97, 0x61}, {&(0x7f0000c9c000-0xa)=""/10, 0xa}, {&(0x7f0000abd000)=""/180, 0xb4}, {&(0x7f00006a1000-0xaa)=""/170, 0xaa}, {&(0x7f000064f000)=""/4096, 0x1000}, {&(0x7f0000bcd000)=""/211, 0xd3}], 0x7, &(0x7f0000332000-0x41)=""/65, 0x41, 0x26}, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00005aa000-0x1c)={0x0, []}, &(0x7f0000f08000-0x4)=0x4) 2018/02/16 18:03:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000a08000)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = dup3(r0, r0, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00003ca000)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x0, 0x228, 0xffffffff, 0x128, 0x0, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, &(0x7f000002b000), {[{{@ip={@local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, 0xff, 0x0, @syzn={0x73, 0x79, 0x7a, 0x0}, @syzn={0x73, 0x79, 0x7a, 0x0}, {}, {}, 0x1, 0x2, 0x20}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x0, 0x7fffffff}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x4, 0x1, 0x1, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xe, @dev={0xac, 0x14, 0x0, 0x13}, @remote={0xac, 0x14, 0x0, 0xbb}, @gre_key=0x2, @port=0x1}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xc, 0x0, 0x51b}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x100000000, 0xb838}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast1=0xe0000001, @dev={0xac, 0x14, 0x0, 0x13}, @icmp_id=0x1, @icmp_id=0x3}}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x2, 0x0, 0x2, 0x2, 0xd, 0x0, 0xca, 0x1}}, @common=@unspec=@ipvs={0x48, 'ipvs\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x0, 0xa}, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 0x2, 0x3f, 0x5, 0x0, 0xa, 0x10}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}, @ipv4=@loopback=0x7f000001, @port=0x2, @gre_key=0x9}}}, {{@ip={@loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, 0xff000000, 0x0, @common='ipddp0\x00', @generic="a040ea40f3a2024ce0f8b8dd3a75cb8c", {}, {}, 0x0, 0x3, 0x6}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'Q.931\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @broadcast=0xffffffff, @multicast1=0xe0000001, @gre_key=0x3, @icmp_id=0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) listen(r0, 0x0) r2 = socket$inet(0x2, 0x80a, 0x0) r3 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r3, &(0x7f00006c2000-0x33)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @tcp={{0xffffffffffffffff, 0x2, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000f65000-0x1a0)={[], 0x9, 0x7, 0x3ff, 0x0, 0x3, 0x0, 0x5000, [], 0x1ff}) 2018/02/16 18:03:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00007e2000)='#\x00') mknod(&(0x7f0000ff0000)='./file0\x00', 0x10000000007fe, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) r1 = open(&(0x7f0000635000-0x8)='./file0\x00', 0x200, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000a80000-0x24)) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00007f8000)={0x0, 0x4}, &(0x7f00008d7000)=0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000215000-0xa0)={r3, @in={{0x2, 0x1, @loopback=0x7f000001}}, 0xe0c2, 0x1, 0x9, 0x9, 0xc8}, &(0x7f0000250000-0x4)=0xa0) write$tun(r1, &(0x7f000018b000-0x39b)=@pi={0x0, 0x6003, @ipv6={0x1, 0x6, "bedad0", 0x36f, 0x84, 0xffffffffffffceea, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, {[@fragment={0x0, 0x0, 0x3f, 0x9, 0x0, 0x2643, 0x1}, @fragment={0x3c, 0x0, 0x80000001, 0x1ff, 0x0, 0x1, 0x0}, @hopopts={0x3c, 0xc, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x67d, 0xecb1, [0x7, 0x0, 0x6, 0x7, 0x9, 0x1f, 0x7ff, 0x280000000, 0x3]}}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x8}]}, @dstopts={0x67, 0x25, [], [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x0, 0xd}}, @ra={0x5, 0x2, 0x8001}, @generic={0x1, 0xfa, "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"}, @ra={0x5, 0x2, 0xfffffffffffffffc}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3f, 0x0, 0xfff, 0x18e46a350, 0x0, 0x4, 0x3}, @fragment={0x73, 0x0, 0x0, 0x3, 0x0, 0x5, 0x1}, @fragment={0xbf, 0x0, 0x1, 0x7, 0x0, 0xa9, 0x3}, @fragment={0x62, 0x0, 0x80, 0x4, 0x0, 0x1f, 0x1}, @hopopts={0x1d, 0x1, [], [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x10001}]}, @hopopts={0x86, 0x29, [], [@enc_lim={0x4, 0x1, 0x9}, @generic={0x431950a2, 0x39, "f7cfd6d3b1cf1e6b1770a52a6375c841b977deae76fadc08ee421f12ada16f81715555ffd66749cf597b39fd95f6c956fa176c3be116c26113"}, @calipso={0x7, 0x10, {0x4, 0x2, 0x5, 0xffffffffffffffc1, [0x3]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x100000001, [0xffffffffffffffff, 0xd94b, 0x401, 0x8]}}, @calipso={0x7, 0x50, {0xffff, 0x12, 0x7, 0x7, [0x5, 0xfffffffffffffffd, 0x3, 0x7, 0x4, 0xfffffffffffffffa, 0x4, 0x100000001, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x80000000}, @pad1={0x0, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0x72, "f931ee032db6fdbee1e93d1652b9dd9b63da1642d0e08ce53f1abb8275bd455df89b05489d05e7c139fdc4b05ee139af49482d6609517832e64ce1a6488fe145d6d9e31212832f0aad12762507ab7e9946adb4507a39311cec2fcf1a0d8ee8cefa25e978a4aa1f821e96a64f379a0ac726e7"}]}], @dccp={{0x0, 0x2, 0x4, 0x1, 0xfff, 0x0, 0x0, 0x0, 0xffff, "dd261c", 0x400, "ee1fb6"}, "4a4124d4b56fef50f6427fec7ca94b509887a263b548eae7f1"}}}}, 0x39b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000bc9000-0x4)=0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000f90000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00003f8000-0x4)=0x3) r2 = syz_open_procfs(r0, &(0x7f0000679000)='setgroups\x00') ioctl$VT_DISALLOCATE(r2, 0x5608) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00005dc000-0x8)) readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 181.454881] binder: 28907:28911 ioctl c0306201 2092a000 returned -12 [ 181.468273] ipt_REJECT: ECHOREPLY no longer supported. 2018/02/16 18:03:17 executing program 4: mmap(&(0x7f0000000000/0xce3000)=nil, 0xce3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) mmap(&(0x7f0000ce3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000ce3000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000ae000-0x4)={0x100}, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000cf000)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000798000-0xc)={0x0}, &(0x7f0000ce0000)=0xa) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000cd3000-0x8)={0x0, 0x0}) rt_tgsigqueueinfo(r3, r3, 0x0, &(0x7f0000cd1000)={0x0, 0x0, 0xfffffffffffffffc}) [ 181.518158] binder: 28954:28961 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 181.526059] binder: 28954:28961 got reply transaction with no transaction stack [ 181.533600] binder: 28954:28961 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000e64000-0xb)='/dev/midi#\x00', 0x80000001, 0x352f7a50571d0dcf) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00007d4000)=0x3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f000087c000-0x2e)=""/46) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) r3 = syz_open_dev$vcsa(&(0x7f000014c000-0xb)='/dev/vcsa#\x00', 0x800, 0x400400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00008bd000-0x18)={0x0}) r5 = mmap$binder(&(0x7f00000b0000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x0) r6 = mmap$binder(&(0x7f0000ed0000/0x5000)=nil, 0x5000, 0x2, 0x50, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000011b000)={0x118, 0x0, &(0x7f00000bc000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x50, 0x10, &(0x7f0000754000-0x50)=[@ptr={0x70742a85, 0x0, &(0x7f0000fdf000), 0x1, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000f05000), 0x1, 0x2, 0x3d}], &(0x7f0000db7000)=[0x40, 0x40]}}}, @acquire_done={0x40106309, r4, 0x4}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x48, &(0x7f0000e3f000)=[], &(0x7f00002e2000-0x48)=[0x40, 0x5f6533ddf969caa5, 0x78, 0x0, 0x0, 0x18, 0x38, 0x70, 0x20]}}, @increfs_done={0x40106308, r5, 0x4}, @free_buffer={0x40086303, r6}, @reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x68, 0x8, &(0x7f0000931000-0x68)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000c3e000), 0x1, 0x4, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f000019f000), 0x1, 0x4, 0x2c}], &(0x7f0000c28000)=[0x30]}}, @request_death={0x400c630e, 0x2, 0x4}], 0x62, 0x0, &(0x7f0000af3000-0x62)="c09b458c3d54f6bac8cf87013182b5b9dc0ea9adeb08df574fc3895759511c384faba2e9cb536f61153e3d4d267998972f95485b80cc5e3352a4ba975ba0816132fcef635271f5b7d0ad298e1aece3038cbb137e44d06c24a721422ca4c21ad39fa7"}) syz_open_pts(r3, 0x2000) 2018/02/16 18:03:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname(r0, &(0x7f00005f8000-0x10)=@ipx, &(0x7f0000e73000-0x4)=0x10) sendmsg$nl_generic(r0, &(0x7f0000bb9000-0x38)={&(0x7f000000b000-0xc)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000015000-0x24)={0x14, 0x2000004f, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 18:03:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r1, 0x9) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000982000-0x11)='/dev/vga_arbiter\x00', 0x240, 0x0) r3 = add_key$user(&(0x7f0000fc5000)='user\x00', &(0x7f0000df1000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000e0c000)="24e83ddb65eb0018f6e2053f991436004202bf14ed0646bf03287525c4787bcfa8393995dfc877577279aaa50111703feff3fb1c43761b2d0aef8b069fcb4f1dafd3084d5786408b5c50d5371f97a3d90b8c1ac4e6a7c9cb3b1e93190a58", 0x5e, 0x0) keyctl$setperm(0x5, r3, 0xffffffff) sendmsg$rds(r2, &(0x7f0000c26000-0x38)={&(0x7f0000909000-0x10)={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000b6a000)=[{&(0x7f0000ba3000-0x10)=""/16, 0x10}, {&(0x7f0000f23000-0xff)=""/255, 0xff}, {&(0x7f0000a11000)=""/131, 0x83}, {&(0x7f0000277000-0x6b)=""/107, 0x6b}], 0x4, &(0x7f000053d000)=[@fadd={0x58, 0x114, 0x6, {{0xffff, 0x7}, &(0x7f0000bd6000)=0x417, &(0x7f000005f000-0x8)=0x5e, 0x2, 0x4, 0x40, 0x7, 0x11, 0x113}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000dc4000)=""/4096, 0x1000}, &(0x7f0000094000+0xb93), 0x40}}, @mask_cswp={0x58, 0x114, 0x9, {{0x80, 0xb96}, &(0x7f0000608000)=0x800, &(0x7f00006c6000)=0x1000, 0x6, 0x4, 0x0, 0x7fffffff, 0x40, 0x1000}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x6}, &(0x7f0000932000-0x8)=0x8, &(0x7f000017a000-0x8)=0x5, 0x7, 0x2e, 0x400, 0x0, 0x40, 0xff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00004bd000)=""/192, 0xc0}, &(0x7f0000bb6000-0x1), 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x3f, 0x1}, &(0x7f000032c000)=0x4, &(0x7f0000036000-0x8)=0x8, 0x7, 0x40, 0x1ff, 0x0, 0x20, 0x522f}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f00001cc000)=0x101, &(0x7f000089c000-0x8)=0x40, 0x6, 0x52, 0x4, 0x0, 0x68, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x10001}, &(0x7f0000e35000)=0x2, &(0x7f0000096000-0x8)=0x7f4, 0x4, 0x7882, 0x4, 0x7, 0x8, 0xa0f}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0xfe00}, &(0x7f0000578000)=0x5, &(0x7f0000592000)=0x1000, 0x1, 0x10000, 0x3, 0x8, 0x8, 0x800}}], 0x2c8, 0x8000}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) r4 = mmap$binder(&(0x7f000089e000/0x2000)=nil, 0x2000, 0x100000a, 0x10, r2, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xcd, &(0x7f000007d000)="26e4bab458773f1bdf7b837ea41763efb32ed38b1f1e723b59f08d8338ee5f8b67a6dad69525f988af6f9e5fd2b475acbfe01e222b57128d2b8be206e95436cab8b708e5feea86f1a01e9cdd00812f39fd52330a901d8ca4c4d860ed6faccb40b55af6bf94446b3c9aa7179ff4eb58f3f18b5f70b583154edfa3a6e2c7ed0e3918a77d84bbbd96bfbf96f626e325227e3931536a91b94cff0fbebf38fca491cfef0726e26464b30ac1acf775f2ce5f31f46ed157abae0bce5d308d3f4b18daa055f029d16a5dde54c4eefc61efb15aa77f52b1970877577530a44084fc11b72755de930b11280009b5bf4af643f2c4", 0xef) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000f40000-0x18)={r4}) [ 181.577907] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f000081b000-0x10)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f000066f000-0x10)={0x0, 0x19ffe}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00005f5000)=0x1, 0x4) 2018/02/16 18:03:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000500000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000265000-0x5)='maps\x00') readv(r1, &(0x7f0000f7e000-0x90)=[{&(0x7f0000c4a000-0x71)=""/113, 0x71}], 0x1) setsockopt$inet6_dccp_buf(r1, 0x21, 0xce, &(0x7f0000bfb000-0x12)="6552bcbec6ad33bb68fa340fd973ef8381d9", 0x12) 2018/02/16 18:03:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fd1000-0x4)=0x0) r1 = semget$private(0x0, 0x2, 0x10) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f000028e000)=""/190) r2 = syz_open_procfs(r0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 181.624750] device eql entered promiscuous mode [ 181.644554] binder: 28976:28981 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 181.652473] binder: 28976:28981 got reply transaction with no transaction stack [ 181.660069] binder: 28976:28981 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x100401000003) r1 = accept$inet(r0, &(0x7f00001e7000)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000259000)=0x10) write(r1, &(0x7f0000a96000-0xb6)="d9", 0x1) setsockopt(r1, 0x84, 0x7b, &(0x7f0000e0e000-0x8)="8022e2ed01000000", 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000cb5000-0x8), &(0x7f0000d89000)=0x8) 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000bbc000)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, &(0x7f00008ee000-0x4)=0x1c, 0x80000) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f00002f5000-0xa)='/dev/dsp#\x00', 0x80, 0x40001) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000d61000-0x6c)=""/108, &(0x7f00000ab000)=0x6c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000048d000)={{&(0x7f0000b74000/0x2000)=nil, 0x2000}, 0x2}) ioctl$fiemap(r0, 0xc020660b, &(0x7f00006f3000-0x138)={0x1000, 0x10000, 0x1, 0x4, 0x5, [{0x0, 0x4000000000008, 0x1, 0x0, 0x0, 0x1101}, {0xfffffffffffff1cf, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, {0x6, 0x9, 0x6, 0x0, 0x0, 0x3000}, {0x5, 0x1, 0x67, 0x0, 0x0, 0x2000}, {0x2, 0x8000, 0x8001, 0x0, 0x0, 0x8}]}) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) [ 181.692969] kauditd_printk_skb: 8 callbacks suppressed [ 181.692978] audit: type=1400 audit(1518804198.005:220): avc: denied { map } for pid=28979 comm="syz-executor3" path="/dev/vga_arbiter" dev="devtmpfs" ino=1036 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=1 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f000033a000-0xa)='/dev/vcs#\x00', 0x8, 0x200000) sendmsg$netrom(r1, &(0x7f0000aa6000)={&(0x7f0000f3e000)=@full={{0x3, {"ba64e5f1a77d20"}, 0x4}, [{"cdbb72759fa3ba"}, {"1d00f40d8aaf59"}, {"8683eeff40dd10"}, {"a7d0fd9117f57f"}, {"69acad2c627056"}, {"df284be9cc8903"}, {"3b8898be7e8976"}, {"3010e8b9f0d802"}]}, 0x48, &(0x7f0000f2d000)=[{&(0x7f0000eac000)="fe82f2e4962e8da5852bff3f486f4b07c73e4cfee11485ef272a82cbae9a910abc9037e652119213017d16f9d0fbe3328642a7431a1303afc68c6f83dc5731c4015ab571f725928d072a2bd9c12b5e25a4959e825cc00919b16c94682ca0c141efb1763bba954332ec", 0x69}, {&(0x7f0000046000-0x92)="bec6ca5ababf5d145801edb56a10888a51a8c7d81e06c0e1253d02a74876a09e87bc11e7e02ea951df3797def46e7ca5ed96cc943c0ebb8bbd2b87717d725494da5ee7d47963d012dab3db21885740cb6ce3b935b22f219cd886a1dd6946de4a14f3b35d901674d6bd75aa3c0bbfd95fc475413caeddc468c98202f20d7a479bd663ecb25ba9174d5593c66115c085754577", 0x92}, {&(0x7f00004cf000-0xe0)="49b77c31a945443312c2b80f47166e9c24ff8fa31f8b805ddf340b2d45d2b25fe1b342105ddce2ce412af293eaf46d8d5a90aa397b4eb6b4a15b72b8311564dd255787f19ed5d59816f87234151d6c2c356b00f7adadb23d8c2b816dcbf8280047d434afa09b82ff4349f4366fa5c9ded06cd17bbfa139d4e009bb7052fa20dda9025e06c2441a00d7c801f8768eb8a4b994254ef05c7b1662daa6a702f4651e0926b537daec11cc53ed7bbabe1bbe1e028f216e89ed92d4b78e9cf1bc9b67539d3ca2a467dedb69d0b2e2577ab96634f2098e25ad96191c17eb662d40ca7103", 0xe0}, {&(0x7f0000f10000-0xec)="4647f1d924bb074e44b9651c2a7c97db9b01ffbb5493307cf7752dbdf1907a098d40e7ba17a2d75c0f1bfd49ac8abb599fd1b250483bfe47574badd6c0894af0881175d4b4b94d883b5f0c0d16b267c86420ad6a76dc5f74f82e3fc4cc33d139cd3f2bfbcffde942fe1ecefd5a95205870a701147b6519ac4cf9d1ba96ff36f51cfe45536ace6cac0caef06efeb77b4e35130900d92c1cc1b75bf1d2e9e8748f9d1d07674b63b36c0e238d708ece899e9c4cc5d822b7696eb44a31c0bf5128b287d93b0770452a5eb46e37bb924a9f078cd20d439ff1f579b00150eed010174880509b82e857b019afbf558b", 0xec}, {&(0x7f0000587000)="11988b005e3a9a8c72f4b1d79c4d35a1d929d3475cea1b513a52782c93af9234ddbe6d60c9c2d901e4ed8da7", 0x2c}, {&(0x7f0000a08000-0x1000)="e790cef7008fd12809de7ae7bbd4fa23a1f0cad2f8f9e8a19f2716d09aa3b4c465aed952731d14c15712cb4924504c87b611639712f005e20f00232cae633a849a1cd18677c14dc10625e1f456af12b729172ff8762248d54b2f03db658b8269ba24c27b874870f8615db58ab653fc335181afa01f0ced61337f5b935e1d773dfc93c4208a4f11ec9c0b65372b433e78791f7d78184a337b14622ca45f36b345370d38d4d59ae9b631b86dfedbf01404bd743b3d525ffc436c6b32e62106d01b02790e96be57806e226a90b1511c615a57f23a52d1f759c2b491b452d0ef40f41390018e16de53219843a2331764977b7fd0d63bc2082577f0895319a47be52159792b7c87e0dc91065b179580c02604fcd84c695e542c0ecbad4558c324a4ac05f86a83382debf12fc5d4adeab7bba02b93eea3c476d8aef87c46b88f6b4125ab7218b1dbcc56210c8b97fec8b063f5d92e4d4d7decef0bb397a0ea819796cdceccef8b0891209281d6ea5c7a373dd2b2f62209d2d3f547b9eaa8a513c8c8d1e70ace37db7e19fb77e5e624f87ecbe1b4d8f33918b88fd6b8d0dd9f046a6f3a487708bf77361931d5a98285140638c8c09c26e420cf6ca34c31ee621bd935686e8be1e849014f6b4124e6811c3510d1f52e96d04e1a4953570adf1f4f6e24c8a6baa6a760f484c950821a52ee1db41817cafa6f42611014e0e96b54baf0a09eecc4fa34f03140e0093b295ba6778928c04a6fa52c8931ca6216725f15d15ba9ec538966191ea9b701d86335c2ef363c370657a51ec4a0e0a2076122e28b90e47472f0d8bf15b12a27250ff54ac34900930c3cdb8addb143aeb47a836e3e104a86a7254ddc4f14f8e92e7f5cbf7cba37bd989ee784f033c0b998a785002ffba3808c489626e7944d5a8534ccf5604f7fe24aa1e028e06028fb9b129587320365fe855e6bfa667a96fc99c5334e1722985277707fe2bf0c6560d985e8109770f3ec8218ae2c91c8cd0102bca5b5170c87e91e2b00f5376383ea9db8449f93730c65ba4f20205f07e65ebd410a638de79ee72332bff29370992b7d267a89a262ec254f9fd00a2c1741cc4de84644cff55d1327024d94ec74ac4b3c214a6177938ba1cfe12efdadf75335f2c8c37b762bb29b27a55a5e72e05d49b52b332502e44acd39946d8372e63823443a788679070fb54aadb2e1e48ca1b37b3eb4712fe5a27abf88c4bc666eb79fc549fb4395430c22d21084a1095de0a62f8642816329c030271cd71570e163858e45923cbbcf27366f2f0c0cff968dcaa03dc3383785fbf1fbfb7dad7f026db4939adb45eb28dc934bd3dc57ea712d2d9c8447cae4e4f0644103781103518e3b4a35001f4e6923e90f8ceb8222d982b8a9a8cf6d7ee8f491b856077f0e33db68d1c1b0c36a7427e558f368d8af36bfb73c5c4675d2c82f15f0e3a9f50bc44643ae023b80c16a23884c34c09f77cf6373bbb0041f7a3764e9f4104c4ee457b6d032be3d80714889ba37a02f4946004f5d14111732a03fd26c42cf054fe33c31df63081a50d91afc15c7a9d7ce9387c6228e99f5692618f3d4b07f9ee321c496dddcd6e52bfa58a6edea64b44dee31d1cd12255fcc9e3e2f5fac392aa24ac15fb909644831b7a060c687cc3a9cb650846ae7b0271ecca043992748ef21bd29beb2da968887813818072ed7865a5ec3b0212f1609195535ae83b998b02b6ce25b5bacf843c3851ca2890329886844c40b26e3d0352f1bf1eaaf32a5b3d216703307ec769e2fbdfdcb3e33997ee8e0372f767b6649e2c6d072ac44c3eecf524532597c6faa5d976a1aa78670c6690271241fc89713d2f1b556a6a0fa61526844d1662f60661b2c01218215f50684b167415389765dd1f37ead430a57c08f502d5f0c9e1f74a5193e26f59f01c198bf7c68ae06dd91bcb3c6404cb597b403e5d553140ad5dec45e842c1bd7fd138a57ce10d2ff27375cbf86fa75ce186162454166c396d6a0d6f851da570506979d83a80a14e43d894b16026d9a5bf550ac82ee73c8a45f37a126dc558e47d929d3ae5fdc39f18e07b86c24b3d790f294edc81562766b2a5a9e5c615881943d39ba894c898be2ee79a7ec454cc9a5da3ef84aa749996b750cf1ff42285adf3eb2b268a43ad445b0aed6b5b8efc63ab046feea4decc31156ab340ba363bd80201bd8418072cfddc33a8f4288cf5baafe81caba90ac6f55c8b7613c159e66328b7d832beafd7b0effcee4042093d9d81c7514b78cd01315393ac7451a63063772306fc60fe59b68e594466d495417d949f7cd5d06bf17b1415e5326d64f8c8075372bd349480fc40ef558fcc26d212c244cf8e10d9f42903ca7a9a548413115fe62a862949e7bd5ae084115cabd1c260a557ad9b4886e1dfe8d63651218354432c3e433481102629ac95eba19b1050de5bc4b98443cb90fd6ba021012119d3c453f821f9ae3759bcbf7f9dd8cc104babedf847be80693f02b2031484d0cd496df76f549ce12314a9393d99143dc4fa2ce606fdb2656156bcd37300ecec01d9dc10ba4c19b6f1bda1a700169b9261c56304b88bb9ddb1fc82187bfabe411d3843367c68ec5b6903f8bf8d35327c4d00ce65e94f45ff1e9f1ac2f8ce2d05fc7725705554ce7034c795e1c0197b8c7a7ca254183b4f869620a13432cb187f1da88a0b2f93e822688aec41450087d7def87e1c79f70a4af78702a2a21591d45831632a8fe5f236128b9ee0e9a27528c4b89d58db2d6c1a03d9a4a53227f3cc05d1de8a315f741628f4caebb402aa55fcdccf835a9ba875d1bd7405f27e3e63588032170131aa9173be147337a880a88dfb69da784c3865d7a4b3ca2ef4ab7e4c60b525c632d85fdead07a763734b6e767c9e78cf9e4bd97b7918135b9b5e6d22428cca20ecfb86048a47285a454c1a6510f31afd3ba2312db4634b9cc63c23bbb5a90ead5d54428be0d42c97305f8aeb6adc32cb16ed85f22054c7df8157c81a30fbe98c7382e3436999f82e445d1969a78b855f0a338aa14a3259327a4fb7547c7e6fe820327c8462645a285b481e29cd8096a6d89ebf27b5065265065a7e4af7b0465f2896e1fbe773f0f2f42edf71ea08c47608b30367761f4b553b58b59c3beba4554c2bb5c09222f91c16cd3549aa614b5001cb75813d0ab02e2177932df42032408f30396212acd985cea500762ac4f1a5221b9eca87889f1d8c2c93c9ede1846091962013328547db7ba08d40ad160cd3517b5f41ae95ededc494ceb2c998dccbf42f5bff9515ae0efd367ecdf09e5183a530b716f1f5e7596b7655fe3964fb4ce6e9d98ada63d2d975925c6f57a3a1466bddbd719e92e7411c011cc459624b875808009a9b699250e3bf2cc2472702e73ee8f449f04d1cf91b305ef345b835d178b1354842f1326fde1cb18cc78136eb91fdf469068ad054d6ac65467cf40cff833407b310749397a772a78f095da9859527b57106ba6cbf1ffa1b46975a5e193478f7cb0d67ef54d0b7c3223e9003dfa4c2b1e671c665b43485daddc3a590ef483423f07d8e5fb0b609469b9c10aa295ada37b064c55eef2792fd41e94554e7a7683e2a5968624192b4e15c6746cca1ccbba9f9b7e7b76fdf47a65f2f37476c4777a4440c9a59f0882a81ab724cf3786479f109739b082c3d509efef017af932e36a4753b752d9fda1404515803ed47754cb18e4ea482c774f3debd148d69d42ecbbc6a8946065a8c7a878952c221e9c3217379a2aeb52dbf50d16f5f1147ffd2c4ed7e8128a7624535a57ff660a57173a9dee9ab8e9e08abf1c87725c63e943fe489d54d331210a45187c022afbf23ed19263807e84414ef6f9cd88af2ea1d08886b2f1b0ee8b10c3963b2c22cb9585ccf1a41fd569a59a4881c3fa09e7834021157244adbeeb10c42bf986e6a4c798df75bd8f6dfe3561b34444e5bd26fd2c03cc61f2455b8431df714d74aadbb5d9aaadfa449a4cdad9a48412d480b9c08dd828c3c2cb0f3ce2d148150c07a875927bd08e15eccc87b681b4885cbb49d82a89dec13b64d20d6c14dd6b9c3f1ccc1beccf13bfdca82b9bc7ddde232dc747edd956ff40386800e7802348bd32150bb4f7e0d5b006723caff5b2d41222f8e26091f21188f50bda2642e2ed20da094ed2099ebef64787202e89b33ded4e1ad9c5b5d34b95d7e68039af861201ac71c9a71ed66287834743e11c115d1327e27072bedb3b1919a4937c41c21d40f8dda28f60cc25b6c380803f16b3cb97b080e221982076d333fc668766604e3c0e77a1a31f68a5daf2b20c56d61992c8c6b69dfad85aa7c5d8a678ac8b2b35dabf557f4fa75bddcd99114d84d294dac3198c6ffc68275dd1c28f99e655d7a8fcd4beb40db9f690e028265285407e254f66159cf8d4bad766fae7d7e74beb6d49675ede85cd04e50d9053c4869ce8fb00f18e96429ece75a94600c157eadda4538ff8e313a779f27dbbaf65f462e5153b31a9d9832f3c219e55a57bbe580f6af9e1597e2affa28a4a3977ceb02f32d1ef9ad33c323d50f175492085c16ecfc8be2b23922e91cdb836dd045dcf779b585ad749b3b562e57ef6e8e8f00a8a94a78a36457ea38af57666056c7f888a57b70e5477dbcede37b438413aa4d3996db231a207981dbf86ba2ebc138626a3edd3aa9ff8bb9febbdbd780c13bc526e531cbdc3b9f46e8c3cdb25491af56ea559b3e409602607d65a4c8ebb2522111a0ec1fd8eaf113bee0c46333a682ae16819d2b2e457fed5222b3b3d9f143617b139050bf32dad7c6d924a456430498a2c90d02a6f648ae2512ff72b691584a4f8ea5ca5dca76740ef99120ff620da65dcfdb1250c5085bc3b6b3cbd8df892363d77f21ce4a73c5553bd520d6bdc5cfd73e06c2543b9840808c0ddef1c46e4e28d9bcf110b67ee28015010ce1d75bb4d9f4df2f68573106b84900ef09edeebddf2bf588b6fe3feaa96389585692498e5bd5fa6ca8319a610969c7e6b71df93c16a78789117a34ae46c9c2efbbf61682e86d65b014c7ccc4ef10a1b92143c4d36acb6ee7f1b689fd9754e4540bf4ff4d864cc66449f342bb24ac856f5c9dd963631c399acc1abf086d4fc10100e3b6438c4e6a6717d71d0aa5c64e0792fa1ef9042b655e12a86fa1e3ec7062defac6a0d314301ccc2912786d7145823ebdddcd5b6616b8f80efb4323d2ffc913cb7995739d2ae75314ba3d0684d6ad49f8f072f3d84fa85e3c05d3eb2cc4b65e4df7ed2b563c6583280a011102a234cf542c4a8e8e02ad383213e510cedce6d42e1cd80ca889bc19fa1a98df677fa57cedecca62a44a082ee6987b8e5770ec9a004d24dc308fb8a3449662de7b8d7ea2be4e3f0f5275988230143a5b220e6b8e33f8fc2f43c67136554d587355e11781c4523d7fd4f948724deaa5d1ba941f996720bc4d20510c6c9cf1e01bef4442d29b05a7f6d0b579c891ed8b6a8c02e5b624965218ee9d1ed239d79cebe8834514ab30ffda676174978158e8f3017939c8db6c7937d1561f4d9e525e6dcfb401240acfed9604d01c585b600b4c3b33aa23de04c822e694574f0a7f78a8c8abdb8b65ec8b466fad03c25438792ddae80a53cc9716f480f37dedde2967f6aed09eb7a1bf72f0cba6fba85e0fc0da45a6f887d3fcdf038b80b9a380e04908104183882c786c56b272e776807e299270887f078a844a8a3db69add27425c32321349bc2333b10c4b525df32719eb9eb39c542c787e256d1614d9c41a70a4b66900f03ffc7221d5dc34e", 0x1000}, {&(0x7f0000caf000)="462c2fedd792c325f0451afb344a2fee299adfd78250fe842a9080a9c87ab5395479ad52c19517de14d5dab52f2f6e52272ba03af50bd099067be9916d82e66aed84f4b3b3e296d4027764c54563809a4ca9a7d9daed74496c957d5d78bf9b34213c0062348562a6c691a0fab1694a7c19a8037fd4177d46c816071fe02ecb869d9accf41a978c9a0c6b4eaef5ede3f6bd28af462c5ab4269ef16264d701d547701af897e52828730e86314bad67d322fc7e5b6559148351a4488c89ed4141c07d9555ef1c1fbf98199d60c20cd84ae692dd26807fd8822d", 0xd8}, {&(0x7f0000277000-0x30)="b3d88f6f87187b4005f1738b0e5760d282afe40e86bb848c2fca37fb35d1be80f9173935fe52e5cd48eda5f885ee1523", 0x30}, {&(0x7f0000413000)="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", 0xfb}], 0x9, &(0x7f00008bb000)=[{0x18, 0x105, 0x4, "7bd6c315a3526122"}, {0x80, 0x107, 0x7, "20bb94c92b5fe73668cae19a3252062c748c83eb8cd4dda1e6443b729e3ddfd502e716c35b749434b93ecdfe70ab5378cb9ab0d02b8385d18d9f91a9c3bb1ec26ae324ea0adadc27c631b4d20927a12745d4930644d7184bee40ba39364bae0157b58eace20147a7267f1adad8b0"}, {0x30, 0x88, 0x1, "29c7bd206ba3313490538308455f04f0430725f1000d87e58f2af8"}, {0xf0, 0x11, 0x3, "432f601d90532f220b039e3819614cfe6c674a2a664a436a9225b704b8902d957222167e464ba515bf83c6e11531daf68ee091f2e65c9be220331491409f30032388b0fc5d0ed5ce0dcbce1f5a2104d0f8b1a75c9d392b2cccb13432facd42a39a58fc43957cd58ec0fabee2765c80d580d8f413f673112e20d783bfbab917afef21edd7925c3fc47e205e925d9afd7e7170f123ac1def8d0f484989b8152c8da09c6bb90cf688a276435f0608bebd468e9dfea0c8927ee9a49fd0a4ed1d279ec511adb9d7d9d013cba33db31121d0cff418442b79b957c28fc6c23fae"}, {0x90, 0x108, 0x80, "55ca175a8bcc47e6fcb1e34c192f12fd6278be506bbd86b56a4f7338a2441c6762b224d4a02463a088b73bad0285f9963ac13d42d2c84ea0ba5c4cca2d7f88461de8091b413daf271fcdd87d8c05236f9c524e0e6cd30fab7e123b3687a5e51257f43ffcdda2c9b760c144ecad3a51c365250402a0d2f0d04e2efd5b146dbee5"}], 0x248, 0x40000}, 0xe3d59a3558573076) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00008ac000-0x14)={0x800000000000000, 0x7fff, 0x9, 0x4c, 0x1fe}, 0x14) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00005c9000)='/proc/self/net/pfkey\x00', 0x1, 0x0) getpeername(r1, &(0x7f00009c1000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000981000)=0x14) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000294000)=""/165) openat$selinux_create(0xffffffffffffff9c, &(0x7f00001a4000)='/selinux/create\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00009ad000)=0x0) prlimit64(r3, 0xf, &(0x7f0000f2f000-0x10)={0x8000, 0x4}, &(0x7f0000ed1000-0x10)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000270000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f000087f000)={&(0x7f00008fa000-0x10)=[0x0, 0x0, 0x0, 0x0], 0x4}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000187000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x40, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x40}, 0x1}, 0x0) 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xdee000)=nil, 0xdee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='net/dev_mcast\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xcf, &(0x7f000072c000-0x32)=""/50, 0x0, 0x2}}, 0x287) write$vnet(r1, &(0x7f0000a8d000)={0x1, {&(0x7f0000b83000)=""/24, 0x77929f8e202a4afa, &(0x7f0000502000-0x65)=""/101, 0x0, 0x2}}, 0x59) write$vnet(r1, &(0x7f000046e000-0x68)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9b000-0x49)=""/73, 0x0, 0x3}}, 0x68) preadv(r0, &(0x7f0000408000-0x10)=[{&(0x7f0000dee000)=""/179, 0xb3}], 0x135, 0x0) 2018/02/16 18:03:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f000058e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000457000)=0x14) r2 = geteuid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0xffffffffffff7fff, 0x3, 0x7, 0x2, 0x80, 0x80, 0x3b, r1, r2}, {0xfff, 0x6, 0x1, 0x0, 0x6, 0x6, 0xfffffffffffeffff, 0x1}, {0x1000, 0x9, 0x32a1, 0x9}, 0x8, 0x5, 0x0, 0x1, 0x3, 0x1}, {{@in=@multicast1=0xe0000001, 0x2, 0x7e}, 0xa, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x7, 0x2, 0x2, 0x7fffffff, 0xffffffffcfdcf8bc, 0x2, 0x2}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000b92000)='/dev/rfkill\x00', 0x800, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000930000-0x3a)=""/58, &(0x7f000012e000-0x4)=0x3a) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f000019b000)=""/195, 0xc3}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000ef4000)=0x0) getresuid(&(0x7f0000fdf000)=0x0, &(0x7f0000f03000-0x4), &(0x7f00000a2000-0x4)) getgroups(0x8, &(0x7f00007d7000)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000350000)={r1, r2, r3}, 0xc) [ 181.756588] binder: 28976:28981 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 181.764459] binder: 28976:28981 got reply transaction with no transaction stack [ 181.772008] binder: 28976:28981 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:18 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c88000-0xc)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000af6000-0x88)={0x7f, {{0xa, 0x3, 0x4, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6}}}, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x7ff, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f000034a000-0x8)='keyring\x00', &(0x7f0000e15000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000f06000)='keyring\x00', &(0x7f0000e69000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000b65000)="4baf7d50c2c136b53f0ba25e2463357b27a7bbc62815eaa29744ced49d9085c026dcd5735b6b994e7277c61b9958e50798422b4ae287143d6d", 0x39, r2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@connmark={0x30, 'connmark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x4e, &(0x7f00008bd000-0x1046)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x18, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0xfffffffffffffffd, [], "74792bde2a379000"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) madvise(&(0x7f0000d26000/0x1000)=nil, 0x1000, 0x3) 2018/02/16 18:03:18 executing program 4: r0 = getpid() prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001000-0x13)='/dev/snd/controlC#\x00', 0xb, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000000)={{0x4, 0x5, 0x10001, 0xffffffff, "61d01a1e035af7f8ec6bdc344293f1b515d413abd84fe8e82b5ef1aab7cfa6b6fc53fc073d55e5169d7259be"}, 0x0, 0x0, 0x101, r1, 0x5, 0x6, "783c09e56951e229786affe62dc86bc8c1330332e2ff5d1acb500168d00f0e68cfa142911691c50fb906f8cb60800a341b6cc1fc4e737f0ce7c1dfd43fdd5d5c", &(0x7f0000e52000-0x26)="73656c66d16c6f6367726f7570766d6e6574312c76626f786e657431757365726e6f64657600", 0x26, [], [0x7, 0x0, 0x1, 0x80000000]}) 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0xa, 0x1f, &(0x7f0000000000)={0x0}) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003b8000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000482000-0x8)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000423000)={r2, 0x2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) [ 181.883236] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.891838] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00005db000-0xc)='/dev/amidi#\x00', 0x7761, 0x85c0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000c66000+0x94b)) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00007c3000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000562000)={0x4, r1, 0x1}) ioctl$TCSBRKP(r2, 0x5425, 0x8000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000cbe000/0x18000)=nil, &(0x7f000018d000)=[@text32={0x20, &(0x7f000043d000-0x53)="c4c2dd920c500f2064ea432d84415f00b8010000000f01d966ba4200b03feeb805000000b9f10000000f01d9b8008000000f23d80f21f835c00000700f23f82e0f09b9800000c00f3235000800000f300f01d5", 0x53}], 0x1, 0xa, &(0x7f0000d29000)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000005000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00001e8000)) poll(&(0x7f000076a000-0x10)=[{r0}], 0x2f0, 0x1f) writev(r0, &(0x7f0000f9c000)=[{&(0x7f0000f0c000)="249ce0e478d908f3ac389114cc5e68e826e492d618596cf097fa20794207ad64f730dcc79b0bc2d462ea8f0cae842c407856bd0869beef603bd6180810f98649d40ebc3c1812bc97c5dc20123ec216cfccece009a444ebc4ae318f7ebab73cc0c6039b01a9e77ee022e8fe912209339ee1450de6e6c9287c58fde0c07204f6542d11ea9629fbdbe92d460453ad159805606106c3c0a38e05eea479a11cce38b14808fbecf60f3a1943200ff5044a064417ec319e898047911bd6b69b7b7d882e990446b948b367d0307aa8c88981191c2aadb2502a", 0xd5}], 0x1) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000c4a000-0x4)=0x20, 0x4) uname(&(0x7f00008b5000)=""/222) read(r0, &(0x7f000000b000)=""/192, 0xc0) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000499000)={0x9, 0x20, [0x100000000, 0x2, 0x7, 0x1, 0x1, 0x37, 0x100, 0x4]}) readv(r0, &(0x7f0000076000-0x10)=[], 0x0) getpeername$netrom(r0, &(0x7f00003ab000)=@full, &(0x7f00002d7000-0x4)=0x48) 2018/02/16 18:03:18 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000e8f000)='/dev/input/mouse#\x00', 0xffffffffffff427d, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000010000)={@common='erspan0\x00', &(0x7f0000007000-0x5c)=@ethtool_coalesce={0xf}}) 2018/02/16 18:03:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002a0000)='/dev/kvm\x00', 0x404001, 0x0) r1 = open(&(0x7f0000040000)='./file0\x00', 0x8003, 0x44) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000632000)={@generic="d57d0f6bec027dd0c697cee40d3c843a", @ifru_addrs={0x2, 0x3, @rand_addr}}) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f00003d5000-0x4)=0xdb7, 0x4) getpeername(r1, &(0x7f0000464000)=@pppoe={0x0, 0x0, {0x0, @dev, @syzn}}, &(0x7f0000c17000)=0x1e) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f000014e000-0x45)=""/69) removexattr(&(0x7f0000b35000-0x8)='./file0\x00', &(0x7f0000236000-0x19)=@known='system.posix_acl_default\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f000077e000-0x4)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000cf3000-0x20)={r2, 0x0, 0x81, 0x8, &(0x7f000074f000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000002c2}, 0xffffffffffffffd4) socket$can_bcm(0x1d, 0x2, 0x2) set_robust_list(&(0x7f000011a000)={&(0x7f00004a5000/0x1000)=nil, 0x2f78, &(0x7f0000585000/0x3000)=nil}, 0x18) finit_module(r0, &(0x7f0000d16000-0xc)='-nodevwlan1\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a8d000-0xc)='/dev/rfkill\x00', 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000ffe000)='/dev/snd/controlC#\x00', 0x6, 0x101000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) dup2(r1, r1) fsetxattr(r0, &(0x7f0000e13000-0x19)=@known='system.posix_acl_access\x00', &(0x7f0000fe5000-0x4)="02000000", 0x4, 0x0) 2018/02/16 18:03:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000d03000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000de2000)={0x0, 0x3}, &(0x7f00005bb000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000ca3000)={r2, 0x1000, "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"}, &(0x7f0000115000)=0x1008) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000dd8000)={r2, 0x401}, &(0x7f0000e4b000)=0x8) 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) r1 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000036d000-0x8)='./file0\x00', 0x0) unlinkat(r1, &(0x7f000048f000-0x8)='./file0\x00', 0x200) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000bf7000)="ddfe32df7997d5ceb25f54a5381defdf62688d130c257a0c79a0fba0e73eb84b570bdf57a7a572ec8ea958983834e6f89cd8e142033e3b376b6b4bc8734e8aa3c6e9eddd9193b0d3b51cffe0f65d7ba46c3b7bb78247157969f1537a0a7048c192d98e8fff2ae559ccaf9c1a98e30d70e18df1ae4f9d47305e2c3e9a0f7de76ce73f406221b11408c3226fe15a3874971e044730e6b38d8bb9846286e32e9ef5391467696918d14dc3369ddcbe5b4a36b039c88b222e6e9a1b623655656a35a09a2f22d34e2405fec4eda030bc47c242f793d8d4bb50298d3bc8d3", 0xdb) chdir(&(0x7f00003df000)='./file0\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000f00000)={0x1, 0x7fffffff}) getcwd(&(0x7f0000a35000), 0xffffffffffffff85) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000c6000-0x20)={@generic="e8aa4f7101717aaa710f60a7122e45a5", @ifru_flags}) [ 181.996625] binder: 29033:29048 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.004538] binder: 29033:29048 got reply transaction with no transaction stack [ 182.012087] binder: 29033:29048 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:18 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000e9a000-0xb)='/dev/vcsa#\x00', 0x8, 0x88900) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000914000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000856000-0x9)='/dev/dsp\x00', 0x181000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000327000-0x4a)="94fca3c80f2aca5f6c3a6713be51e99c68bfaf57827800f08b50d79e616203a19ea046e6388ad0ea89a08b43602e293c1db0a17aa8102f92e78105a5e8b58f1f9190251311a8c2c416ad") 2018/02/16 18:03:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b6e000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000024b000-0x9)='eth1bdev\x00', 0x3) inotify_add_watch(r1, &(0x7f0000c7f000-0x8)='./file0\x00', 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000c02000-0x14)={@ipv4={[], [], @rand_addr}, 0x0}, &(0x7f0000b7f000-0x4)=0x14) connect(r1, &(0x7f00006bd000-0x14)=@ll={0x11, 0x0, r2, 0x1, 0x7, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) unlinkat(r1, &(0x7f0000695000)='./file0\x00', 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000300000-0xc)={@broadcast, @empty, @multicast2}, &(0x7f0000d4c000-0x4)=0xc) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000f8a000), &(0x7f0000d20000)=0x4) 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000d70000-0x11)='/selinux/enforce\x00', 0x200, 0x0) [ 182.046232] binder_alloc: binder_alloc_mmap_handler: 29040 20000000-20002000 already mapped failed -16 [ 182.061809] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00002de000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x21, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) r3 = semget$private(0x0, 0x1, 0x400) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000952000-0xc)={0x0}, &(0x7f0000501000)=0xc) syz_open_procfs(r4, &(0x7f0000f68000)='net/tcp\x00') semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000065000-0xde)=""/222) [ 182.120233] binder: 29062:29066 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.128115] binder: 29062:29066 got reply transaction with no transaction stack [ 182.135639] binder: 29062:29066 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000afd000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) r1 = syz_open_dev$midi(&(0x7f0000026000)='/dev/midi#\x00', 0x8000, 0x800) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000d49000-0xe7)=""/231) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) sendmmsg(r0, &(0x7f0000a36000)=[], 0x0, 0x4000850) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00002d9000)='/selinux/status\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[], 0x0) 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000e5000)=0x7) sendmsg$alg(r1, &(0x7f000042a000-0x38)={0x0, 0x0, &(0x7f0000d50000)=[{&(0x7f0000fa4000-0xf6)="95", 0x1}], 0x1}, 0x0) 2018/02/16 18:03:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000048b000-0x9)='/dev/kvm\x00', 0x400000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x0, []}, 0xff57) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000351000)={0x0}) ioctl$sock_ifreq(r2, 0x8921, &(0x7f00005bc000-0x50)={@generic="4c4734e2109442690d26ecea4dc85f06", @ifru_mtu=0x3f}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:18 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000b88000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bf6000)='/dev/sequencer2\x00', 0x430500, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000529000-0x8)={0x2, 0x1, 0x3, 0x0, 0x1f, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f000086c000-0x4c)={0x7ff, 0x40, 0x7}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close(r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000001000-0x20)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/02/16 18:03:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000335000-0xd8)=[]}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00005e9000-0x12)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400000) socket$inet(0x2, 0x5, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00002ae000-0x20)={0x2, 0x4, 0x1, 0x8000, 0x7, 0x2, 0x7, 0x10000, 0x0}, &(0x7f0000d06000)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00001aa000)={r1, 0xbcf, 0x30}, 0xc) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000232000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f000041f000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da12}) ioctl(r2, 0x2285, &(0x7f0000007000)='S') ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000bcc000)=0xad7) 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x80000000, 0x1, 0x0, 0xb0, 0xfffffffffffffff7, 0x20, 0x1, 0x8000, 0x6, 0x10000000, 0x55}, 0xb) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000cb5000-0x8)=0x2, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8940, &(0x7f0000002000)=@get={0x1, &(0x7f0000002000)=""/52, 0x800}) 2018/02/16 18:03:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000e92000/0x4000)=nil, 0x4000, 0x8, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x1c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @increfs_done={0x40106308, r1, 0x1}], 0x0, 0x0, &(0x7f0000fa5000)}) [ 182.188314] binder: 29062:29075 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.196331] binder: 29062:29075 got reply transaction with no transaction stack [ 182.203845] binder: 29062:29075 transaction failed 29201/-71, size 0-0 line 2757 [ 182.221435] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.226993] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000d16000+0x69b)) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) fcntl$setlease(r1, 0x400, 0x2) 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000887000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r2 = dup3(r0, r1, 0x0) listen(r2, 0x0) 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xffffffffffffff05}], 0x1000000000000348) syz_open_dev$sndpcmc(&(0x7f00006f4000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x500) 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00007c8000)='/dev/input/mouse#\x00', 0x1, 0x20000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000e80000-0xe8)={{{@in=@broadcast, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000ba8000-0x4)=0xe8) connect$packet(r0, &(0x7f0000774000)={0x11, 0x1f, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002bf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x6, &(0x7f0000010000)) [ 182.301442] binder: 29089:29097 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.309324] binder: 29089:29097 BC_INCREFS_DONE uffffffffffffffff no match 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000be7000-0x8)={0x19980330}, &(0x7f0000292000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000207000)='./file0\x00', 0x200000, 0x80) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xffff) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00004aa000-0x28)={@common='bridge0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0800000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) [ 182.359327] binder: 29089:29117 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.367207] binder: 29089:29117 BC_INCREFS_DONE uffffffffffffffff no match 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00005ab000-0xd)='/dev/binder#\x00', 0x0, 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000104000)=0x81, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000089c000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00004c9000-0x8)={0x0, 0x7}, &(0x7f0000b32000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000ce000)={0x400, 0x8, 0x9, 0x101, r2}, &(0x7f0000824000-0x4)=0x10) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000b0a000-0xe1)=""/225) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000079000)='/dev/vga_arbiter\x00', 0x400000, 0x0) r4 = shmget(0x1, 0x1000, 0x100, &(0x7f0000c1e000/0x1000)=nil) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000c5a000)={@loopback, @rand_addr, @empty}, &(0x7f000078c000)=0xc) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000ebf000)=""/219) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000845000-0x1000)=""/4096, &(0x7f00003e5000)=0x1000) 2018/02/16 18:03:18 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x0, 0x1ff, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002000-0xe8)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000003000-0x4)=0xe8) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x7) sched_yield() 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000d1000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000471000), 0x1c2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000fea000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f000097f000)=0x2228c36a, 0x4) socket$alg(0x26, 0x5, 0x0) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f0000bc5000)=[{&(0x7f0000851000+0x942)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f000051a000-0x18)={0x0, 0x805, 0x3, &(0x7f0000831000)}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fgetxattr(r0, &(0x7f0000a2b000-0xd)=@known='security.ima\x00', &(0x7f0000f92000)=""/199, 0xc7) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00007d3000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00007ac000)={0x1, [0x0]}, &(0x7f0000cd2000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000feb000)={r2, 0x50e8, 0x2}, &(0x7f000038f000)=0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000cb1000-0x9)='/dev/vcs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00007ae000)={0x0, 0x7}, &(0x7f0000c0e000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000526000)={r4, 0x100000000, 0x30}, &(0x7f0000652000-0x4)=0xc) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00003dc000-0x98)={0x9, 0xfffffffffffff801, [{0x3ff, 0x0, 0xef}, {0x5, 0x0, 0x5}, {0x2000000000000000, 0x0, 0x5}, {0x1f, 0x0, 0x200}, {0x7, 0x0, 0xca}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0xfff}, {0x9, 0x0, 0x100000001}, {0x1, 0x0, 0x5}]}) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000ef3000)=0x471, 0x4) ioctl$sock_ifreq(r0, 0x1000080000089f1, &(0x7f0000569000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="01000000090002fbff031d000001000000000000000003000480fbf502007e23"}) 2018/02/16 18:03:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000a7000)={0x80000000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={@common='rose0\x00', @ifru_flags=0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) membarrier(0x9, 0x0) signalfd(r0, &(0x7f0000e0f000-0x8)={0xfff}, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x2) [ 182.440334] binder: 29131:29136 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.448235] binder: 29131:29136 got reply transaction with no transaction stack [ 182.455764] binder: 29131:29136 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000edd000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f000081f000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00005fc000)='/dev/ptmx\x00', 0x101001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fde000+0x49f)=0x19) read(r1, &(0x7f0000f76000)=""/113, 0x71) r2 = dup2(r0, r0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000194000)={0x8, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x2, 0x2, @loopback=0x7f000001}, {0x2, 0x1, @loopback=0x7f000001}, 0x1, 0x3, 0x7ff, 0xc9, 0x0, &(0x7f0000a64000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x8}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000dcf000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000c61000)={0x92, 0x6, 0x2}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000db0000)='/selinux/enforce\x00', 0x80000, 0x0) 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000510000)={0x200000001, 0x8a, 0xff, 0x5, 0x10}, 0xffffffffffffffa7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000006000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00006e8000-0x20)={r0, &(0x7f000000e000-0x1000), &(0x7f0000fef000)}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f000007a000)='/dev/admmidi#\x00', 0x6, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00007bb000+0xa7a), 0x2) syz_open_dev$midi(&(0x7f0000156000-0xb)='/dev/midi#\x00', 0x9, 0x2000) pipe(&(0x7f000062e000-0x8)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000533000-0xc)={0x0, 0x0, r0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x84}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x3e, &(0x7f000001c000-0x103e)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) connect$vsock_dgram(r1, &(0x7f000059d000-0x10)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10) [ 182.572559] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.581939] xt_connbytes: Forcing CT accounting to be enabled 2018/02/16 18:03:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f000014a000-0x56)=""/86, 0x56, 0x40, &(0x7f0000abc000-0x1c)=@in6={0xa, 0x1, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x7fff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:18 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000-0x28)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000002000-0x10)={0x1d, r1}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000004000-0xdc)="050000007a78d9f1ef2e32fc0b98ab3eac3b0db574af0000f11368a82cc15eb4037dc100000000000000002c01fb97470500000000000000", 0x38}], 0x1}, 0x0) close(r0) pipe(&(0x7f0000009000-0x8)={0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f000000a000)=0xfffffffffffffffd) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r2, &(0x7f000000a000)) 2018/02/16 18:03:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000094d000)='/dev/dsp#\x00', 0x5, 0x30080) bind$llc(r0, &(0x7f0000b37000)={0x1a, 0x15, 0x7d8, 0x100000000, 0x0, 0x3ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f00008ee000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00002c7000-0x4)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000939000-0x28)={@generic="71865e1e4e37fade66d4183f7a32c58b", r2}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00001aa000)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) 2018/02/16 18:03:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000077000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000125000-0x18)={0x0, 0x3, 0x7db, &(0x7f000032c000)}) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00003f3000)={[{0x100, 0x7, 0x3ff, 0x2, 0x6, 0xfffffffffffffffc, 0xffffffffffff8001, 0x0, 0x7f, 0x288b, 0x80000001, 0x8, 0xbf}, {0x9, 0x1, 0x7ff, 0x5, 0x5, 0x6, 0x100, 0x80000001, 0x20, 0x4, 0x8, 0x400, 0x7}, {0xce4, 0xff, 0x9, 0x80, 0x1000, 0x48e, 0x2, 0x1, 0x9, 0x7f, 0xfffffffffffffffd, 0xffffffff, 0x4}], 0xff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000f8d000-0x9)='/dev/kvm\x00', 0x800, 0x0) readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1c9) 2018/02/16 18:03:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f00003e9000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x4c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f000089c000)=0x1) bind$bt_hci(r2, &(0x7f0000d9b000-0x6)={0x1f, 0xfff, 0x1}, 0x6) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f000003c000-0xd6)=""/214) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000da6000)=@int=0x7, 0x4) 2018/02/16 18:03:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f000089b000-0x12)={@generic="f3d3871d2078a8b1956e0242c41a4afd", 0x6}) 2018/02/16 18:03:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000510000)={0x200000001, 0x8a, 0xff, 0x5, 0x10}, 0xffffffffffffffa7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000006000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00006e8000-0x20)={r0, &(0x7f000000e000-0x1000), &(0x7f0000fef000)}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f000007a000)='/dev/admmidi#\x00', 0x6, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00007bb000+0xa7a), 0x2) syz_open_dev$midi(&(0x7f0000156000-0xb)='/dev/midi#\x00', 0x9, 0x2000) pipe(&(0x7f000062e000-0x8)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000533000-0xc)={0x0, 0x0, r0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x84}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x3e, &(0x7f000001c000-0x103e)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) connect$vsock_dgram(r1, &(0x7f000059d000-0x10)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10) 2018/02/16 18:03:18 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000828000-0x4)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000dc2000)={0x0}, &(0x7f000026f000)=0x3b8fe37ac30c5af9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f00009d7000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f000006b000)=0x0) getresuid(&(0x7f00002c6000-0x4), &(0x7f00002b4000-0x4), &(0x7f0000cd7000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0}, &(0x7f0000ff5000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r14 = open(&(0x7f0000001000)='./file0\x00', 0x1, 0x2a) r15 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x8, 0x6, 0xcefb, 0x0, 0xffffffffffffffff, 0x5}, 0x2c) r17 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00009fc000)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000001000-0x30)=[{&(0x7f0000001000-0x438)={0x438, 0x17, 0x600, 0x4, 0x2, "", [@typed={0x50, 0x92, @binary="3c840ed658f033e6bde94ab21690fccc7539fed2aba80a863a86776a8c23c80960233f711d5ce2b7118b568ea43f33f580f611ec2dadda4bf16ab7a051e3e87046a6e5da103a"}, @nested={0x3ac, 0x6c, [@typed={0xf8, 0x5b, @binary="2b0818d9627fd86490bf1ffae223421481b4d3b14d75258e2542476d174ba49aab09cd98e93c72f30d159bcce708925ae9749b6a21c2637fbf5e19ebacf9e543ff090ee9399d2cf8d8b840705d9eba8bc5c7068fa2b0309f68579440bdd959851dcbf38d6628b2f01c1714070f9872b2247b2802460daddb7120d480816c195b9c3ee0f37ca01779e24fe04714717938c532cd393a735e69759f6469db956bc7c7bf5e0acb7dce0db1e45c85d87050d0f4cfeca2d670267798975255f4d46c8cef2277348ef58642b728183e61d41fe4f40d4688d20a3898829bd44d0c55bd45e4908ac82ebee4b73d3d9de144"}, @typed={0xc, 0x85, @fd=r1}, @typed={0x18, 0x200, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="3be7e1b305ecfe0762c5d0da67fa9fc99ee2ba7e9b1a61eb14b7bcea8cefbaeca949ff75ec1e613364af76d5054e32d70d038ab1852389716d6308ead23768da435752c65dfad7160c44eab04694f3451340a36eb8cbaf28046e3c5c81db2e60ac0feda49d9806bcef0c32b82a405a153a99a3f11996c09239b47ae10e2fec", @typed={0x24, 0x8c, @binary="9525afc791b5c0645bbd83ebad4cfe90545a71c8c1d6059194bd9f"}, @generic="7ff2c2648a8ce8418b071f31afe2e12bd3d9095e7fdc09addc82856c8cd360323de17dc8bda080f51eeef933d2bac3b989788cd17c2ec8f3ae7949a3f8f848f746e6a966969b3c8a8d89904beffe70c443c27518511c7e3636ab99375eded92da5f6806908ae5ca85abeac053d95bdfd8a5df1690f0d5c7b96db8b0f6859e70ccca3b508a0d3fc3560d1835a3a6d6e07ea6dc70d28850a4e6a453fd1db426a8fc8c75b8f1003ab99e8b2a7e812e558dcfa5921c59f84f7e1686ba165e6b526e2fbcc9e19462a19c56ad3a01d02406a7f", @typed={0xc, 0x60, @u32=0x30}, @generic="777cb383eff7698a095b687cf622ae5f50a75aecb5573366f004c315172c6b2557167125645628feb781b0d5b46ce268f1a4e6dfb28e2e4e39e2905184626398ec35a69d5fd0854ef3fc68bb6c1a74a4b61a43fb8bd9bb697c586ed336249f4ff5405491da3894717d86fa87557d216896b79d36823e12fab30128e342536598af4e653ac8500c2cbded505f761d3b01c5db74764e362eb393562fa012e3c95348a2d5f999d58a3a7a92c84d053a2b1610a1ecfeeedc78ef53d1", @generic="c7e6caec2ee6bfea83b714f6fb1325ce61e9a5a4ac41e2593a2ad5d0935aedfee45f3fbf29fb2c9924c17f4b252001001712f7b28989a635e4056fb4d2150920a1", @typed={0x10, 0x14, @u64=0xdd6}]}, @typed={0xc, 0x32, @pid=r2}, @typed={0x18, 0xb, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x7e}]}, 0x438}, {&(0x7f00009a1000)={0x104, 0x1d, 0x1, 0x5, 0x0, "", [@typed={0xc, 0x10, @ipv4=@dev={0xac, 0x14, 0x0, 0x14}}, @nested={0x68, 0x73, [@typed={0x64, 0x94, @binary="8183222fa34fb11d53b03e25053a265f5a25fd142afb41291ec3ca191ae5b10ac56e273fa20ece4244762c8fb2297a23c0a95a1d7f8e9914f643541dacc629e964cc6c42e01a1e04c28d8404841d8ac095fd8111bf7738883a78"}]}, @generic="9fc14d54050aa840057f033d21ba62ae2e5af2fefc07df250eb4ef3f0295e881d5d1f0aafc6fbd312939098915bb9c0b5b8d79e80de3b5acbb295da36a44d7f30e0c8378278b0aabccefa50544f0b2aef2dead49b55c3d0cad916a3154408454ca6e071e54c892db6adadd98621107e80b7a29a3c3c2220faeda9d0cc7fc8b"]}, 0x104}, {&(0x7f0000392000)={0xd8, 0x2a, 0x24, 0x2, 0x0, "", [@generic="00ea06ad35d6b6434733a93cba8e013693c88061c0a78a2488", @typed={0xc, 0x31, @ipv4=@multicast1=0xe0000001}, @nested={0x58, 0x3b, [@generic="dbf4b84d1204fcaa36366d2806147448", @typed={0x18, 0x22, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0xc, 0x39, @pid=r3}, @typed={0xc, 0xf, @str='\x00'}, @typed={0x14, 0x5a, @str='nodev$&proc\x00'}]}, @typed={0xc, 0x78, @pid=r4}, @generic="b076e3d37450b7600723d3df1450362ed3a893b41423f45799b917391b5a98a941f24e4a5ef27839928cd928bc59e7aec217ad0f325b01ea4d90eaa45b2911"]}, 0xd8}], 0x3, &(0x7f0000001000-0xa8)=[@rights={0x10, 0x1, 0x1, []}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r14, r15, r16]}, @rights={0x18, 0x1, 0x1, [r17]}], 0xa8, 0x4}, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f0000b48000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r19 = accept$alg(r18, 0x0, 0x0) r20 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r20, 0x2, 0x0, 0x200) sendfile(r19, r20, &(0x7f0000bb9000), 0x8) 2018/02/16 18:03:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r1 = memfd_create(&(0x7f0000d54000)='vboxnet1\x00', 0x2) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000e84000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwrite64(r0, &(0x7f00005e2000)="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", 0x1000, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000516000)) write$vnet(r1, &(0x7f0000dda000-0x68)={0x1, {&(0x7f0000595000)=""/159, 0x9f, &(0x7f000043b000-0x70)=""/112, 0x0, 0x7}}, 0x68) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00006b8000-0x20)) 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000004c000-0x4)=0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f000050d000-0x8)={0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000e1d000-0x9)='/dev/dsp\x00', 0x8402, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000ae5000-0x6)={0x4a6, 0x7e}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e46000)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000007e000-0x8)={0x0, 0x0}) kcmp(r0, r1, 0x5, r2, r4) r5 = socket(0x11, 0x803, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f000054e000)=@req3={0x7430000000, 0x8b9, 0x0, 0xfffffffffffffffc}, 0x1c) 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00007a5000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00004e4000-0xb), &(0x7f0000e04000)=0xb) [ 182.724935] binder: 29179:29184 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.732836] binder: 29179:29184 got reply transaction with no transaction stack [ 182.740394] binder: 29179:29184 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000188000-0xa)='/dev/cuse\x00', 0x808010000080805, 0x0) socket$inet6(0xa, 0x80005, 0x685b) fcntl$getownex(r0, 0x10, &(0x7f0000384000-0x8)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000ae000-0x8)=&(0x7f0000c3d000), &(0x7f0000295000-0x8)=0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000765000)=""/119, &(0x7f00008e6000)=0x77) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000f42000-0xc)={0x1, 0x3, 0x81}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000972000-0x4)) write$fuse(r0, &(0x7f000010d000)={0x20, 0x0, 0x1, @fuse_ioctl_out={0x7f, 0x9, 0x2, 0x4}}, 0x20) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00002f9000-0x44)={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x13}}, {0x6, @empty}, 0x40, {0x2, 0x0, @loopback=0x7f000001}, @common='ifb0\x00'}) openat$cuse(0xffffffffffffff9c, &(0x7f0000e7e000-0xa)='/dev/cuse\x00', 0x10040, 0x0) syz_open_dev$dspn(&(0x7f0000af1000-0xa)='/dev/dsp#\x00', 0x2, 0x80) 2018/02/16 18:03:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, &(0x7f0000bd8000)) 2018/02/16 18:03:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00001bf000)='./file0\x00', 0xe008, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) [ 182.777489] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.840094] binder: 29217:29219 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.847951] binder: 29217:29219 got reply transaction with no transaction stack [ 182.855471] binder: 29217:29219 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x40bffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$urandom(&(0x7f000027b000-0xd)='/dev/urandom\x00', 0x0, 0x280) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f000081b000-0x10)) r2 = creat(&(0x7f0000ad0000-0x8)='./file0\x00', 0x20) connect(r2, &(0x7f0000886000)=@l2={0x1f, 0xa655, {0x4, 0x3f, 0xd532, 0x101, 0x3, 0x4}, 0x5, 0x7}, 0xe) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f000066f000-0x10)={0x0, 0x19ffe}) 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000757000-0x15)='/proc/self/net/pfkey\x00', 0x620000, 0x0) perf_event_open(&(0x7f0000923000)={0x3, 0x78, 0x4, 0x3, 0x12, 0x81, 0x0, 0xfffffffffffffff8, 0x1001, 0x0, 0x1000, 0x0, 0xffffffffffff8001, 0x7, 0x9, 0x2, 0xfffffffffffffeff, 0x1000, 0xca7, 0x9, 0x5, 0xf166, 0xca, 0x1f, 0x800, 0x4, 0xdbdd, 0x9, 0xff, 0x0, 0x20, 0x9, 0x4, 0xff, 0x9, 0x101, 0x5, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000001000-0x1)}, 0x39302, 0x92, 0x1, 0x7, 0x1ff, 0x4, 0x5}, r0, 0xdf, r1, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000346000)='net/arp\x00') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000640000-0x16)='/selinux/checkreqprot\x00', 0x202001, 0x0) readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xfffffffffffffd9b}], 0x1) 2018/02/16 18:03:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f000016b000)='/dev/input/mice\x00', 0x0, 0x630402) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000aed000-0xa0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x10001, 0xfffffffffffffdd6, 0x0, 0x4, 0x9}, &(0x7f00001cf000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f000035d000-0x8c)={r2, @in6={{0xa, 0x1, 0x2, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x8}}}, &(0x7f0000984000)=0x8c) r3 = syz_open_dev$amidi(&(0x7f0000479000)='/dev/amidi#\x00', 0x1, 0x8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000b9e000)={0x7c, 0x0, &(0x7f0000e1c000)=[@increfs={0x40046304, 0x4}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x28, &(0x7f000073e000)=[], &(0x7f0000aa0000)=[0x48, 0x30, 0x30, 0x0, 0x20]}, 0xffffffffffffffe1}}, @decrefs={0x40046307, 0x4}, @decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x2, 0x3}, @release={0x40046306, 0x2}], 0x65, 0x0, &(0x7f0000665000-0x65)="24c84f789115d59b014c19b0c006ec008ddeb04929a61ac5f606eb6ebf3d6d347e10bd621f5676fae8d2a7758d26787cabe71173e5867af25796809c3099dc238e29bbe0b4d371d549996144d8475a35bae1c674095d71a467dc4104a5d724ca1d3d7699a3"}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000076000)={0x1ff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) r5 = memfd_create(&(0x7f0000767000-0x9)="2f6465762f6b766cde", 0x1) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000f88000-0x4)={0xfffffffffffffdc8, 0x1, 0x2000}, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000961000-0x4), 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000519000-0x4), &(0x7f000070d000-0x4)=0x4) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00003ce000-0xc)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x4, 0x7}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000045d000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000a0d000)={0xfffffffffffffff7, 0x3, 0x8, 0x8, 0x1ad, 0x6}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r3, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000252000)=0x0) r6 = syz_open_dev$vcsa(&(0x7f000008d000)='/dev/vcsa#\x00', 0x11, 0x40000) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000276000-0xc)={r6, r2, 0xf6a}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000d0b000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r7, 0xc0186419, &(0x7f0000c93000-0x18)={0x6, &(0x7f00001a0000)=""/185, &(0x7f0000304000)=[{0x4, 0x1000, 0x1, &(0x7f0000201000-0x1000)=""/4096}, {0x8, 0x2f, 0x5, &(0x7f0000566000)=""/47}, {0x1000, 0x1000, 0xffffffff, &(0x7f000054e000)=""/4096}, {0xc905, 0x69, 0x2, &(0x7f0000e18000)=""/105}, {0xffffffffffffffff, 0xd, 0x9, &(0x7f0000561000)=""/13}, {0x4, 0x3e, 0x9, &(0x7f0000180000)=""/62}]}) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f00003e1000)=0xff6, 0x4) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000631000)={0x6, 0x8}) 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f000090e000)='/dev/dmmidi#\x00', 0x5, 0x200001) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000fbd000)={0x3e, 0x4, 0x3a}) syncfs(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000cc5000)={0x80000000, 0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000d8a000-0xb)={0xaac, r2}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000823000)=0x10000, 0x4) syz_open_dev$sndmidi(&(0x7f0000fdb000-0x12)='/dev/snd/midiC#D#\x00', 0x6, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f000085a000-0x8)={0xffffffffffffffff, 0x20000000001000}) 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00005f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2283, &(0x7f0000001000)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000d0d000)=0xfffffffffffffff7) 2018/02/16 18:03:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) pipe2(&(0x7f0000722000-0x8)={0x0, 0x0}, 0x80000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000fbd000)={0x2, 0x1, &(0x7f0000b46000+0x9e6)=""/66, &(0x7f0000df1000)=""/248, &(0x7f0000672000-0x1000)=""/4096}) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000861000)={0x0, 0x0, 0x100000001}, &(0x7f00002a9000)=0x10) r0 = syz_open_dev$mouse(&(0x7f0000b40000)='/dev/input/mouse#\x00', 0x0, 0x4080) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000c37000-0x2)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000c1c000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000e35000)=0x20) clock_gettime(0x0, &(0x7f00008bb000)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00007ea000)={r1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}}}, &(0x7f0000304000-0x4)=0xb8) mq_open(&(0x7f0000059000)='/dev/input/mouse#\x00', 0x800, 0x100, &(0x7f00009d9000-0x40)={0x6, 0x100, 0x4, 0x80ee, 0x0, 0x7, 0x6, 0x8}) sendmsg$nfc_llcp(r0, &(0x7f0000841000-0x38)={&(0x7f000022e000)={0x27, 0x8fb, 0xfffffffffffffffc, 0x1, 0x6, 0xb38, "8e822683b60dd238a8ab59bf63b4dc1c9da106a97c8a191cc8017f34e343c046da82f520a8f3af4ea6de7677b5095387d6d6adba2d1153c24e151c0fd1bdc5", 0x5}, 0x60, &(0x7f0000e46000)=[{&(0x7f0000fc5000-0x8b)="5cf4126e4d41b5a58a25905b0dedd8c2a48479ef857a5cfbf250a1e424c2ec6a74ecf120e711aeca5258e94cdfaf0bd54a285bacbf3ed26f322bd50f92149e0c2f5bb0831d5bd8a8f71b399e89d1bacd4731370761d27ad0d2d427e0275e30027b1d45d9cc4e29893ce677a1888887bfd4e0537518236a88eb60db19b2be468ff996b956a2eb31b25cdf50", 0x8b}, {&(0x7f0000284000)="909787beb3fdd70c3ac87bd3497545114dff5490af283992a834eb56728198324b73759fa61cf6cf274de4372e72cdad0134c95246123dd1ee0832a8dfe439d6bab4a81e8775ba9514cc6d9c5cf8c0fb46478e3e0766d79b29b41f4117f49a285c1b0890dc80ffe36dea42d0cc119361f0a29c5cafa962422019a1454e1761cf73c23470d3", 0x85}], 0x2, &(0x7f00001c2000-0x68)={0x68, 0x113, 0x3, "855a38747068f1e76b6a714accd423f5957211dfa07bcd8346daece8cccc58c4260958dce09cd909ac323f699ddd7da8931b181bc3463fc73f41238f9523e116a92d97878ef34f967f8ca177a2bb9c55872494a5"}, 0x68, 0x51}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00005f2000)) [ 182.894606] binder: 29217:29225 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.902569] binder: 29217:29225 got reply transaction with no transaction stack [ 182.910055] binder: 29217:29225 transaction failed 29201/-71, size 0-0 line 2757 [ 182.930131] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.935666] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.982426] binder: 29239:29240 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 182.990291] binder: 29239:29240 got reply transaction with no transaction stack [ 182.997803] binder: 29239:29240 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xea5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000b72000-0x9)='/dev/ppp\x00', 0x8801, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000049000)={0x9, 0x2, 0x7, 'queue1\x00', 0x9}) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f000063d000-0xa)={0x9, "ebc5480e9743"}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00002c6000)=""/4096, &(0x7f0000000000)=0x1000) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000cad000-0x10)='/selinux/policy\x00', 0x0, 0x0) getpeername$ax25(r1, &(0x7f0000ed5000), &(0x7f0000447000-0x4)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000fff000-0xc)={0x2000}) 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000f29000-0x38)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f00003bf000)={&(0x7f0000517000-0x40)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x12, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_XDP={0xc, 0x2b, [@nested={0x8, 0x3, []}]}]}, 0x40}, 0x1}, 0x0) socketpair$ax25(0x3, 0x5, 0xa995e01bc10509fa, &(0x7f000013e000)) 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000b6b000-0x8)={0x0, 0x6}, &(0x7f00008d9000-0x4)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000816000-0x8)={r1, 0x7}, &(0x7f0000b97000)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000007000-0x10)={0x0, 0x2c, &(0x7f0000007000-0x29)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f00005f5000-0x3)=0x10) [ 183.025478] binder: 29239:29249 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.033335] binder: 29239:29249 got reply transaction with no transaction stack [ 183.040842] binder: 29239:29249 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000822000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f00009c1000-0xb)='/dev/adsp#\x00', 0x57cc, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00006fe000)={0x9, 0x2, 0x6}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00005c4000-0x10)={0x0, 0xffffffffffffff5b, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty, 0x5}]}, &(0x7f0000f92000-0x4)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00001a3000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18}, [@alu={0x1, 0x0, 0x6, 0x0, 0x1, 0x27}], {0x95}}, &(0x7f000073f000-0xa)="73597a6b618f6c65000d", 0x8000, 0x1000, &(0x7f0000b6d000)=""/4096}, 0x48) 2018/02/16 18:03:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) syz_open_dev$binder(&(0x7f000082c000)='/dev/binder#\x00', 0x0, 0x2) 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) vmsplice(r0, &(0x7f0000504000)=[{&(0x7f000050d000-0x70)="3edb274694077636da4827683903edda64d9bfa7c988381510c1e61587a37ae647980aef0765c0d3b3081262cf3878e44885a8e88b71a21469ea9d293e431dcfd945748addded69e22bfecb9a1fe567da3295fc0d0512c6add9c3ab84ad5acba0b87669b5306bfea450e58b3f66b87d7", 0x70}, {&(0x7f00005a1000)="d7f77932e4f86fe1fa", 0x9}, {&(0x7f0000f49000-0x13)="20af7359cbd52de1c8979b876914c22e8eca40", 0x13}, {&(0x7f000070c000)="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", 0x1000}, {&(0x7f0000ded000)="9b84adaca02fc1714dcfb671df9075c397804c482001ab16d1f432bda68b4611fe1a0021b939ffc485184d66425ebf2c4b09731bfd3646f133687c5056e41100a6581311e3919a025a38477028d35dc7b1", 0x51}, {&(0x7f0000886000-0x6b)="8ae2f498c023d4389405fa45bd5401ba318ee3bf2b9ffdcef6b85a117aaa20de09e74758caeb3b2a0a5c98c139e8593aa381e1d8b828a5b14ee95eb7c319f83248e7335b035f1f595d98adf1a398ecec91387d23a0a324ad9736331406a00702e87dc2a08dd7c50f6c6f3e", 0x6b}], 0x6, 0x5) 2018/02/16 18:03:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000325000-0x9)='/dev/kvm\x00', 0x20000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 183.082924] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.088869] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0xb9e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x40000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000967000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f000042d000)=@sack_info={0x0, 0x61, 0x1}, 0xc) [ 183.140764] binder: 29263:29268 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.148594] binder: 29263:29268 got reply transaction with no transaction stack [ 183.156083] binder: 29263:29268 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/16 18:03:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f000009a000-0x3)) rt_sigtimedwait(&(0x7f000033f000-0x8)={0x1000}, 0x0, &(0x7f0000dce000), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307, 0xfffffffffffffffc}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000028f000)='/dev/autofs\x00', 0x240082, 0x0) connect$pptp(r0, &(0x7f0000223000)={0x18, 0x2, {0x3, @broadcast=0xffffffff}}, 0x20) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) pread64(r0, &(0x7f0000c43000-0x60)=""/96, 0x60, 0x39) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000559000)='/dev/dsp\x00', 0x10080, 0x0) readv(r1, &(0x7f00000d2000)=[{&(0x7f00009b3000-0xc3)=""/195, 0xffffffbe}], 0x1) 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 18:03:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000219000-0x8)='./file0\x00', 0x40000, 0x40) fchmod(r0, 0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000407000-0x10)={0x10001, 0x10a000}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x80, &(0x7f0000001000-0x25), 0x0) socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_out(r0, 0x5460, &(0x7f0000115000-0x8)) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x200244, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000002000-0x108)={0x0, @in6={{0xa, 0x0, 0x8dd, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, [0x4, 0x1, 0x8000, 0xb4, 0x1ff, 0x6, 0x7f, 0x9, 0x2, 0x80000001, 0x1f, 0x1, 0x0, 0x10000, 0x6]}, &(0x7f0000002000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000000)={r4, 0xca, "91f4ac5b2e40e169a459b01636d18c3c39cf247f22bc8764cb699604fbbf16419f543e5b94742bc7741c037428a9b62655512afa6672c75b002865c808464030d07f00b1962f28f17c81fffcabe27b26357b5a7978b3fd638281a5595687e60a7b038431a02db7a22b1743103bd88c5e7ed95d6dc1fa0f1a91f97f0758b7cd7d7037f4fe87460776a254c8ec83c46b041df62a25c49dca3105785e7b0cdab7a6fcf190b2a8aaafd80a0edd7ee023324c999916393b716a18082ae83af5bc647ce98648bedf028ace451a"}, &(0x7f0000001000-0x4)=0xd2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000004000-0xc)={0x10, 0x0, 0x1, 0x10002000}, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000002000)={r4, 0x6}, &(0x7f0000002000-0x4)=0x6) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000004000)={r5, 0x8}, 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000001000)=0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xb966, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000de000-0x4)=0x6) [ 183.215790] binder: 29263:29280 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.223755] binder: 29263:29280 got reply transaction with no transaction stack [ 183.231248] binder: 29263:29280 transaction failed 29201/-71, size 0-0 line 2757 [ 183.252308] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.258236] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x32, &(0x7f000000b000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x7, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) socket$inet6(0xa, 0x80000, 0x800) [ 183.284461] kernel msg: ebtables bug: please report to author: Wrong len argument [ 183.298210] binder: 29297:29305 DecRefs 0 refcount change on invalid ref -4 ret -22 [ 183.306178] binder: 29297:29305 got reply transaction with no transaction stack [ 183.313686] binder: 29297:29305 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000ddb000-0x8)=&(0x7f0000faf000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000552000-0x148)={0x9, 0x0, [{0x0, 0xd6, &(0x7f0000172000-0xd6)=""/214}, {0x10000, 0x70, &(0x7f00007b0000-0x70)=""/112}, {0x10000, 0x7e, &(0x7f0000c04000)=""/126}, {0x0, 0xc4, &(0x7f000019a000)=""/196}, {0x0, 0x71, &(0x7f0000133000-0x71)=""/113}, {0x0, 0x3d, &(0x7f0000a0a000)=""/61}, {0x102006, 0x0, &(0x7f0000f06000)}, {0x0, 0x25, &(0x7f0000792000-0x25)=""/37}, {0x0, 0xdd, &(0x7f000083f000-0xdd)=""/221}]}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000f33000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000a17000+0xbf3)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000a79000)={0x0, 0x0, []}) 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) [ 183.329695] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000074000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000aa2000-0xd)='/selinux/mls\x00', 0x0, 0x0) epoll_wait(r1, &(0x7f0000d12000)=[{}, {}], 0x2, 0xfffffffffffffff8) getpeername$netlink(r1, &(0x7f0000cc1000), &(0x7f0000484000-0x4)=0xc) 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000c55000-0xa)='/dev/cuse\x00', 0x800, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00003e2000-0x2)=0x9d, 0x2) r1 = syz_open_dev$sg(&(0x7f00008f1000)='/dev/sg#\x00', 0x4a4b917b, 0x100) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f000055d000)=0x96, 0x1ad) syz_open_dev$mice(&(0x7f00001bc000-0x10)='/dev/input/mice\x00', 0x0, 0x10180) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000166000)='/dev/mixer\x00', 0x2000, 0x0) accept4$unix(r2, &(0x7f000097d000-0x1002)=@file={0x0, ""/4096}, &(0x7f000000a000-0x4)=0x1002, 0x80800) syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') 2018/02/16 18:03:19 executing program 4: syz_open_dev$evdev(&(0x7f0000a39000)='/dev/input/event#\x00', 0x401, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000111000-0x90)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000bbf000)=0x200) mount(&(0x7f000066b000)='./file0\x00', &(0x7f0000dff000-0x8)='./file0\x00', &(0x7f000016e000-0x7)='rootfs\x00', 0x211000, &(0x7f0000e2e000)="7536ba0229c045c11f657c432f768ea0523448d1832f0e2961be578de26ee22646a4d515d55e4810b916f551c5b4fa28fc13c1e99cec1bb52e08cd87828b29") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000931000)={0x0, @broadcast, @empty}, &(0x7f000028a000-0x4)=0xc) syz_open_dev$vcsn(&(0x7f00006c8000)='/dev/vcs#\x00', 0x81, 0x200000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003000-0x1c)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xb8, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x88, 0x8, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xb8}, 0x1}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00001ff000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) add_key$user(&(0x7f0000f43000-0x5)='user\x00', &(0x7f0000063000-0x2)={0x73, 0x79, 0x7a}, &(0x7f00002fb000), 0x0, 0xfffffffffffffffb) r4 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000027000-0x4)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00008ec000-0x50)={{0x8ff7, 0xd7f8}, {0x8, 0x4}, 0xfff, 0x1, 0x200}) readv(r1, &(0x7f0000c25000-0x60)=[{&(0x7f00003e6000-0xe9)=""/233, 0xe9}, {&(0x7f0000f14000)=""/192, 0xc0}, {&(0x7f0000c13000)=""/250, 0xfa}, {&(0x7f00005b8000)=""/102, 0x66}, {&(0x7f0000ab5000-0x53)=""/83, 0x53}, {&(0x7f0000de4000)=""/217, 0xd9}], 0x6) fcntl$getownex(r3, 0x10, &(0x7f0000307000)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000756000)='ns/ipc\x00') r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f000058f000), 0x100000000) [ 183.372451] binder: 29297:29317 DecRefs 0 refcount change on invalid ref -4 ret -22 [ 183.380427] binder: 29297:29317 got reply transaction with no transaction stack [ 183.387939] binder: 29297:29317 transaction failed 29201/-71, size 0-0 line 2757 [ 183.447100] binder_alloc: binder_alloc_mmap_handler: 29321 20000000-20002000 already mapped failed -16 [ 183.457239] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.463414] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x1f, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00007d5000)='/dev/ptmx\x00', 0x2000040101, 0x0) write(r1, &(0x7f000022a000)="2f7f4be2b36c5526a5534195cbffffffffffff091715f1ed8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01000000000000ffbf13", 0x5d) ioctl$TCSETS(r1, 0x5402, &(0x7f000055a000)={0xfffffffffffff801, 0x1}) 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f000035d000-0x4)=0x2e, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000191000-0xad), 0x0, 0x0, &(0x7f00006e2000-0x10)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = dup3(r0, r0, 0x80000) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000044c000), 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000562000-0x4)=0x3) 2018/02/16 18:03:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000403000)={0x0}, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f000087c000)={0x0, 0x0, []}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x9, &(0x7f0000002000)={0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$ax25(r1, &(0x7f0000001000)=""/146, 0x92, 0x20, &(0x7f0000003000-0x10)={0x3, {"10434c7318f55e"}, 0xfffffffffffffffb}, 0x10) r2 = accept4(0xffffffffffffff9c, &(0x7f000033b000)=@hci, &(0x7f0000197000-0x4)=0x6, 0x80800) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f00000e2000)=0x5) mmap$binder(&(0x7f000075a000/0x2000)=nil, 0x2000, 0x4, 0x2010, r0, 0x0) 2018/02/16 18:03:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000fe4000+0x5c1)='/dev/kvm\x00', 0x10000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsa(&(0x7f0000e9b000+0xc99)='/dev/vcsa#\x00', 0x6, 0x101000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f000048b000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1200}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000d7c000), &(0x7f0000feb000)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000417000-0x10)={0x0, 0xffffffffffffffff, @local}, &(0x7f0000000000)=0x10, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f00004fc000)={@empty, 0x0}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000f73000-0xe8)={{{@in=@local={0xac, 0x14, 0x0, 0xaa}, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0x0, 0x3, 0xffffffff, 0xa, 0x20, 0x80, 0x1, r1, r2}, {0x40, 0xfff, 0x80000001, 0x1, 0x1, 0x5, 0x3, 0x401}, {0xfffffffffffffffd, 0xc000000000000000, 0x7}, 0x3, 0x4, 0x0, 0x2ad13f89f63c5889, 0x3, 0x3}, {{@in=@empty, 0x3, 0x3e}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x0, 0x13}, 0x0, 0x2, 0x3, 0xffffffff, 0x544880a8}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000386000)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r3, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00008c3000-0x4)) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f000000b000-0x1c)={0xa, 0x1, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0}}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000015000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80}, 0x1c) bind$inet6(r1, &(0x7f0000015000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x400}, 0x1c) bind$inet6(r1, &(0x7f000000f000-0x1c)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$alg(0x26, 0x5, 0x0) 2018/02/16 18:03:19 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt(r0, 0x84, 0x12, &(0x7f000028c000), 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000001000-0xb)='/dev/adsp#\x00', 0x4, 0x12000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000c47000-0x20)={{&(0x7f00009e6000/0x3000)=nil, 0x3000}, 0x1}) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000017000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000018000-0x4)=0x400, 0x4) bind(r0, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000012000-0x38)={0x0, 0x0, &(0x7f000000a000-0x10)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 183.545056] binder: 29340:29351 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.552910] binder: 29340:29351 got reply transaction with no transaction stack [ 183.560417] binder: 29340:29351 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect(r0, &(0x7f0000efa000-0x10)=@in={0x2, 0x3, @multicast1=0xe0000001}, 0x10) r2 = gettid() timer_create(0x6, &(0x7f0000036000-0x60)={0x0, 0x3c, 0x1, @tid=r2}, &(0x7f0000ce5000-0x4)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00006bc000-0x10)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000493000)={&(0x7f0000c47000)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000ad9000-0x10)={&(0x7f00001a0000-0x1254)={0x1254, 0x4, 0xb, 0x100, 0x1, 0x3, {0x0, 0x0, 0x3}, [@generic="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", @nested={0xac, 0x34, [@generic="8e8a9c94441d0e1518bde708b97162a89b5645425fed106893162123ac0d43f63e92a7477ff5feafe2d9e874e278524607a8fb694172c78492c4879c8b9bf520b39d361921daf61661c69cfbf741432a347818b1e4886050c3c761854a35912dfead0e23d26f703404412eb2974c7fb48241cc0753e31fb1fcbe76ca773ce8e60591bb8c3292895e081db4c579f2061928d2851ffc356d04fcb2aeca3de131fb3400616d84"]}, @nested={0x1098, 0x4, [@generic="9f1a2b0c9027e4b85196b294fe282e2d25bd7f8eee985799e4a3f0ee68ebc173687b986f3ed691eb4bfedc72e5e2d8e83e73e1a8d14345e2d2cb87ea5dd8b9b1d4f4a7c6b45442ca08b0d85dec5fb67bcc08a53f90d7da2698b581d4ec9624885668f5bde8a782fc4ffc90d37c7b4307a51beee6e3f9ff611a66b832ad9b632033b3aa6b7bb711", @typed={0xc, 0x4d, @u32=0xfffffffffffffffd}, @generic="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"]}]}, 0x1254}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f000081d000)=0xdb) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00004a0000)=@assoc_value={0x0, 0x8}, &(0x7f0000d25000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000620000-0xc)={r4, 0x3ff, 0x20}, 0xc) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000334000)={0x9, 0x1000}) 2018/02/16 18:03:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000ba5000)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00001db000)=""/216, &(0x7f00009aa000-0x4)=0xd8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00006b9000)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x0, 0x0, 0xffffffff, 0x280, 0x280, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f0000bcc000), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@empty, @ipv6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @port=0x1, @port=0x3}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x17, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, @icmp_id=0x2, @port=0x1}}}}, {{@ip={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0xffffff00, @common='irlan0\x00', @syzn={0x73, 0x79, 0x7a, 0x0}, {}, {0xff}, 0x6c, 0x4440c9ede805b4a0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x2, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xc, @empty, @empty, @port=0x1, @port=0x1}}}}, {{@ip={@empty, @remote={0xac, 0x14, 0x0, 0xbb}, 0xffffffff, 0xffffff00, @generic="a598373fc661256afdf5d25f49fae7bb", @common='gretap0\x00', {0xff}, {}, 0x6e, 0x1, 0x10}, 0x0, 0x150, 0x188, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x7, 0x9, 'kmp\x00', "ba96268abe52af8926ec3904f227d914be50717e6c7a2cfb240455ddca98fb4f57819d9237eda650f006e374bd34bb267e0af99b6f4bb5d517c78bfda7078a312e4e52c6b60ede108743ed40d100df17ca781bb26df95464809c2cc92f8e9d029467a3793d4f318d947aff2c397d0876f410fa82f230cb87f7b3ef786cd68b08", 0x28, 0x1, 0x7ff}}, @common=@socket0={0x20, 'socket\x00'}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @multicast1=0xe0000001, @multicast2=0xe0000002, @gre_key=0x4, @icmp_id=0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x500) 2018/02/16 18:03:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) r1 = openat$audio(0xffffffffffffff9c, &(0x7f000027b000-0xb)='/dev/audio\x00', 0x14000, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000100000-0x2e)=""/46) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000e6a000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000373000)={0x3, 0x1, 0x20, 0x400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c8b000-0x30)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000f79000), &(0x7f0000ec1000-0x4)=0xb) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000f3c000)=0x5) sendmsg$alg(r2, &(0x7f000064d000-0x38)={0x0, 0x0, &(0x7f0000ed7000)=[{&(0x7f00009ff000)="84e8666fd379d7c311dd08fa21f42582dc58439a5da2115b09848015f412023ca3961c2e9e269ccbe524ccd7c3a0e3bd7a590a19edb8caf6efd9b5d92684d120", 0x40}], 0x1, &(0x7f0000380000-0x18)=[]}, 0x0) recvmsg(r2, &(0x7f0000751000-0x38)={&(0x7f000092f000-0x8)=@sco, 0x8, &(0x7f0000c2e000-0x30)=[{&(0x7f0000bad000-0x55)=""/85, 0x55}], 0x1, &(0x7f000050b000-0x45)=""/69, 0x45}, 0x0) 2018/02/16 18:03:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00007d2000+0x1c8)=0x20000524a) r0 = memfd_create(&(0x7f000039f000-0x11)='em0keyringvmnet1\x00', 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00006f0000-0x35)={0x0, 0x2d, "a8243e21ca0ee9dbc90451edf6387eb28cebe21bd8bc2a244dae47df549edf6b308f845323df7cd330ae96fdfa"}, &(0x7f0000749000)=0x35) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000b84000-0x8)={r1, 0x5, 0x100}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006a7000-0xa)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f000001d000-0x2)="b6", 0x1) ioctl$TCXONC(r2, 0x540a, 0x1) 2018/02/16 18:03:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000f6000-0x8)='./file0\x00', 0x80, 0x40) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) [ 183.583059] audit: type=1400 audit(1518804199.892:221): avc: denied { bind } for pid=29364 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/16 18:03:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$netrom(0xffffffffffffff9c, 0x0, &(0x7f00008f2000), 0x0) r1 = socket$packet(0x11, 0x0, 0x300) sendfile(r0, r1, &(0x7f0000683000), 0x2) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) dup2(r2, r2) 2018/02/16 18:03:19 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00008da000)='cgroup:vboxnet0\x00', 0x3) r1 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000f93000-0x8)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d7e000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000fc6000-0xe8)={{{@in=@multicast2, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@mcast2}}, &(0x7f00009f7000-0x4)=0xfeee) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000014a000-0x50)={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0xffffffffffff7fff, 0xfffffffffffff000, 0x400, 0x4, 0x100000, r3}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00003f1000-0xe8)={{{@in=@empty, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000d08000)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000073d000)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x0, 0xe}, @mcast1={0xff, 0x1, [], 0x1}, 0x6, 0x0, 0x7, 0x0, 0x4608, 0x80820000, r4}) r5 = syz_open_dev$sndmidi(&(0x7f0000187000-0x12)='/dev/snd/midiC#D#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000a85000-0x55)={0x0, 0xffffff2c, "1605aea659925e87801ce1a0099df31282d2b70dca9a41be00000000000000077788bd9a89569e03b1237645e14b4b193086c5eb9e40d843f2f29c34f9b192cc872f21933c9ff81920cfc6d06c"}, &(0x7f00009eb000-0x4)=0xffffffffffffff93) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f000035e000)={r6, @in6={{0xa, 0x2, 0x9, @dev={0xfe, 0x80, [], 0x0, 0xf}, 0x3}}, 0x4, 0xd8}, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f00003de000-0xa)='/dev/cuse\x00', 0x8001, 0x0) name_to_handle_at(r5, &(0x7f000087e000)='./file0\x00', &(0x7f0000606000)={0x90, 0x7, "6e29e23db3504256bb769776e88e170e91c05b4bcc0bc4cb092b59737d7edede6242cc25687850f2965bb05c2684223954f0678166d2e21d92d68a87dbaf51d956a332ff787c18f8e8b8f628e87d10657e88366b9f3748ef0825b1decbc58628c466ce56fca6277fbe85a25e3d49c56f9416dd92468a2f85e637e7a159d666515637fe95f98d33a4"}, &(0x7f000088d000-0x4), 0x1000) r7 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:19 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000002000)={{0x0, 0xffff}, 'port0\x00', 0x0, 0x840, 0xc89, 0x8, 0x1c37, 0x6, 0x8, 0x0, 0x4, 0x7}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x5}) unlinkat(0xffffffffffffffff, &(0x7f0000012000)='./file0\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000012000)='/dev/sequencer2\x00', 0x800, 0x0) connect$nfc_llcp(r1, &(0x7f0000002000-0x60)={0x27, 0x1, 0x0, 0x7, 0x200, 0x4, "e7a570e280129de506ad1cecdf9b795f265bb1a40b6d51321c2972fcdaf4ece3b943fdfc2dda2fddaab4527aac4461ca57be73ffd85b2fa5197932e09027e5"}, 0x60) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000012000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00007dc000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 183.643678] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.696605] binder: 29381:29384 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.704519] binder: 29381:29384 got reply transaction with no transaction stack [ 183.712135] binder: 29381:29384 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KDDELIO(r0, 0x4b35, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f000006d000)={0x0, 0x0, &(0x7f0000aed000)={&(0x7f0000222000)={0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) pipe2(&(0x7f0000e06000-0x8)={0x0}, 0x4000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00005e4000)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f000000c000)={0x3, 0x0, &(0x7f0000c6a000-0xe0)=""/224, &(0x7f0000e0f000-0xa5)=""/165, &(0x7f0000177000-0x72)=""/130}) 2018/02/16 18:03:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d56000)='limits\x00') getpeername$unix(r0, &(0x7f0000cc4000)=@file={0x0, ""/42}, &(0x7f0000eb0000)=0x2c) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) socket$alg(0x26, 0x5, 0x0) 2018/02/16 18:03:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000a47000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000e7000)={{0x2f31, 0xfa}, {0xfffffffffffff1b1}, 0x5, 0x7, 0x6}) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/16 18:03:20 executing program 4: r0 = socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0xa000) setsockopt(r0, 0x10f, 0x87, &(0x7f0000a94000), 0x0) 2018/02/16 18:03:20 executing program 5: mmap(&(0x7f0000000000/0x3d000)=nil, 0x3d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0x228, 0xc8, 0xffffffff, 0x2d0, 0x180, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, &(0x7f000001d000-0x50), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv6=@empty, @port, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1f, @multicast1=0xe0000001, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c8) mmap(&(0x7f000003d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000010000-0xf8)=""/248, &(0x7f000003e000-0x4)=0xf8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000d000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000031000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) mmap(&(0x7f000003d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000026000)=[], 0x5, &(0x7f000003d000)=[], 0x2fb}, 0x4000000) 2018/02/16 18:03:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') open_by_handle_at(r0, &(0x7f0000798000)={0x9d, 0x2da, "b1e12c8bb7e492315ec24a4706a3296fc7418ead763377c5c54af42fe9af04d79ee2f386aac44f89affbcd17061101432086f63451d01092d5867600fa421a849c00655d87ba80ac90223a685ae50327144f2cd4b801ff23f36b12ed7731ed1cd0333dec861ea4439d5a0c06af92da004eeb253ea99c198ac7318676b95dc8ed7e0d03e8f1d2a833a6904fc95f1cf11d43bc6fa5bb"}, 0x100) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005db000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x3f, 0x7fffffffffffff07, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000542000)=@pic={0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 183.778487] binder: 29381:29396 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 183.786274] binder: 29381:29396 got reply transaction with no transaction stack [ 183.793743] binder: 29381:29396 transaction failed 29201/-71, size 0-0 line 2757 [ 183.811455] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.816976] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000a04000), &(0x7f0000c1e000-0x4)=0x8) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xff) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x50, 0x0, &(0x7f0000c6c000)=[@dead_binder_done={0x40086310, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000ef0000-0x18)=[], &(0x7f0000951000-0x8)=[0x28]}}], 0x0, 0x0, &(0x7f0000fa5000)}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f000052c000-0xb)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000ee1000)) 2018/02/16 18:03:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000253000)) ioctl$TCSBRKP(r0, 0x5382, 0xffffffffffffffff) 2018/02/16 18:03:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000e04000)='@\x00') r1 = inotify_init1(0x80800) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000019000-0x102a)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@echo={0x8}}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000014000)=0x80, 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f000001d000-0x4)) 2018/02/16 18:03:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@dev, @dev, 0x0}, &(0x7f0000001000-0x4)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000888000-0x50)={@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x3, 0x3, 0x8, 0x100, 0x7fff, 0x990158, r1}) 2018/02/16 18:03:20 executing program 5: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f00003df000), 0xfffffd21) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/dsp\x00', 0x900, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0xffffffffffffff4d) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000001000-0x58)={{0x40, 0x1}, 0x1, 0x4, 0x9, {0xffffffff, 0x400}, 0x1, 0x6}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000001000-0xc)={0x3, r0, 0x1}) [ 183.897955] binder: 29417:29419 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 183.905687] binder: 29417:29419 got reply transaction with no transaction stack [ 183.913218] binder: 29417:29419 transaction failed 29201/-71, size 0-8 line 2757 [ 183.973906] binder: 29417:29429 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 183.981507] binder: 29417:29429 got reply transaction with no transaction stack [ 183.989135] binder: 29417:29429 transaction failed 29201/-71, size 0-8 line 2757 [ 184.013468] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000097000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f000041a000)}, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00008eb000)='./file0\x00', &(0x7f0000eeb000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) 2018/02/16 18:03:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000ce6000)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000438000-0x4)=0x0) rt_tgsigqueueinfo(r1, r2, 0x39, &(0x7f00002cf000-0x10)={0x21, 0x8000, 0x8, 0x9}) 2018/02/16 18:03:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f000097b000-0x8)={0x0}) r1 = timerfd_create(0x1, 0x0) sendfile(r0, r1, &(0x7f0000cb5000), 0x0) r2 = memfd_create(&(0x7f000074a000-0x13)='+\x00', 0x1) fcntl$lock(r2, 0x5, &(0x7f0000827000-0x20)={0x0, 0x1, 0x3f}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f000040f000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000c6e000-0xe8)={{{@in=@multicast1, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@loopback}}, &(0x7f0000f9a000)=0xe8) r5 = getegid() sendmmsg$unix(r2, &(0x7f0000dac000-0x38)=[{&(0x7f00008c1000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00005e9000-0x80)=[{&(0x7f00001b5000)="8ab76dbc19394ec964b6cda36b99e2ae5a412b6b1825230cc8abaea4726cd7549e1605748652ab73f15458d376bf5b83a64390448d", 0x35}, {&(0x7f0000439000-0xe4)="822477e1d2f7d30efa062f84a47d1b01721134805c70cb3395551df374203767c9edf8e3aeec188e4ed1ff4b94039d62a4de22869bae8f9cfc17ce0ab8756010be8d8cd2f8258371e80851f6abaa20fe02bcbbaa05220fad1467ba70afc3d88cb82150d6b3d2f64f9583cd64322abb3fd4279468dbf6d3b0eacd8101ebf2e0ddebac809a27996869394a06ad6789873aee0284e167ec304b53ed9661d76939d02a993cd6050039a45e0384a17ee3590a1d424b1cc39053143e89f334646aef6a94447cf84754d58bd618917e5131b2b7e10b614b147fa41771363e899135eeda82688634", 0xe4}, {&(0x7f000062b000-0x6e)="de33868f6bff7002fefdf8b5b9197eda95ea6a03b7ab2f40aa6cf6136d0cd1b8107446b988996d8db05e8642d9532097eb3531c169fa9deb715adc0e14d7a1e7883a1de61d125bb5d0b127abe945687dafaaffe77d49a706a87a440fad67f72bbce884ea55f038a43637e8678582902c0ae87a63cfd65e55112884d3056b57ef6d", 0x81}, {&(0x7f0000c52000-0x1000)="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", 0x1000}, {&(0x7f0000368000-0xa7)="f54ebe41ad44cd80b304397335b7b8a0fb51f42b3e0adcc8863eceb377e8ed8f0362c884cf5341e3bb416679830b6feeebfa0518527f1f6b8637889b712e901fb53f93b292a49e839d7805fc8025a2868dd700787b45f8797933edc4b9e0360d079d97df42ff782b05f015c12292fc03581abd59230cc0584cfc27c1a5e2fb8ebec52c5250b4e9a655572e998d83c202a3112ad6712fd00749eaa8deb3d648d33cd6728fefd224", 0xa7}, {&(0x7f0000861000)="0fa8d8a399acca32dcdeb78df75cf122bc2a85bb2a655acf9ee66c745bae996c4e7b077440d82648215092ea2e655a1112b4dd4a817c09c93780d78806788c878ea73963817acd0e24056497ee59935d1c3cf84f03ff558edceda8087a59f22334ce093ef10552c9a8d618493c58d5cc7f86e58484fd900a90b543bf3986e4f9568ba58fd7dbdda8b35a6e94d16a22b78ad28a8e4159056ea354ad06e8259f471e91eaaeafcfa52f8b2b4e4ef8335f50b549", 0xb2}, {&(0x7f000018c000)="4fa6326d10173f5e2ec1ea5a7150178633551eec69d16456bd7268a545b5f2222f03ba17575fc06fcf26cbf724b1057ef78561803d78b3b6c1ca55cce8f27c3c5534dd64eda699311dcbc9b1300bbbff40852d5c492c04e3374321330c05aa916a180b64d51bcbcba72853734e", 0x6d}, {&(0x7f000032a000)="cd21c0f7b557d0af09c9b94e5ac6f2de51e4e0b4def47ba9a7769b457913f54dbeef69ae996fa37abb3236066faeafa039417ca9e23d8e9ec245e6e5bc163decf9ed2fa91e80fd1cb48e56ea532aa3e0c9d74843ac09470b33682c012e4a4001caeb44974b46d78a396032a69454f2f420fa435631c5a01a0aeecad26ea5987e5d92a39e5f93e2dcc587396df17deafd0cde53876b6816095644c202a901772b6eb8abdecbb6461c50eebd3ad4e7da7438da2ecf4be8622c6154a04bcd44a24f6f414edffa319d5f458137", 0xcb}], 0x8, &(0x7f0000557000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x20000005}], 0x1, 0x800) 2018/02/16 18:03:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000d28000-0xe8)={{{@in6=@mcast2, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00003e4000-0x4)=0xe8) quotactl(0x1ff, &(0x7f0000261000-0x8)='./file0\x00', r0, &(0x7f00007c5000)="367c0253fe195cd4083a63") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) write$tun(r3, &(0x7f00002a7000-0x30e)=@pi={0x0, 0x9200, @ipv6={0x8, 0x6, "531970", 0x2e2, 0x89, 0x63c, @local={0xfe, 0x80, [], 0x0, 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, {[@dstopts={0x0, 0x0, [], [@enc_lim={0x4, 0x1, 0xff}]}], @gre={{0x0, 0x0, 0x1, 0x9, 0x0, 0xef38, 0x0, 0x1, 0x880b, 0xf7, 0x0, [0x3, 0x2], "684589f4410761a63eb24b6a81c7bcb982ae6f489c18cf46852b29bd2638156f97553b8a1b5405378c2d49d0fda85b607410259a26e49520aa6f767ff5cdef834c1858a52ba3ccffac1e8374e8b55610a1d1a9b749f90a27841020abacb01c457d27d1bf6cbc0e19f771baf55adeb5c4e655d1291644ce2b24327c45af298a10f2a67863d8d485231b550b3a08c3feb80a55c7599bad99112e496caaa03bb6fd903168389baf551c1bad07e8ae3db4411000aff397e712ccc0452bd4b11653648dd1d799e5c23347e93d88a32034af5104a1a6309932f59b9d7182e9eaaf8848b43c27aafddd2244260691724ea5097c1e2c063b89c341"}, {0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800, [0x10d], "d8f251351efb3c26cae46aa42662757378111aaa25106f3e2e8fc779a76822023dc79aa93124db567790faee2cd4dbef8b4e7ff3af1d6d1539ecdd567b2779427b1d9988142ed14c7b95c024c1bd6344ab7760cbcdd7ebdc29a3eab7cdcc89cb7003ce85fb7e47cd55e61e5c59acc8dd7a21f7697d90e621ff1cfeab1e79b4f7d15673c8f9ad1f889e909b7bd3e72c110d867fc353a3333ddf9fec31b2310dde4e5f39f9ea858c9edc49010f9762b802fba794b2e78dbbcff0db795101fb8aee42683e611a8fc6bcfc8587734c4ddc26603af0"}, {0x9, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x86dd, [0xfffffffffffffff8, 0x3, 0x9], "d435e5bc89e74be1b4313b5ef2f4e3187582267f7611d5f3799f22e6c03f4b27f26309a3a96d530fbcf433425037a71195af1dc187217df7158b24f4ce1b58e72767d9991c84f485f60137edc763eb49eb2b06e8a72fe88e66c9f6bdaa0da3647386df120970d8ad22d3726f2b3f2b0165fa0f3b157303ac702915e18bf3c1e0e09a24c185999cd28d734ca529a97039db96088e17b6cab620c66e219e6e81e654a28b209fd9c3559e3db9ff48cfe1671e28516d0bed2c480723fd515ddebdfa94dc60caaaf148acf64172ca8dbc96b7c08de98310a3009d1c00abce47aab479525be5d97d689b421fa0dc7e86569f2518"}}}}}, 0x30e) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:20 executing program 5: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000008000-0x9b)=""/155, 0x9b) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000007000)=""/39, &(0x7f0000007000)=0x27) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4161, &(0x7f0000006000-0x3d)="31a5ef49ef63ef38d4ac549ed873cd6389ccc522a0c48333373bb361cff5b23ed897416f185e5a8acd93469914aba831afff5b4f2b8fc25f5bf2d13086") 2018/02/16 18:03:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f000001b000-0x4c)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(r0, &(0x7f0000002000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, &(0x7f0000001000-0x4)=0x26) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000001000)={0xcd1, 0x9, 0x40, 0x3}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002000-0x9)='/dev/ppp\x00', 0x280000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000002000)={0x1, 0x0, 0x1, r2}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001000)={0x0, 0x7ff}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001000-0xa0)={r3, @in6={{0xa, 0x1, 0x20, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x401}}, 0x3, 0x6, 0x55dee1e1, 0x2a, 0xfff8000000000000}, &(0x7f0000001000)=0xa0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001000-0xa0)={r4, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x16}}}, 0x5, 0x1000, 0x3, 0x46, 0x1}, 0xa0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000653000), &(0x7f0000001000-0x4)=0xc) 2018/02/16 18:03:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000ecc000)='/dev/dmmidi#\x00', 0x2, 0xc0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000a8f000-0x4)=0x2, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000024c000-0xd)='/dev/binder#\x00', 0x0, 0x803) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000a54000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x80, &(0x7f0000522000)=""/254) [ 184.018980] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000423000-0x12)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000f5d000-0x5c)={0x0, 0x2, {0xffffffffffffffff, 0x0, 0x4, 0x2, 0x9}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00002eb000)='/selinux/mls\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/02/16 18:03:20 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000611000)='/dev/adsp#\x00', 0x4, 0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001000-0xc)={&(0x7f0000001000-0x8)='./file0\x00', r0}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f00008ff000)='./file0\x00', 0x48000000) add_key(&(0x7f0000361000)='dns_resolver\x00', &(0x7f00007b5000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000021e000-0x73)="5c4cff01000030b78334881f2b16c5896cf427733623d5b70dc1124fa05f2323dcbfd20de3de3d0000248bfbcf24c61df9c909d1024b9dbaeb02a51dadfffffffffffffffb00021cf987921fe78b2cf0d363432ab65739460344e361d16f2eb25c2689fffffffae11c7567060e19f0222fd3d6", 0x73, 0xffffffffffffffff) 2018/02/16 18:03:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 184.048126] binder: 29442:29446 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 184.055991] binder: 29442:29446 got reply transaction with no transaction stack [ 184.063528] binder: 29442:29446 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="f5", 0x1, 0x0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "f9cf03841b95"}, 0x10) sendto(r0, &(0x7f0000000000), 0x0, 0x20044000, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000cc9000)='/dev/amidi#\x00', 0x0, 0x80000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000930000-0x6)={0x0, 0xff}, &(0x7f00008b9000-0x4)=0x6) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000942000)=@generic={0x9, 0x6, 0x7f}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000600000-0x8)={r2, 0x2}, &(0x7f0000e91000-0x4)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000007000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000008000)={0x0, &(0x7f0000008000)=[]}) clone(0x100, &(0x7f00001c3000-0xe1)="e805ba2ba213d3deb2ef374ef0ce40e8e7cfd677ebf690395555aa76b8cf9032ce003bbcc65c74e18c6c9ab613236291cf488ae44f9c3ffb79d4d46d3fd7c745a55e627511c785cfb21872a0753f88885005f550936a038abe5a9a29637270974bb440e014a3dede21e6514d50e4ea8cd14025e82127c87c1a0dc0dcd9baf45c6db681b5f35695889293d912131e99da89ac6c372d1470854771f39398c5faccbc23dc5728a839b04915e5a46273f7c47f6a5ae10625f2ce32faae130e3f906c0c3dae30a1677f030a64ca295413b99e2fce0ae04ff24950c0b509e4e37bb9df3c", &(0x7f00007b3000-0x4), &(0x7f000042a000), &(0x7f000027b000-0x11)="9ca3e7a4823155917f1ad9a513ef0cea40") write(r0, &(0x7f0000d2f000)="f7f402ea0006f9f2", 0x8) 2018/02/16 18:03:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f00009aa000)={0x7, 0x10000, 0xc48, 0x202}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x8000001, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) sendto$unix(r4, &(0x7f0000056000), 0x0, 0x0, &(0x7f0000a6e000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000d4d000-0x5e)=""/94) fcntl$setflags(r1, 0x2, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000e52000-0x8)={0x0, 0x1}, &(0x7f0000f5e000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000e43000-0x8)={r6, 0x8e7, 0xffffffff}, &(0x7f0000d51000)=0x8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000bc9000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00003d1000)={0x0, @in={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x11}}}, 0x9, 0x1, 0x8, 0x0, 0xffffffffffff0001}, &(0x7f0000398000)=0xa0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000993000-0xc)={@remote={0xac, 0x14, 0x0, 0xbb}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x11}}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000495000)={r7, 0x4dcf}, &(0x7f00000b5000)=0xc) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x800, 0x1000}) setns(r5, 0x40000000) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f0000772000-0x70)) 2018/02/16 18:03:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fdatasync(r1) dup(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d4b000-0x15)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000058a000-0x4)=0x0) tkill(r3, 0x1f) r4 = dup2(r0, r1) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000824000)={0x0, 0x80, 0x6, &(0x7f00008cd000-0x8)}) 2018/02/16 18:03:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000b98000), &(0x7f00008b9000-0x10)) r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = open(&(0x7f0000fee000-0x8)='./file0\x00', 0x141042, 0x0) fstat(r1, &(0x7f00002e2000-0x44)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000009000-0x8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) removexattr(&(0x7f0000d79000-0x8)='./file0\x00', &(0x7f00007b5000-0x15)=@known='system.sockprotoname\x00') rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4b000-0x20), 0x8, &(0x7f00005eb000-0x8)) syz_open_dev$evdev(&(0x7f0000002000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000125000-0x4)) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000e9a000)={0x15, 0x90, &(0x7f0000d24000)="82c8b1e603793fc0ba25c015551aac5d38e79defdbc9bf93b3912d6f2ef232c2c50dd2c1dfc698177d9a35e3cdab98f2027235b7ef96fa513ce8f6fd7529747f414f2f4af431065e94234de557f62ca2c5e925d55e606656ba9eb3babd6fd6399913fcae4a21664e1e531ea51904b1b4ab99dfd98c2e40ec8dd25843c9b6216cac977a9bdcc33df85694ca1faf9b2ca4"}) 2018/02/16 18:03:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058000-0x12)='/dev/input/event#\x00', 0xafd, 0x8000040000002) write$evdev(r0, &(0x7f000023d000-0x30)=[], 0xfffffd6d) prctl$setfpexc(0xc, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00008f0000-0x9)='/dev/ppp\x00', 0x0, 0x0) prctl$getreaper(0x28, &(0x7f0000c20000-0x8)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000b9f000-0x30)) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000823000)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000aea000-0x8)) 2018/02/16 18:03:20 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x1) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000a77000-0x55)=""/85, &(0x7f0000781000)=0x55) 2018/02/16 18:03:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000039e000)='/dev/cuse\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000ecc000), &(0x7f00008c8000-0x4)=0x4) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 184.207624] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ce8000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendfile(r0, r0, &(0x7f0000010000-0x8), 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000)=[], 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f00004a1000)="ef00fffff7ba0900000000000000633f99f2179f3bf0bde9e6c0ab2fa5a4f0ac", 0x20, 0x0, &(0x7f000007b000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000f80000-0x58)=@alg, 0x58, &(0x7f00009ab000)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f80000-0x36)=""/87, 0x57}, 0x0) 2018/02/16 18:03:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000937000-0xf)='/dev/sequencer\x00', 0x10300, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00004df000-0xb0)={{0x3, 0xfffffffffffffffb}, 'port1\x00', 0x1, 0x0, 0x80000001, 0x3, 0x7f, 0xf1f, 0x0, 0x0, 0x4, 0x64}) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x8000000000, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) flock(r0, 0x6) r2 = syz_open_dev$midi(&(0x7f00009ce000-0xb)='/dev/midi#\x00', 0x3f, 0x2d0401) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000ad000)={0x2, 0x72, 0x80000000, 0x800, 0x3ff, 0x7}) accept4(r2, &(0x7f000043b000-0x1002)=@un=@file={0x0, ""/4096}, &(0x7f0000abc000-0x4)=0x1002, 0x800) 2018/02/16 18:03:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047f000-0x18)) mkdir(&(0x7f0000045000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000003d000-0xa)='./control\x00', 0x220001a1) r1 = syz_open_dev$amidi(&(0x7f00008b6000)='/dev/amidi#\x00', 0xe15, 0x200) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000a58000-0x28)={&(0x7f0000376000/0xc00000)=nil, 0x7, 0x4, 0x50, &(0x7f0000e7b000/0x3000)=nil, 0x3ff}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000b4a000-0x4)=0x100, 0x4) 2018/02/16 18:03:21 executing program 0: mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000efa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000efb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000efb000)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000efb000)=0xe8) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000258000)="17000000020001000003be8c5ee17688a3000008010100ec1fda1e0336030000000000000098fc5ad9485bbb6a8800000000dba67e0600000000000200df018000000000f5009cee4a5acb3da400001fb700670000c88ebbff0601150039010000000000000000000609edffffffffffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa9512cbf320ec39f02d47c59cc16268b6026eb4bf6ba2112ce68bf17a6e019b7487067c12f", 0xb8) 2018/02/16 18:03:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000f25000-0x4)) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000410000-0x8)='./file0\x00', &(0x7f00004f6000-0xd)=@random={'system.', '\x00'}, &(0x7f000078b000-0x9)='vmnet1$\'\x00', 0xfffffffffffffc57, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fdatasync(r1) dup(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d4b000-0x15)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000058a000-0x4)=0x0) tkill(r3, 0x1f) r4 = dup2(r0, r1) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000824000)={0x0, 0x80, 0x6, &(0x7f00008cd000-0x8)}) 2018/02/16 18:03:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup2(r1, r0) bind$netlink(r2, &(0x7f0000f53000)={0x10, 0x0, 0x3, 0x3}, 0xc) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f000006e000)=@pic={0x9, 0xffffffff, 0x6, 0x1ff, 0x0, 0x4, 0x5c, 0xc3f, 0x9551, 0x2, 0x3, 0x73, 0x101, 0xc1f, 0x3ff, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e94000-0x10)='/selinux/policy\x00', 0x0, 0x0) chroot(&(0x7f0000c22000-0x8)='./file0\x00') 2018/02/16 18:03:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4000000003, &(0x7f0000f86000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000c87000)={0x0, r1}, &(0x7f0000a2c000-0x10)) clone(0x0, &(0x7f0000b47000), &(0x7f0000d5e000-0x4), &(0x7f0000d5a000), &(0x7f0000ef1000-0x7f)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000a25000-0xc)={0x6, r0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00004a7000)={0x3d6, 0x1f, 0xffffffffffffffe0, 0x59, 0x8}, 0x14) [ 185.067979] binder: 29508:29510 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.075798] binder: 29508:29510 got reply transaction with no transaction stack [ 185.083329] binder: 29508:29510 transaction failed 29201/-71, size 0-0 line 2757 [ 185.107600] binder: 29508:29510 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/02/16 18:03:21 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0x10)='coredump_filter\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00004fe000)={0x0, 0x9}, &(0x7f00006f5000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @loopback=0x7f000001}}, 0x2, 0x81}, 0x98) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) writev(r0, &(0x7f0000a7f000-0x40)=[{&(0x7f000027b000)="dcf70ad4b45c18b3c63d799a4f4632f4855aec0a72bb2f2623dd5d", 0x1b}, {&(0x7f0000b38000)="c1049fe9bb4588a0138907621d15b7836123834891302b38de6295b8cf406a97610967cee60c6c669c3a8d80b563eb6c84f64d29938cf8d3e94f9a17d8fa3379d7fc858edd419a91a8b1530a0bdcfbd29428d51aec9dc918f2115f81b85e1202830b4fa2c8ae2abfaeabbacb043766c474db060dcd9f46c4248a8c87e2d519cd29", 0x81}, {&(0x7f000024c000-0x2c)="ee5329bf7552e7e55e64eceb3c6995c9a5bf07f74110a5eb851dc29cf6ebc66038a7dcfa766ddde4a6bf9299", 0x2c}, {&(0x7f00005ce000-0x11)="6e78d7ac13a0ef7cdc73f4e6b09a7874ad", 0x11}], 0x4) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000b36000)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f000087d000-0xa1)=""/161, &(0x7f00008b3000)=0xa1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f000011c000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000924000)=@ethtool_wolinfo={0x1, 0x0, 0x0, "63d156a528d7"}}) 2018/02/16 18:03:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000a43000)={0x0}) clock_gettime(0x0, &(0x7f0000683000-0x10)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000f8f000)={r2, r3/1000+10000}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:21 executing program 5: mmap(&(0x7f0000000000/0x3b0000)=nil, 0x3b0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000000003, 0x9) chroot(&(0x7f000037e000)='./file0\x00') mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f00003b1000-0x8)='./file0\x00', &(0x7f00003b0000)=[&(0x7f00003b1000-0xe)='}/#mime_typeO\x00'], &(0x7f00001f5000-0x40)=[&(0x7f00003b0000)='\x00', &(0x7f000004a000)='\x00', &(0x7f00001ec000-0x20)="f576626f786e6574307b766d6e6574306d696d655f7479706524f77070703000", &(0x7f000006d000-0x18)='#vmnet1,keyringvboxnet0\x00', &(0x7f000022d000)='t\x00', &(0x7f00003b1000-0x2)='%\x00', &(0x7f0000061000)='{$\\(-GPL&$!lo}wlan0\x00', &(0x7f0000103000)='wlan0\x00']) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00003b1000-0x4), &(0x7f00003b1000-0x4)=0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000a0000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f00003b1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f00003b2000-0xf5)=""/245, &(0x7f0000054000)=0xf5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f00003ad000-0x40), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv4=@dev={0xac, 0x14}, [0x0, 0x0, 0x0, 0xff], @ipv4=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [], @ipv4=@broadcast=0xffffffff, [], @ipv6=@empty}, 0x80}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@broadcast=0xffffffff, @empty, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f00003b1000-0xca)=""/253) openat$dir(0xffffffffffffff9c, &(0x7f0000111000)='./file0\x00', 0x100, 0x0) [ 185.115441] binder: 29508:29510 got reply transaction with no transaction stack [ 185.122939] binder: 29508:29510 transaction failed 29201/-71, size 0-0 line 2757 [ 185.153173] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.159748] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000039f000)='/dev/kvm\x00', 0xffffffdffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000d75000)=0x5, 0xbc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000d75000)=@ioapic) 2018/02/16 18:03:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00006dd000)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000c6000)='tls\x00', 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000dcf000)) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000323000-0x4), 0x4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000615000)=[{{&(0x7f0000e17000)=@nfc={0x27, 0x0, 0xe}, 0x10, &(0x7f0000101000-0x90)=[{&(0x7f0000d85000-0x4f)}], 0x1, &(0x7f00007ae000-0x50)=[{0x10}], 0x10}}], 0x1, 0x0) open_by_handle_at(r0, &(0x7f0000860000-0x82)={0x82, 0x79, "15039a30164092a934d358f425ed05df429b04d802251430fbe110e0c444d0d81c23e7d84e88f2cd8bf92266d07141d6319ea671a2c6d6452fae2bb2ad89f89da0c7db1b486cb9ca24d00d68a261efc57452a1f5e4abb97ab9657993b428e73c65373b24e18b01734a49ca6b6b18f7e93e64526e422f91062b9c"}, 0x400) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00001e7000-0xe8)={{{@in6=@mcast2, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000fa2000)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000c92000)={0x9, 0x401, 0x0, 'queue0\x00', 0x2}) r2 = getegid() chown(&(0x7f00008f0000-0x8)='./file0\x00', r1, r2) quotactl(0x5, &(0x7f00001ea000-0x8)='./file0\x00', r1, &(0x7f0000e8f000-0x1)='k') 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000c22000-0xb0)={{0x80}, 'port1\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00002a1000)={0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000381000-0xba)="9ae2205d539c5a273186be6e9ed4f4b3a737f494858ca06d5d3e730fa8cba78e0195ca6650eaac0a5c727ce1e71d35ad264b20780be8a4daf00e7d85500b3d6e161fdad0cab1d38b88940c605e157d0a9a4cf25d195a8ceeb4fe4ccc2fbe7688779719d5254bd19d159d09e52a046d7c3a6f018765cf8dd0c9505580b8212a107eec72758586fd8884a4c6ad22547569e9246a2da9151a2c57a92622b7646fba002bf32c602f243611610e6b3ee6a5988fdc9e561c65874d5c10", 0xba, 0x20000001, 0x0, 0x0) 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() r4 = getpid() r5 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000655000)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000de4000-0x4)=0xe8) getgroups(0x3, &(0x7f0000755000)=[0x0, 0x0, 0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000393000-0x4)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000061b000)={{{@in=@remote, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000aa6000)=0xe8) fstat(r0, &(0x7f0000e0e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f000062b000)={&(0x7f0000de1000)=@proc={0x10, 0x0, 0x3}, 0xc, &(0x7f0000ade000)=[{&(0x7f0000bad000-0xbc)={0xbc, 0x21, 0x103, 0x3, 0x3, "", [@nested={0x9c, 0x4e, [@typed={0x3c, 0x7f, @binary="baee95980abe7322447e38c5e413e85d7186cec57764b1dc340f974e2814add9782b32765d4ead01c6d47fca416af89390"}, @typed={0xc, 0x57, @pid=r3}, @generic="a822f84ed7b175a6a5a467a9a957a3a20a86de8163bac34536616c716b15d3724b265d38e8e6a7dd5fd5059bba126ffc5b2b524da9aa6a21cdfe43772e35dd99c6135487e278ad9affc8a28dd5d1"]}, @nested={0x10, 0x2b, [@typed={0xc, 0x42, @pid=r4}]}]}, 0xbc}], 0x1, &(0x7f0000492000)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x58, 0x1}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) [ 185.194966] binder_alloc: binder_alloc_mmap_handler: 29514 20000000-20002000 already mapped failed -16 2018/02/16 18:03:21 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000001000-0xa)='/dev/vcs#\x00', 0x2, 0x290041) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') [ 185.251775] x_tables: ip_tables: conntrack.1 match: invalid size 152 (kernel) != (user) 160 [ 185.272147] binder: 29538:29544 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.280054] binder: 29538:29544 got reply transaction with no transaction stack [ 185.287548] binder: 29538:29544 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000023b000-0x11)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f000043f000-0x10)={0x7002, 0x2000}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00001bb000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$ipx(r1, &(0x7f00001d5000), &(0x7f00004ae000)=0x10, 0x800) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f000046a000-0x4)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000638000-0x8)=0x4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c96000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000deb000-0x90)={0x3, {{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}}, 0x90) [ 185.305333] x_tables: ip_tables: conntrack.1 match: invalid size 152 (kernel) != (user) 160 [ 185.318829] binder: 29538:29554 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.326655] binder: 29538:29554 got reply transaction with no transaction stack [ 185.334174] binder: 29538:29554 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0x180, 0xc8, 0xffffffff, 0x180, 0xc8, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, &(0x7f0000003000-0x50), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4=@broadcast=0xffffffff, @port, @port}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c8) connect$inet(r0, &(0x7f0000028000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) socket(0x0, 0x0, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000337000), &(0x7f0000ecd000-0x4)=0x4) 2018/02/16 18:03:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) r1 = getegid() stat(&(0x7f0000c0e000)='./file0\x00', &(0x7f000069c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() setresgid(r1, r2, r3) 2018/02/16 18:03:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f00006bb000-0x1000)=""/4096) pipe2(&(0x7f0000bdc000)={0x0, 0x0}, 0x800) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000cfd000)={0x7d, 0x0, [0x9, 0x800, 0x3, 0x5]}) 2018/02/16 18:03:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syncfs(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000689000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000bb9000)={0x1d, r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') write(r0, &(0x7f0000607000-0x30)="802a7d0fdbbee15daf5b898deb1efa14b9df0a47ac3ba0af24724d114fccba3fe0bf51f2706aaa0d27cd2f501c38fec8", 0x30) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000e1c000-0x4)={0x400, 0x0, 0x9e15}) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:21 executing program 5: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ffc000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00005e4000-0x4)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ffd000-0x4), 0x4) 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000974000-0x8)={0x0}) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f00006ca000-0x33)="26fd45eaa0267b43ee19dfde34844ed114bd51e8c17b7f40b4ead701190f364f7a2abad5e96219f7de4f84d1d63522bb373fe2") r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000d8e000-0x9)='net/unix\x00') sendfile(r1, r2, &(0x7f000097d000), 0xff) [ 185.384777] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.390758] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(0xffffffffffffff9c, &(0x7f0000580000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, &(0x7f000095f000-0x4)=0x3a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000695000-0x14)={0xd4, 0x100, 0x100000001, 0x3, 0x20}, 0x14) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) write$vnet(r1, &(0x7f00002e6000)={0x1, {&(0x7f0000ab2000-0x6b)=""/107, 0x6b, &(0x7f0000935000-0x11)=""/17}}, 0x68) 2018/02/16 18:03:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000dd0000-0x40)={0x1, 0x0, 0xd91, 0xfffffffffffffffc, "a2128637d16dbf3a1fd92ccdd7eb44dcc8cdf8e9eb58e0635310805aa09eae78141ac3d48d21ca3fdcafe863", 0x101}) readv(0xffffffffffffffff, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0x58000)=nil, 0x58000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000012000)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000000a000-0x8)={0x0}) mmap(&(0x7f0000058000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r0, &(0x7f0000007000)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000032000-0x4)=0x1c, 0x80800) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2000004) select(0x40, &(0x7f0000039000-0x40), &(0x7f0000001000-0x40)={0x80200}, &(0x7f0000032000-0x40), &(0x7f000004c000)={0x77359400}) [ 185.459810] binder: 29585:29587 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.467671] binder: 29585:29587 got reply transaction with no transaction stack [ 185.475173] binder: 29585:29587 transaction failed 29201/-71, size 0-0 line 2757 [ 185.512166] binder: 29585:29587 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.520044] binder: 29585:29587 got reply transaction with no transaction stack [ 185.527552] binder: 29585:29587 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000801000)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, &(0x7f00002fd000-0x4)=0x7f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000094e000-0x38)={&(0x7f00001ce000)={0x10}, 0xc, &(0x7f0000c98000)={&(0x7f0000b93000)={0x14, 0x12, 0x7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000668000+0xcdf)='/dev/snd/midiC#D#\x00', 0x20, 0x40) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000e6f000-0x78)={0x7, 0x0, [{0x86381b4bcba08a40, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x1}, {0x846, 0x0, 0xfffffffffffffff8}, {0x400008fc, 0x0, 0x80000000}, {0x392, 0x0, 0xe57}, {0x840}, {0xbff, 0x0, 0x6}]}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x20000000a, 0x2cb) syz_open_dev$vcsn(&(0x7f0000665000-0xa)='/dev/vcs#\x00', 0x1ff, 0x840) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00001a8000-0x4), 0x4) 2018/02/16 18:03:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000542000)='./file0\x00', 0x20) unlink(&(0x7f0000112000-0x8)='./file0\x00') 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000615000)='/selinux/enforce\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000b4d000)={0x0, 0x9}, &(0x7f00007e1000)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00005d5000-0x8)={r2, 0x6}, &(0x7f0000a29000)=0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:21 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0}, &(0x7f0000002000-0x4)=0xc) r1 = getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:21 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) r1 = creat(&(0x7f0000002000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000c05000/0x18000)=nil, &(0x7f0000002000-0x18)=[@text64={0x40, &(0x7f0000001000)="66f34d0f0fdaa7c4c379169f60edbe7379490f0948b8b87b4b06c5650a330f23c00f21f83502000f000f23f866b817010f00d0b95f0b0000b800600000ba000000000f3066baf80cb85ceedb8bef66bafc0cb800800000efc421782e9d0000000066ba6100b8f74f0000efc40179fb2f", 0x70}], 0x1, 0x4, &(0x7f0000001000-0x10)=[@efer={0x2, 0x801}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000029d000)='./file0\x00', &(0x7f0000996000-0x8)='./file0\x00', &(0x7f0000fc7000-0x5)='ext3\x00', 0x802000, &(0x7f0000759000-0x6)) rename(&(0x7f0000ca1000)='./file0\x00', &(0x7f000085f000)='./file2\x00') mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f000000a000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}, 0x0) chdir(&(0x7f0000f0d000)='./file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) io_setup(0x0, &(0x7f0000008000)) process_vm_writev(0x0, &(0x7f0000005000-0x30)=[{&(0x7f0000006000)=""/197, 0xc5}], 0x1, &(0x7f0000004000)=[{&(0x7f0000003000-0x1000)=""/4096, 0x1000}], 0x1, 0x0) 2018/02/16 18:03:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000612000-0x10)={0x0, 0x0}) select(0x40, &(0x7f000094d000)={0x8001, 0x3, 0x4, 0x7, 0x3, 0xfffffffffffffff9, 0x100, 0x1}, &(0x7f0000819000-0x40)={0x1800000, 0x6, 0x1fea2197, 0x5, 0xfffffffffffffff7, 0xfff, 0x2d40000000, 0x2735}, &(0x7f00007c3000)={0x0, 0x7ff, 0x1f, 0x2, 0x4a61, 0x49937938, 0x8}, &(0x7f0000451000-0x10)) setitimer(0x2, &(0x7f0000135000-0x20)={{r0, r1/1000+30000}, {0x77359400}}, &(0x7f0000373000)) 2018/02/16 18:03:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000964000)='/dev/input/mouse#\x00', 0x0, 0x100) getsockopt$inet_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000dcd000-0x7a)=""/122, &(0x7f000063c000)=0x7a) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) [ 185.562995] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.571099] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:21 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) accept4$netrom(r0, &(0x7f0000000000)=@ax25, &(0x7f0000001000-0x4)=0x10, 0x80000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/dsp\x00', 0x4000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f000089d000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x86000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00009c9000)=r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000370000)='/dev/hwrng\x00', 0x418000, 0x0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000365000-0x4)=0x8001, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000960000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xa}}}) r4 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) 2018/02/16 18:03:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000a62000)={0x0, 0x0}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000c9f000-0xff)=""/255) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffe1a, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x6c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00001b8000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1000000000000000) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00001f5000-0x8)=@fragment={0x32, 0x0, 0x2d, 0x4, 0x0, 0x61b, 0x1}, 0x8) fcntl$getflags(r2, 0x1) [ 185.607413] binder: 29612:29624 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.615266] binder: 29612:29624 got reply transaction with no transaction stack [ 185.622791] binder: 29612:29624 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:21 executing program 7: socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000982000)='/dev/dmmidi#\x00', 0xffffffffffffff81, 0xd0880) connect$inet(r0, &(0x7f0000f80000-0x10)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$TCSETS(r1, 0x5402, &(0x7f0000aee000)={0x1ff, 0x0, 0x0, 0x8, 0x81, 0x401, 0xe594, 0x7ff, 0x5, 0x1ff, 0x40, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000094e000-0x38)={&(0x7f00001ce000)={0x10}, 0xc, &(0x7f0000c98000)={&(0x7f0000b93000)={0x14, 0x12, 0x7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000668000+0xcdf)='/dev/snd/midiC#D#\x00', 0x20, 0x40) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000e6f000-0x78)={0x7, 0x0, [{0x86381b4bcba08a40, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x1}, {0x846, 0x0, 0xfffffffffffffff8}, {0x400008fc, 0x0, 0x80000000}, {0x392, 0x0, 0xe57}, {0x840}, {0xbff, 0x0, 0x6}]}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x20000000a, 0x2cb) syz_open_dev$vcsn(&(0x7f0000665000-0xa)='/dev/vcs#\x00', 0x1ff, 0x840) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00001a8000-0x4), 0x4) 2018/02/16 18:03:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000672000)) ioctl$TCXONC(r0, 0x540a, 0x7fff) 2018/02/16 18:03:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) personality(0x4900021) select(0xfffffffffffffd1c, &(0x7f0000039000-0x40), &(0x7f0000001000-0x40)={0x80200}, &(0x7f0000032000-0x40), &(0x7f000004c000)={0x77359400}) r0 = socket(0xb, 0x803, 0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000b30000-0x8)={0x0, 0x1000}, &(0x7f0000fda000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000743000-0xbe)={r1, 0xb6, "8faece61393abd9821c991cd64474fdcc617e990f676beef331a21d106022ec580f99f9dd7fda98a3f2e844ca37183e16e831f10d641d5015335eda782ddc95b9884f15d994f88ad7cd9671650ca51cd41aa420fb6bbbf679bdf3877f4cd54da583abcc3c7b466e3f8b2c874c84c2497ee7f255d4dfd472e7b2f78bb1c7b6c2d05e08048a6abae6ef8147dc2665931ba7bf8324623990a8e4a7663349342e667c47929f9281ba0cdaa884c4eae4a9ab4494fc54a1b41"}, &(0x7f00009e9000-0x4)=0xbe) 2018/02/16 18:03:22 executing program 6: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000001000-0x4)=0x2, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x7, 0x4e92) write$selinux_validatetrans(r1, &(0x7f0000ac7000-0x69)={'system_u:object_r:crond_initrc_exec_t:s0', 0x20, 'system_u:object_r:ssh_agent_exec_t:s0', 0x20, 0x2, 0x37, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x69) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000513000-0x4)) accept$packet(0xffffffffffffffff, &(0x7f0000169000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000202000-0x4)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000175000)={@broadcast=0xffffffff, @multicast2=0xe0000002, r1}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000391000-0xb)='/dev/vcsa#\x00', 0x1, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000a4f000-0xc)={&(0x7f0000073000)=[0x0], 0x1}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000fae000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000a78000-0xc)={0x2}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg(r0, &(0x7f0000a5a000-0x12c)=[{{&(0x7f0000f34000)=@sco={0x1f}, 0x8, &(0x7f0000e01000-0x10)=[], 0x0, &(0x7f0000859000)=[{0x10}], 0x10, 0x804}, 0x9}, {{&(0x7f00005af000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0xffffffffffffffff, 0x2, {0xa, 0x1, 0xfffffffffffff0be, @empty, 0x2}}}, 0x3a, &(0x7f0000405000)=[], 0x125e, &(0x7f0000320000+0x213)=[{0x40, 0x1, 0xfff, "eb1b816bd70f2e037aff055ee811a06ea8203fbef272f13515c0cb08e685130465cf61e5650d58dbbc5b85b9c668a1"}], 0x40, 0x4001}, 0x6}], 0x2, 0x4800) 2018/02/16 18:03:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000aef000)="b593884c777f27664c930052f250afae7ca3c65b785141fe1f5cc3afc045769119cf5b4dba6b64ef26499f1d396101e35330630c81ae50ed9313b15f5380e834cc45ceb2959db35edfc90e8567fc1c40163d9fd4e39e8599e4932915c22c4ee99be438bac01b32aa4d544007fe2c857998a1041f0d9be1de995cdaf82b61c971561409009c13f84fe0856bc90cf2a6e6a38e9d7d81c96f6f896f11acce1213f4b30c7aca4d0d8a10b8f1d832505d3b4d29930ad323da4da68a11") sendmsg(r0, &(0x7f000098b000-0x38)={0x0, 0x0, &(0x7f0000d57000)=[{&(0x7f000057f000)="b31f067e77eb8de62447a39b10f10e219a35394594a42c58053c9d56c9a177eac854564a77002e6dfdce6b524b2d03ad5307", 0x32}, {&(0x7f0000632000-0xdf)="a5eaaee324ca61ae0b68170671cfaf7c59fc57add70407093c65612a15376317da6af7f01beea428e37ec1b09bfcae0b5abf8e6345fc7c0adaac6762b9304cc8448cd73f07f71b2ed239d344f81e2104f67c573c2b6c4ac6ffce46eaf85be3cdda8fb14dd2b371b6ea08256e95fcc2d72b83a06e0c7568396cf364ab0568e2dc883b3e1057936c820b334c9ee01aed5efe071e7aecad611163c39b0cc20a57a9b116a6618aec09df9f60835d95cf3383d65fa1186f58de9f14d1229b542d0644f4b0d9f00fbe57a365a6457c1339caa30234218367d4bebb70756524a2f35f", 0xdf}, {&(0x7f00007f4000-0x7f)="ed1d3d9e0b65a8627e0228070fc942c6486cdbcdbbf52e480671680161bd13002994d4906ac670e2f6b1db62128445cb68982a618df041c96b29dbf01347cd870d2b6ec49eae6f40644ecec2cf0f6d8787fc70aaa5a06396ddcde2c0d4007910904bbc0f5fd1dc45cf270cb77805e7d5b1cb1e8164cf9ce5a7d9d6977fc9cf", 0x7f}, {&(0x7f0000ec9000)}, {&(0x7f0000dc8000-0x60)="70a1ea2a9f13b19113aeb8e6b40b8ddba787d15bda71648e830c109e0c074b360cec47bfbea7800096bc93a01ec84eb9a4ccb9b3189f0c40db71480209de4b6ee750ea89000f85ed72c9754689e3b8ce670f196134a2032bf355d821c7d9a79e", 0x60}, {&(0x7f000071e000)="9cf0003f9e70dddcab21b70c35bd9660239f41db3e711648d902d8a2bd497cef5ca7acafb833bb7572b53582da1650515924cda6ee458b84549afb0b34e0ed4dd01fe6b688434189a3ab9d4c1a59683462cadd80946fb8b5f910ff37b6e3de781c4c09fad8f304e491a6d3ff6d663628ffe639fffbebda960c3adf8e4053c53d93f910166802a0caafcdf6665b2ab23760d787986a406b942433d2ee2ca0d4c35c0ffcba2a366f9ebfe5cb67920619443b9510d45f53e36217e89b35ea1658567c3f3aeb6fc9ce59d090c2e42c4eb6dad6523969008bbf40cc4536fb08e41f63650b0e215c415eecab25fd999ebc3d72c6", 0xf1}], 0x6, &(0x7f0000798000-0x1398)=[{0xc0, 0x185, 0x55db, "b630da240a267af773a8244ddd7e8bcb3ba928d587216bf8718763dce8017c6df28a197f04473686cffc07300c4d03eff94915d79b496f2ef06ef6f041427391c8494bd5fc449e45f135c52c329b7c0b2da5e0bfd0822d27f0d34042a5366218fffe51c8ea36d1fbb6ba586ea23b71060d98b59d4234afa204cda12e2d44f14cfe0d9c9da1407d5a122463d6864af952a511df7bab27934a61c26578da33ab956f14461abcb3aeff32"}, {0x98, 0x117, 0x7, "b4dbd5198d16b4e53bb137f530b045d7bc9caffaa7a3138b9f0cc8b499f5658809c8cb010082f958b70906e633981764c4ffcbc537f3f9bf0c2f5a97ea684c1cc7e8c43ed0ee03d91eae7fec17d027626b246357983b2b607c2ff60de6d5dfc21c21e3c8cefbf70964b7edfc47da84df75e189a0c077394df8acdff1dfc7dbdadb04"}, {0x48, 0x10a, 0x2, "bcbe60582e38cfec725ae3c3cf11081c1a30ae421abd87353b36f174639d1077282de4b2167c67e251c732af7fb4bb7f3b"}, {0xb8, 0x0, 0x4, "626a10a25eb1e4bc431a90b4928508c7d2738f73b8c846e7fa19d17e8f8e4d79f9daeb1ac7d49cfe435efad4145cf6143f43f9e792e9a5a66f4cfcfe9a2cca4b3b1b869d2e4f2c64418122410b428dfcede5379c128b3ceb2566fcef74383a9d23a1070f697e48c25cee64f37e39615a80f0214a717a58cbea52f1a09f899303f57a3665c936a94d18845aeede820b8414ae7d02624e2eb8c298553bbbae147b664b"}, {0x58, 0x0, 0x4, "709aa3a54e31736543ac3d141fbbda7ec6a9032682486e54ee3dde8bedd9737ac045761e2c6adafd89bae1eda01068d655106cc8e2783cc4ae9ab2d34b0ad24c41387fa9e35a3f52"}, {0xa8, 0x113, 0x377, "80302872c63457a55648edf42aaa93765da54daa2dd11ab6da23c17577bec2b5d2e64a918f32cf15151dd57f823e250d8697d30142de022e7c013c4dc95581e8304aabe8a3f7373632cf95e285a4a9bdc10e355dc51adec356f0ad475a9e1c127b8d5e8a4a87c2083d6cce4a5e00fa285108bb245aa1d7998c86c89b24bff8cb55f607ea6c11040fa54e9ebbb4b19fa4a10087a42b02f3"}, {0x1010, 0x10a, 0x8, "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"}, {0x30, 0x118, 0x800, "5351c623ac3d1e50ef960a9ed9a4c2b773c60ddbe0ec706039b6"}], 0x1398, 0x4}, 0x10) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000a3c000-0x8)='./file0\x00', &(0x7f0000ab3000-0x8)='./file0\x00') sendto$inet(r0, &(0x7f0000d22000-0x1), 0x0, 0x20000000, &(0x7f0000f6f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) [ 185.701676] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.725514] binder_alloc: binder_alloc_mmap_handler: 29636 20000000-20002000 already mapped failed -16 2018/02/16 18:03:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004eb000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000e0e000)=[{{&(0x7f0000f5e000)=@ethernet={0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xd}}, 0x10, &(0x7f00004cf000)=[{&(0x7f0000099000-0x54)="fa1f93d1187a50143eca47f17516588bdb3920d4b41850aebc72c89db9ad0e4b65bee48b3c313affe887b16d5c5ae5a905f1f4ff14b4692416cdc011fc99a2770466276d4ec6af1733994672ad90dece3b13e655", 0x54}], 0x1, &(0x7f00009b0000-0x1608)=[{0xc8, 0x10d, 0x0, "2d1bf6f6c857d43e7f4032ee6e998f901912f666f9ffd81e92974b82c2f205f4147d753f0f4fb023725c1c0636ecc50c9c95dc8f1f523b02799a5e08191dc63ac78c3fc99eca67ada277df34f40970e8a2e2577b3cdabc2483d1c2b612110f716d7f59517184d97767d4c8d8fcbfeda16873f05384249082a64263ae9ce79b9dce915e17bc4826ff1571480fbf0b84afb9eeba3f062e20a048035f14170059642daec0d1cf5ca85e66c6d2602a1213f05d63e06582"}, {0x88, 0x1ff, 0x100000000, "eb19e8f0a3321c74e8bb7afac5afaff33c1d67c22be5d639e13a6b4ad36fb2ec485f8b9d6f218328373acbc60b2f44283d84526110ce63383c11ff4d6509d10f25772a79d0b81ecdc6f4b9cc35a26bf1cad4a00cd3c525263a75693ba4dd7fb51ff40b2aa7050a315ee0db02a307e2328b6d"}, {0xa8, 0x1, 0x9, "8c1164c89405e0766efc0d00022adcaa611e22c5e811c0d963edad10f6597257f20935f3cb949d84b46b3934ac0a8be59f206ac10cefff1237c18890d9084b14e5261ef3afc7eb9b124246147035104feaa334441a5cf65f0ff16b80f0234e8fcfd80d4e8d4957b52d10c3d4fe6c7b60aed45c867f970084dd99b30785b05c37dfd9cd7fbd7673ad7fe531fc6fdcdeaa95e8ac"}, {0xb0, 0x11f, 0x3, "4def1a7e0ae69613cfdede091cb2d1abd2f8ebf1694117fa50b51cdb4af98c19b39baaeceb08830df02950fc227c9aaddf2439c5367603580225f4cb1d2a1d5e262f86b6d9b619264f29d360baaa3fc61c8daea2ab6c329fada68b19d7a028a438fdc5620891cc1cfd35553eac0e3bfc53e5f3da89edad4d5092d77d15188d40e6fe58a31f9b7e90e8027105009bedca6cbb174bb7bbf69e1080"}, {0x1010, 0x107, 0x80, "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"}, {0xf0, 0x118, 0xfffffffffffffffb, "0189aaf0208d07380ed43c707ab994a500f2cd85e1d5c28add0f072eb37af50ab1ebcbae7b8c9076272cb33014edaaeea351851922586bef38807f5632babde670ac00cfc84995b8a35bbeda7b6d4cb4d0a3dfa7f63bc7d7f4fe542b97d18bd3e3aa97822f6b033414849ee129c3c69a77a2114002420eac9ee1c362e04bbf0cc1e1b91c2d40ade5572e31ca0a9ef6d8c4be9fb428b021d086e93fd9d0ccfcf2a93a2bfec8d8da40eb0ef8750d23b84b03827cd051dee85e9203bdebfd58b1f17941efd5452a1a9ab32155dd53c7c3089eacf4cf2265f259b2bb908f3054ad08"}, {0x20, 0x6, 0x400, "9ab0823b1d09d581fc"}, {0xf8, 0x1ff, 0x1f, "4472f980828ca97e10ea835ebe145f627834bf34473bce48b1e60ede62600fde5e2da7790cac1fcca15bbd0f01f2ec0f1993a84489518570ab9c9894171a572dca14e5cfd0ea578cd3fe33ba80f30b4bf45cba6ce9e4bee2d4996ac6ee4450df92718bb19594ea0c253a0cdfbaf714837607ca9ab01bd3c881ff7f6b1f76b20110820281c7f07fb4b04b70acb8509eb4ffeeae08f01ed203503ef8e2e5a658b33ecad57313c3e88504e6c9d3f7670c08579024939d04c4f24e96ed5e576583d9882f80a5e9a8903b0d215f14c873b9bd63b5fcd57974d194b80c8f1d625cf24d3a14397ca211ff24"}, {0xf8, 0x3a, 0x100000000, "fcc663d48c9f71ea5f0925293558420e3b43044d3243ea79b170e091a90efb111398f6738bb0fd7b3854bd22859cd230766dd3b44bd437ec77df09873e678ed18a3afc2995168e80dd7847abbf927b2d540a9b2cc4b264b79668c290c976fda733764a30d3345ad6086860f495f6e47d487321f3921f4513245b944443ad175261741f72fa1353ed86d4c4a9ff4f2582572b2743007bb2146d160d19048729a45becb629ff33077e2a699ec04ab4ceb7f89da8c12dc22bb9652f9a76fc92e6c0113beab8e6da307e9a5fcb4bb6a0d9bf9096d119499030bfb024f1dd26ebc931c2b496"}, {0x50, 0x102, 0xffffffffffff0000, "825ecc00c582172d143a20b0edef3ce99e7297e9641185b90ecd1b20ead725bcd7064ee384157e0d185429acb12993ec24a29751ef2ee7d1636159d299"}], 0x1608, 0x4000001}, 0x9}], 0x1, 0x398e98694db12a82) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:22 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000033000)='/dev/input/mice\x00', 0x0, 0x280400) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00007e2000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f000032f000-0x38)={&(0x7f0000b58000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000ca5000)=[]}, 0x12000) 2018/02/16 18:03:22 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000a000-0xa)='autogroup\x00') mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f000000a000-0x4), &(0x7f0000009000)=0x4) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000009000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000003000)=0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001000-0x4)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000-0x10)={0x2000000000000066, &(0x7f0000005000)=[]}, 0x4) [ 185.767354] binder: 29648:29654 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.775209] binder: 29648:29654 got reply transaction with no transaction stack 2018/02/16 18:03:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff1000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000cb2000-0x8)=0x5) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00006f0000-0x80)={[0x0, 0x0, 0x0, 0x3]}) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000282000-0x10), &(0x7f0000d69000)=0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000753000-0x9)='/dev/rtc\x00', 0x202, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @time={0x0, 0x1c9c380}}) r3 = dup(r0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000910000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000ad0000-0x68)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f000052b000-0x50)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f000025a000)={0x9, 0x38fd2df2, 0x2, 0x4, 0x5, 0x5, 0x3, 0x0, 0x9394000, 0x8, 0x8, 0x10000}) [ 185.775219] binder: 29648:29654 transaction failed 29201/-71, size 0-0 line 2757 [ 185.822809] binder: 29648:29667 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 185.822822] binder: 29648:29667 got reply transaction with no transaction stack [ 185.822832] binder: 29648:29667 transaction failed 29201/-71, size 0-0 line 2757 [ 185.844853] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.844973] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:22 executing program 7: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000544000)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000bf0000)='./file0\x00', 0x20000, 0x82) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x3c4e66de5a51781b, 0x20010, r1, &(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) pread64(r0, &(0x7f000086d000-0x3e)=""/62, 0x3e, 0x0) 2018/02/16 18:03:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000248000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x401) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00006e5000)={0x0, 0x5}, &(0x7f0000dcb000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000693000)={r1, @in6={{0xa, 0x3, 0x8, @empty, 0x80}}, 0x6, 0x401}, 0x98) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00001ef000)) r3 = mmap$binder(&(0x7f000029c000/0x3000)=nil, 0x3000, 0x2, 0x1010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000092a000)={0x246, 0x0, &(0x7f0000fe9000-0xbc)=[@request_death={0x400c630e, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ab0000-0x18)=[@flat={0x776a2a85, 0x10a, r3, 0x2}], &(0x7f0000fbd000-0x18)=[0x40, 0x28, 0x78]}}, @increfs_done={0x40106308, r3, 0x2}, @register_looper={0x630b}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd6000-0x28)=[@ptr={0x70742a85, 0x0, &(0x7f000035c000-0x1), 0x0, 0x0, 0x1c}], &(0x7f000095b000)=[0x30, 0x48, 0x20, 0x70]}}, @exit_looper={0x630d}, @acquire={0x40046305, 0x1}], 0xfd, 0x0, &(0x7f0000f93000-0xfd)="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"}) open(&(0x7f000075a000)='./file0\x00', 0x4000, 0x80) 2018/02/16 18:03:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000019d000)='/dev/ppp\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000e12000-0x4), &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000089b000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000c2c000)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000060a000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@multicast2=0xe0000002]}, 0x20) listen$netrom(r1, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000407000-0x20)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@rand_addr=0xfffffffffffffe01, @empty]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/16 18:03:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000023000)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000033000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'bcsh0\x00', {0x0, 0x1f, 0x0, 0x0, 0x0, 0x3f, 0x4}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xd}}, 0x10) 2018/02/16 18:03:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00002db000-0x38)={&(0x7f000018a000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000933000)={0x18, 0x27, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000938000), &(0x7f00007b1000)=0x4) 2018/02/16 18:03:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004eb000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000e0e000)=[{{&(0x7f0000f5e000)=@ethernet={0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xd}}, 0x10, &(0x7f00004cf000)=[{&(0x7f0000099000-0x54)="fa1f93d1187a50143eca47f17516588bdb3920d4b41850aebc72c89db9ad0e4b65bee48b3c313affe887b16d5c5ae5a905f1f4ff14b4692416cdc011fc99a2770466276d4ec6af1733994672ad90dece3b13e655", 0x54}], 0x1, &(0x7f00009b0000-0x1608)=[{0xc8, 0x10d, 0x0, "2d1bf6f6c857d43e7f4032ee6e998f901912f666f9ffd81e92974b82c2f205f4147d753f0f4fb023725c1c0636ecc50c9c95dc8f1f523b02799a5e08191dc63ac78c3fc99eca67ada277df34f40970e8a2e2577b3cdabc2483d1c2b612110f716d7f59517184d97767d4c8d8fcbfeda16873f05384249082a64263ae9ce79b9dce915e17bc4826ff1571480fbf0b84afb9eeba3f062e20a048035f14170059642daec0d1cf5ca85e66c6d2602a1213f05d63e06582"}, {0x88, 0x1ff, 0x100000000, "eb19e8f0a3321c74e8bb7afac5afaff33c1d67c22be5d639e13a6b4ad36fb2ec485f8b9d6f218328373acbc60b2f44283d84526110ce63383c11ff4d6509d10f25772a79d0b81ecdc6f4b9cc35a26bf1cad4a00cd3c525263a75693ba4dd7fb51ff40b2aa7050a315ee0db02a307e2328b6d"}, {0xa8, 0x1, 0x9, "8c1164c89405e0766efc0d00022adcaa611e22c5e811c0d963edad10f6597257f20935f3cb949d84b46b3934ac0a8be59f206ac10cefff1237c18890d9084b14e5261ef3afc7eb9b124246147035104feaa334441a5cf65f0ff16b80f0234e8fcfd80d4e8d4957b52d10c3d4fe6c7b60aed45c867f970084dd99b30785b05c37dfd9cd7fbd7673ad7fe531fc6fdcdeaa95e8ac"}, {0xb0, 0x11f, 0x3, "4def1a7e0ae69613cfdede091cb2d1abd2f8ebf1694117fa50b51cdb4af98c19b39baaeceb08830df02950fc227c9aaddf2439c5367603580225f4cb1d2a1d5e262f86b6d9b619264f29d360baaa3fc61c8daea2ab6c329fada68b19d7a028a438fdc5620891cc1cfd35553eac0e3bfc53e5f3da89edad4d5092d77d15188d40e6fe58a31f9b7e90e8027105009bedca6cbb174bb7bbf69e1080"}, {0x1010, 0x107, 0x80, "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"}, {0xf0, 0x118, 0xfffffffffffffffb, "0189aaf0208d07380ed43c707ab994a500f2cd85e1d5c28add0f072eb37af50ab1ebcbae7b8c9076272cb33014edaaeea351851922586bef38807f5632babde670ac00cfc84995b8a35bbeda7b6d4cb4d0a3dfa7f63bc7d7f4fe542b97d18bd3e3aa97822f6b033414849ee129c3c69a77a2114002420eac9ee1c362e04bbf0cc1e1b91c2d40ade5572e31ca0a9ef6d8c4be9fb428b021d086e93fd9d0ccfcf2a93a2bfec8d8da40eb0ef8750d23b84b03827cd051dee85e9203bdebfd58b1f17941efd5452a1a9ab32155dd53c7c3089eacf4cf2265f259b2bb908f3054ad08"}, {0x20, 0x6, 0x400, "9ab0823b1d09d581fc"}, {0xf8, 0x1ff, 0x1f, "4472f980828ca97e10ea835ebe145f627834bf34473bce48b1e60ede62600fde5e2da7790cac1fcca15bbd0f01f2ec0f1993a84489518570ab9c9894171a572dca14e5cfd0ea578cd3fe33ba80f30b4bf45cba6ce9e4bee2d4996ac6ee4450df92718bb19594ea0c253a0cdfbaf714837607ca9ab01bd3c881ff7f6b1f76b20110820281c7f07fb4b04b70acb8509eb4ffeeae08f01ed203503ef8e2e5a658b33ecad57313c3e88504e6c9d3f7670c08579024939d04c4f24e96ed5e576583d9882f80a5e9a8903b0d215f14c873b9bd63b5fcd57974d194b80c8f1d625cf24d3a14397ca211ff24"}, {0xf8, 0x3a, 0x100000000, "fcc663d48c9f71ea5f0925293558420e3b43044d3243ea79b170e091a90efb111398f6738bb0fd7b3854bd22859cd230766dd3b44bd437ec77df09873e678ed18a3afc2995168e80dd7847abbf927b2d540a9b2cc4b264b79668c290c976fda733764a30d3345ad6086860f495f6e47d487321f3921f4513245b944443ad175261741f72fa1353ed86d4c4a9ff4f2582572b2743007bb2146d160d19048729a45becb629ff33077e2a699ec04ab4ceb7f89da8c12dc22bb9652f9a76fc92e6c0113beab8e6da307e9a5fcb4bb6a0d9bf9096d119499030bfb024f1dd26ebc931c2b496"}, {0x50, 0x102, 0xffffffffffff0000, "825ecc00c582172d143a20b0edef3ce99e7297e9641185b90ecd1b20ead725bcd7064ee384157e0d185429acb12993ec24a29751ef2ee7d1636159d299"}], 0x1608, 0x4000001}, 0x9}], 0x1, 0x398e98694db12a82) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a9b000)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000d6b000-0xc)={@broadcast=0xffffffff, @rand_addr=0x7fff, @dev={0xac, 0x14, 0x0, 0x17}}, 0xc) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000125000+0x982)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 186.062819] binder: 29685:29691 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 186.070068] binder: 29685:29691 got transaction to invalid handle [ 186.076345] binder: 29685:29691 transaction failed 29201/-22, size 0-0 line 2842 [ 186.086078] binder_alloc: binder_alloc_mmap_handler: 29687 20000000-20002000 already mapped failed -16 [ 186.128327] binder: 29685:29691 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 186.135608] binder: 29685:29691 got transaction to invalid handle [ 186.141901] binder: 29685:29691 transaction failed 29201/-22, size 0-0 line 2842 2018/02/16 18:03:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00008b0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f000006f000)=0x5) read(r1, &(0x7f0000067000)=""/1, 0x1) writev(r0, &(0x7f0000051000)=[{&(0x7f0000058000-0xe9d)="9b", 0x1}], 0x1) r2 = syz_open_dev$usbmon(&(0x7f000018f000-0xd)='/dev/usbmon#\x00', 0xffffffff, 0x101000) bind$netlink(r2, &(0x7f00002d1000-0xc)={0x10, 0x0, 0x1, 0x13000}, 0xc) 2018/02/16 18:03:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000790000)='/dev/dmmidi#\x00', 0x7, 0x800) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000c07000-0x12)="7fdb7a6eb08c6c7b016fe2865caf7e25595d") bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b"}, 0xc) perf_event_open(&(0x7f0000e37000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f000038c000+0x2ed)={0x2, &(0x7f00008c8000)=[{0x7fffffff}, {}]}) 2018/02/16 18:03:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c91000)=@newsa={0x144, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@tfcpad={0x8, 0x16}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4309(rfc7539(xts(twofish),rmd320-generic)))\x00'}}}]}, 0x144}, 0x1}, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00000c8000-0x8)) 2018/02/16 18:03:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000394000)=""/132) read$eventfd(r0, &(0x7f00007b5000-0x8), 0x8) 2018/02/16 18:03:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8006) clock_gettime(0x0, &(0x7f0000f29000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000e95000)=[{{}, 0x69, 0x0, 0xfffffffffffffffd}, {{r1, r2/1000+10000}, 0x0, 0xffffffffffff0001}], 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13cecb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697ae707d4a70f330e6fe3a1c9c76f314ffab329", 0x58) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000606000)={0x2, [0x0, 0x0]}, &(0x7f0000d75000-0x4)=0xc) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"2ad27f26"}}}}, 0x36) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x7fffffff}}], 0x30) poll(&(0x7f0000df9000-0x20)=[{r0}], 0x1, 0x0) readahead(r0, 0x0, 0x6) 2018/02/16 18:03:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) syz_open_dev$admmidi(&(0x7f0000789000-0xe)='/dev/admmidi#\x00', 0xffffffffffff0001, 0x10080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:22 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/cuse\x00', 0x4200, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f000074a000-0x4)=0x7) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:22 executing program 1: epoll_create1(0x80000) r0 = semget$private(0x0, 0x0, 0x3) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0xa98a78c20f64e771) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001000-0xea)=""/234) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/248) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x3, 0x400) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000a6b000)=""/106) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 2018/02/16 18:03:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ef6000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00002db000)={0x0, 0x80000000, 0x20}, &(0x7f00002e8000)=0xc) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00003ff000)={r3}, &(0x7f0000e35000-0x4)=0x8) sched_setaffinity(r1, 0x8, &(0x7f0000e87000-0x8)=0x5) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f13000-0x10)='/dev/sequencer2\x00', 0x2083, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00004ff000-0xc)={0x0, 0x3, 0x30}, &(0x7f0000e9c000)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f000009b000-0x10)={r6, 0x6, 0x9, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000132000-0xa0)={r4, @in={{0x2, 0x0, @empty}}, 0x1, 0x0, 0x8001, 0x7, 0x1}, &(0x7f0000ec7000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000852000-0xa0)={r6, @in={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xf}}}, 0x5, 0xa09, 0x972f, 0x9, 0x10}, &(0x7f000073b000-0x4)=0xa0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000d90000-0xbc)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000250000)={0x0, @tick, 0x0, {0x0, 0x4}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a7b000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ptrace$setregs(0xf, r1, 0xd, &(0x7f0000d9b000-0x3e)="2bd7e1063a614df26857be96aba5a89810ea66d48640529851bd022acba6e6f544d73bc3931bf1aa38b129f6e320f1e27431b65df8f636fba5b19e782156") capget(&(0x7f00002f6000-0x8)={0x19980330, r1}, &(0x7f0000f34000-0x18)={0x0, 0x96c, 0x80000001, 0x3, 0x4419, 0x8}) 2018/02/16 18:03:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fb7000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000dc5000)={@common='ip6tnl0\x00', @ifru_data=&(0x7f000051b000-0x20)="334af7bd701cbafb728934892688d35b54621d3ebd65fdd46cee5f7ac36250ad"}) 2018/02/16 18:03:22 executing program 2: pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000e7c000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(r1, &(0x7f0000000000)=[{{}, 0x9, 0x5, 0x5}, {{r2, r3/1000+30000}, 0x80000001, 0x8000, 0x414}, {{0x0, 0x7530}, 0x2, 0xf20, 0x6}, {{r4, r5/1000+30000}, 0x8, 0x2, 0x800}, {{}, 0xfffffffffffff800, 0x1ff, 0x7ff}, {{r6, r7/1000+10000}, 0x401, 0x8001, 0xffffffffffffffe1}], 0x90) write(r1, &(0x7f00004ac000-0xe5)="ae", 0x1) readv(r0, &(0x7f0000c9e000)=[{&(0x7f0000c26000-0xe7)=""/231, 0xe7}], 0x1) [ 186.240667] binder_alloc: binder_alloc_mmap_handler: 29718 20000000-20002000 already mapped failed -16 [ 186.242105] binder: 29717:29726 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.258156] binder: 29717:29726 got reply transaction with no transaction stack [ 186.265689] binder: 29717:29726 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents(r0, &(0x7f0000825000-0xa7)=""/96, 0x26) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000212000-0x4), &(0x7f00006cd000)=0x4) 2018/02/16 18:03:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000ba1000-0x58)={0x4, 0x0, 0x6, 0xffff, 0x100, 0x9}) mkdir(&(0x7f0000635000+0x43e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f00004d4000-0x8)='./file0\x00') mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f00009a3000-0x8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000)=[], 0x0, 0xff) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000003000-0x8)='./file0\x00') mount(&(0x7f00006fe000)='./file0\x00', &(0x7f0000acc000-0x8)='./file0\x00', &(0x7f0000ca2000)='anon_inodefs\x00', 0x800000, 0x0) pivot_root(&(0x7f000035a000-0x8)='./file0\x00', &(0x7f00007d8000-0x8)='./file0\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000bf0000)='/selinux/checkreqprot\x00', 0xa000, 0x0) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) linkat(r1, &(0x7f00006ba000-0x8)='./file0\x00', r2, &(0x7f00008e3000-0x8)='./file0\x00', 0x1400) 2018/02/16 18:03:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00001d3000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000b26000)={"6af1f28ac4cb29ee1fc7db8d289f6fa8", {0x4, 0xbaa4, 0x894, "d2664625751a", 0x2}}) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 186.313575] binder: 29717:29735 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.321401] binder: 29717:29735 got reply transaction with no transaction stack [ 186.328903] binder: 29717:29735 transaction failed 29201/-71, size 0-0 line 2757 [ 186.367738] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.373325] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000a7d000-0x2)='-\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) syz_open_dev$binder(&(0x7f000066e000)='/dev/binder#\x00', 0x0, 0x800) 2018/02/16 18:03:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f10000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00004ad000)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x10, &(0x7f0000341000)=[@in={0x2, 0x3, @rand_addr=0xfffffffffffffffb}]}, &(0x7f000011d000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f000084b000-0x103)={r1, 0xfb, "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"}, &(0x7f00002f3000-0x4)=0x103) 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2000000001, 0x0) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000002000-0x10)=@req={0x4ad, 0x1000, 0xddf, 0x7}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x6000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ipx(r0, &(0x7f0000001000-0x31)="ce7c94b4dea4724f43b0451c1fbd8796b8bbb1ffc761a270abb39fefaa96e3b2e897a869ecbd25c97542b30aa60128ae6b", 0x31, 0x20000010, &(0x7f0000615000)={0x4, 0x8, 0x7, "121b85983258", 0x1}, 0x10) r1 = getpgid(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000002000-0x7)='status\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ef6000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00002db000)={0x0, 0x80000000, 0x20}, &(0x7f00002e8000)=0xc) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00003ff000)={r3}, &(0x7f0000e35000-0x4)=0x8) sched_setaffinity(r1, 0x8, &(0x7f0000e87000-0x8)=0x5) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f13000-0x10)='/dev/sequencer2\x00', 0x2083, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00004ff000-0xc)={0x0, 0x3, 0x30}, &(0x7f0000e9c000)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f000009b000-0x10)={r6, 0x6, 0x9, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000132000-0xa0)={r4, @in={{0x2, 0x0, @empty}}, 0x1, 0x0, 0x8001, 0x7, 0x1}, &(0x7f0000ec7000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000852000-0xa0)={r6, @in={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xf}}}, 0x5, 0xa09, 0x972f, 0x9, 0x10}, &(0x7f000073b000-0x4)=0xa0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000d90000-0xbc)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000250000)={0x0, @tick, 0x0, {0x0, 0x4}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a7b000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ptrace$setregs(0xf, r1, 0xd, &(0x7f0000d9b000-0x3e)="2bd7e1063a614df26857be96aba5a89810ea66d48640529851bd022acba6e6f544d73bc3931bf1aa38b129f6e320f1e27431b65df8f636fba5b19e782156") capget(&(0x7f00002f6000-0x8)={0x19980330, r1}, &(0x7f0000f34000-0x18)={0x0, 0x96c, 0x80000001, 0x3, 0x4419, 0x8}) 2018/02/16 18:03:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0xffffffffffffffff, 0x8000000000000006) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1, 0x11, r1, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000062000)='./file0\x00', &(0x7f0000059000-0x20)={{}, {0x77359400}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f000086f000-0x7d)=""/125, &(0x7f0000fce000-0x4)=0x7d) 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b02000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwrite64(r0, &(0x7f000054e000)="dee2f4f063e32bf253f1d4a1f3c2576daf82f2a0a2a6c5", 0x17, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f000079d000)=@ioapic={0x0, 0x0, 0x1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c02000)='/dev/vga_arbiter\x00', 0x129000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000e4a000-0x4)=0x4) [ 186.730260] binder: 29763:29765 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.738071] binder: 29763:29765 got reply transaction with no transaction stack [ 186.745582] binder: 29763:29765 transaction failed 29201/-71, size 0-0 line 2757 [ 186.796909] binder: 29763:29778 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.804694] binder: 29763:29778 got reply transaction with no transaction stack [ 186.812208] binder: 29763:29778 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:23 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000002000-0x4)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f000080e000), 0x4) socketpair(0x8, 0x3, 0x9, &(0x7f0000ac9000)={0x0, 0x0}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000643000)={0x2, 0x929f, 0x80}) 2018/02/16 18:03:23 executing program 7: r0 = syz_fuse_mount(&(0x7f00004b8000)='./file0\x00', 0x1000, 0x0, 0xffffffffffffffff, 0x81, 0x80) syncfs(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@ioapic={0x5004, 0x2, 0x1, 0x40, 0x0, [{0x100000001, 0x6, 0x10001, [], 0x5}, {0x7, 0x0, 0x2, [], 0x2}, {0x21a1, 0x6, 0x8, [], 0x7}, {0x1, 0x1, 0xffff, [], 0xff}, {0x7, 0x7, 0xc81, [], 0x4}, {0x0, 0x7ff, 0x6, [], 0x7fffffff}, {0x8e, 0x81, 0x4}, {0x3, 0x8, 0x0, [], 0xb7b5}, {0x10001, 0x40, 0x3, [], 0x1}, {0x8, 0x2, 0x3, [], 0x3}, {0x3, 0x5, 0x3, [], 0xfffffffffffeffff}, {0xd746, 0x1, 0x8000, [], 0x7fff}, {0x5, 0x5, 0x8, [], 0xfffffffeffffffff}, {0x6, 0x10001, 0x67b, [], 0x40}, {0x40, 0x1, 0x0, [], 0x6}, {0x2, 0x4, 0xb39, [], 0x2}, {0xa3be, 0x10000, 0x6, [], 0x100}, {0x6, 0x8001, 0x9, [], 0x3}, {0x7ff, 0x200, 0x7, [], 0x8}, {0x9, 0x100000001, 0x2, [], 0x1}, {0x400, 0x6, 0x80000000, [], 0x2}, {0x7fffffff, 0x7fff, 0x8, [], 0x4}, {0x0, 0x5, 0x7fffffff, [], 0x40}, {0xdb4, 0x75cd, 0x100000001, [], 0x1}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000f44000-0x9)='/dev/kvm\x00', 0x210002, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2000000000000803, 0x3ff) r1 = syz_open_dev$vcsa(&(0x7f0000056000)='/dev/vcsa#\x00', 0x5, 0x2) timerfd_settime(r1, 0x1, &(0x7f0000a56000-0x20)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f000038e000)) sendto(r0, &(0x7f0000001000-0x14)="120000003200e7e4000f000000149b000800", 0x12, 0x0, 0x0, 0x0) 2018/02/16 18:03:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) fchmod(r0, 0x100) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe76000)=nil, 0xe76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x4}}}, 0x32) setxattr(&(0x7f0000700000-0x8)='./file0\x00', &(0x7f0000845000-0x9)=@known='user.syz\x00', &(0x7f0000594000-0x5)='user\x00', 0x5, 0x3) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) dup2(r2, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d8b000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) [ 186.841426] binder_alloc: binder_alloc_mmap_handler: 29769 20000000-20002000 already mapped failed -16 [ 186.877318] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.883724] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ea9000)='./file0\x00', 0x20000, 0x41) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000086000-0x4)) r1 = socket$inet(0x2, 0x803, 0x9) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00001e3000-0x350)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x190, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f00003b3000), {[{{@ip={@multicast2=0xe0000002, @dev={0xac, 0x14}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}, @common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x0, 0x1, 0x8}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) fcntl$setflags(r0, 0x2, 0x1) sendmsg(r1, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f00000b3000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000035000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000dc7000)={0xe4, 0x2, 0x5}) r1 = gettid() syz_open_procfs(r1, &(0x7f000089d000)="6d01700200696c657300") [ 186.924214] binder: 29796:29800 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.932159] binder: 29796:29800 got reply transaction with no transaction stack [ 186.939700] binder: 29796:29800 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:23 executing program 4: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000-0x4e0)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x198, 0x0, 0x2b0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={0xc8, 'conntrack\x00', 0x3, {{@ipv4=@rand_addr, [], @ipv6=@loopback={0x0, 0x1}, [], @ipv4=@empty, [], @ipv4=@multicast2=0xe0000002}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='ip6_vti0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e0) syz_extract_tcp_res(&(0x7f0000029000)={0x0}, 0x5, 0x81) syz_emit_ethernet(0x4a, &(0x7f000002b000-0x99)={@random="0d4ddefaf676", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x14, 0x2b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, r1, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}}, 0x0) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f000002f000)='/dev/mixer\x00', 0x800, 0x0) setns(r0, 0x40000000) 2018/02/16 18:03:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000016b000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f00004df000)='net/softnet_stat\x00') io_setup(0x5, &(0x7f00006c5000)=0x0) io_submit(r2, 0x3, &(0x7f00008f7000)=[&(0x7f000047f000)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000863000)="5e5614827cc3681a6baa5619fd74544bf857a7e76f1df9f12ed2ec36a359a4411e128263b5e276d07610e306600d3e224823a4e37c7bff9c65ee9875b82d1d357419d05b79a090343623c81bb336fa7d701fd50f119242a549c3e9f416f0f467ce9cafb1accb33793db7d6953ca5e233c652cf177af6794768229226416694091193c75245676b8241585f6fae0eef5c1a1ddfd51b716667f7fad24e6247b51b06bd632ff8144262ae028d3f20ef4a06747946a60e667c1c1842f48556114599260f09df1192", 0xc6, 0x401, 0x0, 0x1, r1}, &(0x7f000061a000-0x40)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000948000)="6c7ba6", 0x3, 0xd9a3, 0x0, 0x1, r1}, &(0x7f0000474000-0x40)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f00006a1000-0x8)="31a673c945f57538", 0x8, 0x7ef, 0x0, 0x0, r1}]) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000ab0000-0x58)={0x9, 0x4, 0x8, 0x95, 0x5, 0x1}) syz_open_procfs(r0, &(0x7f000032b000-0xd)='net/anycast6\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00004f7000), &(0x7f0000691000)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000bb9000-0x18)={0x0}) prlimit64(r0, 0x3, &(0x7f00000f2000)={0x7, 0x7}, &(0x7f0000da6000-0x10)) openat$vcs(0xffffffffffffff9c, &(0x7f000035b000-0x9)='/dev/vcs\x00', 0x100, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000d91000)={r3}) 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00009de000-0xc)='/dev/ashmem\x00', 0x400000, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f000061c000-0x4), 0x4) 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) r2 = syz_open_dev$dmmidi(&(0x7f0000fae000)='/dev/dmmidi#\x00', 0x3, 0x11b000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00002d0000-0x8)={0x0}, &(0x7f00001af000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000b7d000)=r3, 0x4) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xffffffffffffff7f}, 0x0, 0xd7112b8fe8bbd4f9) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000b1f000-0x10)={0x0, 0x0, 0x1}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000a9e000-0x8)={0xfffff7fffffffdb0}, 0x8, 0x0) read(r2, &(0x7f000064b000)=""/128, 0x80) fcntl$setownex(r2, 0xf, &(0x7f0000133000-0x8)={0x2, r1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000db000-0x9)='/dev/ppp\x00', 0x4040, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f000094d000-0x1c)={0x54, 0x3, 0xccc8, {0x80000001, 0x17c0000000000}, {0x2, 0x3}, @ramp={0x8001, 0x8, {0x4, 0x1f, 0x3, 0xe93}}}) 2018/02/16 18:03:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000005000-0xe)='/dev/admmidi#\x00', 0x1ff, 0x8000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00007a0000-0x8)=0x8000000) r1 = syz_open_dev$audion(&(0x7f0000c2a000)='/dev/audio#\x00', 0x4, 0x208280) r2 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000488000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername$ipx(r1, &(0x7f0000459000-0x10), &(0x7f00009ad000-0x4)=0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) poll(&(0x7f000078f000-0x18)=[{r1, 0x40}, {r0, 0x4}, {r2, 0x10}], 0x3, 0x200) sendmsg$kcm(r0, &(0x7f00005ea000)={&(0x7f0000d25000-0x10)=@nfc={0x27, 0x4, 0x3ff, 0x7}, 0x10, &(0x7f00007c1000-0x80)=[{&(0x7f0000190000)="42156f4c6e01a5f76a3a3715bd5b602a3b98c3c7cc07a9c1abc229e22586dd6f78636af36ff7544da3a847a2348b4f71a7be66e976d124b1fd4f9108f2824e27d15f923f6078769738c624576198df2ebb7fbbc310ae5bbf41204ca9b6cb4c1f7cd5c8ced2aeac9886ff9a83b0494f88a71db8f110afece878f4c68de637c2f69c7c686cd933847d9a9ccd13817925c40e8cf7671cabdf1ae58bf00090566e384d3a48646b2816491e1318b1420b882c", 0xb0}, {&(0x7f0000978000)}, {&(0x7f00008ed000)}, {&(0x7f00002b1000-0x19)="635c8680b03216a822abc9ad3783c98c294063e19cb5a05556", 0x19}, {&(0x7f000030b000-0x58)="aa2dac4ed45d5ac4bb8a5de19b4875faddf1c9a76e98e05025f33a7bc212db77b3608e23782cb47ed372049b5507bebff3c36a4ce5c5de73c764e9fd1512fa033d15dc98725af16422c813d74cee4ed5a7fa5df594f31708", 0x58}, {&(0x7f000004e000)="faca3177a2433ce34ed0898b3dfc52394cda2cec469550f841fed8e57c7b30a28502eeb701b8d2393feaf08cbd2ae28794147caad9cd2cb7fad4d7f4a244fbcadb39e8c24f1148d37dda5f841c582420b04b826de8e3fc1264032e2fccd8bd6a0de1eb78a2d79090e11e642bd17fef7aebc726f2f0edfa340774bc07e1de44c6160fb57d47b103ff543fa02b19e713e3", 0x90}, {&(0x7f0000ac5000-0x27)="e1ca4ec5068ccd2f5e5108ecf1c0f7c1eff0f01b6340bbf2b7b7a8773145cf800eaedde396534e", 0x27}, {&(0x7f0000146000)="74d909bef154fbed6efee52a8f196a64c4b2a26ab1ce46cd0f8ad89a96e546f1aaa49405898dcc60a9c3e8d1c55f7c77763bbc2c85f26103ad042fdfd04f68f16965668eabaf912059bbce451f76cfe706930d47e5ccc9c37299cdb10f85a6fd1c425b9303529d3968121c91398b02af3e877ac984d9e30095b2b5a04f6864038ddf15cc3c240b48787f3b457886194de0a72839871af82fd7ae16244aa66ed71de1ff", 0xa3}], 0x8, 0x0, 0x0, 0x1}, 0x1) [ 186.979687] binder: 29796:29806 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 186.979699] binder: 29796:29806 got reply transaction with no transaction stack [ 186.979708] binder: 29796:29806 transaction failed 29201/-71, size 0-0 line 2757 [ 187.043352] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.043822] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.082655] binder: 29831:29832 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000eb000)=""/14, &(0x7f0000c2b000-0x2)=0xe) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:23 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000404000-0x4)=0x7, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000), 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000002000-0x8)={0x0, 0xfffffffffffffff7}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002000-0x10)={r3, 0x84, &(0x7f0000000000)=[@in={0x2, 0x3, @rand_addr=0x200}, @in6={0xa, 0x0, 0xffffffff, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xff}, @in6={0xa, 0x0, 0x1ff, @dev={0xfe, 0x80, [], 0x0, 0xb}, 0x9}, @in={0x2, 0x2, @multicast2=0xe0000002}, @in6={0xa, 0x3, 0x101, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xfffffffffffffffd}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}]}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000002000)=@assoc_id=r4, &(0x7f0000003000-0x4)=0x4) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000001000-0x8)={@broadcast=0xffffffff, @broadcast=0xffffffff}, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001000-0x4)) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002000)={r2, &(0x7f0000001000)="527da5f496576744818250277266eb79539989a65d747664bbccd5636ab552cd11b71eb0"}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000003000)=0x2, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$random(&(0x7f0000004000)='/dev/random\x00', 0x0, 0x101000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000005000-0x4), &(0x7f0000006000-0x4)=0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x4010, r0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000004000)={0x8, 0x0, 0x2, 0x9, r3}, 0x10) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000004000-0x4)) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000002000-0x4)=0x14) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ab1000-0x17)='attr/keycreate\x00') sendfile(r0, r0, &(0x7f0000417000-0x8), 0x1002) 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000001000-0xb)='/dev/midi#\x00', 0x2f, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000c6a000)={&(0x7f0000001000-0x10)=@nfc, 0x10, &(0x7f0000579000)=[{&(0x7f0000317000-0xc5)=""/197, 0xc5}, {&(0x7f0000000000)=""/202, 0xca}, {&(0x7f0000001000-0x5a)=""/90, 0x5a}, {&(0x7f0000001000-0x17)=""/23, 0x17}], 0x4, &(0x7f00001e1000-0x1000)=""/4096, 0x1000, 0x3749}, 0x10123) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:23 executing program 6: openat$ppp(0xffffffffffffff9c, &(0x7f0000980000)='/dev/ppp\x00', 0x2000c0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000cd000)={0x0}) vmsplice(r0, &(0x7f0000cd5000)=[{&(0x7f00007f3000)="3dddbde088ce11902a6c912794ebc6725a3b8802a9313f1d147449688154622217e39700d346a3987c08835581cd604ca1a4a501a1ac60b0f608906cc760a12dcd901f00f76c4b0389706853bcd5c104847505d50da49283c8ecd42d33b33eb32ce0381c08cead5f07ba1f6ec45d51b0faced6cf72114102cf3fdeeb7ae814aa0ac860a2b9987b5919ac024f50b05e7034d014d70f9d13273cc19ae7fd267c8a439a8a5e34400a706156958844f0b13dea726ba7ad84bb04e502e8946f089f50aa62ce67ae00e12975f12bf537e922ffe142f5b73d6ed8", 0xd7}, {&(0x7f000077b000)="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", 0xfe}], 0x2, 0x2) r1 = msgget(0x3, 0x80) msgctl$IPC_RMID(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r2, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x18, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000a83000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) [ 187.082666] binder: 29831:29832 got reply transaction with no transaction stack [ 187.082674] binder: 29831:29832 transaction failed 29201/-71, size 0-0 line 2757 [ 187.133192] binder: 29831:29832 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.133205] binder: 29831:29832 got reply transaction with no transaction stack [ 187.133214] binder: 29831:29832 transaction failed 29201/-71, size 0-0 line 2757 [ 187.145810] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.145962] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) preadv(r0, &(0x7f000039e000)=[{&(0x7f0000449000-0x1e)=""/30, 0x1e}, {&(0x7f0000f96000)}, {&(0x7f0000285000)=""/194, 0xc2}], 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00003f8000-0x4), 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) mmap$binder(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f000009a000-0x4a)=""/74) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:23 executing program 0: r0 = socket$inet(0x2, 0x1, 0x7) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000d0c000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00007ed000-0x42)=""/66) r2 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000d8000)=0x200, 0x3) connect$inet(r0, &(0x7f00002db000-0x10)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000956000)=0x8000, 0x4) connect$netlink(r2, &(0x7f000055e000)=@unspec, 0xc) sendmsg$netlink(r2, &(0x7f0000915000)={&(0x7f00005c9000)=@kern={0x10}, 0xc, &(0x7f0000525000)=[{&(0x7f0000032000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x2, "", []}, 0x10}], 0x1}, 0x0) [ 187.249489] binder: 29842:29851 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.257351] binder: 29842:29851 got reply transaction with no transaction stack [ 187.264952] binder: 29842:29851 transaction failed 29201/-71, size 0-0 line 2757 [ 187.270079] audit: type=1400 audit(1518804203.572:222): avc: denied { map } for pid=29856 comm="syz-executor2" path="socket:[81881]" dev="sockfs" ino=81881 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 [ 187.322710] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000686000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) pread64(r0, &(0x7f0000f85000)=""/122, 0x7a, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/16 18:03:23 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000b70000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f00002c7000-0x4)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000958000-0x18)={@mcast2={0xff, 0x2, [], 0x1}, 0x34, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000092a000)={0xfffffffffffffc9f, 0x0, &(0x7f0000fa6000-0x50)=[@register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f0000ec4000-0x28)=[0x30, 0x28, 0x78, 0x38, 0x68]}}], 0x11e, 0x0, &(0x7f0000452000-0x11e)="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"}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = accept4(r3, &(0x7f0000b81000)=@sco, &(0x7f00008c4000-0x4)=0x8, 0x80800) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000a8b000)={0x0, 0xd8, "6036eeecafbae544c8f9367217d7737dfc38aa65772e2223a4f1279cb8b54033ebf86b24a3bf1c9152f1473e76583d813dfca20da7bab5ef3389585d60cc7d63c384c7bd83d9d2dc646ee35f8bedffacfad1d7abdee71cb37e4a22ddabb0832f769ed749e2505ac30f88a384b6f9853c11980991e9ef7235432ea9e431c077cdfacebe6c75443fde5d45cc7350f55f2044dbe0a2b041602f5d64dcaf3810fbfa3f6ecf04fc3e105b206b9ef18b515044295ba7109df866f4fb198198be21085126ea2ee984c8e59673f6a8419cf8c055a472fda6b9c2ed44"}, &(0x7f00009f5000)=0xe0) sendmmsg$inet_sctp(r4, &(0x7f0000305000-0xa8)=[{&(0x7f00001e1000)=@in6={0xa, 0x1, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c, &(0x7f00005f8000)=[{&(0x7f0000d45000)="bcbedb73ff49a910c96f97bf6e67a8e08227be8ee2beffc265ce5c22cae9050b8103f537cfe3782349b7a7a589406b99056e64f9d8f938be3655b40a08632a812f1b3df6c7913baff82a4a845d080cbfa68d1cb8d8948055333d1a395e2f2cbbf920476cd5fad4399fb0b0703c91c40b611ff3c86dcfe7ecbc74480b3a83bd0244238b995763f971bc700bbdb905e69636f3ea3a889d4be4f183267c0e0aaa0f6299", 0xa2}, {&(0x7f0000ee4000-0xbe)="af140cf90f75627efabb7187a0442df0042d4627d46f0c1b4d39a957157c94e5e6b7d1dbdb47cc2d56fd47f9bb46b77f4b494750270413d08597a207f6f0c4afa09a3d73db7e39a00b5808891a0a31a10e3028a1ed96583f697c83cfd450aa7f89339e55246b60505c67215b2d8431eedd9e0835b2df5b8b1f1e87f06718e44c9d0172cc47f774a9593899d5fa2b9cb8eb74947d2a8fef5d418387287aa54158cf3fd11918815882aff390fdf5674b57fb07311de9a764a733e882ba3a67", 0xbe}], 0x2, &(0x7f00005ff000-0x60)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x3, 0x1ff, 0x7f}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x0, 0x6, 0xfffffffffffff555, 0x4, 0x7fff, 0x0, r6}}], 0x60, 0x20000001}, {&(0x7f00008bc000)=@in={0x2, 0x1, @empty}, 0x10, &(0x7f0000b3e000)=[{&(0x7f0000240000-0x23)="2d9905783fbbd56983c516dc1c4ba27fa1bb8db78c81592250e1d6d939802ab65a7ea2", 0x23}], 0x1, &(0x7f0000bd0000)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x2, 0xb39}}], 0x30, 0x4000}, {&(0x7f0000090000-0x10)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000e1f000)=[{&(0x7f00003ef000-0xcc)="026b5025fd2478ddda2cbe98928f9acfa50d57d9cb88c9ca0bd3b3a00082ad9f12d081a184626a6083260258d877a6e64e0f86e7b90aa935c99dc7aab5f25ac0e962fcba011b9961576260cafc882d2ceefa29a051d1e7dc6f62b14c0e29824504f66de5c89033cb628ac0bf29142081d10b0773d2d18b5502d82b9b774bfa1bbd839fd55170df69cbbbe9f435a4a9e1d0673b2f51015d5d22e1e71ba88b5f2e509db5af0d6cc96afe14cd0088ec14e5ccb7299311770c80da72e661f36bdf150856e6bac534f3c3707808b6", 0xcc}, {&(0x7f000032a000-0xb2)="b4b0aac6907e6e29d534e82ad04c88bbb2fbaeae6da32da8f6a3e7ce5df84a0eb553d379a09babae0d21ba22e7f592d0411cac8f411605859008a01a4a9671f492ecdeb364acc9d397e23b51ab2c219754954f24c54b080776c047bb389dd29c28de0251e0ce2307edc0dcb249824abcf3e573a60a552f9a7472899c0f0d3e3385d966b19fc8d8f539aaac4ce3f13c769ead574a5723ee076c4235fe9cb88832a05117880800c530492c346d54ffdf17d77b", 0xb2}, {&(0x7f0000586000-0xdd)="b9cd4bb9ac2a7921604f0e626cd9a93a8aedf174b505013b062cbba251a1877d88f8b9a0f2542a6a1f4d6d2e741b91e943b68551d2aa58c35f6b30093761244c6f8d1ab65924e3c48fd640ac50bb1c68b9451346b2ccf5221a0ea960b589e3cf97f8618130498c43901b7f74c549bf794b7645a25c1484cb67d8a3b44f79d52bd8c37b39c5baf6ce1283c94724b7d82549d3c57a43de7687f077439c4f3c16a8b63d907d5bacaff7af18e2d026122fde2e8ba053349da1111e8fb0c59c58ec581255c28d7b208cf551acb40caf573bd2c3609afc6911788f5983fdde8f", 0xdd}, {&(0x7f00003ed000-0x39)="461b88fe93506a36211562f7a1a86dc5e39daf880ad425b482e98b26c78822a4db54a20f65fe91866dfdfa4962886ec0a679968c75dc626aa7", 0x39}, {&(0x7f0000a2d000)="761fa1a3ff2adb57fda37fc00438c997223be5f64b9750e8dea0f9d6a551a86ccba6d2a3b65f37323cbb5f3a394fe8e7d915d116a7839ae1461f161c77055deeeabc27833330516c0f06bdd76acbea4084c1b081e741f29d8748dfc35e8d79d362598729cbae5f784faf3429ebbc8dcb2f5b4fcd11dc88d8b8bd0a952fe0db05b0326653902b", 0x86}, {&(0x7f00003a2000)="be65ecdc9f6860cae36762f35ec6507454bb2582155afd4b7eab5665f20850604706f979cd77aa820df1cd12fe3cf522b5ddcbda637be493da050b7b3736628a584c8c79c91ee5723d205228a08efc6c1d6a6d62ef28fd81704bb0e8d67694500c93138864d4ee5d9e5e034b713891c32c95bed4120bcfb3b8c9124f4213096f9bb976b4b1d35910dd1a9ed832a154c66dc8717bff95bef46e29ebe86770e6a1bf07ef7eddda1fa6b1ba8ddbfcfa6e68f918f31d33a085404b3808d2a843b3f9bf5601f34f639fc128be3a5d0d0e60a84555f2c4a3e07616daeb078f60ccfc6471aca244ff243404dfed2b198f81871058765b49a881887f3292a1b2c984087827fee926ef4b63ff5b75ab39e1fbf35cfe8dfde43e2198aa5627f87d72d38b9a33cd069bc7b7b611d04a132e08a658ca3673debdf5063c6578dc0451db4560acfada269fa0debec20a61f683bfd4869ea10003ca094779912234d06b0b70b50e9bfc98f902435d9a22826a40989b12ec3d65a6694af2500eea93b0afff7de8e9ffff581f6f0f74e12c4823954d21a28364324742eef7eee20e706a080e53b7b7be0e70de41e3336d7d78fd109de95a71c887901123b82ec1b517b91f6169f868b15ba161ded91a1bcdc1146a3d4f077636c95b886a6e0443c1539a915bb08d21ac7e1f89e7dfc66d61713bef6d01c5d30ac3550e0fa5f7d8ba3f245d564be0c14aa85e4223bd539f27b62c82f9e99a25ef2d5bd810ab73e6328cc71748e8b9cbc7ca783d68ffd11992971a9505bbb34ff8c147dafe203edfdd7ea98c7eb7db82b6f200aaec51560a765565dc099850f6dcdab62b4fd2441153359992c192ee44048ddda3326a115df984282e315be409c9c17eae53008edc4679e75c49e9fc5af336df73e0f4745d00b7a5afecf5a09dc6cbdabc9a53a24ee738c45bccafacfbd0f1ab1160d36a2b0261990b970ac0d4222b7160073e64a3b92d60d486313a6705db0ff5e61116cd1fb9622b57f32c25fd7030b36cae8dd3e5df10577e47bfa330ac7e0c5cc37fe25d602ccd33af77fbe91efa1e1fa5d434964c5aa26053a385daf94233e92f4ba893481a2058c4b3dad93dc692e3a8fe9fd73088d4c6ace25a7cf121aa3baf6d9ca56dead425a991fe20ba8f1c1edf15ac0499277b62021f24fb9a0546fe33241dcc0998380d05c834f8123ca82c74d1899d18082e61121178f4c500a577b3d19f87fe6f7b8db5efedd202721bc4ca146785f1029a02bdf518d7d05d456509125f265aa7ef03a1b432cdd1f4d57a1d5aed3a040981f44da19a78ec6a7a9a5916adb0debb832f524e4efcd4bbb458da658d60d2cca47b4c195bd1ba2473a365d98726236ef96f991e77ccab455ae736200061d06961a93fdc2b24568f9fc2e18fba1b09745d7820cb23d577ef6c044aa68e53c8693a21ea67350a5afc3b02531351ad945cf88cbac56b0c6a0b65eb18f101bf4c677c8a512c65357b9fa56cfec4cb60ec9bc624ce231923d77a8b1940f32ff03ffe4584b3ca3e7c3f4476fbe44c761e4088947d28d529e851a915ecf60cde5df167ee84eec712dd57545f668013f83fc99b0117fb3701a5509e1151ea99042c4e15b8644680b6b74a3fdb1a96e4a7ff9f870755b50ceeda1faa5b66a4e9f0ded0e625a7de236b24ce7ce026d128d1439fe1121a45437e752e18b94dde6b69e24a707c151e9753dbd977ed1e69385e118801fe006056e31d4f69777432411f000d80b7e36bf311aeab1f264f5c9421b8077f555749dda2f6fe132af3652f76f2df64400d241c9b1580884f406f76a8efecd30044e1bf89617bbb047967f7cc7f0e68e329c621ca471b5ff17702e511bb2277bf6fb6762ad5662e0c53f9d1a9aa7043190de37153c5a2e4d64f9822518f1c0c31f4fcaeb45c765e641bd018e2c379e2e8e820adb0232a849245389e9f267712bfb237c9a050a4e93807641feb29c89e62aefa55b4f2c6fbd9c1bf863e7116223b61f545a07146665dba3042e940261be90a75da0889e066a98f8bc2b6f97609f32b6f121c7d6076a955f85ac5e94bcd42252cbd384476d4906d1e7ef26752c5fd32050b69554ef43cb833d0bd4f132304bbf6792eb37a95cf8186916879a8fc8358989dc1e3a2819a43a94ace25c18974a3f9e3558f6179ad830a12df54ae6394935b731870d034e02aa5fcd77bbc914f4d5e3d904485ef5e6952ee1defed07d87d483dee768c754727970246e1248420ff4ce29a816406f0ede2b3edb21ecebc39d80747cbb50ee921f5267619f9562d1c5c31b90f59b160b72e21c6771f716fa2ae8bb91a2e8f70ab363a5eeb8ef49c10df9cff1cef495536cb307fd7c48ec230d113798b6d51141ab4ee767d705ba7ef2c33c2e0b5bd624206a76029c8bb9811df9fc35a33f5539f9b691fa760658de2f282ef73d2bfdd2969f19a8f844de53d5c2d6388e287257b0623ab407d0a2944b2bcc3b495290fd29cdacf5dd71b79b9c8e5534e5ed6fb746a7670385fcea3617b03c28f5f82a76b6c7a8d6e07d3a3bae6775983a81bc68cee73f529c42b78b22aaf4ef1e8bd534a63030e607dba92b0a4415adfadfd6391aa71ee2a6fa4eb437059eb9a95b2c4a3bbb8ba4e607adb69dceed999948ef9551c59a6cd165fdbe156741cc753054e58979e1662edfa9b0edbe59234ca5d2bc8affba0d4df039b35c478d2d47a2007729047f580634e6453870a72654afb9c4f0875daf01bdd9ca6a225d91b7043a0ad3c057e938aa250a39ee08f393e19d8325be96ad90cb1a4b8be8fc2eddec53b8b3e3a9097ba2017c5ab93d2935d0ac74249541a622de7fcdf9311202984bc48e4024595c162b86b1e8a532d0a1af3e44015861bf679c025ef94d16e33b407658736206fe64253f913749781220609d89fc53263d93b49f8cf781fbccf573888e40ae0db47efc25d7dbe94049de62476871a2053218381768829d3f4d4757c7ee92213eb9727f3fc84e1313c8e1b2ff66dee8ade7cd7d51dd44d327e3a1242120467fcae5430aaf237546ee4edfc342ff4556f19d2f43d47f94c6b29182328c67db6cceb8ddbb880e373b2ef5f4ac2479e75d7281a05834db036228bd66b3ae87f03f627f8bed71774aee9f08e2a596596d3b31f77e9b7beadd557efe8eb9fd1075321608a4b7b54524377aaf17d4f7071c59c261f8c5631f762abafc1ddb2419272c92cdef1ef17cef30d9c8d7b98d6fcd378c3051d09a797514c33e2c77d35eae776b0e3b111d1058e572ba12907a700f056c8d04bcf36eb95640b53e1e33241905fc1e827218755fddba89f567db38e08b520595118070f39824899c6f6f71361ea7e2a3dfd3a3e6e7c2152ab71f0e95f924c4b65cb547887a3c19c11c39a62e87bf8e5507a8f044ca6b52655d8ce00775c26727fa95d1de6a35fccab507e92f863cf968d87edec3aa64bd71586ba71efa5f75a32c7fcf13d5f4c84110f65035730258994e0ed2a9f0fbc2065659005d9a9c33e5899b86de9cbb1449378b2fc34ea150d7285c69a92678bb94516678002f4f5408de6b118cb164c251284c201b8bb1d896df0aab801d410f9bd7a024a074cb947bc8d96baf3cc290dd11c451301510c4da76ead4578e18572fca0af90d3514fbc9556c9909551450a676493e53b81ee82f06395e27f67f8685ea8267c96abc2eecf23011b661d052c5b9e62b5d39d778311bd379163678c638caa360c997de1f7eb63eccf0fdcb0d55a10f8270acf798e9f5edec91009c6c7a5e96260954b55342f484a072408750d5fdebdd9e153a41635dc271cb1eb4046f121d799b34b845317031017bf2f7bc1549470dc84db3c1f4e2f4bdd237aed68b4077d548e36acfc5eb2b53a5c1d4ace627769f80287fef4e94ad10ddbcdb8ae79c36c076b4ebc0a4aba7e1206bc7faee20c941e4dee82d1f80ec924cbba7697e75a2337d9e1d5230cbba1e0da8daa7c34a6f905402f45771fd30244a4e45b536636b319c621c9f504651b829c67c97011cda803b134db9b38e9a80d083f43c259d8d5588261a17ad9215bf78d2e29d51ba03b9845c289b3dee7f1f42803ab81c5319b352e97a2958db95589dd964a54e0c1951d8249609309bd687a273a7dd9dd0211e97ed29fc55ed54a732d1b5ca7abd82bf3c056347d55b69e48e2cca7cc8b136cc68e02acf52f3cec609efa84073ce83439833276c25052417e94e0822632457ed06fd126a1eaa2a7d381e416fe2b4f6a65cf861cfc77edb701e11244a0a73078e15529fa7d9d4767b7b03b9a63fff756656a3be5499138a6b9b9519395359c7e83c34448b498f4ff0684173f87a64d5d7b68fe6a6a03fae540f096ad10e2c4acd2af046d9d11d740eb0f5528efcc1833e703dc2e3b7acb00adea27210f86794eabf7a6756981e9017424546555471cd98e14a0ea0f6b83d95ccb9e28e64f1dea43e5fe0a454174a1e5c151107c9d0a459d873ae44a033affcd6a620846f59052696fd205f5e9d34dfdcc6c45e53d70e74c6b6c558f28f3b8c9da2584bb50d154c19f824503a156d10565e7f9036aedc940630685beb366cd4fc82b5e11b272f5cdb6652a62253d22515a44b6dd372b6c889fe95fc500c86bb8dc47abbce88eaf00b025bb4b45c2f4db0a5620a47e65095935f93f2f5ac46319a2f0818c84d69109b0ef8efc4da15065e83413e72aa579035e006496e3e4d22380717ff38f23a1ecb115fbc91db934425e3b650f884cbcae59adf857e8e3e41cb9c804a1b339209f35c0e679f5f9dd066a69d6041c1b979b997a776d784b0ecc2f9aec4caf6b54b26fe9c3f7ca0c64b4ea761a5c8d49232b732b76291944b945c91da577b350230bbe5030e9b01ebd9b3534d31a149d93039e4a6d3edf92e0553d0f2f9ebd13c96aad0ce62eb183ea45f803fa9f5b8c6a9a84283623eb924bf9091169be340523f8d7069b127708f0abe612803fd34790781717f8331f8eb84a8cd81e94df4814ea5a3faebd9b4a3b99d439ef579513817056e4a21001e40bd7a7b222abb7eb2b985ce1ef6e6b4725011427f7be75b910143c27b1df4f8e1fe4466a5b462da875e9d485a24e398bb854079770aa42fa887172cd1173b6d4bb1654a3db0d40002d12d7532b969e4f9b9458542b0399099e8ada1b0978b29cb29657feff0ba19a9e5be0e22e1062785292e46e22929a0de6bcb1da54c6f1b04d544b9886fd21391bd230e1c888015a30c89bf10c7190e63827e8ec8cabb4b0cca7c357445a9362488ba913b4ef27e00605aaa26577ba97a2dd0a981b52b18be0b5e420ea4abd46d04f988e6e78988c780c4b1a8d06c87aa2aa33bc519e4d76d65a0dee5875cf25b1ff4a1d0de1066c8b84b7d1bd5c05c7948057b0cfd6b1531416be58f44029ead520f39ce84467d2e970bfa0b58d99802c8f9fe19fa2d53996ed2d7339a9306a87c6796689d71c72e07a29fd489271993014d2334ba216a543959bb3545939f2fa39972e195736abafc56d75475a73495a620b1683865a01693e85dae0b0d92a134f7a6818561a02029bcb6be529b01b9efd5c447912f5359bd3046462b1b53cf998d1ada4718026f2ab8fb1a70f49dee875802938b06be576ea919f93bfaab0856ee7cf6682a492b637119a5b60752bfee10521802c3a35ad35a096ef14e20f4a12c7cd8fe65e153fcb2cff7c7893e072437a0fb888bc51d2412af0914057ec8561fa63a501bd0a120b8fe1096c1263284f49b85bec73e7c2c994e6707b6fcf31418d3ede805a9b990c1ab9f8", 0x1000}, {&(0x7f0000491000-0x59)="492abfd4d7b2ccf382285fea93bc7903963af417abc5e47cffadb20cf1c1e29ede7299a965d4bc6d52479127da86848b5480f1e6ed523f17ce8b0aea6cba63511d3a3e1a3b418357779021ff459fe2b744fb85efcd80037d65", 0x59}], 0x7, 0x0, 0x0, 0x24000801}], 0x3, 0x1) connect(r5, &(0x7f0000fcf000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) sendmsg$can_bcm(r5, &(0x7f0000002000-0x38)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000007000-0x48)={0x5, 0x20, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a00200000059"}}, 0x48}, 0x1}, 0x0) r7 = msgget(0x0, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000b2a000)={{{@in6=@local, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000faf000-0x4)=0xe8) lstat(&(0x7f00005a4000)='./file0\x00', &(0x7f0000c3a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000dbb000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000ebe000)='./file0\x00', &(0x7f000021f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000834000-0x4)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f000029a000-0xc)={0x0}, &(0x7f0000b48000-0x4)=0xc) msgctl$IPC_SET(r7, 0x1, &(0x7f0000db0000)={{0x7af7, r8, r9, r10, r11, 0x80, 0x3}, 0xfff, 0x20, 0x7, 0x60f, 0x8, 0x101, r12, r13}) r14 = geteuid() setfsuid(r14) sendmsg$can_bcm(r5, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000003000-0x10)={&(0x7f0000005000-0x48)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) bind$rds(r4, &(0x7f0000157000-0x10)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) getresuid(&(0x7f0000dec000-0x4), &(0x7f0000190000-0x4), &(0x7f0000671000-0x4)=0x0) socket$rds(0x15, 0x5, 0x0) r16 = getegid() chown(&(0x7f00001a9000-0x8)='./file0\x00', r15, r16) 2018/02/16 18:03:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000967000)={@common='ip6gre0\x00', @ifru_flags=0x5000}) fstat(r0, &(0x7f0000f4f000)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000e2d000-0x4), &(0x7f0000bd1000)=0x0, &(0x7f0000b5c000)) fchown(r0, r2, r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000f55000)) 2018/02/16 18:03:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000075b000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f000085a000)={0x0, 0x0}) sendfile(r0, r1, &(0x7f0000193000), 0x8) r2 = accept(r1, &(0x7f0000e7b000-0x6)=@hci, &(0x7f0000c43000-0x4)=0x6) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00003cc000-0x4)) r3 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000a29000-0x4)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000a0f000-0xa)='net/l2cap\x00') readv(r3, &(0x7f0000d4c000-0x10)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl$TIOCSTI(r5, 0x5412, 0x5) ioctl$VT_DISALLOCATE(r5, 0x5608) 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x1000, 0x1000}) mbind(&(0x7f0000e4f000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000536000), 0xadf5, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000144000-0x9)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00005b8000), &(0x7f00005da000)=0x8) 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000228000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000615000)) read$eventfd(r1, &(0x7f000069f000-0x8), 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000e60000-0xa0)={0x0, @in={{0x2, 0x3, @rand_addr=0x1000}}, 0x10000, 0x8, 0x3ff, 0xfffffffffffffeff, 0x1}, &(0x7f00003cf000-0x4)=0xa0) fcntl$addseals(r0, 0x409, 0x200000000002) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00009b8000)=r2, 0x4) recvfrom(r1, &(0x7f000069f000-0xff)=""/255, 0xff, 0x0, &(0x7f00009a8000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x2, {0xa, 0x2, 0x100000001, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffc0}}}, 0x32) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000097f000)='/dev/sequencer2\x00', 0x8000a02, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000007000-0x1)) r1 = syz_open_dev$sndseq(&(0x7f0000ae9000-0xd)='/dev/snd/seq\x00', 0x0, 0x109480) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00004e5000-0xb0)={{0x7000, 0x1}, 'port1\x00', 0x1, 0x100000, 0xffffffff00000000, 0x4, 0x3ff, 0x10001, 0x2000000000, 0x0, 0x1, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000e8e000)={{0x4, 0x7fff}, {0x2, 0x80}, 0x3, 0x1, 0x1}) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000966000)='/dev/snd/seq\x00', 0x0, 0xa0040) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000cb2000-0x8)=0x5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000229000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f000046a000-0x10)={0x2, &(0x7f0000335000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000e7a000-0x8)={r3, 0x1}) fchdir(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f000084a000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f2a000-0x8c)={0x3f, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$admmidi(&(0x7f0000523000-0xe)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f000015a000)={{0x1, 0x80000001}, 'port0\x00', 0x1, 0x400, 0x80000000, 0x7f, 0x3, 0x4, 0xfffffffffffffffa, 0x0, 0x1, 0x1d}) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c3f000-0x10)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000096a000+0xda7)={0x21, 0x9, 0x7, 'queue0\x00', 0x7}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f000058a000)=""/98, 0x62) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000020000-0x4)) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000020000-0x8)='./file0\x00', 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000020000)) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000020000)='./file0\x00', &(0x7f0000011000-0x10)={0x4, 0x3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x8408, &(0x7f0000005000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000021000-0x1000)=""/4096) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f000000d000)={0x2, "0477"}, 0x3) mmap(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000022000-0x20)={0x3f, 0x9, 0x9, 0x3, 0x9, 0x100}) [ 187.442239] binder: BINDER_SET_CONTEXT_MGR already set [ 187.450621] binder: 29875:29876 ioctl 40046207 0 returned -16 2018/02/16 18:03:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) r2 = dup(r0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000f7e000)={0x0, 0x1, 0x2, 0x8, 0x9fce, 0x9, 0xfff, 0x9, {0x0, @in6={{0xa, 0x2, 0x0, @loopback={0x0, 0x1}, 0xf41}}, 0x10001, 0x8, 0x8000, 0x8f42000000000, 0xd059}}, &(0x7f0000bf9000)=0xb8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f000057b000)={r3, 0x8000}, &(0x7f0000272000)=0x8) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000863000)=0x6) 2018/02/16 18:03:23 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000b70000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f00002c7000-0x4)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000958000-0x18)={@mcast2={0xff, 0x2, [], 0x1}, 0x34, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000092a000)={0xfffffffffffffc9f, 0x0, &(0x7f0000fa6000-0x50)=[@register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f0000ec4000-0x28)=[0x30, 0x28, 0x78, 0x38, 0x68]}}], 0x11e, 0x0, &(0x7f0000452000-0x11e)="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"}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = accept4(r3, &(0x7f0000b81000)=@sco, &(0x7f00008c4000-0x4)=0x8, 0x80800) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000a8b000)={0x0, 0xd8, "6036eeecafbae544c8f9367217d7737dfc38aa65772e2223a4f1279cb8b54033ebf86b24a3bf1c9152f1473e76583d813dfca20da7bab5ef3389585d60cc7d63c384c7bd83d9d2dc646ee35f8bedffacfad1d7abdee71cb37e4a22ddabb0832f769ed749e2505ac30f88a384b6f9853c11980991e9ef7235432ea9e431c077cdfacebe6c75443fde5d45cc7350f55f2044dbe0a2b041602f5d64dcaf3810fbfa3f6ecf04fc3e105b206b9ef18b515044295ba7109df866f4fb198198be21085126ea2ee984c8e59673f6a8419cf8c055a472fda6b9c2ed44"}, &(0x7f00009f5000)=0xe0) sendmmsg$inet_sctp(r4, &(0x7f0000305000-0xa8)=[{&(0x7f00001e1000)=@in6={0xa, 0x1, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c, &(0x7f00005f8000)=[{&(0x7f0000d45000)="bcbedb73ff49a910c96f97bf6e67a8e08227be8ee2beffc265ce5c22cae9050b8103f537cfe3782349b7a7a589406b99056e64f9d8f938be3655b40a08632a812f1b3df6c7913baff82a4a845d080cbfa68d1cb8d8948055333d1a395e2f2cbbf920476cd5fad4399fb0b0703c91c40b611ff3c86dcfe7ecbc74480b3a83bd0244238b995763f971bc700bbdb905e69636f3ea3a889d4be4f183267c0e0aaa0f6299", 0xa2}, {&(0x7f0000ee4000-0xbe)="af140cf90f75627efabb7187a0442df0042d4627d46f0c1b4d39a957157c94e5e6b7d1dbdb47cc2d56fd47f9bb46b77f4b494750270413d08597a207f6f0c4afa09a3d73db7e39a00b5808891a0a31a10e3028a1ed96583f697c83cfd450aa7f89339e55246b60505c67215b2d8431eedd9e0835b2df5b8b1f1e87f06718e44c9d0172cc47f774a9593899d5fa2b9cb8eb74947d2a8fef5d418387287aa54158cf3fd11918815882aff390fdf5674b57fb07311de9a764a733e882ba3a67", 0xbe}], 0x2, &(0x7f00005ff000-0x60)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x3, 0x1ff, 0x7f}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x0, 0x6, 0xfffffffffffff555, 0x4, 0x7fff, 0x0, r6}}], 0x60, 0x20000001}, {&(0x7f00008bc000)=@in={0x2, 0x1, @empty}, 0x10, &(0x7f0000b3e000)=[{&(0x7f0000240000-0x23)="2d9905783fbbd56983c516dc1c4ba27fa1bb8db78c81592250e1d6d939802ab65a7ea2", 0x23}], 0x1, &(0x7f0000bd0000)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x2, 0xb39}}], 0x30, 0x4000}, {&(0x7f0000090000-0x10)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000e1f000)=[{&(0x7f00003ef000-0xcc)="026b5025fd2478ddda2cbe98928f9acfa50d57d9cb88c9ca0bd3b3a00082ad9f12d081a184626a6083260258d877a6e64e0f86e7b90aa935c99dc7aab5f25ac0e962fcba011b9961576260cafc882d2ceefa29a051d1e7dc6f62b14c0e29824504f66de5c89033cb628ac0bf29142081d10b0773d2d18b5502d82b9b774bfa1bbd839fd55170df69cbbbe9f435a4a9e1d0673b2f51015d5d22e1e71ba88b5f2e509db5af0d6cc96afe14cd0088ec14e5ccb7299311770c80da72e661f36bdf150856e6bac534f3c3707808b6", 0xcc}, {&(0x7f000032a000-0xb2)="b4b0aac6907e6e29d534e82ad04c88bbb2fbaeae6da32da8f6a3e7ce5df84a0eb553d379a09babae0d21ba22e7f592d0411cac8f411605859008a01a4a9671f492ecdeb364acc9d397e23b51ab2c219754954f24c54b080776c047bb389dd29c28de0251e0ce2307edc0dcb249824abcf3e573a60a552f9a7472899c0f0d3e3385d966b19fc8d8f539aaac4ce3f13c769ead574a5723ee076c4235fe9cb88832a05117880800c530492c346d54ffdf17d77b", 0xb2}, {&(0x7f0000586000-0xdd)="b9cd4bb9ac2a7921604f0e626cd9a93a8aedf174b505013b062cbba251a1877d88f8b9a0f2542a6a1f4d6d2e741b91e943b68551d2aa58c35f6b30093761244c6f8d1ab65924e3c48fd640ac50bb1c68b9451346b2ccf5221a0ea960b589e3cf97f8618130498c43901b7f74c549bf794b7645a25c1484cb67d8a3b44f79d52bd8c37b39c5baf6ce1283c94724b7d82549d3c57a43de7687f077439c4f3c16a8b63d907d5bacaff7af18e2d026122fde2e8ba053349da1111e8fb0c59c58ec581255c28d7b208cf551acb40caf573bd2c3609afc6911788f5983fdde8f", 0xdd}, {&(0x7f00003ed000-0x39)="461b88fe93506a36211562f7a1a86dc5e39daf880ad425b482e98b26c78822a4db54a20f65fe91866dfdfa4962886ec0a679968c75dc626aa7", 0x39}, {&(0x7f0000a2d000)="761fa1a3ff2adb57fda37fc00438c997223be5f64b9750e8dea0f9d6a551a86ccba6d2a3b65f37323cbb5f3a394fe8e7d915d116a7839ae1461f161c77055deeeabc27833330516c0f06bdd76acbea4084c1b081e741f29d8748dfc35e8d79d362598729cbae5f784faf3429ebbc8dcb2f5b4fcd11dc88d8b8bd0a952fe0db05b0326653902b", 0x86}, {&(0x7f00003a2000)="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", 0x1000}, {&(0x7f0000491000-0x59)="492abfd4d7b2ccf382285fea93bc7903963af417abc5e47cffadb20cf1c1e29ede7299a965d4bc6d52479127da86848b5480f1e6ed523f17ce8b0aea6cba63511d3a3e1a3b418357779021ff459fe2b744fb85efcd80037d65", 0x59}], 0x7, 0x0, 0x0, 0x24000801}], 0x3, 0x1) connect(r5, &(0x7f0000fcf000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) sendmsg$can_bcm(r5, &(0x7f0000002000-0x38)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000007000-0x48)={0x5, 0x20, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a00200000059"}}, 0x48}, 0x1}, 0x0) r7 = msgget(0x0, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000b2a000)={{{@in6=@local, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000faf000-0x4)=0xe8) lstat(&(0x7f00005a4000)='./file0\x00', &(0x7f0000c3a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000dbb000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000ebe000)='./file0\x00', &(0x7f000021f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000834000-0x4)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f000029a000-0xc)={0x0}, &(0x7f0000b48000-0x4)=0xc) msgctl$IPC_SET(r7, 0x1, &(0x7f0000db0000)={{0x7af7, r8, r9, r10, r11, 0x80, 0x3}, 0xfff, 0x20, 0x7, 0x60f, 0x8, 0x101, r12, r13}) r14 = geteuid() setfsuid(r14) sendmsg$can_bcm(r5, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000003000-0x10)={&(0x7f0000005000-0x48)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) bind$rds(r4, &(0x7f0000157000-0x10)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) getresuid(&(0x7f0000dec000-0x4), &(0x7f0000190000-0x4), &(0x7f0000671000-0x4)=0x0) socket$rds(0x15, 0x5, 0x0) r16 = getegid() chown(&(0x7f00001a9000-0x8)='./file0\x00', r15, r16) 2018/02/16 18:03:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xb781, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000cde000-0xb)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000480000)={{{@in=@remote, @in=@multicast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f000095d000-0x4)=0xe8) recvfrom$packet(r2, &(0x7f0000795000-0xb6)=""/182, 0xb6, 0x101, &(0x7f0000ac0000-0x14)={0x11, 0xfe, r3, 0x1, 0x7, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x14) mmap(&(0x7f0000e85000/0x2000)=nil, 0x2000, 0x0, 0x8813, r0, 0x0) mincore(&(0x7f0000428000/0x4000)=nil, 0x4000, &(0x7f00000e9000)=""/220) 2018/02/16 18:03:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x6d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) open_by_handle_at(r0, &(0x7f0000e3c000)={0xa, 0x9, "c611"}, 0x80000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x75, &(0x7f00001c0000)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00009d7000-0x18)={0x0, 0x6f8, 0x0, 0x6, 0x8000}, &(0x7f0000a4d000)=0x18) geteuid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000934000)={r2, 0x65, "accdfc6cedbbda5d70a70781db2fbb21168061472d9083622041a81943148c2532a7fc42b9e1f02a1c96200dcd5856e0eacc94fa99af40a3ea20aab7bab48959830e70148cb040e4bdc42bddfaaddc2c6c6d6066b426a8f0bb0256768d01cebed4a71ed878"}, &(0x7f0000eaa000)=0x6d) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00002b1000-0x64)={&(0x7f0000770000)=[0x7], 0x1, 0x2, 0xc, 0x0, 0x9, 0xb10, {0x6, 0x7, 0x3, 0x3, 0x0, 0x1fe000000, 0x80000001, 0x9, 0x0, 0xffff, 0x9, 0x8, 0xbdf, 0x1, "380a5b73aae488a1f68b052b41639686848035e5d1186212651520374f3be90c"}}) recvfrom$unix(r1, &(0x7f0000ac0000)=""/191, 0xbf, 0x10000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000ddb000-0x1)="e1", 0x1, 0x0, &(0x7f00006a0000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000db0000-0x8)={0x0, 0x5}, 0x8) recvfrom$inet6(r1, &(0x7f0000ff3000)=""/168, 0xa8, 0x20, 0x0, 0x0) 2018/02/16 18:03:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00007d4000)='/selinux/checkreqprot\x00', 0x430240, 0x0) open(&(0x7f0000462000)='./file0\x00', 0x400002, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000351000-0xd)='/dev/usbmon#\x00', 0x2, 0x400080) r2 = syz_open_dev$sndseq(&(0x7f00000f4000-0xd)='/dev/snd/seq\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000cec000)={0x3, 0xffffffff, 0x1d, 'queue1\x00', 0x1}) fcntl$setsig(r2, 0xa, 0x1d) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000e0d000-0xf3)=""/243, &(0x7f00007c8000)=0xfffffffffffffea4) bind$ax25(r1, &(0x7f00002d0000)={0x3, {"2adf8eeee5ea7c"}, 0xba}, 0x10) [ 187.524138] binder: 29909:29910 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.532049] binder: 29909:29910 got reply transaction with no transaction stack [ 187.539530] binder: 29909:29910 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:23 executing program 0: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c9000)={{{@in6=@dev={0xfe, 0x80}, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x315}, {0x40000000, 0x0, 0xffffffff00000001}, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2}, {{@in6=@empty, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f0000fa1000-0x2a), 0x0, 0x0, &(0x7f0000f9f000-0x1c)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/16 18:03:23 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00008e5000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000fe2000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f0000024000-0x80)=[{&(0x7f000057d000-0x71)=""/113}, {&(0x7f0000802000)=""/185}, {&(0x7f0000ac7000+0xa48)=""/106}, {&(0x7f00003a4000)=""/125}, {&(0x7f000069f000-0xb1)=""/177}, {&(0x7f0000575000)=""/172, 0x95d3017641fa3d73}, {&(0x7f000017e000-0xc8)=""/200}, {&(0x7f0000ef2000-0x33)=""/51, 0xd6}], 0xfffffffffffffc2) [ 187.593372] audit: type=1400 audit(1518804203.907:223): avc: denied { map } for pid=29915 comm="syz-executor3" path="/dev/kvm" dev="devtmpfs" ino=9020 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:kvm_device_t:s0 tclass=chr_file permissive=1 [ 187.605593] binder: 29909:29914 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.626159] binder: 29909:29914 got reply transaction with no transaction stack [ 187.633688] binder: 29909:29914 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) fchmod(r0, 0x80) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00001ab000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = memfd_create(&(0x7f0000858000-0x1)='\t', 0x0) r3 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r3, r2) write$sndseq(r2, &(0x7f0000d82000-0x30)=[{0x26, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/16 18:03:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000070d000-0x4)) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe2(&(0x7f0000f4b000)={0x0, 0x0}, 0x4800) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00009aa000)={0x3, 0x7}) r4 = openat(0xffffffffffffffff, &(0x7f000033a000)='./file0\x00', 0x1, 0x80) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000b67000)=0x10001) 2018/02/16 18:03:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000001000-0xc)={0x1, 0xffffffffffffff9c, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001000)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x6, 0x1, {0x3, 0x1, 0x11, 0x3, 0x4}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') 2018/02/16 18:03:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000c26000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) socketpair(0x3, 0x3, 0x9, &(0x7f0000ad5000)={0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f000076f000-0x12)='/dev/input/mouse#\x00', 0x9, 0x60000) renameat(r1, &(0x7f0000927000-0x8)='./file0\x00', r2, &(0x7f0000e6b000)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007ffffffd}, 0x14) pwrite64(r2, &(0x7f0000eda000-0x42)="a3f13ee5f39f574b87b3931ce696fe9b92748c35282b6771650a8637e0006ca6f7a5210a8ef348b7af6f417dda04f05630627d2c74c6058d6c67c44d540fa53378cc", 0x42, 0x0) writev(r0, &(0x7f0000794000-0x60)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) writev(r0, &(0x7f0000bd6000-0x80)=[{&(0x7f0000950000)="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", 0xc90}], 0x1) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000001000-0xa)='/dev/dsp#\x00', 0x88b, 0x440003) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)={0x2, 0x11, 0x8000000000000000, 0xb, 0xb, 0x0, 0x2, 0x2, [@sadb_x_nat_t_type={0x1, 0x14, 0x1b9f}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x1, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x7fff}, @in6={0xa, 0x3, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}]}, 0x58}, 0x1}, 0x240008c0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003000-0x10)={r0, 0x50, &(0x7f0000001000)={0x0, 0x0}}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004000)=r2, 0x4) sendmsg$key(r0, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003000-0x58)={0x2, 0x10, 0x80, 0x7, 0xb, 0x0, 0x6, 0x1, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}, @in6={0xa, 0x1, 0x7, @empty, 0xcad}}, @sadb_ident={0x2, 0xb, 0x7ff, 0x0, 0x8}]}, 0x58}, 0x1}, 0x4000000) sendmsg$key(r1, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001000-0x58)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000541000-0x10)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x4000000000000003, 0x80004, 0xd8a) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x1fffffffffe, 0x9, 0xfffffffffffffffe}, 0x10) bind(r1, &(0x7f0000d02000-0x10)=@nfc={0x27}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000376000-0x10)={0x0, 0xfffffffffffffffb, 0x1, 0x1}, &(0x7f0000c77000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000738000)={r2, 0xa9, "7436879af0c92445b924ffeed0158c054617107146d063e428eafebb4ac5954e1b82f2ce3d3b257f603593335a52390de0d0172a4a6a9ea82d69fb581ea3274a1f73680387df103d3fac8718b8014bab1312848431a810650da872bfb932d60c7d137cce20bbf8dab86a0bc83db2b8c20ef990807040679b27d4bee1026a29b87f40a6ac1f6dbf6581008bf0c51a0ae8c85d1e95b76a267d9be37bfa71fca46ab37d3c7d994b26aafd"}, &(0x7f000079e000-0x4)=0xb1) [ 187.686309] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.691873] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000fa000)={&(0x7f0000c1b000)={0x10}, 0xc, &(0x7f000052b000-0x10)={&(0x7f0000634000)=@delneigh={0x1c, 0x1d, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1f}, []}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000b7c000-0xc)='/dev/amidi#\x00', 0x6, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00004df000)='\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000bd4000-0xe8)={{{@in6=@remote, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00007f2000)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000a52000-0x10)={r2, 0x1, 0x6, @empty}, 0x10) 2018/02/16 18:03:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) pwrite64(r1, &(0x7f0000291000-0xba)="53fcb685e9dcd120e9b68ab1484cb180dbebb94b11a1e4366ddf4ebd955d64553086aaaf7bd4aa6f45fa70106f5c8e4c3f44a804c517bc1e0c14555a87e67ed6a324e7abcbf4f65ce4cc6ca3529cedf75c90e7b9af9d0e259c732fdd7cacc9131639d5795189ab7ab69c972a0022834f8bf6203389a0afebe6eec754f7b904bf4cb05b45b93256c2054ed59883a8eed14b54bfd25eca0b838e0d886adc0749f36059859f1ee910977447ef78bcd3d1bf59edb12cc29218ae2650", 0xba, 0x0) [ 187.749290] binder: 29939:29949 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.757182] binder: 29939:29949 got reply transaction with no transaction stack [ 187.764730] binder: 29939:29949 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') ioctl(r0, 0x8, &(0x7f00000fd000-0xed)="79dcf095d22fdb3a36eaeca0598f4f5c0c4ef6ee2c601823df7bf2a9b769d1c0e4e9cc0e825f20fdfc006f1d1b7bd915359fdf3576cd36d979a13b93d411f6b2f5566e6bee5f87f3cd62e7a4e3d39e830ceea2b8ac291bbda55e523f9800676040fbf38975864e12dccfb378c0e34fce1878133ebec001bb4ec34b7c8e213b18cb2198a8bc80be79ee1be1e28564ed0d13ca990b52647b6128eeb99e870ce6354bc64b88d69db0196bd533380af626bc357ca7d9d25a36de1677c99b111bb4ca5c57a148f9b28e3b4373a9b7aa15c0f4b20e2f6ff424dbd78c877ac354d8324da8fdc5859a8e7c21ba88444c8e") readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f000022d000)) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000289000-0xd)='/dev/dmmidi#\x00', 0x7, 0x4002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00003c8000-0x10)={r0, 0x50, &(0x7f0000c3f000-0x50)}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000927000)='/dev/ashmem\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000008000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f0000290000)=[&(0x7f0000832000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00001e8000-0xeb), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/16 18:03:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = msgget(0x3, 0x459) fstat(r0, &(0x7f0000f42000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000897000+0x6e1)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000321000)) stat(&(0x7f0000147000-0x8)='./file0\x00', &(0x7f0000dd3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000021000-0x8)={0x0, 0x0}) r8 = syz_open_dev$mouse(&(0x7f000036e000)='/dev/input/mouse#\x00', 0x96, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, &(0x7f00007d7000)={0x1, 0x3ff, 0x81, 0x1, [], [], [], 0xfffffffff29cf2c2, 0x80, 0x3, 0x10000, "503c47c1beeab508637bb2b537f04245"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000105000-0x4)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000149000-0x78)={{0x4, r2, r3, r5, r6, 0xd2, 0x400}, 0x5, 0x73894bc4, 0xfffffffffffffffc, 0x0, 0x7, 0x1, r7, r9}) r10 = gettid() process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034b000-0x5c)=""/1, 0x1}], 0x1, &(0x7f0000c23000-0x60)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000532000-0x3b)=""/59) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 18:03:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f000017e000-0x8)='./file0\x00', 0x101000, 0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000ee5000-0x8)={0x0, 0xffff}, &(0x7f0000235000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f000076d000-0x10)={r3, 0xc4, &(0x7f000063f000-0xc4)=[@in6={0xa, 0x3, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in={0x2, 0x1, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x38b6574a, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6}, @in6={0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0xa48}, @in={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x17}}, @in={0x2, 0x1, @loopback=0x7f000001}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x12}}]}, &(0x7f0000e88000-0x4)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000fa000)={&(0x7f0000c1b000)={0x10}, 0xc, &(0x7f000052b000-0x10)={&(0x7f0000634000)=@delneigh={0x1c, 0x1d, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1f}, []}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000b7c000-0xc)='/dev/amidi#\x00', 0x6, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00004df000)='\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000bd4000-0xe8)={{{@in6=@remote, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00007f2000)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000a52000-0x10)={r2, 0x1, 0x6, @empty}, 0x10) 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000fe5000)="cfab3c00aaed4fb296fb4f4a9df15a1cd2f171a04b93082533a718f0ba4055ab6fa45b4f9f3d76011b8bcd620954fa16e2bb3ff4f4ae99fce4172e532bfdcb9ac9e7536bb3df84d1a5dadd6c73a745c649b878dc48006ac5a000805a08108b8dae5cf23595e995f00a3cef53cd99fb2905ee34691d850345b671bb607ea150c52a28419e33a1d25ff2dc1b17a77561356551c5971bc849cd2d60f473bc801c7fddb5c7402ec5a8a751124bd34bb8ecf8df9163da7f92d3db8cfea785f6856275ef561955e5ccd87b356ccbb8508c2fc3e5", 0xd1) listen(r0, 0x7fffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000848000-0x1)='/', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4$inet6(r0, &(0x7f0000362000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000c42000)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x9, &(0x7f0000b7d000)={0x0, @in6={{0xa, 0x2, 0xffffffffffffffff, @empty, 0x8000000}}, 0x0, 0x5}, 0x98) 2018/02/16 18:03:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000c19000-0x20)={r0, &(0x7f00009a2000)="4f0eb527b5ad8c67be59160b9b0e67559435cb641d0eb2a819df6e55121c3d2bac3d1d687ee377a95f1ac3925aa2b2ce22adfaee61d66dbfff5af41ed63bf461116bfd43e6ab49dcf30a8e86f6a0b3073efe3d502e8bb0d779f3b1263555831199f3ee44dd4bdb457db042278cd9567b529259b3358b1f6455ede859dc0ea00cfd9609b2835f47d656730660", &(0x7f0000e9f000)="dcc3c762b6d5af226f8b2c78f0b49358c167a6931c557127a01c0baa2ee9db470f31439f8703d0fdcac8bfc5ace99caecf81fcbf9a58bf7bed1d281ecf1c8123bcf484493c0ad9d2f7e3ded8285921ed19f9f0f0344b477f07f6fc870f9e575fca8e9fd9a67e4f12b279b960"}, 0x20) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000467000-0x10)={&(0x7f000084e000/0x4000)=nil, 0x4000}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000517000)={&(0x7f00000d5000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x32, &(0x7f000004f000-0x10)=[{&(0x7f000011d000-0x84)=""/132, 0x84}], 0x1, &(0x7f0000fbe000-0xc5)=""/197, 0xc5, 0x5}, 0x40000102) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000264000-0x8)={0x0, 0x9}, &(0x7f0000f26000)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000b5b000-0xa)={r2, 0x7, 0x1, [0x7ff]}, &(0x7f000042b000-0x4)=0xa) pipe2(&(0x7f0000e18000)={0x0}, 0x80800) fcntl$getownex(r1, 0x10, &(0x7f000022a000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000e50000-0x110)={{0x7d, 0x3, 0x4, 0x6, "36ac95cf88ca3fff4cc5ff25dcba4ad04b7b7eefc05a900a7217fb6f6403b00dc9b2ae3af090639569d47c95", 0x6}, 0x0, 0x0, 0x8, r4, 0x93, 0xf5fa, "74e3f44f11b045d54eda0eb7f3b364835e48c616c6388a0e4d42c893b82146bb22f2c6508d8d3d2b2e253d9868303c11a40b5e4f1ad134d52d4a9bedc3d52a35", &(0x7f0000c88000-0xd)='/dev/binder#\x00', 0xd, [], [0x9df3, 0xdd0, 0x200, 0xfffffffffffff298]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) pwrite64(r1, &(0x7f0000291000-0xba)="53fcb685e9dcd120e9b68ab1484cb180dbebb94b11a1e4366ddf4ebd955d64553086aaaf7bd4aa6f45fa70106f5c8e4c3f44a804c517bc1e0c14555a87e67ed6a324e7abcbf4f65ce4cc6ca3529cedf75c90e7b9af9d0e259c732fdd7cacc9131639d5795189ab7ab69c972a0022834f8bf6203389a0afebe6eec754f7b904bf4cb05b45b93256c2054ed59883a8eed14b54bfd25eca0b838e0d886adc0749f36059859f1ee910977447ef78bcd3d1bf59edb12cc29218ae2650", 0xba, 0x0) 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000d5000)='/dev/vcsa#\x00', 0x0, 0x20482) accept4$packet(r0, &(0x7f0000daa000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000d21000)=0x14, 0x800) r1 = socket(0x1f, 0x1, 0x0) bind(r1, &(0x7f0000d81000-0x80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000529000-0xf8)={{0xffffffffffffffff, 0x3, 0x0, 0x3, 0x7}, 0xff, 0xffffffffffffffc1, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x8000, 0x800, 0x1f}) r2 = socket(0x1e, 0x5, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000cee000)=0x7, 0x4) sendmsg(r2, &(0x7f0000316000)={&(0x7f00007cc000-0x80)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000ade000-0x50)=[{&(0x7f00002d3000-0x50)="c0", 0x1}], 0x1, &(0x7f00002d4000)=[]}, 0x0) [ 187.902591] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.942173] binder: 29986:29991 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.949992] binder: 29986:29991 got reply transaction with no transaction stack [ 187.957520] binder: 29986:29991 transaction failed 29201/-71, size 0-0 line 2757 [ 187.993294] binder_alloc: binder_alloc_mmap_handler: 29983 20000000-20002000 already mapped failed -16 [ 188.046602] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000680000)={0x0, 0x6}, &(0x7f00000e1000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000170000)={r1, 0x0, 0x4, [0x9, 0x6, 0xffffffff, 0x80]}, 0x10) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f000083f000-0x1)='/dev/vcs#\x00', 0xa708, 0x400042) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000ab8000)={0x7, 0x1, 0x9, 0x1a, 0x80000001, 0x7}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) pwrite64(r1, &(0x7f0000291000-0xba)="53fcb685e9dcd120e9b68ab1484cb180dbebb94b11a1e4366ddf4ebd955d64553086aaaf7bd4aa6f45fa70106f5c8e4c3f44a804c517bc1e0c14555a87e67ed6a324e7abcbf4f65ce4cc6ca3529cedf75c90e7b9af9d0e259c732fdd7cacc9131639d5795189ab7ab69c972a0022834f8bf6203389a0afebe6eec754f7b904bf4cb05b45b93256c2054ed59883a8eed14b54bfd25eca0b838e0d886adc0749f36059859f1ee910977447ef78bcd3d1bf59edb12cc29218ae2650", 0xba, 0x0) 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000813000-0xd)='/dev/binder#\x00', 0x0, 0x800) finit_module(r0, &(0x7f00007f2000)='bdevnodev\x00', 0x2) fchmod(r0, 0x0) mmap$binder(&(0x7f0000bce000/0x2000)=nil, 0x2000, 0x0, 0x84013, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000015000-0x30)={0x0, 0x0, &(0x7f000082f000)=[], 0x1, 0x0, &(0x7f000067f000)='`'}) 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001000-0x4)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x8000, 0x0, 0x0, 0x81}, 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000576000)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00006ca000)={0x14, 0x0, 0x7, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/02/16 18:03:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000a0000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000fd2000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$TIOCCBRK(r1, 0x5428) pipe2(&(0x7f0000bf3000-0x8)={0x0, 0x0}, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000085c000)={@common='ip6tnl0\x00', 0x0}) ioctl$void(r2, 0x57da1a3974847677) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000d77000-0x1e)={0x0, 0x16, "d23c7835078dd38740b26e0bef6432f58a654978e297"}, &(0x7f0000776000)=0x1e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000d69000-0x20)={r4, @in={{0x2, 0x2, @multicast1=0xe0000001}}, 0x2, 0x3ff, 0x497, 0x4, 0x30}, 0xa0) renameat2(r1, &(0x7f0000b58000)='./file0\x00', r2, &(0x7f00008b2000)='./file0\x00', 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000d70000)={'vcan0\x00', r3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000c5e000)='/dev/sequencer\x00', 0x20000, 0x0) 2018/02/16 18:03:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000177000-0x578)=@mangle={'mangle\x00', 0x1f, 0x6, 0x518, 0x358, 0xd0, 0xd0, 0x358, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f0000fe5000), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback=0x7f000001, @generic="b490cc23e9afa9c42fe8baf5b419ca28", 0x4}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="1d8029531cdaa6d7d1ac1baef2683975", {}, {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xffffffffffffffc9, 0xd0, 0x0, {}, []}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='teql0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x578) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000018000)={&(0x7f00009e5000-0xc)={0x10}, 0xeb457e2187dc3d4, &(0x7f0000c2b000-0x10)={&(0x7f0000585000)={0xffffffffffffffc5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) dup2(r1, r2) sendmsg(r0, &(0x7f00009f2000-0x38)={&(0x7f0000db5000)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00001ef000-0xa0)=[]}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000486000)={0x100000000, 0x0, 0x3f, 0x8000, 0x9}, 0xc) 2018/02/16 18:03:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000022f000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000d76000)='./file0\x00', 0x100, 0x91) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000bd1000)={0xf3, 0xfff}) lstat(&(0x7f0000fe4000-0x8)='./file0\x00', &(0x7f000058b000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000cce000)=""/183) [ 188.434315] binder: 30007:30008 ioctl c0306201 20014fd0 returned -11 [ 188.473755] binder: 30012:30017 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001000-0x4)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x8000, 0x0, 0x0, 0x81}, 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000576000)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00006ca000)={0x14, 0x0, 0x7, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) pwrite64(r1, &(0x7f0000291000-0xba)="53fcb685e9dcd120e9b68ab1484cb180dbebb94b11a1e4366ddf4ebd955d64553086aaaf7bd4aa6f45fa70106f5c8e4c3f44a804c517bc1e0c14555a87e67ed6a324e7abcbf4f65ce4cc6ca3529cedf75c90e7b9af9d0e259c732fdd7cacc9131639d5795189ab7ab69c972a0022834f8bf6203389a0afebe6eec754f7b904bf4cb05b45b93256c2054ed59883a8eed14b54bfd25eca0b838e0d886adc0749f36059859f1ee910977447ef78bcd3d1bf59edb12cc29218ae2650", 0xba, 0x0) [ 188.481633] binder: 30012:30017 got reply transaction with no transaction stack [ 188.489139] binder: 30012:30017 transaction failed 29201/-71, size 0-0 line 2757 [ 188.496684] binder: BINDER_SET_CONTEXT_MGR already set [ 188.496702] binder: 30007:30008 ioctl 40046207 0 returned -16 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000325000)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f000009f000-0x4), 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00006ab000-0x10)="c3e0f5e92c5e1526d7af743a679579f9", 0x10) 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000001000-0x10)={0x0, 0xffffffffffffffff, @broadcast}, &(0x7f0000003000-0x4)=0x10, 0x800) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000015000-0x10)={0x0, 0x1000, 0xdd8, 0x5}, &(0x7f0000017000-0x4)=0x10) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003000-0xc)=@sack_info={r1, 0x0, 0x1}, &(0x7f0000017000-0x4)=0xc) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000018000-0x10)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000002000-0x1)=0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89fa, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f0000010000)="6b6be70000000070a40d000072ca66ee2b10bb62bc0c89b4c13f0641cb9d3cb0"}) 2018/02/16 18:03:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000339000)='./file0\x00', 0x800, 0x110) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00007ca000-0xc)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000648000-0x8)={0x0, 0x7}, &(0x7f0000660000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000fc7000)={r2, 0x6, 0x6, 0x0, 0x3, 0xf8}, &(0x7f000006c000)=0x14) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 2018/02/16 18:03:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) pwrite64(r1, &(0x7f0000291000-0xba)="53fcb685e9dcd120e9b68ab1484cb180dbebb94b11a1e4366ddf4ebd955d64553086aaaf7bd4aa6f45fa70106f5c8e4c3f44a804c517bc1e0c14555a87e67ed6a324e7abcbf4f65ce4cc6ca3529cedf75c90e7b9af9d0e259c732fdd7cacc9131639d5795189ab7ab69c972a0022834f8bf6203389a0afebe6eec754f7b904bf4cb05b45b93256c2054ed59883a8eed14b54bfd25eca0b838e0d886adc0749f36059859f1ee910977447ef78bcd3d1bf59edb12cc29218ae2650", 0xba, 0x0) 2018/02/16 18:03:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f000099e000-0x14)={0x9, 0x7, 0x3, 0x3, 0x6}) r2 = syz_open_dev$mice(&(0x7f0000865000)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000107000-0x6)={0x0, 0x8}, &(0x7f0000753000-0x4)=0x6) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00009f4000-0x14)={r3, 0x0, 0x5, 0xe000000000000, 0x8001, 0x1}, 0x14) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000a1d000)={r3, 0x0, 0x0, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000546000-0x10)={0xffffffffffffffff, 0x50, &(0x7f000074d000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000805000-0x4)=r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) [ 188.563757] binder: 30012:30024 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 188.571560] binder: 30012:30024 got reply transaction with no transaction stack [ 188.579062] binder: 30012:30024 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000ff3000-0x34)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$rtc(0xffffffffffffff9c, &(0x7f00005a3000)='/dev/rtc\x00', 0x400, 0x0) eventfd(0xffffffffffffff01) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/16 18:03:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x2) bind$nfc_llcp(r0, &(0x7f0000001000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8c7e86fd3ac779e1ad728f6e16667c6b36039138bd9455f701c968a1e39764844a5c63cbbe8a1e14095253336869fcc3028bdbbb80c5f524ae66a81a2bdbce"}, 0x60) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000ef000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f9f000-0x4)=0x24) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000791000)=0x8, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00006e7000)={0x0, @in={{0x2, 0x1, @loopback=0x7f000001}}, 0x1, 0x7fffffff, 0x9, 0x6, 0x5}, &(0x7f000009e000)=0xa0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000733000)={r1, 0x1}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f000082f000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0xb800}) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xf1d000)=nil, 0xf1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000e7a000-0x10)=@in={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000e30000-0x9)='/dev/sg#\x00', 0x7, 0xc2) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000de3000)={0x4, &(0x7f0000f1d000), 0xc, r1}) recvmsg(r0, &(0x7f0000f11000-0x38)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f00003b0000)=[{&(0x7f0000cbb000-0xb0)=""/176, 0xb0}], 0x1, &(0x7f00001bb000-0x4f)=""/79, 0x4f}, 0x0) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc92cbe03a3f805e608740c4763340d4756ef04ff3ea3122ba2c96a6d60cbe5477028a394300000000000000074ca8200205760785b6b152e37d5de5ad2f7d4f615c2c57", 0x44, 0x0, &(0x7f0000f1e000-0x10)={0x2, 0x3, @empty}, 0x10) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) connect$bt_rfcomm(r2, &(0x7f000061d000)={0x1f, {0xec5, 0x401, 0x3, 0x6, 0x3, 0x1}, 0x4b3c}, 0x9) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000e8000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000873000-0xb)='/dev/hwrng\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000177000)={0x200, 0x4ae, 0x4, 'queue1\x00', 0x100010000000005}) [ 188.654947] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.665398] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x9, 0x2, 0x0) bind$inet(r0, &(0x7f0000ef1000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x40a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000002000-0x8)={0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000ef0000)={r2, 0x3, &(0x7f0000ef0000)=[0x4, 0x6, 0x7], &(0x7f0000000000)=[0xc91, 0x3, 0x80], 0x2, 0x8, 0xfffffffffffff30a, &(0x7f0000001000)=[0xfffffffffffffffd, 0x4, 0x7, 0x8001, 0x5, 0x9, 0x8001, 0x2], &(0x7f0000ef1000-0x8)=[0x1f, 0x80000000]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000ef0000)=[{{0x0, 0x0, &(0x7f0000001000-0x40)=[{&(0x7f0000ef1000-0x10)="904b3d4c75af0c4ff3551619e8c62a4c", 0x10}, {&(0x7f0000ef0000)="e4d91a38cb70cc200c31fc8614a01c59ce08f8823c870a575a36f1158617c1170af0347b1cdc60c6e3d9ef59244a", 0x2e}, {&(0x7f0000ef0000)="6c60675765bf439896dd7d02147cdd8b90371f2d4b60a84817b1373afc85da0ded00fa7bef0d0e5605e712aef36c00a92a8cf7480c15d7848083c5440ae86edf1226b807875acc13597b1ce0a3b20237d96349d9758911550f86536cf6da22a959923ec54ff40a05b93cc8ce135bf701a3c9ead5409d6c87a301886c4b", 0x7d}, {&(0x7f0000ef0000)="b2b725d1e31ab7e32ca960a454ad57124907c28217a095262b541693239c612406f274ce3bfce73c800cdb30455f3780be799ec7d1dfe792ac895494fd3208ab19ed08399ad5bb737eeba851dfafe5323231903b8c8296ea3c", 0x59}], 0x4, &(0x7f0000001000-0xf0)=[{0xf0, 0x0, 0x8, "4b1f77b04995885a5510462ed1a6e9f240aadeccc17ac361564b464edeb03e9f56b365efb3d92c20a8f2ef077d768ec78f080bac9377da6cd71f0835292282f31a63ddf61208ea729dbcf71ad1c32aae1fe2b9cbcc0ed782e3b5b9ae304c8cc6ebe81ad1e2d28aeacc67189c622575f75e779193db4e0317afad752a9524dcd04812e8f165a2e04f31d7c050c851c7e577af40a96f25fff48061081012bc43625109b969b0836fcfdb675cb3fa97dbf15be4e7bda7e6ebe2befbbeab8261d1726f9bb90dc237b9baa7ce18d46966b09e8ddab8837caab807eb0f88172860e9e4"}], 0xf0, 0x4000}, 0x8}, {{0x0, 0x0, &(0x7f0000ef0000)=[{&(0x7f0000ef0000)="1f44bc8403181b7f810c026a87fa350fb8cfb20eb8512ddf057e94f6da083eb0812391ba4cbc7f7066b62f0bf2eba6f1def9ec2efc172a4e045bac66db918c2b25eeaca5a6bb05ccc1f24af422897ee092bdac682344780343fa78081b8f4aca3edcc2235c5f32991341cdd4ad0da0e88442b90f1735e7a96e9d66bca413d37abc74545f6587314a2af0aa1000ae79df278a743c0221cbfa7c4e7858f68cdbcd5ed955231fd5f1601dcf5d3f2ec637db00ba5277596a36666e0c0958e58894d7004e4ac0e8cc90688af729a77ab52f17787fa35e1cc121f0c0606bd050ce32d5cec84d9144129f00fd09aeb1d4d1113135c3f984dc5b4c67", 0xf8}, {&(0x7f0000001000-0x96)="2b19b1cd34cb064ba4986923cabfe9a2dd79daa17fe911315a2a6587438e1a0b1d216164cf63d6ab197633d17a4ccff2c245bfbd5c54d619833c3eea047d01ebda7e537b328eea6004c3443b0d95463c97050a17cd3f8b558bed38fd522ed777b974badac9b4d90f6bdd38e7cb9ba2b9f5cb26ab8afb39d3a5f5bbf4695113037eb48adac5ec97dcd8afab0bc5e9ac0b83c3121a1228", 0x96}, {&(0x7f0000ef1000-0x5e)="6ad2e299177d2508a7b7927fe89699a566536e818e1fae5dc0783d321932dedbd3bb8c555a0089628a1f9d0b4226790de951c1c30616d4219eec366491ca9f1a53575f4143dddba40ed7f634f1f71025086f0ee0fae6f20ea516da3582aa", 0x5e}, {&(0x7f0000ef1000-0x6f)="029c23d817ac733a2e4b804c5b0159ad68a8e85d131f3d856ffb280838fe311b9d9c7555cbfd64d0cfd8401548453e4dc68e7ff3d4d36a1de36d502fee784865a35c28f55d4b370c5a952ef445d5130519133b6738f684b929177068324195bbddea8f244fd45143a3700b6e4400bd", 0x6f}], 0x4, &(0x7f0000000000)=[{0xc0, 0x112, 0x9, "f8a64c4a3c4448f653165b71247444ffaa709284c7f3e8af0626b406b72cc53e97afe900c6b8ce7454e42250b5c70522955db7c65320b6c46099dda0df5c8a10d8e9ed3a829c99924bccf11ca0903962fae90da4432fb4402acfe8ab4f0d65d6da919195f24b9cecc314c90bfd675ff0bdbd022f8313f956bcf18c7481c8046dd5b350e8fa39fa0b740bd24fad6e0f353a7824936923cda565b2ee5865593f35fc80e9ac5ddf2652ff64b3"}, {0xe8, 0x102, 0x3, "6e5c8092f0c90076b3158f1bf8634dbb2164af2f836d4d389c2a1d36b48e5db957d01367a6fdaeedeb2daa3132c5089c03fcd05dc1809432f12a389956c531a438e6839dced693b1d31ac9d3f30e2cfcee638386a1701b5d044bb537f0b764a99e135ecb3291005fef255f1f7efdebc512b153ed734a61c19cfe685c43a2c7b640520d5a628ce2747f8c3ebe965038817a2d3021a19981a93b81167fdbfe957736bc703f8707c05a6eb493b81685c4d391db0b8df0d5daad95fc18e99aecaba4bdac9ab44d217f9ced977edd16c665bac203fc8f"}, {0x40, 0x11d, 0xeef, "522ce94fde8edb02c80fbf9c0244307566f31e729b40192860550a1d1ed6e2c270f0f11ab70a5fa4e989ad71c2"}, {0x80, 0x0, 0x0, "859410750e0709639556e759e403be7c190b2cba5a8da50a2d92ff5fe8f258b0479896531a90d828d9896ccc85cab992630dc7d50fab902e0808b55cdee41ed8f020e15752e6e2ff660b47f0d7d15f94a669ee1260e615afe1ab6df3fa27d7d673f43e735ae535e24acbda6a5edb7ca3"}], 0x268, 0x20000000}, 0x7}, {{&(0x7f0000001000-0x9)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000ef1000-0x70)=[{&(0x7f0000ef0000)="59e7586d6b8450fc6bb12d0e262849d1bc7eb2c355e278e4cfb3b33d28a9098bc6798b12b3a4dc92d95b3bb09883ed725c8c20ee996f713463f2b9143acd8cb8da78c75c29cc02373c6c122f0e086df665bec09ef8db6c7e1e1565c3f8cd414573e5b691c3061eeb4d7fff3ae69cb311227eae3305bb26b471be94a746afa046d9c4f90a682f8a54398902e5295fef049d8f625b64b7526ceb294167327e210f2dfb376411d74abd0986ce93d3033c360700db6c3139ca1b380fdf9489fd80ff8a889ba625", 0xc5}, {&(0x7f0000000000)="3cd9bba0a10364153bca5e250afbbfc3a0a3a0bea06d7ff51314f1a815c2041d267138638239de1a299ceaf20d6ecd90f131181d0c29828b20c555f982a4fdfa0852f9b3bfc929dc6df9dd87e1554721e91dc68ad2e8e41a4ae5555642670a2fd2313b146e1c3c1967fe5c1566789041b77e525f3a2dc56ae7837a7ce4f0c1a2", 0x80}, {&(0x7f0000001000-0x72)="4f07e60a9969f6aa753eb852ecee2ea380a3b3d6fe47a5b936db32b2ce7c48bca0d2217f72a6669db4b3e766689a27914070bdbc33fb548457134bf09bab6dab6a6249d554e96dc00f6c568fad1d199c281532efbb4cab43452e6fb338000334c2518494ee55d7ad1764e66adbd8b0f2da1f", 0x72}, {&(0x7f0000000000)="e84329bf22998c054bc34ba2d8003dbcf84fe067fef54ae0c404375a4b6f1fcd1ca12407eb7efa3046c8cdff7e54fc0749585d5b9a704001118c5cc24be7af66a385717c956500dda84b153238e8fea974d273c4de525b38dbb326d470cd44ca3c1b88be36344a04db39b393520e440d2d2db55c48a22d1770f6b8e71784c5d9d9b8bed06b94a4", 0x87}, {&(0x7f0000ef0000+0x4bc)="b0bbe84e544b5e1626208d38134038a8ee3e7704ee47a7e1f0e561121677743c226699532a1e9d068ee6f0f7255248664cac91264b432f8d0e2216001e14049cfddeabcd6bc6b9bb060505d678f96444da10327db66ff74cd969bebb2686938ed4f28eb42718c26444d47731cd447a36373a25b15cf59865e3e5a5c2756403fc9ea7acf687ad9db5e754c9df3ca6919d109ce2696d464c886969e41ea9d0c9a1c6bca7d4d620888c4d4953b0795155f6c836e266d4520762e3292d43443e47935c9db818e830bfbd815b2aeefe5da7d69dcdde0edd0547c1f300b70dfcdadf173c0f3b2b69d538da4b5ed9d408a448b9a9a766ffec23f031d382bada9199a9d5d311b46fb8e747864ec19dacc1f36c7ecfd1803e48d7ef5c112f7287ecd30961855c38558bd09cee03da03279de85f59566c4cefaa6d85a83561182b0b946e847fb3abee3cb2bcc0cfc6a168605941c906e461264950b77a5db7566a49c8014a4f737a29282caeb09fc657ec5ea62a4764d23a346d5ef3f4171250c0ee6d179cb5aae18c4f10a980cc4b80cc54b5d5c0b8d1a3007bdfc1e9a583ff378ba609db7364854f2a7cb3a3181787fdbbd2e5fb91820852171c4ff740864956e53ca3da8bb78cba13ebb6eeccbf02de351e5d400c4c6a3f012b5a7ee01ae7303ac2a84aae9e0b9b062de5aebfe94b98d200113963ac2f08470bf940c6c9590a1bd1724737fea36d4845804bcc43c3bcec1df56c20bbc01a133d59c31cb4c27a550d089eb6b7d02ab21a4ab43a638bab639ffaded252a00392a7585a2537240703d69cf2ab65b05a1cd723e2f0d78f2f9c014c569c047985c7f5718c2b646a88ab5c9cf284ef33b571a867de9bebf06aab8171ef89c6786871cf0e9e9600d96e63d3e34cadfe2665520b6582db080a761236d3634947d12dcf7f9eb8a3e24c9ee15852d29e649e0fc7349ac7efab597831efebe3eca6e23bbf22c98d0cd6d3ad844f60baed1f36306bd98193ccb7b7179b6072db15b069e9afac5199d472827743381bfbe8b843f2ed9ee041d3a9fa24d6cc5fb9e6910778e253b54f18a408f4699ca1d8f60a800628d0984689197ad25c71c83b7e1a6477bf50a86474fa8708fa33b1520ad9d3a84bd2fbda1f46a2c1d8fde3a66b95c5ae2ff9db3db5f271878642b736ee0d7d0ad8cb81a3b9ff0c2dac4b90459911649c7d0c09f665abb220c946d620675073316d0f7bbf4ec9102c7c18da6cc4052d7b8c6104780d0d73dd3db4e3f64bc11c04380dbe12789a287656c32c39b9f9edd0d2d7b39ae4f334150a80ba5317f4350de08c3f6d7f444bacf7222158b7ff8ae8607faff87f4516a240323a3a5766cf0a686dd2685364c33254af96c58c2753a48f5ece98a61d77a585b3fc2886f73db8f9592c1de5543ed62c18f9d3cd8cb9bed1ae8886c4d2e086cadfa7d31d6ce131f596f6cd679fa1c3c74f97325aff5d982277c8d8ccd370600f004b53f20ad47863763e752476d9bc275874bd9f7418d5d4a550dbf50676dd83804791447730ccdb15a89b27008b4487977c1ae21d15c515d10b486d130927ff1e93c8443d7fade2fe58d63928679e3ebfb2f7db276b866fc6d298741143663985b690239430df96d7153fdc98b9d67c3793b549ecc4aeab9068e34a9da12b4df3b5d89f69530aa8f5b9a4727323d01657d65657917afc0251186bd1eacdf7099315a648ebb5fb90c75d4ae370afc124b121c301d0ce40da760c69692cd2270637fc43c4b28ca5b0f4e1a9a1b0938adb5916456f57250d389812cf0031f2202e7eeb97386c9c81f26c7677321e4b1176b6c3937900a8a053be2303a43a4d261228098452912fc871a40b949084eb0cc181dc61035cf38424b41012e7a6ee1cf542535c76e2670674b5e72484f02b4da9e33a2e234cef131f9064c03f2ff5f5e02970732563243e96ae189562e8e56699c75912e3a9b43ffe8a62ccd0c13162d2f011bcd0afd0b6586aa1f1df16d21b631c2b2226e9435fd97115cb314d1f3f19346e81c2c7f69d7a2d3421e256cb4d77dd384fea0306d117b1ec1e4f2594ec17ec773da7cac3e70b7e116735e216490fe300d9ab7566425d94406a58574ded7607a86d851dd4064e9888850391a229ea3271b53db2835f7d648ec59dd5c59d0a96ac2e3aa4640599780591144bdee9434fd7a397c254fc00a264f5bd48c18b43b0f01bf9490b100e26267768686da1d6a9ed96aca536bf27403db2b1082970bfbda962594114edde50d2f567267c1a35ef1621e92fa039b5fc3cacf66577f52c51b6579a047ee4a9165ecc5fe1f2bd44775bca7282fb47b65e86e469d249f567e41a4c1cb72117b53cff8643aa7e58ba46adb031e985a45ca94597f856f4559cabae709956b61e75810d3cccbd92a7d7954e519fd88c0c6e8676a134ec7eca6c0ba57d8c69b1e8d06f872647b7c4d3acc9e35365125132aede17857878484fcfc574236edc55fc1a73d31c03112dca2509bcf2594acc8097b67bd222a4bdf01ca00a101e91bc2b5437080139c0a6dcf4e1ed04bfb4a06756b2e4d77be143e77d58f61f8e4dbee4c45eec48656c0ae53d6574f2ebc88ae5861b8f8fa33a8f73d8d2edb249394be6b308eade62449205c9d60319b97e4e4d85f020d2275946aa9920864e8d85b093a62b746ecb4177edabf0e4305842a5d2a2cc1a0207ad0805e54efcad5ca24b6cebc2f2176854de0a7643461ea9103c46ccc54fe62c31c6739b0ea3239298eff95944cdca8823a39d38d7dad1bd8869d5afda414d6bc2b272d0470874b4c31622ba861bd88a1a531791c61d882641a9af72323c58e7791996c3bd86b30335c9a99d4fd0f69b4b94ac6cfae79a0db13c2e6e2f3e056a235047fe938a7eb94fe746adcbd85e29edf235cd55f0f5132463d4dd41565826cdadbdc86c1f94cf829cace5671919ba912b52cb7d32a195f4901b7904c9449fb35a80ece6d2fa0fc0cfd97d0ea0922146637aa649882a64cd98c84a42ce87b428e29d9c76043dbd1e83e7c58b81341e064389fa70c31e10e282b0350a2031b78ccdbb9e9c0bde7a6352b4f9c943826a744edeafd3e5a953926172ad2974a32092c49dc820a69f5fbdfe1a979fbbb60ca84cfc62b12f8c5333d2a4f696f0c430ff19d0eeef2e74d63b6d12ec0da6a12e5e7ff7e92c127bf6af0acd80416b84abd30fbafcab133a4048595eeb72b97f0265d2d3dd716eb79c88d92652e3e7c84d90a031581a6b81f1c3d0b1af7b6c0ac2fcca28dc4de42a56465c56cc246d0d4aa7b85f4073d27c5ec50d334465679e10eaa05986acc084a620b54a8afdec929203e1fa1840a1a17deaf0aa8e4c21cc56cd7d7f89a9d82b45dc406690f9e1c337df37801bb15aa6bc21f9edff534307485a04d77f897bc4f25e86da99a963fd1561edc1e2f090516bcec6460f2253869ec1710b20138ef7a60448d9cf8859e7bdfae726b09c852ee29e78157b9707d6e8b2988e73cb39601dad0b830bb771e3105353e51ce9ffbd1203c678cf6a04bb06a8edc5c0d31f87b77b0e0fdf0710ad4e37646445e6da6e1d411cf68f7359d4d989de86fe42c9bc4a7d8e26243b58e5b1c9d86de2819401508c82336a20ae6fecf12dd90832ec280a5a997f8bf1c9d7cc756e9b70e5c199ed6d6817dde8fcf8289ebf49255dfcf8be08747f6680bd4e17298163170d60c4ba6fca529a5af388dd27af4df500daaf53ba195fd9cd528cefa7147c121428917b2d23ee3268580ab02a1404d50ba66ecb1ff6d62e56ac6ad4f518cd449e1e4a478e0a6c42b3c31d8f41b3b93f14922646fbea404bd866f339f8425ef2f30e9eb776dec6e76f1b7a2e21758e7038c7eafb7a67c357491fbcfecb5034057809f77ea195d00f8ceb90e953dc4e56e007109f94b4fc83f09cbc48d3638b62ccb199ea0a2f07d923897a219c1513372a8f2e007eb4c91f031779679d27a6a7a4e2297a489825c5e0f2658efdc53b1e120ee834223178c95be4de6f06c11cc837a6c264776d868c3192f7364c6c58c88260b848f83ae958496da7cc3858bbf539973c4117665ff21f00c0b3e9fd5fd485c4fd4d94961c35822341197d5907686081cc72236bc9db46d81489bacff1c9f73e7fd7d884f012a076a3b1688a5478a7880533d8533a3c95f4bc55754e9e790523c56bfcd994692e455520703cccf9e0b5101037a5798c6da4bdc1b777cc07ca1e537bf8dd6ec0c932535a65a1903fcadf830cf46866169b50671603a2cfbe803cfb55047b2f7a728a01f1d715bf3ee73272de66dac31ed6773b7eb9df839ff0c3589e33e3fe8f320b477509c3c6b0bd5971cc79932f6127daff2bff2c9b71e10400d785cca3dd37c302b9e2e3e1251ecf20ecfb9b00e2ce17ea865ccb82efe8bf5e3d72874d8d9cdfe12f9ab0b23ea3f07efa65eeca5db11d4631aabe56febef5e2b9d03d8b9b4a05b2898c56dfe169861589cfc7003de3f210324657613954898b260ca2f6baa41da589f8563fd78b902cec40ef61d80f989f4171b2afb274a0460da758b9bafae30ce5d7d965abdac9dd35354e74ef5db7227ccfbe31ccd39008ca2a967f46dff99464d5338ae12f5c9a809ee60fd718d3e37d6e6a769be539aba302cb96bdc206255c2ed0e66ddccb848a5f71bde23d8f1942a59054d3d10d786ec9a6269b84cab034c018d176ad8f7acf7df9cb6eabac3968eb9734fe77a754ec333ceb7880e3d9cb7c3331147ad882a16c56db30c8c7ad5696303ac22c2e6fb4a0f71ef17f8b5fbeeae82e4fa182a9686d7960711717007e44aee7dcced1f0fcae2e0ece742b85e4595066fae0e8702b52f5036c8db094b04ec875f1ef52bb38bb47915b21c26116f3622099e016ed0294922f284d9b54f1f6511ec13844d925272a48ab46b764d7992ca7e94ab0e15e74074ad8bbba97f5e336adea70d71671cb5284f6129ed0a0d5d727924d9f032c35f371c51ff3834e33c7fd821fae3472048ef9b04ebb854c07c3e21e24eb6c83f63c072cb17f5b9aabcd4aeb91a2378064f4daec2793af8a7e72893589e21eaf1442339340418b68ac8d1f9c95000a73acebba94a1fe069f0a7bd7fedefab349559a5387c9e7f9dc6d4bf1b251762e871c9bd14ebacab9846b556f21f49f0dd58f6415f568ba09199e6e871e12f921dc4c6b09927c5e8d0a410a5ea536409d6a90de8f35a874578410f5c247fee0bff5f7f5d33a309069769330ed93c10f3eb6d3bb2a60730b48bee2765209583f54608ae21fcb072ecbeea2a88fc2b2b63e3e14f187fac98ce90e96f02b66df2d6ab29c00a295dd6d43234cc21717718561e639cb8f67e822d017f737117b1bd9c60fce2cad15e3c57d7ba4739f88134c9b746266670949edfdf6feb77656bf6af813dcaff70210bd643273107924b56ed76dcfd8e337a44a0f7f49b03e5dc592ac48469388128dd4a6619b366e4ff93080a85abcc3d268847c75098117bd38899eb515ec57168dee4428ad54b9ce7dd5018df9da7e0eddd40d5f14c028412f6c0ed67cb5009abf19eeca316fe534ae8dc89ed617dab53fb6c778a27509d54c8b2dd1a67b571018813fd3b8420a3d1f81822c4cd3269c01dde7ffa7cef21ac230c4deaef2ada9ebd2ca32a610c5f38b02a7c1daea5336e308ac0f9d8a855e93a3b3ed6d22c0fb254e71435ffcea0c4e4f58bda79f6c3045711d92ebc1b406692cbd1c2dca27b1294a39c47a18d1f29209dc5ba1fd55fab137b673ccc335d7cdec71c39faa11aec0adc59723a6a1c007a0c9", 0x1000}, {&(0x7f0000ef0000)}, {&(0x7f0000ef0000)="fccce0a2bf53cff5d675eae55770428cfdc8bee23cb759a8061022da2898b88efe2da38537536c118eedd18438ec9f3ba8a40d94f21c180995e888eff6f7404a70b4566682d3c6a5a28d5e8cd19ef5b2234e1c2218af4940dc4b819a57510c7a34b800758a91ac7bb44655d1f37974e7d000d4826cf90220f8125ead1eaaf45bb34d099ec81d21e166bb61535417f0e6bacf065443c4e71664f4ec68a12e2fd8edaddff42de47dcf957012ee1afb2fbb9e310d43ccfd5768707cd282382144e9ed0e4550b27bd99cc0afe8b1c2d9557616a7e391d8572a9abd72081b3bcc212931e669663ec1c95d297c", 0xea}], 0x7, &(0x7f0000000000)=[{0x70, 0x116, 0x2, "874e0c80ed7152656cbdbc652000cbff0a80386c6f5db2196e4fbbb718a78ce21d68ec5e65c4d88d0fe9cd3d6d848cc74dc721ccda9aa205eb9f5db5fe8ce3d03cae425ea6a1b7e944e91f29c6fa1bfb006f1bf6b94721253e650b"}, {0xd0, 0x116, 0x4, "44cf9662b5a1c2d61483ac1dd1c5a105abb5615a314d6414ff31bb5f530b36ac716eb6e96ec30f8f0e3c3a0b01d8787231b5db0279462cffb5731a76137d581f53c8a68209435ea72f52bf1ed88662dd65b64bb60b0799bc855ce9b56423d17b46cc02b3bf230d70eaaf4f8ac4425e636b6f3a9123d917da7aa7af8f7fb4f317a6db8691838501166d87a5af2b00c0ac2cd9a7445091f8ad65d68cc3e2a1bb198b41f998a87522ca29acec1c58725a5bcf452efa04d9ed02d73d92"}, {0xf8, 0x109, 0x1ff, "02516b07faee5a7e67411f798a65e47f7423f8588b839eeeb84c5d41affd4d1d63c3230776de6f49ff6f0dd211cc9cdbd17a42841cfb5918c299eae1790d5be2e0da9763177e9cf88402b2d31a0f49c9e7375dd4b68a539f334e3a98ae9d5ef201d1b6f44bf246df517e03a80687cca478962c30034223e926871b5ed63fecce8c13ffec14092f7b6d6feabe3253833bf2b1ed166fe4019796662bd547b8824e02db2edc2ed90ba17c1b4e6fadc1430582495c6e34b99e12b1740e02af45ba7d95dbfa04a76f9baee7ad2fc9556b9c650b5af046dd5bd8ad5a0bcdd428cd608d1e78c4a6"}], 0x238, 0x800}, 0xff}, {{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @broadcast=0xffffffff}, 0x1, 0x4, 0x3, 0x4}}, 0x2e, &(0x7f0000ef0000)=[{&(0x7f0000000000)="c20efb9b7c14b5106b2cfae3d3126854d888c7201faa55835e5cbb52d47a90cd31bcdb9c794d055568c97574b2583134c574896dbdb4cc03dd02bc5c8fc2bce74cb64d73feaa9cd8562e39d55326380b535c7ee5", 0x54}, {&(0x7f0000001000-0x8d)="51ec800968479225b1939f93922ca01f38dc3148ad5ac3e1aadc8099bb3cfc0fc5744b04d1a060f52997be9ecfbfdc10eaac4cf7c15c23abcc827fbe3a81e865857d103205bd32bd515142bd545e46ad2bcfc88d778748dc446ff1b0520e81ff8fee768d2f390db413ccb8ca78c8cc3f383e64a5c1d9dcc28ae6e9072e29c9908ea2254d4c43e8a271c8429686", 0x8d}, {&(0x7f0000000000)="b6a3a6b9bb8db8f056614f6e09832edc79d00e42d839259e46fcba98a794c943650c15f8ef330227e4875f5fb5702af66ef37b7b888b1e0234b43c771cb0de2ea2ea4dd8547ed009fa6e533b0c8cf702f7f05597ee3219c7c5f574b8a226824444dcd61a27a166c1da45cc892e3bc70f7b971703248529b620a2ec18d112d7515c8edb79132e01820de118af28fa37fa751b2a26681fc48bb618fdd2ba99084977fdd7ecb0a9be10cf1b73854930b01dfa879070fa819ece5435b285732e45d7fb13db0c45ff", 0xc6}, {&(0x7f0000ef0000)="ee58a069965256e3eb4dc634abd183f19c6617b17afc5d614c628c90f0067da6e0e7adcdd7cfa48f7b08915f108dc117e45c02d5320abe74bcfa052ca8f4119f05bbad06aeb23bc4a556ff750b4ecc5165f6dda5311589a89a64ae759f30f8364297f38042234f32e13ec650c020", 0x6e}, {&(0x7f0000000000)="11ca748ff2b9117c661e65fe63da791478f7484339ccc3b6ca2c82c8e9c3e352422b417fb6438da61ff06fd2329c49d4bab2e716ec3a116fe9af625c575a819a9968c1f24eaa7f58fc0df1d63f4c429b306f93a330086c4745eadd1f872e1d0490c3ad6f28745b5b2d934df874cdc9d698", 0x71}, {&(0x7f0000001000-0x7)="bf94d3fc600c83", 0x7}, {&(0x7f0000ef0000)="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", 0x1000}, {&(0x7f0000ef0000)="c314fca29c252196eb88b20395911e7722977bc80d58ce29553caf2b9a499e9d8f64f98c73634b0e1d8acb9f228e856bc11e294c31a6a917f5cc9dd0", 0x3c}, {&(0x7f0000ef1000-0xc6)="2824c5ef564e2762d3d9a5dec4b6522030897d2c4ebcdf8f3ca9047ef35e4bb0cec10f269ae6f54c7c1519869d36846d8df3e66c5c5e305bbe51cff60ceebfbc24162dab0144c1f79b740377a7807696b2285fc51f348431a858d68f0e9eff6d765f995b4b67f7252729bc9ed5b0e0fbaa3d4eb3b38dae01cb6944558422e206c4d693504f7301a2af7ab5eb88b7681d7322697b5693a53df3d8c3994ccfff089f20795f6aac44aa78a2ff8c4ee61cb4d4a90b9607635ca05c1f34f5a2b162caae0b49f4577c", 0xc6}, {&(0x7f0000001000-0x1d)="730631b8a7b8664a5d84bd6251cf915e7a3b8290f5b83882a07f2074d0", 0x1d}], 0xa, &(0x7f0000ef1000-0x288)=[{0x110, 0x11f, 0x80000001, "6c34a0913809a1dc061394d89aa8dcb7e3c4df94417d56dc079317797ec8982e050efee88503fe6fae8540de9983f19567c9beacc16473727b4df3df66ce0e952b05f1893c3964ff38e445beca22ac5e836d93b52015c60db08b98416936989c1e28ee3a8e3e20a3201a0d5476c709e8808437c001d950a8b5148e06623efe540d2bdfce2b828e6298d28074867a87add9935007e003e7edf51881c292ac3b3ac3a43463e98dba1fd37fc6893653c2dbd8a572aa9cea6aaf15c4e088153dc7375a81816fdea52efebebff938409c9b18ed3ab32405fa51be5f687432224c82c861f82965463099dbda20ba4afd264a372ea15bacbdae652267"}, {0x80, 0x13e, 0x60, "d7c21003501deeb243ebb89b1da5a61bf8f09164121b6ad66bf1b3856104b5d869df8e0a28a898f6ea2fa9ce1c56b7af583b1fda208a7d3713558ef43d21f7d081fd3e1a708264d2902cbe78379833542f319c08ded9dc1de9d583485cea0348779ae7566a5cf7bb57c8259b553cf7"}, {0xa0, 0x101, 0x2000000000000, "aad2a6f726ccbecf9b2c3ce7ac8b48f4973c2d5cde4cb467c88c634536abc4063e514ba1fa8361f89029430842ee63226a54976dbe6278aa0ed42835c0383a7101be12930f91d8d263b639f5387175a93535fd8da6f96702157d5b22a360ef818a0297069d01391454fcea8b69f5ebcb747ff8ec6e8db49db9071afd2fe957a701c5580159dec4661a941c0b240dd5"}, {0x58, 0x0, 0x4, "f9f3cf507cf2f60190742136778572758186219c8f13a919d0be89733abbaf2068a2e41a87e0e8e150bcd6d72329068cd043f92432165af89b78103863468c6cc4cd5253cb"}], 0x288, 0x10}, 0xffffffff}], 0x4, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109042186b32cff6dac", 0x10) 2018/02/16 18:03:25 executing program 6: pipe(&(0x7f0000420000)={0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000125000)=0x8000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000b95000-0x11)='/dev/qat_adf_ctl\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001000-0xe8)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f000085f000)="6888bb6af70c9c464a4b1a1259e0bf2777993348503dc02938fae031bb7c13c9c66bd337ff395fb75f8b78123ee746f99713a9ad94e0c7fca4e5336381e9b2f5251c3f1be9f1d56d15842c552280f09a8c0706e5281e", &(0x7f0000000000)="ee02757f99700f68c47d2f235d5c01948ad313a638d7607ed6cca3319f10196618ddc17bd997fe6be5852b0ecbf047fe02e1d22d4651756724031c545a1704def23460d35c3c482b339cff5f1aa9687f43cd7311f92346870d39bcbd6227d45c304e1ba04871e2d41fc2de63005d46fdf986ebdd3c641dfe4233e8e13e81d28c074b0817da6d09f0934b064e9c", 0x3}, 0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001000-0x5f)={0x0, 0x57, "6f1d03e9b4ffce19bbf441de7646f31f423b1dde76ac2fa90c89591758d1fa623bfb6a1a2aa0e488d199e3741c384629249a5549adbcd7f477e0ee7fb552020cd79b3d8d01169853996ea6a0e8222e786cac8dc972b966"}, &(0x7f0000002000-0x4)=0x5f) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r2, 0xc49e, 0x2, 0x0, 0x80000000}, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000001000-0x4), &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000f6a000-0x4)=0xdc9a, 0x4) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') listen$netrom(r0, 0x794106f5) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000899000-0xe8)={{{@in6=@ipv4={[], [], @local}, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000a31000)=0xe8) fstat(r0, &(0x7f000085d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000411000)='./file0\x00', r1, r2) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001000-0x78)={0x0, 0x78, 0x9, 0x3288, 0xfffffffffffff001, 0x5, 0x0, 0x8, 0x7c9058133158a936, 0x2, 0x100, 0x9, 0x84, 0x1000, 0x0, 0x9, 0xffffffffffffff01, 0x4ed, 0x100000000, 0x1, 0x4, 0x5, 0x7, 0xc00000000000000, 0x5, 0x8, 0x3f, 0x80000000, 0x100000001, 0x100000001, 0x7f, 0x8, 0x6, 0x6, 0x3, 0x0, 0x7, 0x9, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x10000, 0xf519, 0x9, 0x0, 0xffffffffffffffa5, 0x1ff, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00009e6000-0x8)=0x2) socketpair$inet_sctp(0x2, 0x3, 0x84, &(0x7f00000e2000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f000067c000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000bad000)={r2, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x8c) r3 = socket$netlink(0x10, 0x3, 0x400000000) sendmsg$nl_route(r3, &(0x7f00006e5000)={&(0x7f0000bc9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000c9e000-0x70)=@ipv6_deladdr={0x70, 0x15, 0x211, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_CACHEINFO={0x14, 0x6}, @IFA_CACHEINFO={0x4, 0x6}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6}, @IFA_FLAGS={0x8, 0x8}]}, 0x70}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x3, @multicast1=0xe0000001}}, 0x7, 0x28dd9b2f, 0x1558, 0xe0, 0x1}, &(0x7f0000001000-0x4)=0xa0) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$midi(&(0x7f00007d9000)='/dev/midi#\x00', 0xfffffffffffffffb, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f000065a000-0x8)=@assoc_value={0x0}, &(0x7f00009fb000-0x4)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000abe000-0x6)={r3, 0x1}, 0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) r4 = syz_open_dev$sg(&(0x7f0000c1a000-0x9)='/dev/sg#\x00', 0x0, 0x400) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000709000-0x8)='./file0\x00', 0x100, 0x42) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000e2000)='/dev/rfkill\x00', 0x68400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000730000)={{{@in=@multicast2, @in=@empty}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000eb2000-0x4)=0xe8) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000605000-0x20)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x20) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00008a8000-0x4), 0x4) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f000023d000-0x4)) [ 188.737145] binder: 30060:30063 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 188.745040] binder: 30060:30063 got reply transaction with no transaction stack [ 188.752642] binder: 30060:30063 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x9, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) write(r1, &(0x7f0000f2e000-0xd2)="74ff517e6fe06db9d514a4d723c6ed37daf82586b39f3ef9a95a0409909cbb41ca14e203953f1ec5d76101bdac06c03a78c6b63b5d6ab98c5c35dc941fdc0f9891c016bbc1e5e0d9b553acf44fe080cca2ccfaff7321aba17892d500ffd99585e8aca2814ed028848e4237b2590662b3777768d1f105c6c33bcc601816cff5e6a8287d804b76eb8c53c226582d9f9d6c75e3c59b7327bbb4bf572644f7255c8313601c0646b82211513a78c4ff5a8fd9abd4ac0a738ca299ea426e68c9bae6aae0573c2d7f3aa9a5f960e98d45c52227b24f", 0xd2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000705000)="6e65362f00006fedf3") ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000b39000-0x18)={0x1, 0x80000001, 0x2, 0xffffffffffffffff, 0x1f, 0x52d}) readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) ioctl(r0, 0x6, &(0x7f0000395000-0x15)="dddacfa05fd0efa41dc1e5be13a11040f562860c20") fcntl$getownex(r0, 0x10, &(0x7f00007b9000-0x8)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a92000-0x110)={{0x3, 0x3, 0x7, 0x100000000, "aa1e45c188c9af8c441c372ed2f7b102a989eec1ca5879d557af03cf570bc254b2da64fc2b203362634715fb", 0xfff}, 0x0, 0x0, 0x9, r1, 0x8, 0x81, "898fe59e8730999de129d062065430554a959052e32aa78fb72df9fb9b3e1b85467e7f4c7bf82a93f657f1ca0192a4801ce31ff39871bbb3dc12db4328e13a7b", &(0x7f0000947000-0x2)='%\x00', 0x2, [], [0x6, 0x3, 0x5, 0x8]}) 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000005000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000381000-0x8)='./file0\x00') lstat(&(0x7f0000b14000-0x8)='./file0\x00', &(0x7f00002a3000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00006a1000)='./file0\x00', &(0x7f0000670000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00009e4000-0x8)='./file0\x00', 0xe002, r2, r3, 0x7, 0x41) creat(&(0x7f0000b59000-0x8)='./file1\x00', 0x0) rename(&(0x7f0000d8a000-0xe)='./file1/file0\x00', &(0x7f000044b000-0x8)='./file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000967000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000511000)=""/191) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000980000)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 188.824375] binder: 30060:30063 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 188.832254] binder: 30060:30063 got reply transaction with no transaction stack [ 188.839808] binder: 30060:30063 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000fcd000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000488000)={0xf, 0xa, &(0x7f0000437000-0x50)=@raw=[@call={0x85, 0x0, 0x0, 0x25}, @alu={0x7, 0x7, 0x8, 0x0, 0x4, 0xffffffc0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x6, 0x0, 0xf, 0xfffffff0, 0xfffffffffffffff0}, @alu={0x7, 0x7, 0xf, 0xf, 0x0, 0xfffffff9, 0x11}, @alu={0x7, 0x2, 0xb, 0x6, 0x3, 0x3740051da8671ab4, 0xfffffffffffffff4}], &(0x7f00006e8000-0xa)='syzkaller\x00', 0x3, 0x22, &(0x7f0000c5f000)=""/34, 0x41100, 0x1}, 0x48) sendfile(r0, r1, &(0x7f0000822000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000acd000)='./file0\x00', 0x480, 0x64) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000165000-0x4)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f000087b000-0x38)={&(0x7f0000d1e000)={0x10}, 0x5ee, &(0x7f0000007000)={&(0x7f000095c000)={0x1c, 0x1c, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0x40000001}, [@nested={0x8, 0x1, []}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {0xffffffffffffffff, 0x2}], 0x2, 0x2) [ 188.888873] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.896271] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.944500] binder_alloc: binder_alloc_mmap_handler: 30102 20000000-20002000 already mapped failed -16 2018/02/16 18:03:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) syz_open_dev$sndpcmp(&(0x7f00001fa000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x440000) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {0xffffffffffffffff, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000cd3000)=@pic={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x8, 0x1000}) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[], 0x0) fdatasync(r0) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00006b4000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000001400080000001bf31dffff000000000000000000007db0e6330eff010000d8000018e58d1c43473000d65026fb0040f9b55bd1a7335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00", [0x4000]}) 2018/02/16 18:03:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) sync_file_range(r0, 0x3, 0x7f, 0x1) 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000cd1000-0x1a0)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000318000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000345000)={0x2, 0x10001, 0xffffffff, 0x2}) readv(r0, &(0x7f0000299000-0x30)=[{&(0x7f00003e9000-0x15)=""/21, 0x15}, {&(0x7f0000160000)=""/52, 0x34}, {&(0x7f00004a4000-0xd8)=""/216, 0xd8}], 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f000041c000-0xb)='/dev/audio\x00', 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000a49000)=0x6, 0xfffffffffffffe94) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000f6b000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000f6a000)={0x100000000, 0x0, 0x0, 0x80}) flistxattr(r0, &(0x7f0000a0a000)=""/164, 0xa4) mmap(&(0x7f0000f6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, &(0x7f0000f6b000)={0x0, 0x1, 0x1f40000000000, 0x8e, 0x9, 0x69b, 0xac, 0x2}, &(0x7f00005da000-0x40)) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000f6a000)={r1, 0x6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000f6a000-0xd)={{{{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "36e94fd1da5d23c28e6f5f2f6eef2b06fb6a99a7776c9ec23276b931483ac5c24c467411219db64e5d9e98c8ff1de957a308e1f9b2b52e3a831df0d4d0e3f43280e6c65e371ac6149d077ee2f5c82e68"}, 0x160) r3 = syz_open_procfs(0x0, &(0x7f0000907000)='net/ptype\x00') mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000e08000-0x38)={&(0x7f0000f6a000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000da2000)={&(0x7f0000f6a000)=@getroute={0x14, 0x1a, 0x204, 0x4, 0x1, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4850) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000c000-0x4), 0x0, 0x0, &(0x7f000000b000)={0x13000000000}, &(0x7f0000005000-0x4), 0x0) clock_gettime(0x0, &(0x7f00003df000)={0x0, 0x0}) timerfd_settime(0xffffffffffffff9c, 0x1, &(0x7f0000404000-0x20)={{r0, r1+30000000}, {0x77359400}}, &(0x7f000087a000-0x20)={{}, {0x0}}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e8d000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000bc000)={{0xffffffffffff4a02, 0x6}, {0x7fff, 0x5}, 0xfffffffffffffc01, 0x2}) futex(&(0x7f0000187000-0x4)=0x582, 0x5, 0x2, &(0x7f0000b9d000)={0x77359400}, &(0x7f00003fc000)=0x80000001, 0x55) futex(&(0x7f000020b000-0x4), 0x4, 0x3ff, &(0x7f000031c000-0x10)={r2, 0x989680}, &(0x7f0000902000-0x4), 0x0) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000b88000-0x12)='/dev/input/mouse#\x00', 0x0, 0x4000) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f000038e000)) syz_open_dev$vcsn(&(0x7f0000350000)='/dev/vcs#\x00', 0xa91, 0x181100) socket$nfc_raw(0x27, 0x3, 0x0) dup(0xffffffffffffff9c) r0 = syz_open_dev$admmidi(&(0x7f0000173000-0xe)='/dev/admmidi#\x00', 0x7, 0x2800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00008b1000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x3be000000000000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) [ 189.052510] binder: 30121:30132 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.060346] binder: 30121:30132 got reply transaction with no transaction stack [ 189.067850] binder: 30121:30132 transaction failed 29201/-71, size 0-0 line 2757 [ 189.101875] binder: 30121:30132 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.109846] binder: 30121:30132 got reply transaction with no transaction stack [ 189.117380] binder: 30121:30132 transaction failed 29201/-71, size 0-0 line 2757 [ 189.141323] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {0xffffffffffffffff, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00003a4000-0x4c)=[@in={0x2, 0x2, @multicast1=0xe0000001}, @in6={0xa, 0x1, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x15}, 0x9}, @in={0x2, 0x3, @broadcast=0xffffffff}, @in={0x2, 0x2, @rand_addr=0x8918}], 0x4c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000bb1000-0x8)='net/arp\x00') socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000dcd000-0x8)) readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000619000)={0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000-0x4)=0x20) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f0000001000-0x8)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000070000-0xbc)={0x0, 0x0, 'client0\x00', 0x0, "6318ca4c372bbf06", "99f3c2e1541fe1bfdf54840c086e666dec2aef8735f8bc6ae79d506a1f00f7b8"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000067a000)='/dev/kvm\x00', 0x10000000a02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000891000)=0x3d4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f000071d000)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000cba000)=0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) socket$pptp(0x18, 0x1, 0x2) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f000061a000-0xd)='/dev/net/tun\x00', 0x0, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00001b3000)=0x7, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) r2 = fcntl$dupfd(r1, 0x406, r1) syz_open_dev$admmidi(&(0x7f0000daf000-0xe)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00007c2000-0x78)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00001de000-0x20)={@generic="ef1bd2722c2b7ffeeb65ffade165eb76", @ifru_addrs={0x2, 0x0, @empty}}) write$tun(r1, &(0x7f000059f000-0x1026)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @empty, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x2) 2018/02/16 18:03:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000f2a000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000015, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000856000)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000ba1000-0x58)=@setlink={0x30, 0x13, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_NET_NS_PID={0x8, 0x13}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xffffffffffffffff}]}, 0x30}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000966000-0x8), &(0x7f00008b4000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f000064e000-0xed)=""/237, &(0x7f00003ac000-0x4)=0xed) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000be2000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00009c3000)=0x9) [ 189.147450] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.159299] binder_alloc: binder_alloc_mmap_handler: 30143 20000000-20002000 already mapped failed -16 [ 189.201658] binder: 30153:30160 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.209538] binder: 30153:30160 got reply transaction with no transaction stack [ 189.217096] binder: 30153:30160 transaction failed 29201/-71, size 0-0 line 2757 [ 189.279395] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d41000-0x10)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000c69000-0x18)={0x4, 0x0, 0x100000000, 0x1, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x10}, {r0, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0x34000)=nil, 0x34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x88040, 0x0) mmap(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000034000)='./file1\x00', 0x1) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) mmap(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000035000-0x12)='/dev/snd/midiC#D#\x00', 0x8001, 0x80001) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000030000-0x4), &(0x7f0000001000)=0x4) open(&(0x7f0000033000)='./file0/bus\x00', 0x1, 0x0) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[], 0x0) getpeername$netlink(r0, &(0x7f000055e000), &(0x7f00009db000)=0xc) 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000fa8000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f000000b000)={&(0x7f0000404000-0x94)=@ipv6_newroute={0x30, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000008}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, [], 0x0, 0xc}}]}, 0x30}, 0x1}, 0x4000000) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000c33000)) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0x49000)=nil, 0x49000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000034000-0xd)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000039000-0x2)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000004000)={{0x7, 0x5}, 'port0\x00', 0x4, 0x20, 0x2, 0x3, 0x5, 0x7fffffff, 0x2, 0x0, 0x5, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000048000)={0x0}, &(0x7f0000048000)=0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time={r3}}) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00001aa000)='/dev/vga_arbiter\x00', 0x880, 0x0) write$vnet(r2, &(0x7f000073f000)={0x1, {&(0x7f0000d4c000)=""/245, 0xf5, &(0x7f0000be2000-0xbb)=""/187, 0x3, 0x1}}, 0x68) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) syz_open_dev$tun(&(0x7f0000337000)='/dev/net/tun\x00', 0x0, 0xc8080) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f000048c000-0x1000)=""/4096) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 2018/02/16 18:03:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000371000)='/dev/dsp\x00', 0x220002, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000c61000-0x68)={0x78, 0x0, [0x0, 0x2, 0x3f, 0xfffffffffffffbff]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000fcd000-0x30)={0x58, 0x0, &(0x7f00002b0000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x60, 0x30, &(0x7f0000bfa000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00006b4000), 0x1, 0x4, 0x24}, @fda={0x66646185, 0x7, 0x0, 0x6}], &(0x7f0000aa1000-0x30)=[0x38, 0x0, 0x48, 0x18, 0x28, 0x28]}, 0x729cef17}}, @exit_looper={0x630d}, @release={0x40046306, 0x3}], 0x93, 0x0, &(0x7f0000a88000)="d7884c123f9f3cd69a522eeaa5f9a5a67bb75b404543bc3427183726672e6a5dce543e2135624f504a752827e4de8a6a2291a6036fc583eff92007bc55a6b685606d14d558a407e71c0fccec795391d9791752d5ef8045c05b4c520e651402acd1340778407c2bc34df5c43d076e925f7276a3fc407f44161c97c7e316d20a402ce0275af74efaca045db1f10aa8d51315aa45"}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00002b3000)) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f00002f0000-0x4)=0x2d, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000d4000-0x1c)) 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x10}, {r0, 0x2}], 0x2, 0x2) [ 189.395420] binder: 30185:30190 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.403249] binder: 30185:30190 got reply transaction with no transaction stack [ 189.406660] audit: type=1400 audit(1518804205.720:224): avc: denied { create } for pid=30187 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 [ 189.410891] binder: 30185:30190 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x10}, {r0, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) socket$llc(0x1a, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00005f0000-0xc)={&(0x7f0000fe3000-0x4)=[0x0], 0x1}) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00006c9000-0x4), 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00004e1000-0x2e), &(0x7f0000cbd000)=0x8) bind$vsock_stream(r0, &(0x7f0000855000-0x10)={0x28, 0x0, 0x2711, @reserved=0x1}, 0x10) fcntl$setpipe(r0, 0x407, 0x400100) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00008b9000), &(0x7f0000192000-0x4)=0x8) accept4$ax25(r0, &(0x7f0000f22000), &(0x7f000004c000)=0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e59000-0xa)='oom_score\x00') add_key$user(&(0x7f0000209000-0x5)='user\x00', &(0x7f0000f5d000)={0x73, 0x79, 0x7a}, &(0x7f0000bad000+0x766), 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000cb2000)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f000057b000-0x8)={0x7, 0x40, 0x6937f5f6, 0x2}, 0x8) sendfile(r0, r1, &(0x7f0000929000), 0xff) 2018/02/16 18:03:25 executing program 2: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000a42000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) futex(&(0x7f0000001000)=0x1, 0x9, 0x9, &(0x7f0000001000-0x10)={r2, r3+10000000}, &(0x7f0000001000+0xe6c)=0x1, 0x7) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000002000-0x8)=@fragment={0x1, 0x0, 0x9, 0x100000000, 0x0, 0x9000, 0x0}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="e60dfea9d85d98709b71b655f56b011a7d61febe27b7598c53330f9c6ae752cec3", 0x21, 0x20000000, &(0x7f0000001000-0x1c)={0xa, 0x3, 0x1ff, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x3f}, 0x1c) mmap(&(0x7f0000000000/0x36b000)=nil, 0x36b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = dup(r4) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000036b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f000031b000-0x38)={&(0x7f000028f000)=@sco, 0x8, &(0x7f000036b000)=[{&(0x7f000036b000)=""/4096, 0x1000}, {&(0x7f000036b000)=""/50, 0x32}, {&(0x7f0000368000)=""/94, 0x5e}, {&(0x7f00002d6000)=""/66, 0x42}, {&(0x7f000036c000-0x38)=""/56, 0x38}, {&(0x7f000036b000)=""/44, 0x2c}, {&(0x7f0000211000-0x1000)=""/4096, 0x1000}, {&(0x7f000036c000-0xf4)=""/244, 0xf4}, {&(0x7f0000181000)=""/55, 0x37}], 0x9, &(0x7f000000d000)=""/109, 0x6d, 0x1000}, 0x2000) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00001cf000)={r1, 0x1, 0x6, "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"}) sendmsg(r4, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f000036a000-0x15b0)=[{0x10, 0x29, 0x32}], 0x10}, 0x0) 2018/02/16 18:03:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) [ 189.443340] binder: 30185:30190 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.451228] binder: 30185:30190 got reply transaction with no transaction stack [ 189.458734] binder: 30185:30190 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:25 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00003a9000-0x4), 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/qat_adf_ctl\x00', 0x20002, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x159293ee, 0x4) close(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) fchmod(r1, 0x122) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000233000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000b82000-0x90)={0x9, {{0x2, 0x2, @loopback=0x7f000001}}}, 0x90) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000b8b000)='attr/exec\x00') 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) bind$bt_sco(r0, &(0x7f00002df000-0x8)={0x1f, {0x3, 0x2, 0x100, 0x74822064, 0x7, 0x100000000}}, 0x8) 2018/02/16 18:03:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a32000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 2018/02/16 18:03:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = syz_open_dev$amidi(&(0x7f00003ee000)='/dev/amidi#\x00', 0x6, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000ae000+0x911)={{{@in=@multicast1, @in6=@ipv4={[], [], @local}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000eaa000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000e7d000-0x28)={'vcan0\x00', r2}) setsockopt$inet6_buf(r0, 0x29, 0x400000000039, &(0x7f0000005000-0x20)="000004000000c3f31d0011040000080000fb000000000205", 0x18) 2018/02/16 18:03:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000e6a000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f000088c000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000f3b000-0x10)={r1, &(0x7f0000789000-0x9a)=""/154}) prctl$intptr(0x1f, 0x7ff) r2 = openat(0xffffffffffffffff, &(0x7f0000fc1000)='./file0\x00', 0x210001, 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000ba5000-0x91)=""/145) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000013000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000837000-0x8)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000dc7000)="de77285fc7404f97cc255123fd399f79052635d9331e3cc2", 0x18) 2018/02/16 18:03:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1000006c) 2018/02/16 18:03:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000c46000)='/dev/midi#\x00', 0x1, 0x20001) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000f9c000)={0x996, 0x3f, 0x81, 0x9, 0x8, 0x0, 0x4, 0x6, 0x9, 0x80000000, 0x1}, 0xb) 2018/02/16 18:03:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000c52000-0xc)='/dev/audio#\x00', 0x1, 0x101002) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000490000-0x4)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000cba000-0xb)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00005cc000-0x30)={0x44, 0x0, &(0x7f00008f0000-0x90)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30, 0x18, &(0x7f000081d000)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x7}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000290000)=[0x30, 0x38, 0x78]}}], 0x0, 0x0, &(0x7f00007f6000)}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095c000-0x4)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0xfdc7, 0x0, &(0x7f000057c000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) accept4$inet6(r2, &(0x7f000076e000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f0000eb4000-0x4)=0x1c, 0x80000) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r3, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(r3, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/16 18:03:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000f6a000)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f000056d000-0x18)={0x0, 0x0, 0x20, 0x0, 0x1000}, &(0x7f0000f6a000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c75000-0x8)={r1, 0x238e8b0a}, &(0x7f000094d000-0x4)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f000046f000-0xc9)=""/201) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00004fa000)=0x8) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 189.603761] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000f74000-0xa)='/dev/vcs#\x00', 0x1, 0x800) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000c81000-0x8)='./file0\x00', 0x80000000) inotify_rm_watch(r1, r2) select(0x40, &(0x7f0000d1f000)={0xffffffffffffffff, 0x6, 0x86, 0x1ff, 0x3, 0x7, 0x10001, 0x5}, &(0x7f00003c3000)={0x1, 0xffffffffffff4f5b, 0x0, 0xfffffffffffffe00, 0xbf60, 0x5, 0x5, 0x6}, &(0x7f00001a3000-0x40)={0xa773, 0x20, 0x7fff, 0x1, 0x9, 0x4, 0x4, 0x4}, &(0x7f00002a8000)) 2018/02/16 18:03:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00005cd000)='/dev/input/event#\x00', 0x3, 0x200000) clock_gettime(0x0, &(0x7f0000037000)={0x0}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000772000+0xedb)={0x0, 0xffffffffffffffff, @multicast1}, &(0x7f0000590000-0x4)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000955000)={0x0, 0x6}, &(0x7f00001d2000-0x4)=0x8) socketpair$inet(0x2, 0x802, 0x9, &(0x7f000070d000-0x8)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f000017b000+0x7a6)={0x56, 0x2, 0x0, 0x7, r3}, &(0x7f00006c7000-0x4)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000a54000-0x8)=@assoc_value={r4, 0x6}, &(0x7f0000487000)=0x8) getitimer(0x1, &(0x7f0000c48000)={{0x0, 0x0}}) write$evdev(r0, &(0x7f0000038000-0x18)=[{{}, 0x1, 0x67, 0xebd}, {{r1, r5}, 0x80, 0xfffffffffffffffd}], 0x3a8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000af0000-0x4)=0x7) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f000045c000-0x8)) openat$dsp(0xffffffffffffff9c, &(0x7f0000476000-0x9)='/dev/dsp\x00', 0x40, 0x0) [ 189.667053] binder: 30242:30254 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.674926] binder: 30242:30254 got reply transaction with no transaction stack [ 189.682431] binder: 30242:30254 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000f6b000-0xb)='/dev/vcsa#\x00', 0x6, 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000596000)='/dev/ptmx\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000065000-0x58)=@alg, &(0x7f000068d000-0x4)=0x58, 0x80000) ioctl$sock_ifreq(r1, 0x8911, &(0x7f0000066000)={@generic="6abdd1687b4033f80388b4a15085c58d", @ifru_mtu=0x37cd9fec}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCSETA(r0, 0x5406, &(0x7f00009ac000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff}) writev(r0, &(0x7f0000de0000)=[{&(0x7f0000683000)="e951cf3d41f809f4c46c123c6807", 0xe}], 0x1) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00005e8000)='/dev/admmidi#\x00', 0x100000001, 0x2) timerfd_gettime(r3, &(0x7f0000eba000)) truncate(&(0x7f00000ad000-0x8)='./file0\x00', 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000c83000-0x4)) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000389000-0x4)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000254000+0x86d)) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f000005f000)='attr/current\x00') readv(r1, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00004a0000-0x8)='./file0\x00', 0x48280, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000b62000-0x8)={0x0, 0x2}, &(0x7f0000ea7000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00008ad000)={r3, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f000098e000)=0x0) r5 = getpgrp(0x0) kcmp(r4, r5, 0x6, r1, r1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000455000-0x8)={0x9, 0x20}) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00002c4000)={0x7fff, 0x2, 0x3f0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0xa, 0x326, &(0x7f0000000000)={0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000083000-0x4)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000abf000-0x10)={0x0, 0x1c, &(0x7f00005b0000-0x1c)=[@in6={0xa, 0x0, 0xffffffffffffff01, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x5}]}, &(0x7f0000612000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001000-0x30)={@ax25={0x3, {"7c50d9a19513ef"}, 0xffffffffffff7fff}, {&(0x7f0000001000-0x40)=""/64, 0x40}, &(0x7f0000002000-0x1), 0x10}, 0x30) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000002000-0x14)={0x1, 0x7ab, 0x3, 0x6, 0x588, 0x3, 0x7, 0x3f, 0xffffffffffffffc0, 0xacd}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000001000-0x8)) [ 189.752006] binder: 30242:30273 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.760101] binder: 30242:30273 got reply transaction with no transaction stack [ 189.767603] binder: 30242:30273 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) [ 189.858304] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.863959] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000091a000-0x8)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00005c7000)=""/195, 0xc3}], 0x1) connect$ipx(r0, &(0x7f0000ee1000)={0x4, 0x6, 0x5, "b888122bf6ba", 0x2}, 0x10) 2018/02/16 18:03:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d2b000-0xa)='/dev/ptmx\x00', 0x48000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00005d8000)) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000f000-0x34)=@mpls_newroute={0x1c, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c, 0x14, 0x80}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x808000, &(0x7f0000002000-0xd3), &(0x7f0000003000-0x4), &(0x7f0000000000), &(0x7f00004db000+0x545)) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getuid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00006cc000-0x10)='/dev/sequencer2\x00', 0x100, 0x0) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000b5e000)='/dev/amidi#\x00', 0x2, 0x20000) setsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f000076f000-0x4)=0x7fff, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f000012d000-0x12)='/dev/input/mouse#\x00', 0x6, 0x220000) getsockopt$inet_dccp_int(r3, 0x21, 0x15, &(0x7f000092f000), &(0x7f0000fd0000-0x4)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000e46000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000eeb000)=0x80000000, 0x80, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000fd4000)='/dev/usbmon#\x00', 0x100000000, 0x20000) stat(&(0x7f0000b27000)='./file0\x00', &(0x7f0000286000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000260000-0xa0)={0x0, @in={{0x2, 0x2, @loopback=0x7f000001}}, 0x2e4e, 0xfdee, 0x2, 0x8000, 0x8}, &(0x7f00006c2000)=0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f000089f000)={r3, @in6={{0xa, 0x2, 0x75a, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x81}}, 0x1, 0x80000000}, &(0x7f00008ea000)=0x98) fstat(r0, &(0x7f0000c91000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000e03000-0x8)='./file0\x00', r2, r4, 0x1100) r5 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000b3d000-0xed)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffffffffe01, @dev={0xac, 0x14, 0x0, 0x15}, {[]}}, @icmp=@redirect={0x5, 0x0, 0x0, @loopback=0x7f000001, {0x10, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[@ssrr={0x89, 0x17, 0x0, [@rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @empty, @multicast2=0xe0000002, @broadcast=0xffffffff]}, @cipso={0x86, 0x12, 0x0, [{0x0, 0xc, "88fe44cd5abaaa4de7f7"}]}]}}}}}}}, &(0x7f0000ea3000)={0x0, 0x0, []}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00008b8000)='/dev/cuse\x00', 0x280000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) [ 190.012349] binder: 30312:30317 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.020194] binder: 30312:30317 got reply transaction with no transaction stack [ 190.027715] binder: 30312:30317 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:26 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000d27000)='/selinux/enforce\x00', 0x40, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000001000-0x4)=0x14) socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000001000)={0x9, &(0x7f0000000000)=[0x10000, 0x8000000, 0x4, 0x7ff, 0x0, 0x7, 0xcc7, 0xfffffffffffffffb, 0x9]}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000002000+0x81d)={0x10, 0x0, 0x0, 0x934397cb542ade8c}, 0xc, &(0x7f0000001000)={&(0x7f0000003000-0x14c)={0x14c, 0x41, 0x900, 0x5, 0x2, {0x1c}, [@generic="ca3d2285420e3b0bc509f8898ecdf423b100cf98646f127a1a1a58fea1943663ff8a6022ed62467eb02cf1eefc7c73adfc8d0556e7c5880b060a576287f78797905bb95cd99b", @generic="e83ba73fbcd80054bf905c0d286ce41be36ed60eafea6d78d898fe5db4b2fb354c952810a06f2dd45546e2cf8f4892f03e746b32fc11287ac7500a458cf4bdc017b69debc1bbad6f748758556de7ef15641b58b738b3e58fa4c33c0518052f9f0762ae9fe1397b6c17285cd71ab8d33351187fe9a6e0762f0aa9667afa6678e43faa953bcce1dce4aa7bbd82473c810929c913b1d7ddb392ca420cd5d944153129d10710db41107815820ffe5d7bff28228905b26bd9cf120dc28e4f789a00826ad2704f73430a9a9d16d9f9c7b9e4305ace6244b1233d4df0458b635dd289f0c5736e", @typed={0xc, 0x57, @ipv4=@multicast2=0xe0000002}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000004000-0xd)='/dev/dmmidi#\x00', 0x7d0, 0x100) ioctl$KDADDIO(r0, 0x4b34, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000005000-0x10)=@common='vlan0\x00') ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000003000-0x43)=""/67) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000005000-0x10)={0x2, 0x8, 0x4fce, 0x600}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000005000)=0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000007000-0x6d)={0x0, 0x65, "137912ccb935512d7252ac0bac316e9c0503474627d02da4a8b9abf74e7fcacba2d5c26fc44044bf146cd6bd7359642b6589b662c5c27e92af0348a73c19a95800606b888ad72aa8c3d6d8e9f839ed9b05738d44616a9f4531e5a5194559277749c2d7fa75"}, &(0x7f0000006000)=0x6d) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7fff}}, 0x9, 0x0, 0xffffffffffffff99, 0x777c, 0x5}, &(0x7f0000007000-0x4)=0xa0) fchmod(r1, 0x2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x37, &(0x7f0000007000)="a65f1cdf57bedb8581deac3d3ce5e9050bef888a221162cda652bbbedfdf7ecbfa09c52725842cf1a41f283584d0c22f578d02eacca97b611cffbebf7ad269e2adf4cf0fcef4", 0x46) [ 190.068392] binder: 30312:30327 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.076261] binder: 30312:30327 got reply transaction with no transaction stack [ 190.083820] binder: 30312:30327 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000014000)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000015000-0x30), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000017000-0x9)='/dev/vcs\x00', 0x121000, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000017000-0x4)={0x7ff, 0x1a9f, 0x3}) syz_emit_ethernet(0x66, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, []}}}}}}}, 0x0) fchdir(r0) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}], 0x1) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00003cb000)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x16, 0x1, "424e51e2cef2f159ffb4dfb3a0ae220505199d5fd91a18a0c90400f4d6d00df09bf04765089793b8e99a0b94b95ed4e2ae32a4962bb88cefc689583f9134013a", "c4dbbe101740e2dc6d55ad125b2b8703961ec41192d5d5aa052dd0cdbdc79e43225624f384945c912ef977fd1954cdb219acb3f4143255b49db1e03a738428c7", "71539bca466abd41923060832a5ce42f3ce19ce82f9d70fb58d13cd913b3942f", [0x7, 0x9]}) 2018/02/16 18:03:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x35, &(0x7f00002e0000)={@dev={0xfe, 0x80, [], 0x0, 0x12}, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x5413, 0x20100) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002000-0x14), &(0x7f0000002000-0x4)=0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000003000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}) r2 = syz_open_dev$mice(&(0x7f0000001000-0x10)='/dev/input/mice\x00', 0x0, 0x50280) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000002000-0x14)={0x634f, 0x4, 0x1f, 0x4, 0x8}) getpid() creat(&(0x7f0000001000)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f00002cf000/0x3000)=nil}) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000d92000-0x8)='./file0\x00', 0x103) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000a4e000)={0x1, 0x92, 0x5, "8ffe92be2086", "c3d4304fc402876bdea35ee646bad123"}) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000015e000-0x11)='/selinux/enforce\x00', 0x10040, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000e04000)=""/220) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:26 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f00009ad000-0x8)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000b6000-0xc)=[0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000427000-0x8)='./file0\x00', &(0x7f0000401000+0xc9e)='./file0\x00', 0x4000, r0, r1, 0x5, 0x7, 0x208002) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) [ 190.112538] binder_alloc: binder_alloc_mmap_handler: 30315 20000000-20002000 already mapped failed -16 [ 190.130409] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.151944] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0x33)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b21000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000007000)=[{&(0x7f0000b24000-0x1000)="82aaabfc6c5b1c7a6718badabd246d62c80270e00d637af19152d09e59a695e5ecb4b013dea5c5ab0458f38fca8bbf1404fe615f1e536e0f35664718a2924ec5c7a2a5ad9437fb40bd0a30d415ba5353d805afd0082932ef6de0c9932f", 0x5d}], 0x1) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000003000-0xa)='./control\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000b21000)=@assoc_id=0x0, &(0x7f0000001000-0x4)=0xfffffffffffffd62) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000-0x10)={r1, 0x8, 0x66299c16, 0x8}, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000006000-0xa)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/16 18:03:26 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={@common='ip6gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000001000-0x14)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) r3 = dup3(r0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000007000-0x10c)={0xfffffffffffff2b1, 0x28, 0x7fff, 0x0, 0x0, [], [], [], 0x10000, 0x3}) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) [ 190.195518] binder: 30345:30355 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.203411] binder: 30345:30355 got reply transaction with no transaction stack [ 190.210917] binder: 30345:30355 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:26 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f000044c000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x800) syz_extract_tcp_res$synack(&(0x7f0000aea000)={0x0, 0x0}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000b56000-0x8)={0x0}, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000000)=@pi={0x0, 0x8847, @ipv6={0x7fffffff, 0x6, "b22135", 0x1eb, 0x5c, 0xcff7, @dev={0xfe, 0x80, [], 0x0, 0x10}, @dev={0xfe, 0x80, [], 0x0, 0x16}, {[@hopopts={0xbf, 0x5, [], [@calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x12ad, [0xfffffffffffffff8, 0x7, 0x9, 0x4]}}]}, @fragment={0x16, 0x0, 0x3f, 0x0, 0x0, 0xfffffffffffffffa, 0x1}, @routing={0x3d, 0xe, 0x3, 0x8, 0x0, [@remote={0xfe, 0x80, [], 0x0, 0xbb}, @local={0xfe, 0x80, [], 0x0, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0x0, 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}]}, @routing={0x7e, 0x2, 0x2, 0x6ff, 0x0, [@dev={0xfe, 0x80, [], 0x0, 0xf}]}], @tcp={{0x2, 0x1, r1, r2, 0xd7, 0x0, 0x7, 0x60, 0x1, 0x0, 0x0, {[@sack={0x5, 0x6, [0x0]}]}}, {"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"}}}}}, 0x217) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000310000)={0x1, 0x3, 0xeff, 0x7, 0x0, 0x0, 0x0, [0xa]}, 0x2c) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000233000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) munlock(&(0x7f0000c51000/0x3000)=nil, 0x3000) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000093c000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0xfffffffffffffef4) r1 = accept(r0, 0x0, &(0x7f000060c000)) sendmsg$inet_sctp(r1, &(0x7f0000dc9000)={&(0x7f000029b000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f00001b2000-0x70)=[], 0x0, &(0x7f0000403000-0xc0)=[@sndrcv={0x30, 0x84, 0x1}, @sndinfo={0xffffffffffffff43, 0x84, 0x2}, @sndinfo={0x20, 0x84, 0x2}, @sndinfo={0x20, 0x84, 0x2}], 0xc0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00004df000-0x108)={0x0, @in6={{0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0xfffffffff3431b5c}}, [0x0, 0x9, 0x4, 0x9, 0x3, 0x311b, 0x3, 0x9, 0x2000000000, 0x4506c8ca, 0x2, 0x3, 0x6, 0xff, 0xffffffffffffffff]}, &(0x7f0000353000)=0x108) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000feb000)={r2, 0x778c}, &(0x7f000062b000-0x4)=0x8) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000e02000)) r1 = syz_open_dev$adsp(&(0x7f0000357000-0xb)='/dev/adsp#\x00', 0xe584, 0x2000) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$audion(&(0x7f00006e8000)='/dev/audio#\x00', 0x3, 0x100) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000ff0000-0x4), &(0x7f00002d7000)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) [ 190.315590] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.330844] audit: type=1400 audit(1518804206.644:225): avc: denied { bind } for pid=30376 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 2018/02/16 18:03:26 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000b47000)='/dev/mixer\x00', 0x84600, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x401, 0x1, 0x2, 0x88, 0x6}, 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000077000)={{0x0, 0x0, 0x5, 0x3, 0x9}, 0x100000001, 0xdd}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x80040) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000085000-0x12)='/dev/input/event#\x00', 0x1f, 0x40200) r1 = add_key$keyring(&(0x7f00009b5000)='keyring\x00', &(0x7f00000d0000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f000042a000-0x4), 0x4) add_key$keyring(&(0x7f000056c000+0x437)='keyring\x00', &(0x7f0000e3a000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$read(0xb, r1, &(0x7f00001d8000)=""/60, 0xfffffffffffffcd1) syslog(0x0, &(0x7f0000f4a000)=""/37, 0x272) r2 = syz_open_procfs(0x0, &(0x7f00002ac000)='oom_adj\x00') writev(r2, &(0x7f0000b97000)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/16 18:03:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e4e000-0x10)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x0) r3 = accept4$packet(r1, 0x0, &(0x7f0000871000-0x4), 0x0) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f00005a8000)=0xffffffff, 0x4) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@common='sit0\x00', 0x10) sendfile(r0, r2, &(0x7f00008bf000), 0x200041c) 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:26 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000001000-0x8), r0, &(0x7f0000002000-0x8)=0x10, 0x9, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003000-0xb)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001000-0x20)={0x1, 0x7, 0x1, 0x401, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000be1000-0x8)={0x0, 0x0}) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000d92000)=0x1, 0x4) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000d6b000-0x90)=[{&(0x7f0000a23000-0xa1)=""/161, 0xa1}, {&(0x7f00005f7000)=""/198, 0xffffffcc}, {&(0x7f0000e0d000-0x94)=""/148, 0x94}, {&(0x7f00001aa000-0xaa)=""/170, 0xaa}, {&(0x7f00006e1000)=""/4096, 0x1000}, {&(0x7f0000abe000)=""/199, 0xc7}, {&(0x7f000054e000-0x42)=""/66, 0x42}, {&(0x7f0000697000-0x72)=""/114, 0x72}, {&(0x7f00004cc000)=""/97, 0x61}], 0x9) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000a6c000)) getpeername$ipx(r3, &(0x7f00003c5000), &(0x7f0000e1b000-0x4)=0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000c3f000)={0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f000092a000)={0xfffffffffffffe04, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bee000-0x40)=[@flat={0x776a2a85, 0x100, r6, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000dfa000), 0x0, 0x3, 0x2e}], &(0x7f0000992000)=[0x38]}}], 0x0, 0x0, &(0x7f00009d4000-0x3)="a2bbc6"}) 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000089f000)='/dev/usbmon#\x00', 0x0, 0x400082) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000319000)=@file={0x0, ""/89}, &(0x7f000011d000-0x4)=0x5b) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000dc5000-0x8)={r1, 0x7ff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000654000)={0x0, @in={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f000045c000)=0x98) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000c90000-0x4), 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000c13000)={r3}, 0x8) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000237000-0x9)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) syz_open_procfs(0x0, &(0x7f0000736000)='net/netstat\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00003a2000-0xb)='/dev/mixer\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000c53000-0x38)={0x7, 0x85d, &(0x7f00001a7000)="b1db3bc13d6f23937ce75fefbee7a752abf430461694df90e6d4fb631d78a22946edafa09e04f2288427dd29f87cfeee1977620a3c05050a649ee5319b24c6af4fef61287e8f96ac766ade9d9e9879b105931c4bea48a6ac071b17cf1122169a45", &(0x7f000048f000)="70bb700edf436d06b2c88e3ea4c7dfd4492ccde56728c01033985e2522c8386206550c2a26ef86a15362453cca834ea29acacb7b917e83de2f7076ea89fb6cefbcddb2f2e030eac7e7573a663ec9ec11effc73fcc2a9bba4b0db557561b46fe6bc4f8351f74d5ae97b5719fbb47959584d00f7af3cefc6269bd5778f9b939a973839c78c3e8d21af816847fe1bd2435b74ef49d497f2714d5ab2", 0x61, 0x9a}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000f96000/0x1000)=nil, 0x1000, 0x1, r1) [ 190.384605] binder_alloc: binder_alloc_mmap_handler: 30386 20000000-20002000 already mapped failed -16 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000004c000-0xa5)=""/165) 2018/02/16 18:03:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x38d, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000d18000)='mounts\x00') recvmsg(r1, &(0x7f00000a7000-0x38)={&(0x7f0000c8e000)=@can, 0x10, &(0x7f0000021000-0x10)=[{&(0x7f000075c000)=""/196, 0xc4}], 0x1, &(0x7f0000d8c000)=""/246, 0xf6, 0x3}, 0x2) bind$pptp(r2, &(0x7f0000e84000-0x20)={0x18, 0x2, {0x1, @loopback=0x7f000001}}, 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000564000-0x4), 0x4) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000f87000)=r3) recvmmsg(r0, &(0x7f0000002000-0xb4)=[{{&(0x7f0000003000-0x58)=@alg, 0x58, &(0x7f000001c000)=[], 0x0, &(0x7f0000030000-0x57)=""/87, 0x57}}], 0x1, 0x2, 0x0) sendto(r1, &(0x7f0000018000)="f8", 0x1, 0x0, 0x0, 0x0) [ 190.460962] syz-executor2 (30402): /proc/30394/oom_adj is deprecated, please use /proc/30394/oom_score_adj instead. 2018/02/16 18:03:26 executing program 1: mmap(&(0x7f0000b4f000/0x4000)=nil, 0x4000, 0x3, 0x30, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b4f000)={0x4, &(0x7f0000001000-0x20)=[{0x6aa, 0x800, 0x3, 0x81000000000000}, {0x800, 0x7f, 0x6, 0x6}, {0x8, 0x40, 0x3, 0x9}, {0x9, 0x1, 0x2}]}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000b53000-0x12)='/dev/input/mouse#\x00', 0x6, 0x402080) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x1, {0xa, 0x2, 0x10001, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x100}}}, 0x32) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) 2018/02/16 18:03:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000066f000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000043d000-0x16)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000e7d000)={{0x2, 0x3000, 0xf, 0x5, 0xff, 0xd6a, 0x8, 0x80000001, 0x7fff, 0x8, 0x150, 0x2}, {0xd004, 0x0, 0xf, 0xba, 0x101, 0x0, 0x1, 0x420, 0x4, 0x8, 0x6, 0x9}, {0x2000, 0x100000, 0xc, 0x7fff, 0x3, 0x8001, 0x388f, 0x1, 0x3, 0x40, 0x20, 0x1}, {0x0, 0xf000, 0x1f, 0x5, 0x8567, 0x4, 0x101, 0x2, 0x7b8a27b0, 0x3, 0x9, 0x2}, {0x5000, 0x4000, 0xf, 0x0, 0x3, 0x800, 0x9, 0x3, 0x8, 0x1, 0xdd8, 0x7}, {0x6, 0x0, 0xb, 0x7, 0x0, 0xfffffffffffffc01, 0x2bf, 0xb9, 0x0, 0x6, 0xfd84, 0x6}, {0x7000, 0x0, 0x0, 0x4, 0x80000000, 0x0, 0x1a, 0x7, 0x2a93, 0x71, 0x7fffffff, 0x400}, {0x3000, 0x105000, 0xb, 0x8001, 0x2, 0x0, 0x490, 0x6, 0x1, 0x1, 0x54, 0xb}, {0x10f006}, {0x100000, 0x6000}, 0x10000, 0x0, 0x1002, 0x112, 0x4, 0x400, 0x5002, [0x8, 0x6c, 0x3, 0x100000001]}) ioctl(r0, 0x3, &(0x7f0000427000-0x32)="c9893494bf4f48687aea6226be1fa45944b6485e02cd15e4c1f213ce6b1c28dbe696f1e9ef309fc92759e4254db335664079") 2018/02/16 18:03:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) [ 190.505903] TCP: request_sock_TCP: Possible SYN flooding on port 20030. Sending cookies. Check SNMP counters. [ 190.583291] binder: 30431:30433 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.591196] binder: 30431:30433 got reply transaction with no transaction stack [ 190.598739] binder: 30431:30433 transaction failed 29201/-71, size 0-0 line 2757 [ 190.615236] binder: 30431:30433 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.623114] binder: 30431:30433 got reply transaction with no transaction stack [ 190.630663] binder: 30431:30433 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:27 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000bf5000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001000-0x8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000819000-0x10)='/dev/sequencer2\x00', 0x10001, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000962000)={0x1, 0x3, 0x7fffffff, 0x2, 0x40}) syz_emit_ethernet(0x3e, &(0x7f00008b7000-0x17d)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x3, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000dec000-0x10)={0x0, 0x0, &(0x7f0000261000)}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) syz_extract_tcp_res(&(0x7f0000541000-0x8), 0x6, 0x80000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xae9000)=nil, 0xae9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f000065b000-0x5b)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x48, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@timestamp={0x44, 0x14, 0x5, 0x1, 0x0, [{[]}, {[]}, {[@multicast1=0xe0000001]}]}, @rr={0x7, 0x3, 0x0, []}]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @broadcast=0xffffffff, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00004f8000)=[], 0x0) 2018/02/16 18:03:27 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000267000)={0x0, 0x0}) connect$ax25(r0, &(0x7f000018a000)={0x1e, {"03091f0000de35"}}, 0x10) 2018/02/16 18:03:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f00006c2000-0x8)='./file0\x00', 0x1, 0x18) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000e0f000)={0xfc, 0x0, &(0x7f000024d000)=[@register_looper={0x630b}, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x20, 0x10, &(0x7f0000764000)=[@fda={0x66646185, 0x5, 0x2, 0x3a}], &(0x7f0000f56000)=[0x38, 0x38]}}, @release={0x40046306, 0x4}, @reply_sg={0x40486312, {{0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000df8000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f0000732000-0x8)=[0x68]}, 0x7fff}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x28, &(0x7f000071d000)=[], &(0x7f0000978000-0x28)=[0x68, 0x0, 0x38, 0x68, 0x38]}, 0x6}}, @acquire={0x40046305, 0x4}, @exit_looper={0x630d}], 0x24, 0x0, &(0x7f0000c13000)="f2fbf41b48d28b99affb3f9384ab616403435f5964d2786abf843e01a38a2b24c454c97f"}) [ 190.654821] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.660620] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x1f, &(0x7f0000077000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f00009ed000-0x38)={&(0x7f0000cbe000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000e85000)={&(0x7f0000fd7000)={0x78, 0x37, 0x8, 0x0, 0x2, {0x14}, [@nested={0x10, 0x20, [@typed={0xc, 0x6a, @str='\x00'}, @generic]}, @typed={0xc, 0x83, @uid=0xffffffffffffffff}, @typed={0xc, 0x44, @ipv4=@empty}, @typed={0xc, 0x92, @u32=0x81}, @typed={0x10, 0x29, @u64=0x4}, @typed={0x14, 0x53, @str='nodev.-+,\x00'}, @typed={0xc, 0x19, @u32=0x200}]}, 0x78}, 0x1}, 0x40090) write$evdev(r1, &(0x7f0000712000)=[], 0x0) dup2(r0, r0) recvfrom$llc(r0, &(0x7f00003e2000-0x32a)=""/810, 0x32a, 0x0, &(0x7f00009e1000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="c3973717b526"}, 0x10) removexattr(&(0x7f0000e87000-0x8)='./file0\x00', &(0x7f0000a19000-0xc)=@known='trusted.syz\x00') 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000e78000-0x4)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000010000-0x28)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000008000-0x10)={0x1d, r2}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000b9a000)=[{{&(0x7f0000e19000)=@nfc, 0x10, &(0x7f00006ca000)=[{&(0x7f00002fb000)=""/24, 0x18}], 0x1, &(0x7f0000560000)=""/129, 0x81}}], 0x1, 0x0, 0x0) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00007e1000)='/dev/dsp#\x00', 0x1, 0x400) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000e11000), &(0x7f000055a000)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000c53000)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000ac7000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @generic="c57c723aa97a3206dbac0cf33d6c2bb7", @common='bcsf0\x00'}, 0x0, 0xa8, 0x118, 0x0, {}, []}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "68a67ec44777f4af8c8806000000ecb1f5c1f7a3b3220f401a67adba79ece11ceff2a9e9c07c33a929e2b83ec4fa3ede0bb2e7156c6819c4763fd51360896800"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x310) [ 190.701662] binder: 30442:30448 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.709645] binder: 30442:30448 got reply transaction with no transaction stack [ 190.717194] binder: 30442:30448 transaction failed 29201/-71, size 0-0 line 2757 [ 190.731962] binder_alloc: binder_alloc_mmap_handler: 30445 20000000-20002000 already mapped failed -16 [ 190.794541] binder: 30442:30448 ERROR: BC_REGISTER_LOOPER called without request [ 190.802462] binder: 30442:30448 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 190.810254] binder: 30442:30448 got reply transaction with no transaction stack [ 190.811052] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 190.817736] binder: 30442:30448 transaction failed 29201/-71, size 32-16 line 2757 [ 190.825172] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000e3b000)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf52c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000535000)='\x00', 0x1, &(0x7f000059c000)) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f00000df000-0xbd)="25498eab1c6f60207cdbc4d62e4fe7871a5f5f75f1b4d052de18b8ae2b2627af0527aaca476c69271bc1b3ad8b768d1e3ccf7b968462b1df9b641995908bd07457df737738ea19732bfdbfec2dc9e6eaa3055d618208a8802379ac386c228d370654742231c4b7488caad196d924ad171dded4e9a5dc3e8cfd496b4fc8c343f9cdad65d4228a7893bd2618cafebd25310bb5520a417eba69e684f731951590de5de67cca8412a2995691e3a4ca532e665aade80fa3f1966631f8e51f32") pipe2(&(0x7f0000a0d000-0x8)={0x0, 0x0}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x10}, {r1, 0x2}], 0x2, 0x2) 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0x2, &(0x7f0000410000-0x10)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) pipe2(&(0x7f0000357000)={0x0}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000ba0000)={0x0, 0x0, 0x1, 0x100000001}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000063000)={r4, 0x8}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00009ce000)={0x80000001, 0x8, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netrom(0xffffffffffffffff, &(0x7f000049b000-0x38)={&(0x7f00004ff000)=@full={{0x3, {"36045db20c348d"}}, [{"0261dc497bdbfa"}, {"fd3d97caa32d8b"}, {"926931673f4c63"}, {"22b190ce35e636"}, {"09d49965034ccc"}, {"79be66bf632ddf"}, {"65e35c3553b4f3"}, {"42ff570758dd1a"}]}, 0x48, &(0x7f0000cf3000)=[], 0x0, &(0x7f0000798000-0xf8)=[{0xf8, 0x3a, 0x3, "1824a97ffd8dc7e63d3ff26a523d4b17dd5ec70eedf97b21022d125037e26dab0dab2fb204d4ee9951ca7ddb6652a57182e73def585413629c11b53c8895128d256f86ceb527c1d7c0f8de6b5a6a209ea8243d21d8a52d8c0159b725292dc0c4841e5575999c63792c9f8ea1d9b77496ec6f07d9f3bac61cf59c270ef5b5656e9d1d6166b469b24ddc9a33a50b6c8d511dc0c4ecbe4984a58b50ccc6fe5a89357d577462d9e3e0d1c1065f7ce34809a6906631b50c68927b048432727d14e70249440f980141265211a0245d344f22cf03c6abaab1850786682e192608d9c589f66ee3d5a9"}], 0xf8}, 0x0) r1 = open(&(0x7f000075f000-0x8)='./file0\x00', 0x2001, 0xfffffffffffffffe) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000a21000-0xe)=""/14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00006da000)={{{@in6=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00008e4000)=0xe8) sendmmsg(r0, &(0x7f0000b26000-0x1a4)=[{{&(0x7f00009ad000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x0, 0x2, {0xa, 0x3, 0x7fff, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x8}}}, 0x32, &(0x7f000055e000-0x30)=[{&(0x7f000098a000)="5a51be1adaef0186439a8b91e9515919639969fbb598bc034b60ff9aa0368ab9201d295ae099824ab5f7df190aa721488159143ecad0e4db3b6f5ef2a912895e861408c108deaf1844c2bf9f3e6bb6441d9ecd4d3ced3de8e3494869c6b809e74ddb449ec9a4e3bf655c513d683b52e453f8e5dcdb9248cc247c79c868aa0bb99a3e49b42db0e301effb7e3b68a6b549d23558513ab466228c523649e90cb94449fc88f4c5025c8913fe8a099d7e9fd787b5ece30a2bfbed793fa9451f5b6f641d", 0xc1}, {&(0x7f00009ca000-0xa7)="fb48b3c79e0599b3a80e2da436025c6f1a70063e4679e65cc23ef0cf0df7ce7e17716d693d40d215373a5896f9efb9f367b20f5391af5649d8629b3e0a8334d076a7efe8008dd5b3675a12771183069939852ccfea5758e7abe34ee0f0dd5e8e7b9dd50d665f16847f935fb0835b0fed0214c5b97b128c87bb084aca9e24d6cc110b2d4c0f834fdd61ac2e8adbb46cba64b79eadf0d8c547447ccd140cb023e674afdcd0b84e97", 0xa7}, {&(0x7f0000171000-0x64)="133e7990caf034b1b71692e6ba84c406df57a54e48663c1c9913276a3ab399c43eccbae448e54245c4c05329a7f6f7a6bef57fad16564a29d00596f380b40260b52c05eaeb7f03a151f4c2b82e84df2b3fbd85b75e6c09861821ee10958828bb9cd2beb0", 0x64}], 0x3, &(0x7f00002ac000-0x200)=[{0xd0, 0x117, 0x5, "fab11cb5e10b806af8c431f82b568c032c6a3ffeb1cc96930a0a499f376489a8d9c1de92f5fc58bbad7d4d151658cbc243636bd7b2a9f84a127772ed901decd712f7d2f039d6596b82b83b873ea2e0dc46281c47908408fae15f094d01cf3589b45df56d98ba30cb6e1d71877bb77e1b9ebbfdeda4b6a46d40a7512a3ed92a1f60a8153710c248dfeac00fdb6b588421465cf43ca245acc0c345c2d04ebb5e38da68149902d1af3c8089b8c52ec5ab9c86f14fbb5acd1d7bd2290aa4e183"}, {0x78, 0x104, 0x7, "905f9eb4f0880f7e405cf9a0295910c54f47d1410a8d47a60c266abb06d20652dbdbe6d1eec32ca8abd3d1dde84db5c0a0b506372c9932e1403560090ab2d52567bcb085c2280a0344ada4aaa70dddf30cc2bc02c8d42cdab3202be2bbf79180844af3e456c0f9"}, {0x30, 0x0, 0xaabb, "b00c73d07007a1da0e1812ba19b6b8667779ae1603c6e0e8075471"}, {0x88, 0x1ff, 0x2, "6facf1b29bfc57190dec509cfff1cc8ba7735d057214506be576b1330e70ab4fddf36d773c8296c1d602ae8906156e50c47dbfce763b81dc03b5a60c7898b132aed589fe3ee2da421a402532b2bed99ec147add5c8497ea30c48b57b2b70c688813271d6fb7da7ca74f3665b527468c91fe2446017ed4b7d"}], 0x200}, 0x9}, {{&(0x7f000065a000)=@nl=@kern={0x10, 0x0, 0x0, 0x10010040}, 0xc, &(0x7f0000d81000)=[{&(0x7f0000261000)="7fe5152d675b449810aaa331fea5e2fbcaf880c3d9d837db1efe895feb7cb1e6818b591b8ab7460d59d6acf7c8730f640df68a8d5a5f934b6ba040aff0ed8dd00b0545d08e95208a65e138550e8c5d09de99487a73d828d79f4912f37c34568ed3b735746032b8a8eb68714d360ee84ccf5414e382569d70e2ccdd837af690e9ff8600f2cfcae291fc49883825c0731bcadf13ae48e188e5b769f56255665a08596e6ed3cdd59fc2dc6edad37db8460c191b5e222cd2ee9dfda0ac130edfd7ff0d1763f7783692cb6ceea40cdeb9355180c89a42c846a220e11434c929849b15d5a8c62b1d099d6b14bd48b3e0f220cb6f716dc421dbcd2a", 0xf8}, {&(0x7f0000c98000-0x2e)="9d85d2b4e79077db17c5d3fff84e2caa067f47bd2b819c1fb7179e662e25755b084ac47ffa6f180b1f9b7cbec931", 0x2e}, {&(0x7f0000bd6000)="0a9bd75be6b1e737b3e671470f44506f9b3e309981c94e513da6938accd35fbece32ed7b6167fd72b296f8f5c493953678cb2abaa83831e2511f385b39e5dc50fcc138b90dd7624ff9456559f9caea14a480ef97a281802bda5e5e07c4e97540bf7f0cea9d93f10aa09d8d9a6aac8eccd752e31f508363f4d07bb07b0b1ec17fd31d84d693b687ca31dfb7c39e310e1cd13375c1ebe824e776105904c07ad4572625504714358498f896176ae32b49a2ebad10f3fb5413cb30f22836a1c01eac967ec9d9a610b2da6481c573ae685b4d4c75236b2e53", 0xd6}], 0x3, &(0x7f00007b2000-0x368)=[{0x98, 0x104, 0x7, "ac9db996da7fcec9c56138ca519be28765eeaf58e73204c86c4a6f637e667110e488e91335516208b153cf8268e3a7bdc6da9cc227cc08cda80b0e415c6aaf1261fd5ef54da3c45344d4fc9a48c0fa78a715e4949ed8bf5d8db63ba502f183562f6cb10bb40c206667a9174bf0ff1b3139fbf10dd8685dd8e19f31db4e2bedec206c89"}, {0x20, 0x104, 0x3, "a20a28f8d243f6ac1af8738a2715"}, {0xf8, 0x84, 0x80000000, "d19af278b5477db68f3ba1ef3b7f16c6aceb006230b4b5cb5e5bcbf1c5f98a4f95aa7a5a5719f41a2aa532cd2030bbd8ddfff629b69af6f17ce10c7cc193478e91a91a8c1a6a4b9f7868ed20b537ff7dbabb8277ac6ea1f559cb5006884b7555c82ce97f10ed7a062fda367251aa98500fd14e9160a30010f3bbc49b9ab7d8dc8348da7033758c6c1bd285cd2c3cc906551cd1791e18f05d360ead766640cb5fad9ebcb43882ea58213eae0bb02a08fbccea827ec6701b525f5f60a6cd8b409de89d3f58fccf46c49e6e421f615ea156cf72f67103817332a1e652e4206d381d1cb9cd7320"}, {0x108, 0x185, 0x7ff, "54c4ad730c6f09089aab693bec71ad8daa03f33f0b6ef4790a74cc3f1e32caaeeaef3aed018b8ef18a9a35a1d90f919600a4e31f4c584cde87a55023014f390aea39da640392ad1bb0d36baecb25846bcccd7c99ba4675dfd6dcf8710e53ad5329edaa9f41df5500321f006cfb9eaec8d753ab212f8dde7db3c616e15036d09c8410a460358e3cb3722e0869147c7b59743a3f7096fc650786f48dc2ee7a9da1f470effd4f327dceacea4ff2af786fb16a1dee41831eb09beae5dedd31f83b144bb3b7091ff921a5eb4cc5460588ca95b0e3b791c2b635e7c44f56267372a2b00a89c75f4ead36ae52ca087593f2b8d7234a4085"}, {0x48, 0x19f, 0xfffffffffffffffe, "0c2bdb3d87bc4cb7df723829c048bbcc6a82b0b090fed9c4300b1a613e9842fcf24ba97726d7f32b523115940686de00a6bf2b868b43"}, {0x58, 0x18d, 0x1, "39fff32e9f6e96e42f8570cae8060ebaa6eef3c918c8c3990f93e11e4155026f988cdda0f057e0eda0cbdf352856d01bf7ef6e9e1733a789af2b080861ed8ee8a96f78c0a131"}, {0x10, 0x88, 0xff}], 0x368, 0x44}, 0x7}, {{0x0, 0x0, &(0x7f0000f41000-0x50)=[{&(0x7f0000d93000)="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", 0x1000}, {&(0x7f0000c9a000-0x22)="b12f39ef568a6b13c30b052a9eb1860813d6324b863d5a10287dc892105db4694622", 0x22}, {&(0x7f0000c8c000)="2c3d9701b604bf61ecd658d17c7b13872c9afc40f1252e91eda0bd8ba79206fbe749a40b71f95547fe08035eda0347325510bbcb8b4b8c13926bd0e767cf3f558f7eb05fe82cd9029f122d4dc9f05b256533a6363802f0c99b03828faa20d1dc7ce53f218ee61a39abbe562f8483ea19b8e2dc52ed6e572fd66c715efb01362d3a4cc87d400305836f1e83656347c3f770dfd47fdbcae80acaf9558aff930194661bc902ffb00e0dee73d7e692b7a9ccad7278074a669fa5238c65cb7cbf5a6b01bbf01c3292dae47f1de65e4568dc2f107434712af866a152243127944db7f2a441abd1fff8", 0xe6}, {&(0x7f0000c6c000-0x1000)="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", 0x1000}, {&(0x7f0000a70000)="ddc800f20f4c45e996d8d9bf489f5ad5daf8a67c2a67493b7931a5a33780156510a0e9f5762d420b24070826c5", 0x2d}], 0x5, 0x0, 0x0, 0x40}, 0x8}, {{&(0x7f0000501000)=@sco={0x1f, {0x2de, 0x100000001, 0x9, 0xfffffffffffffff9, 0x100000000, 0x3}}, 0x8, &(0x7f0000ebf000-0x50)=[{&(0x7f0000803000-0xb0)="8f31c776615996271c0800fc31b5916a6f36ddaf3f96067a28b3ab9eff0e653722fa246c80391d80696500c27c3deeb6afe46040747c29709b17e6f4a592d2fac7ac345f13cb2672204f77024a3cf83da0be2697a22c7483426ec1c59bbe2b9df74d7876d9797bf634d7bc232674b383314d5d6ca4ecfe9cb537cabfa9e988a4229af0df6591c48568bac11cf33c0eb1bdb072e0a4ea0eadcedba752390a7083197fe0808ccdacd378f104d76baa2edb", 0xb0}, {&(0x7f000069f000)="5a1f83f2c52489e9011b2ec8d4fa80d32a15d1d11a3c6ee6e404628cb81002fed829eaa50a231f676c747ef61ccb470d0453f49f99664300afb73cba95d05f906bebc4d6319b869a1f89994895", 0x4d}, {&(0x7f0000268000)="4009e370e5da78e423fcfe27d91357d32f5dbd2cd7b9a7ac53587af0da7adc33b5dfa9f4983e7248d7c71ef4eeb3802a9d1de0f3779a6fe1a2fabcea1ee11bb9f81777492eca18149959beffd53a941e26d4d1fe14", 0x55}, {&(0x7f0000b1b000-0x1000)="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", 0x1000}, {&(0x7f0000ede000)="c1f6cf5f9b", 0x5}], 0x5, &(0x7f0000ef7000)=[{0xa8, 0x0, 0x8, "c8bf9339208f1bbd8d6e12a000dfc983059ad323e2bbc7ad0d1f92ec9f469ef2ee29043a07ef9eec78b18e46452346aca8bb338e8cf859a0b77fad0f3b89deadf1e44994805ff3b6381c8dfa146e75b2c02807e1d71aadf263806b9a94d9c2c40369481e2a6c55cfb2e4e8e2a9b08198c595c49a2990774ffd765819154fea53c21b74da4017df5f04de225d9c6227e8bf6c"}, {0x10, 0x117, 0x10000}, {0xe0, 0x0, 0x25, "ea041f9e67dc58d0008123afe298d712c6a0f19de7eeb6e1cf4819003b9b5fda8c0513c1585e23d2c1383cd1bde09d6fd243b0be73ea10c63fd45198e9deecaf5045f54a0863ff8c87805e74c5339a53657d1f1d116a7c3c4dee899e344aec4dd68988b7a05786d7a3b19b35be06144ade815ca1cdc19142a3ee822f799a11a3ed99f07cc999f866d5359f2904782315486430c0979ad179ed3fe24801a029dd2c1e42d142d2dd3a53c39f5b0ffc7946062c4d72e11cd70459cd4443d43aa105e523c0234fb89ab44a"}, {0x100, 0x13b, 0x5, "1a240425c0314084f7cbab90be83bce1fedb3de0cdfe3584f789327ca846ae55981c1b5096dbb7b5c17db0b24fb1718f770823ecf7acfb1c102e6e51a8cbba3fee2daf920da8132d007ceb87ae0a71900df5d146f45d3b9d1512d50f1c5226ac6f20b79eefdfbb7494fe36322e5a5e7563e597e7d2201451f560ab80d947e835cf65ce5dc4120d00cef8f825b9f880efcc18272488e19c0b91294fecac4930ac3fc744d7045e4b33987807fa9451bc56b217be54431a37c8c3dc72a6e9120f56687800093919e5a700ffaeb39141d0a4f002363c091ab0c24273640a9171737452bb189c6a8ce6060c16f5e7"}, {0x70, 0x1, 0x0, "34f1846a5e163ee19fee52f738c8617246fc1ae66df5e029e35f96e573c5bba56d407b0ed5789c7408173c41f29275fc5bf949f26c3cf2a5b0288570450f7ed001764c8e8341b31b97d09cfccdd8d5d0df8ea5cd91c634e76c"}, {0x1010, 0x113, 0x1, "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"}], 0x1318, 0x50}, 0x1}, {{&(0x7f00007e7000)=@ll={0x11, 0x4, r2, 0x1, 0x3, 0x6, @empty}, 0x14, &(0x7f0000ee3000)=[{&(0x7f000097f000-0x82)="a3361301cc35221f42d28755848bc2be7f38891d89ae8928546172b92ff1193a5e7fddda564808759ef3dcca2da7aec97959919243a68ae9211a562e891294380a8a453b606266a2c80c06f48eb3156bcf46ed88ac12a2e59339cfd4e21eb8f52f371fb15898d1d2151d97ebdea537cd1e167a86aa8ce28a2e911fbdf630b67853d9", 0x82}, {&(0x7f000055e000-0xce)="9f362707d93b8df9c6c3f87419abd255a3bb57a2c17cc6b242f27b5b33c790fc5a323a9970110ef24ca305d0b5e09444fac04a08b6397c6dd79b2d1998a890a7a0820fb7414aa8df9ee4f54151070a99ca2e6c6e9320e45a7f6c7b450a9d1e149a1e73b7ac27a2028b76e6782718f40071b814ffeabd834412eb705568ad6b9ad6be69fad8c83688be5de135ed99ad18ba01db5f104a5218b8a3ea63642f8e23269a9fdb099f3ad3c3d3f4afa9fd77ddc6da77cafd3f7082340fc7585144c807e2e5033523cfdbfcc2ca93c31132", 0xce}, {&(0x7f0000ff7000)="bb5a090c7822e3e989928cab5ba295021bcf7ba94de430e477f140e836551244e1f1aff03cabda45d1492535993f21e46f4f4453a077d2e4cf4f89dc077e9a0a14ea858ec1f79ad1b01a22c1996f0cc108605f4b3bd9a93e6b146176f91d4e25c439afc40c845f17b81cdc031032effa0e691bd845ad52dcdef53a", 0x7b}, {&(0x7f00000f1000-0x16)="e54e9c1e9015c023ebbcc6cb7f30f3af9c708641acf0", 0x16}, {&(0x7f0000d14000)}], 0x5, &(0x7f0000f14000-0x128)=[{0x68, 0x102, 0x2, "0f33ee476b5faa69f27626be6b763262eed5932a2b087a4d0442ff90964a1289b92e630856115d1af51aa453e274f0c71de144e88834f241efa0ae33fdfc54e8c964831437e4cdacad967d47b849db5e1f11a5d252"}, {0xc0, 0x10e, 0x800, "dd11077e19884402406d9712bae00cce5cc4f43409da282bbe872c7f66dfdb121f3feb8fbb294acd3d1dec5b334650ef6eaaf603884edee5b2324635f252e90d7229bd295555d5ae8047e353ffb6fa6844efe0c1558f825a8b01d63de6779490092dcbfb06cedb860a0aa39aa70b9530f0e62bc5e16fb2a429b8b0b9c4d97053e0f452734862e1898ad9cebe116986d6d2b42c6322c833274bcb71a24c0d338fb0a17ff54a0e5011951ce9189e68"}], 0x128, 0x4000}, 0x9}, {{&(0x7f000000c000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x4, {0xa, 0x3, 0xfff, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x6}}}, 0x32, &(0x7f0000332000-0x70)=[{&(0x7f0000758000-0xb5)="68e7b32106584ad03d021544e8e28f084458f7d9dc5a11dd130bb8f9a64c0c856b0dee5b5997d22c2f65a49c2636e07aaba966642f07ccad1ddb6784a45d2cba53dd1c7e5b12ef3812258f62b463162b5325917ad2004b1871a9c36587f31ad976892e84c635ce78b8970ada70fe5b59906b5fbe5b6aa373b23f02f317251dcda6d4ea1e7aec4279b5ccdb54c8cf414bb6145f366f1882e78489f8083996cc570b5df4ded802095a7c5b3af4f17fabd89397db148c", 0xb5}, {&(0x7f0000554000-0xb7)="e0d319452b82b574db2fba5792b0284e39c61caf9bbfca6d2f8944faf04db5618158f091e51459fe7ebb5a9bdfac937b1211d4a9906c2f94bdd5890ec5158271506bc4bc94c5d26723ca93f6d810e13d7026b2b9c5c49cd6fb8c6602b4c3b428d3b05f15f1f619ec2204e4d55ee1560a498ff05f963e9a71f6b26af5ec21490af87f9b27a8988ded4eec64f90e9cbd8a9b82a1b11583b76030b63fdf9ce5a9a3d71afd3e744b65cb63cc523321e4d1a1f7b70b83c8b787", 0xb7}, {&(0x7f0000f27000-0xd1)="b9252f1c94500a29b6546094c83593cf323a6b815af60130ece5bf7ad9a33610b7d2b937870e1f31b9610a63bfbef6689ab6d02efb8b80daca351a1e342dd7b8dac43e8df4a77a131c82789c6a1b30b92dde3cf4c74aadd534af806fe1fe95de9dbacbe8e0d1b2df8ca6f63311f9f69f1a06651b463260e5c608ab72c61e3c2469866139247a5a8063205bf7e09dbd3611e1f3139c79f84c4466525c6dd8e4076e2cca560e8f8289238a0a41b0cf61da374ed3de3abc59580a2639282cced145ee38a11474f069df8e8be8b95987e7ce4b", 0xd1}, {&(0x7f0000c64000-0x2e)="8b276396d439000ed2c7b3762dcff1561afd37d96789000f1d9efaed8bb9aa0582cd423ea8bedd2f462d9dca4844", 0x2e}, {&(0x7f0000730000-0x1000)="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", 0x1000}, {&(0x7f00008d6000-0x5a)="6333c35b910b021998e8330a17ab2d636116819ec10b827488c866833ce66cc700b560c722e6e8adc1196cf7285d516eb560ce176816e198db8b9d04fb535c42bd9a3f5adc812b0bc4c33fc04c6b996a8e34cc0c20f3e609aebc", 0x5a}, {&(0x7f0000c6c000)="84a0a3b2aa7fc062772c3678f1e075cd92109e4c9dc42150665eded7414b4327f432a675ba6ca6016c30da13cf36", 0x2e}], 0x7, &(0x7f0000b3b000)=[{0x90, 0x0, 0x100, "8e95f77777d37f084d7651714b395c8b82d9fee7a0b351c025c0f0a0ecb9706f83f30088552efba1d366916b3d1ee8e50117101700d5ab2066545ee021756e2f89d85af2c024246b2c469cc673ff4b1fdad8fb6a0f332b065ab73bf15a6f893d82cf522463c4e16423f94c86b0f9e5d5773ef8d096b13de245870836633ace82"}, {0xa0, 0x0, 0x29, "93b2c3357f4fe12e87b355a4222b1c03217b656d118cf4ef86bdaada2af69673d8c61793463d253c5a6c87cd06dd72a99c22cf2af60d626e0df35b508b069745453f36f17ceb80a5a021ed04382c8806be66d6a17f20f84e792021ecc4b70c6706325c80c0461581bd99f084301d45e1273eaeb9b9584bcfbb3739b34720f7465820a99466171408605ee0948e073b28"}], 0x130, 0x10}, 0x3100000000000}, {{&(0x7f0000b30000-0x20)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x20, &(0x7f0000aa9000)=[{&(0x7f0000e6c000-0x88)="6f63c82bc6eeae07f01d6d375950123c3d8488dcee1372307620e8e216ee6e62455fd5eea662701b0333f1913095aee1c548acc024770010eeacad2e689d136e5550f0907c78fabfd39700f1da7da60fe9c72f8dfede6090a40daf95117c19b40f778fb33b13f0c222b90fdb72556cad98c2d5719fedbe469c292ef65eb8a8fd5692322a4b57a1cf", 0x88}, {&(0x7f00002f7000)}, {&(0x7f0000d0d000-0x1000)="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", 0x1000}, {&(0x7f00000c8000-0xcb)="33f748841c21e2a4de00a98e2cebcbd64f6e138b5676cfa676f5e42cc72b6402cec5ec6738c715a92e2aa1455a9f39625eaf8be5ccc7de5dfddaeddf5f2de1cb76f42acfe7f5d6412485bd061c299c5563dcb1eed6d9ebb53951222c278893d1b0c890347e2fa9eeb4b5941d5fddc4489ab65542f4c39d8f62797a69206fc9d5299b2def64256b847f84f11040516e08af68d6de9e4fafc3a91ea751d63ec2a01517fe773f52f4408f72bce30061e7dc6adae224a8c15944582f306a9053fd76541cb2fd349a8414d77f4c", 0xcb}], 0x4, &(0x7f0000ee1000-0x20)=[{0x20, 0x1ff, 0x23da, "d762182186e6b43868"}], 0x20, 0x80}, 0x14000000000000}], 0x7, 0x4090) clock_adjtime(0x6, &(0x7f0000581000-0xd0)={0xffff, 0xf0, 0x100000001, 0xd52, 0xbc, 0x8000, 0x66, 0x81, 0x52f, 0x1, 0x2, 0x3ff, 0x10000, 0x0, 0x200, 0x1, 0x91, 0x2, 0x8, 0x1, 0xffff, 0x8, 0x5, 0x3, 0x3, 0xfffffffd}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000008000)={@common='ip6gre0\x00', @ifru_data=&(0x7f00004ff000)="00009e1908e8af7d6f1735df9846e4f13e566e2bd2d7b04d929d09000100f47b"}) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f000058e000-0x4e)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xb, 0x4, 0x40000000000, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x800000000000000, 0x0, @empty, @broadcast=0xffffffff, {[@rr={0x7, 0x7, 0x4, [@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}]}, @timestamp={0x44, 0x10, 0x9, 0x1, 0x0, [{[]}, {[@empty]}]}]}}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000387000)={0xffffffffffffffff, 0x1, [0x0]}) 2018/02/16 18:03:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00006e2000)='/dev/rtc\x00', 0x80400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x1ff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={@generic="f113d950036113ef5dbfef96a84ef60c", @ifru_flags=0x1000}) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f00001f8000-0x4), 0x4) 2018/02/16 18:03:27 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000347000-0x4)=0x0) getpriority(0x0, r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$packet(0xffffffffffffff9c, &(0x7f00003cc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000483000)=0x14, 0x80000) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000cff000-0x74)="2f09d22c4e063089348dfabb2bde16ab42f60cd5cd6d5ffa0c23dc56ddf309fad93432232e98b842787a8dec67cf60881334ba999990f3c4f49c40b91c83b75b95004e6a3ade4dcc8b9dea310a79063c91076aa8e5dcac6c872f03c59f349b5006a9742253c66883661de93426b6614ccf895ac6") r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000bdc000)='/dev/cuse\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000324000)={r3, r4}) r5 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000774000-0x8c)=""/140, &(0x7f0000dab000)=0x8c) syz_open_dev$amidi(&(0x7f0000cd1000)='/dev/amidi#\x00', 0xbae, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00006fe000-0x1e)={0x1f, 0x1, 0x10001, "84d3226afe11", "47fd6dfb654f95f9a4711ee7e9e55a00"}) rt_sigqueueinfo(r0, 0x4, &(0x7f0000b26000)={0x30, 0x5, 0x0, 0x401}) socket$bt_cmtp(0x1f, 0x3, 0x5) accept$unix(r4, &(0x7f000061f000)=@file={0x0, ""/49}, &(0x7f0000afa000)=0x33) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000f85000-0x4)=0x2ea, 0x4) [ 190.855175] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000fb9000-0x420)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x1f0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00009dc000), {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'gre0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0xf8}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14}, @loopback=0x7f000001, 0x0, 0x0, @common='gretap0\x00', @generic="caacc61dbe694efc7cbed9ee530862d1"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) sendto(r0, &(0x7f0000e3a000)="589bdbd91faa425288f3f6c9b56b46ea1b496ceb60c4f55eca14f8b725cae29ec51fbf545e5ee065c3efc5019e625940dcce1b31bec5c11d0afac7422807d265404951c9e177f707", 0x48, 0x803, &(0x7f0000ad3000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x1, 0x3, 0x4, 0x5}}, 0x26) 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000217000-0xc)='/dev/autofs\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000e3d000-0x4), &(0x7f000023c000-0x4)=0x4) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f000050a000-0x78)={0x0, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x16}}, {0x2, 0xffffffffffffffff, @empty}, 0x27ae91fef982016f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000db2000-0x10)=@common='bridge0\x00'}) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0, 0x2}], 0x1, 0x2) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00007c6000), 0x4) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f000026a000-0x4), &(0x7f000059f000-0x4)=0x4) [ 190.908323] binder: 30481:30483 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.916136] binder: 30481:30483 got reply transaction with no transaction stack [ 190.923651] binder: 30481:30483 transaction failed 29201/-71, size 0-0 line 2757 [ 190.944897] binder_alloc: binder_alloc_mmap_handler: 30478 20000000-20002000 already mapped failed -16 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[], 0x0, 0x2) 2018/02/16 18:03:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000002000-0xb)='/dev/midi#\x00', 0x6, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000002000-0x1e)={0x18, 0x0, {0x1, @random="42d11d48d83a", @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001000)) r2 = add_key$keyring(&(0x7f0000616000)='keyring\x00', &(0x7f0000d9c000-0x5)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r2) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000107000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000adb000/0x2000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000179000-0xcb)=""/203) connect$inet(r4, &(0x7f0000772000)={0x2, 0xffffffffffffffff, @empty}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000963000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400004, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffff9c, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000df8000-0x12)='/dev/loop-control\x00', 0x10800, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00004b9000-0x8)={0x0}) ppoll(&(0x7f000054b000)=[{r0, 0x1000}, {r1, 0x405}], 0x2, &(0x7f0000785000-0x10)={0x77359400}, &(0x7f0000adb000)={0x40}, 0x8) inotify_init1(0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000afe000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000054000-0x4)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000033d000-0xc)={0x0}, &(0x7f0000fe4000)=0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000896000)='/dev/vga_arbiter\x00', 0x4000, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x200) kcmp(r0, r1, 0x2, r2, r3) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000071000)='/selinux/enforce\x00', 0x200000, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r4, 0x407, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000944000-0x10)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) 2018/02/16 18:03:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) pipe2(&(0x7f0000ae5000)={0x0, 0x0}, 0x84000) epoll_pwait(r0, &(0x7f0000ae9000)=[{}, {}, {}, {}], 0x155555555555558c, 0x140000000000, &(0x7f000099f000-0x8)={0x16}, 0x8) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f000072e000-0x6)='.\x00\x00\x00s\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000011000)='./file0\x00', &(0x7f0000ef2000-0x8)='./file0\x00', &(0x7f0000df3000-0x6)='jffs2\x00', 0x41000, &(0x7f0000fea000)) mount(&(0x7f0000dec000-0x8)='./file0\x00', &(0x7f00000ca000-0x8)='./file0\x00', &(0x7f0000067000-0xa)='hugetlbfs\x00', 0x20000, &(0x7f0000614000-0x6f)) pivot_root(&(0x7f00000a7000)='./file0\x00', &(0x7f000045e000)='./file0\x00') [ 191.019537] binder: 30481:30493 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.027345] binder: 30481:30493 got reply transaction with no transaction stack [ 191.035046] binder: 30481:30493 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x40) semctl$GETZCNT(r1, 0x7, 0xf, &(0x7f00006d6000)=""/125) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f000046b000)={0x1000, 0x3, {0xffffffffffffffff, 0x3, 0x6d9, 0x3, 0xfff}}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 191.091583] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.097187] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[], 0x0, 0x2) 2018/02/16 18:03:27 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000a43000), 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, &(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001000-0x4)=0x10, 0x80000) r1 = syz_open_dev$mouse(&(0x7f0000001000-0x12)='/dev/input/mouse#\x00', 0x3, 0x101000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000000)=""/215) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002000)={@mcast1={0xff, 0x1, [], 0x1}, 0x2, 0x0, 0x3, 0x4, 0x9, 0xfffffffffffffffb, 0x80000000}, &(0x7f0000003000-0x4)=0x20) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000001000-0x4), &(0x7f0000002000-0x4)=0x4) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x200001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000001000-0x4)=0xec) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f000000d000)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000021000), {[{{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [], [], @generic="b5555cc0d9931e021651831485e4efc3", @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x5}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f0) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00004be000)='/dev/dsp\x00', 0x208000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000eb5000), 0x4) ioctl$void(r1, 0x5451) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00007ba000-0x4)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00004b9000-0x8)) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000302000)=""/243) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000148000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000c4a000-0x4)) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000014, &(0x7f0000bef000-0x4)=0xfffffffffffffffd, 0x4) sendto$inet(r0, &(0x7f0000a2d000), 0xffffffffffffff8e, 0x20000000, &(0x7f00007f4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f00005c5000-0x8)=[{r4}], 0x1, 0x3a2f00) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000f39000-0x4)=0x7, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f000032c000-0xc), &(0x7f0000bd8000), 0x0, &(0x7f00001f4000-0x38)={&(0x7f0000103000-0xb)={'digest_null\x00'}}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) [ 191.257851] binder: 30540:30549 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.265751] binder: 30540:30549 got reply transaction with no transaction stack [ 191.273284] binder: 30540:30549 transaction failed 29201/-71, size 0-0 line 2757 [ 191.282918] Cannot find del_set index 0 as target [ 191.310842] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000017000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r1}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7f) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f000000c000)={0xcd1, 0x80000800, 0x2, "3576f3a8d9af", "9a7d224e3c5d31d201cdeac84003ceff"}) r2 = dup2(r1, r1) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000018000-0xc)=@known='trusted.syz\x00', &(0x7f0000012000)=""/108, 0x6c) ioctl$int_in(r2, 0x5421, &(0x7f000000a000-0x8)=0x1fffffffe0) gettid() mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f000000d000-0x10)=[{&(0x7f000000c000-0xef)=""/239, 0xef}], 0x1) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[], 0x0, 0x2) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000dea000)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000855000)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a17000-0x8)='./file0\x00', &(0x7f0000df3000-0x3)='\x00v\t', 0x1001, &(0x7f0000a06000)) r1 = openat(r0, &(0x7f00002c3000)='./file0/file0\x00', 0x121000, 0x11) unlinkat(r0, &(0x7f0000ac6000-0x8)='./file0\x00', 0x200) mq_timedsend(r1, &(0x7f0000157000-0x1000)="f759b1e1c9bf21543fc24ad790b4848b1c3735e1fd60cd24d25490cdc70f5d07611c24c3b8d100861e1f79fa0020d67e16dca044a4e63125290578bb4a8de5f733add58241f8a1c0a1a28b0780f11df749aad1be53753c8adee6aa0d7a615d154f0f489805e2fc1a0594ad9aa20e756bfe448aa8e8ada14a02dc2f58bc6f2a913855081cbbe5af58679d8c944b96ebc7ff81081131b1b9e4b71c68121d718ade955e8f0ed195a83e73c4c6cda23d3d8f06d78a1e7fe7c57d9c1e4c792033dc86f77707d9e887af5f8bef85012140fba162cd9d79807460104a062ba475552e3608ad0cbf1f2b03f8b28de7891878290eaa1ab072d1f6bc87849f2282e7666bc1b6fc2a6b8f77c5748bfa32fbe857b8b06af9bc0ad128acc9a0f7b839d99776cd6785d3386e29859d452ccd4302f73de19f9214ef47a4f97e7a14f5453603968a2031e8978869e211c793e2e195b1db107e73303a055dd6045aee4e73c42db057533cc7d35d967c1a2681ded376ab8155b356c1fc70eeabb8b64da6f798367018bb20bc49517a05f6fa2df13e0e09b323b12679a1dfb73eb82c19db89eea5503320436a5cdef2ba77f397a8644ac73d1aa23c5331b97d928d83388836f35e78d8fb076e618008488c94f6637c51bd2ba21c5850ec275912e3103d17732b90fb247a4294bedf66b5295baa256894cfd6b446ca066e1d9e2774998d94e18610f6e1adc7bcea448d03723f6e6fb961648681b06e5ecb67b599d430de2de4ce92370d1001b2c14c32982a4cd339ff7e2ff55c6c71b9028df4a875a15dceca12590a0f43386c9be7b75bf84bdc1f5668e8d6b3b4b8302156f791e0bf2fe82783382dd26a2f54faf927b216c6a4c5df2848b8cc8f881ec5332bbb4f6fb64fa5e2d4b3e371d71979cd7075c9d83048a6176fb486f55b65612f829f2ffc72e93bccf301e6d087a8bb9a8178df5bb8215b7a0c9c99ddf201bdd21a7c985e9ea523c6a8dc8d2aead55913b697972131d22a4569ca771c86b0560f22524b68c44e20eb7b4e63f824740cd1d7b279809dd2630a1757fba58254c56f994b6d46c3bc42da1fad6b13d6d9d803c6dd9b385f5a361fc3a0fcb838e53bd10a0aa0918be78fec3eea7ef8b7474652161424c3b5df4f24c9339adaae7a3236ad42e2307778ae55ad66fd0a7931d82d91ed5a0388e7e7433b68b52af3ab3d92a33edf986e5f06bcd3a98cafde24bf981c6b1ddbf22bd17f3be898cc263a2622a6f0520d7fde9f769e16205262c08ceeb9c8017b3cf9529d20b5537586c7611dc7efefdecd757ea9adfad5b8ddf3edca119467c2df547feca8047f5a01c1ae187185d2cda92be5892a64efd6a5c55f544e35a21a3c711bce47fd8fe3ebe74548be6f4ee5c7286b60b6818597d9cf01d115194d7959035d2a9f9e008971c654c40f8fdf935c26c1085b4a773e10df32b729113e04ee280709173a4fa866079355955361d3c0954e95979c9c04269a66431a969f96f408384c18e106d649a36ea064f92562db280adf20edaedd6e6c5a99ecd69e8c55e00d7d2b62acc810e74f77550586e7986a6df7391c157ce6deefcb95157d4d0727c16a43545afa0ea98b7532f09bfb08d6f963b749f8997ee88659bbd03c25477e5dcf6bfb82910b654e81962f6a5e49070baba72ff98be122af1879bf3accfd24de678060ae8ee8ff4ae45cf25396ab06d7b71a7b6eaeaffbbad5ca884c779388532e42f7f378f46af88a109ea45969e154ef822a6f67fd65b5b6bd87477e2d6d40db153d76e1fc3bff84704515c06295d0502b866e87322d61d53cefeb97b4b7a1cea5f5276a3fceb14c33c26fddaa11eeafe5a5643a7ebf1b49ed2c7492a6ebdbb75f0eb822b47da9889665ff64e514f4b49b7bd92b4a55754653de7ac3353e3322371b93303133dbf4e4591d624998ba2c2a977582a1e9ea1555f03de642ce89319836d54e6221affad635a7093597140055c14d114254fba28a57b450da58fbc2975124a714b11e349c9d00b49ef5d30a356905fcc3e492df6ff132f245314a46145c59ed371fb453575858a92c03e0b1110d108cb3a898665079cd45c17c8513a0b24895e9d51e60c51d96cb5633fff144624956398159b2531119e052bb7e74a5d5a0f62f5e837ca5ac6515f4ac17edd5ebf554d5e9061118d707f415e2827854aae06f49e146d25b0fbd94c39941cc3295cccc2f9f220082d6ddab4fc5e035ad75884f21c408d9b83b123cbb124b9139e5a692f2b64ebfa1e4de5967423f93529c054bf19f1984d53271d6eaf7468e6caf59a40f63eb0505235e0b8a51a2d2677a40dc8a353f8068b7c4fd7b906420cd343afce8c965c99075cc9b116de42de15c9796b5b1f5609cb0ba8f79e5381bb0452e92136f4b0a0a3b2a5695ab72ff6ce23115e3125ce7e4f5d8ca5cb329846329d93fcb26ea4969d5a660d1ed6e24066b081e363e1dca57eb75d61bbae03d5d994bc67d702fd9310243dd4ab3036aecc6f355bb8703efe1bd7063e85e6726a49e618118de77fc3ce0786339d213984e8379de531fce62046b6eb3fbed999cf4c3598f6b03b6105aa786501d16c783c3260ec0362829339e262f468da3b563601ddd86b4d67ac56100ba3faafbed61ceafc7a2cdf23abf04b7a441ee37936a1ac124387853755673c0ca258e8bc6ec8493199972c1b01ec87501081d79018877cbb4bf9ca57e2caddd4a6ae85747c42f8656ef799251fb2e90dab1b0052280a9bb88e2ec2af7493e1773efcdad087037447660c6ef633063279d74ee4fd89d97e164d3ffce27b1d821db1b99e6e5c1ba38783b617a20c07f10dedbf7e6edc4e5547d4a7332e1a8210c3c502f177d788e814060789ca4cb7731b6e1d21ebd38d4f1c2b6394e6772e013b0b69532a57b83fd8b98a0cc31ce559489a4671a8425a55e102c86eb861edcd2b1302f8100394e3c59426589647b2ef073dd841c080be50d7d48428fda7d44b80782020c185a3900140ce537532071c715aeebc1e9c24cc3049c8cd40353970cabb92370b0e715fb306d19be25d16531558dbecf57f9825060483995c132f5a52050cefeafaffd001bd683a47f3767bf19057d34e980a9d51949a5c851f3df0de941f4ef99741cae067a8206aecd7cafed5de7143c741f90e885c3b1f46953c23328c591223f18d7bdef083e4e90699c1f57abfd06b3f5f5346004c644b1364bacf049dc13cf217dea32fb69927d58db9bb63568332dbdbd1353cfc4a6ae06a2884b8d451e291a0507a6c996354b68b9de0d69beb708a55c3d57bf8b169ba3fbf45b92d53e8a91ad7d466ba4b6de0a52a8cdea10be5dd39a03d6b29463957d71cebe908787f5d2d96238d0457fbb3bb41cefe06a32bcf89a822ceb5c349001ea2a4e81ff5a3846c6a258bc5b3708bf05bfa7a6bc0ca4ab6e8b9b71cfcf8078ec8173a486531b1f9011977162c85f5925ecaef483610fccdb86d0adfe69e03721fec4016a96b7307077e63be08756ab844ed878875ab33541e77fcdf75c228d46d47ce9ad01c008392a5b4774d0bcde55cb50a2c6199a0bcd965a95876afb6db30708aff3c1363a4ce5aef256c2734210fd5cf66b5cbc8aa95fd75cf2b2d194cbcb69643dd86a72341dda4232f40ad6a416769b65e3b50b7fd90774f0480d6c44d478f34f7f72411d989ed1e04b95ab82d7ec417f9a23de0ef8f0784d4cd8ea47a2d8e468884cde13fa7b73575fdbc73452a0dc4dc05ce795909c8637b760cfeb6ab12285e6b5ba843322f91d2b89258b8f91690524ff9656f32843437a13da7035ef28a7f65be004b1f025d64bfd71ecc90690ac9238289cd953264be00c1860a7eeba0cdd9a10e1e86c08011edba74cd0ea86ea2de37b350d04ba3f341f62573e7148296f6faf66ae003ef3c9c153e3d4934c40a68310688263f008a7c662ffa5994f5175179b27a31afe14bed2bb87b8843d98746b0b53958b77444aa1802b52f14c90e0796b9123e2dd0bbf2e808229b27ea0b2f8fb5abae18c379b47cc0accdb07bea5fb8dc96fe145c381b1a98c9c8076fa027467767e9d65169282e1577321c8544fbba1c940f3590bcba4b386fed7401795460af267c93f1906667e4f80e0e5fa77db61ef3b5932bc82201aaef8d46fd98e8b11f7dbf3ae10b8cf851ae62167a78fb5ad139d5fcdfa218565833d20ffe605c9f5e3da6484896cc96f3faa598d18a264118bd5a999a6061bc134508759ecc9d635920ed3c83d9120c5d19b51e9e02273a91d8dc95ff147f32522fee52e55cd1ade3a021fd00d7442aed556781a9f5bc61422fff3c6b86800eb4ead9a1cb06142f222f8501868f4f5f4ba4bb9efd350a5dc833ad06bfe9af526ce03cb79a64416ba5210f1da392e4d7555ff12608060ba3225b501565df47a9d985b6ea22158b1c824230468b0bfef64b1944b7337303dc14d2571f32789d492deb46a8d2511da6400a19de60bdd5f707ff062151881087a28cdaafc3424dc0a94c61b45c9b0835a3af6b04a7bcaef64ef26ec23ee4ccfa9aa96add4f9a664525c0627a101cb6ec4a50416ac19d20ccd075b21888733e4ddf05f4dbbe46533fec2e087a74e7489faa2285ce05107d6062be5720c3fa2835b69b507f1f4c6b6ab546304560ee0b9ca9d46d10dda0521635b11268c25b1ad1e8f2a27f51c0be52e77dce625acd88463ed76263ea6c58061923d67a7fa4b7123da8e005137439c42c5a4d2a41cb6cbdaea87f40fa01efd4c64404cf4e816f37c69534fe4a3fb82314ae94b5307037123b489a60afd2356794231aac01838f4d86c3e221927827a761d35d1e3e8a33b9056d89cb53ec90900e5cf01fa6d9f7c6b88e27ea9a63a5de29a326f03c8117c62340a5ae2987cf1e6d770cedaebc43d4dca1c3b74cb2c747b006f9ce62663b4452847fbc3677c87bbc67ecf7cf0bc6c3805985d2277be8692cbdf9c391ece3ed744b99e67c14be3837ea2c6821f29d57835fb5b1863712184ffff544c9acbb47b375d6318a9c34bd19176caabe6c48dcd67fc13cb2e5f6ba5a17c110d92efa791f9f3afb161e57a25d9d16affc711ea0f38960fcd45c186b5b119965470d1800431ae573ee357096edd168eb2c69060e968b4e7e65793431f4b4a6fa2c103f42d7e88235c58e5a95788c303ebafcd189323a8505e72fd0ea527dd4d5a215a2b16d0bd578a0d1d7735c2d724a4348d80bfca27449b5034efd804b049a83f8359ce7c79bcb8d8f4b0b3e1ad92ef638343a2183660b7d6121989414612ef329c8d6270ce85ec33ba9025104be3d4166324016b993a224d3c0f6570300bf48dcb216dd9a27f69ffd72f05832ef5b4bb264866a4efb6d28b9e55774999e78f32a384106ee645d6e252d510aaeb2343986a745e11e5315dbe0d16a8d7b917cc77558832d17da92d9d3a2c7300c305994076cc97f047af941795e33c056078b873500b8c37947761d41bc8b29a2426d6f6f42ceaba399f4b049a025ed1e16d9c92805afd2f39c1c1ec79f79f3171d794536f228358a67e3f683e1320346fe8b0c33330050a4ae7f724f35fa1e28f8448a5937e05a4d10f8fcdaa5f3cd9947b415bff676a46bf37e4b94d81541850a432be3200c321cb5e5fb35a25fa9d2d009af3d5a6f72cbe405ddb2d8c5bbaec062b282674faa092e7ac6eae31ae5ae12fcb7852f37bd9074f79eb563cf435712b79930936aa50584c25a45dbac937f231bec538897d70ffd14e4f7c852de81873d25470f04e2daa5a110256ced68047d249a74cb09ca50d", 0x1000, 0x9, &(0x7f0000697000-0x10)) rmdir(&(0x7f0000530000-0x14)='./file0/file0/file0\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000fe9000-0xc)={&(0x7f00004db000)='./file0/file0\x00', r0}, 0xc) open(&(0x7f0000277000-0x14)='./file0/file0/file0\x00', 0x8000, 0x80) 2018/02/16 18:03:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000001001) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000fc4000+0x7a1)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendto$inet(r1, &(0x7f0000189000-0x52)="d6cd5bb46f48bbce6d1dc85c71f5c799bb7d5fe5ff60d7745ed148c1a7e5bdbda429017c258c150a49e0f0cbe094d53e09f3208f084cfe4d778abc4ce625924f1f019db0fce78fa1a3e09b5f06cc14bee8fb", 0x52, 0x4000000, &(0x7f0000931000-0x10)={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xd}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ddd000)='/dev/rfkill\x00', 0x10000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000ffa000)=0x2, 0x4) accept4(r0, &(0x7f0000597000-0x10)=@ax25, &(0x7f0000b63000)=0x10, 0x800) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000454000)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) signalfd4(r0, &(0x7f0000361000)={0x400}, 0x8, 0x80800) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00008b1000-0x11)='/dev/qat_adf_ctl\x00', 0x100, 0x0) sendto$inet6(r1, &(0x7f00006f9000)="b8c96486a4f974c7399cab7f60f4af3ec8a17e163daf06da58f3263242e4fac0c5a738713dae767c32cdfd2acd63321c757227bb8fd188f53a1c4b75575f63dbbf722bede10955b4b5ee8bc921aaaefb8be08e92d223bbcb55958f7c5c317337ace1c044938472ad1313b06a37a39fdd2fa41e157ec4d8da8dfa0f89d5f6d7acffa9356f1ab54ed709a4f00e87201fbe", 0x90, 0x80, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000653000-0x10)={0x10000, 0x101000, 0x2000, 0x9, 0x57, 0x1, 0x8e88, 0xffff, 0xc63, 0x2}, 0x10) clone(0x0, &(0x7f0000aed000), &(0x7f0000923000-0x4), &(0x7f0000291000), &(0x7f0000c12000)) syz_open_dev$vcsa(&(0x7f00005d5000)='/dev/vcsa#\x00', 0x8d9, 0x83) 2018/02/16 18:03:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c6000-0x20)={0xfffffffffffffffa, 0x80, 0x8204, 0x52, 0x80000000, 0x7fff, 0x3, 0x200, 0x0}, &(0x7f000092c000-0x4)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000e3a000-0x10)={r3, 0x7, 0x1, 0xffffffff}, 0x10) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x2}], 0x1, 0x2) [ 191.405380] binder: 30565:30568 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.413276] binder: 30565:30568 got reply transaction with no transaction stack [ 191.420800] binder: 30565:30568 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:27 executing program 0: syz_open_dev$loop(&(0x7f0000d7e000)='/dev/loop#\x00', 0x5, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000587000)="ff020458aa0000f31d001122000000d0154e000000140205", 0x18) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x2}], 0x1, 0x2) [ 191.454878] binder_alloc: binder_alloc_mmap_handler: 30564 20000000-20002000 already mapped failed -16 2018/02/16 18:03:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000f01000)=0x2) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004000-0xc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_sco(r0, &(0x7f0000949000-0x8)={0x1f, {0x9, 0x6, 0xd04, 0x9972, 0x5, 0x6}}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x57}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4000000001, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x7, 0x0, 0xb, 0x0, 0x3}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x3, 0x86, &(0x7f0000386000)=""/195}, 0x48) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00007e7000-0xa)='/dev/cuse\x00', 0x4000, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000579000)={0x0, 0x4, 0xe44e}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000271000-0x10)={0x5000, 0x11000}) r5 = dup3(r2, r3, 0x80000) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000a1a000)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000f94000)=0xe8) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000ef1000)={@broadcast=0xffffffff, @dev={0xac, 0x14, 0x0, 0x15}, r6}, 0xc) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{0xffffffffffffffff, 0x2}], 0x1, 0x2) 2018/02/16 18:03:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f00008c0000-0x10)=@nfc, &(0x7f0000cb9000+0xc92)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) [ 191.497440] binder: 30565:30589 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.505326] binder: 30565:30589 got reply transaction with no transaction stack [ 191.512853] binder: 30565:30589 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00008b2000)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000c9e000-0x4)) lsetxattr(&(0x7f0000713000-0x8)='./file0\x00', &(0x7f0000fb0000-0x19)=@known='security.capability\x00', &(0x7f0000da0000-0x14)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000d7c000-0x8)='./file0\x00', &(0x7f00009ea000)=@known='security.evm\x00', &(0x7f00000ca000-0x8c)=""/140, 0xfffffffffffffcc7) 2018/02/16 18:03:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000c76000-0x16)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f000082d000)={0x4, 0x2, 0x8000, 0x0, 0xe5, 0x347701da, 0x1, 0x6, 0x0}, &(0x7f0000cd8000)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00004ba000-0x8)={r1, 0x4}, &(0x7f0000791000-0x4)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000011b000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cbe000/0x18000)=nil, &(0x7f0000b57000-0x18)=[@text32={0x20, &(0x7f0000a1a000)="c4c2dd920c500f2064ea432d84415f00b8010000000f01d966ba4200b03feeb805000000b9f10000000f01d9b8008000000f23d80f21f835c00000700f23f82e0f09b9800000c00f3235000800000f300f01d5", 0x53}], 0x1, 0x0, &(0x7f0000d29000)=[@cr4={0x1, 0x3fffd}], 0x1) r5 = accept4(0xffffffffffffffff, &(0x7f0000d0e000-0x10)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000edd000)=0x10, 0x80800) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f000012e000-0x53)=""/83, &(0x7f00006f2000-0x4)=0x53) r6 = syz_open_dev$sndpcmc(&(0x7f0000780000)='/dev/snd/pcmC#D#c\x00', 0xdd, 0x400) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000412000-0xed)="f19e6eb0c1ae43699c1a182db8aba810bb79e4f4192697b0b4fc0ff2e6d6183c52674742d1bbe9d01e2ea68e78fd6dcc9e87f36635b2607e4b4528b6455cb2adbda019b0670b69caa07c1db25bead2b33908462886533d45b7f81df5cae5e3f4857f866458f811bea21da29faddb2e41a47e196afdedd8b3240d10241954109c76cae1954108dba1b3d1b6a8606806c773fb07a66fe2d2611db3968ecb937cde22631be9adcc4d1b36e030f6d5e8ac390d329bc2d3aa5168304b989ef91b2950264951b84ab0e5f30107623b0f357262fbc65b153b65593827cd69902da8064ab4d532092b16098149797a1156", 0xed) 2018/02/16 18:03:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000e44000), 0x800) connect$inet6(r1, &(0x7f0000cbc000)={0xa, 0x2, 0x800, @empty, 0x5}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) syz_open_dev$sg(&(0x7f0000607000)='/dev/sg#\x00', 0xd7, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) 2018/02/16 18:03:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) [ 191.621644] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.627202] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/16 18:03:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00007bc000)='./file0\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f000037e000)={0xcc69, 0x0, 0x10000, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00005e6000-0x10)={0x6d3a, r2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) 2018/02/16 18:03:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000349000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x4, 0xca, &(0x7f0000c6e000-0x8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000092a000)={0x4c, 0x0, &(0x7f0000fa6000-0x50)=[@decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ef0000-0x18)=[], &(0x7f00007b0000-0x10)=[]}}], 0x0, 0x0, &(0x7f0000fa5000)}) 2018/02/16 18:03:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000171000)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f000099e000)={{}, {0x0}}) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f00003b7000-0x10)={r0}, &(0x7f0000cc2000-0x4), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r1, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r1, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/16 18:03:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) read(r0, &(0x7f00001bd000-0xd5)=""/213, 0xd5) bind$inet(r0, &(0x7f0000603000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x17}}, 0x10) close(r0) 2018/02/16 18:03:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x800000000000004c, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) lremovexattr(&(0x7f00009f7000-0x8)='./file0\x00', &(0x7f0000124000-0x11)=@random={'trusted.', '/dev/kvm\x00'}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1f}) 2018/02/16 18:03:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0}], 0x1, 0x2) 2018/02/16 18:03:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000727000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000f99000)="be9ad43e718338758fd14f0cbcc446f63bded9337c6fbedb043e1ffc8f868099"}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000f90000-0x8)=0x2) write(r0, &(0x7f0000dec000), 0x0) 2018/02/16 18:03:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0}], 0x1, 0x0) 2018/02/16 18:03:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00005a7000-0x12)='/dev/input/mouse#\x00', 0x0, 0x101000) 2018/02/16 18:03:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2020000000000016, &(0x7f0000d7b000), 0xfffffffffffffebb) lstat(&(0x7f0000e71000-0x8)='./file0\x00', &(0x7f000046f000-0x27)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init() truncate(&(0x7f0000001000)='./file0\x00', 0xfff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000001000-0x6)=@hci, &(0x7f0000001000-0x4)=0x6) [ 191.741177] binder: 30621:30641 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.749041] binder: 30621:30641 got reply transaction with no transaction stack [ 191.756576] binder: 30621:30641 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:28 executing program 4 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000867000)=[{r0}], 0x1, 0x0) [ 191.782334] binder: 30621:30644 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 191.790154] binder: 30621:30644 got reply transaction with no transaction stack [ 191.797693] binder: 30621:30644 transaction failed 29201/-71, size 0-0 line 2757 2018/02/16 18:03:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = dup(r1) getsockname$packet(r0, &(0x7f0000169000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000dac000-0x4)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f000065d000-0x14)={@mcast1={0xff, 0x1, [], 0x1}, r3}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000fd9000-0x108)={0x0, @in6={{0xa, 0x1, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x3}}, [0x43f3436f, 0xffffffffd1a86ee6, 0xf80, 0x1f, 0x4, 0xfffffffffffffe01, 0x0, 0x2, 0xffff, 0x1, 0x2, 0x4, 0x5, 0x6, 0x3]}, &(0x7f0000dfd000-0x4)=0x108) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00006d0000-0x6)={r4, 0x2}, 0x6) 2018/02/16 18:03:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000b94000-0x24)={0x7, 0x0, 0x372, 0x18, 0x20, 0x1, 0x10001, 0x8, 0x7, 0x5, 0x0, 0xc89}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f000041c000-0xc)) epoll_wait(r4, &(0x7f00004b4000)=[{}], 0x1, 0xfffffffffffffffe) close(r3) r5 = add_key$user(&(0x7f0000c18000-0x5)='user\x00', &(0x7f0000839000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000d65000)="110860a6e2ae21f918880677b5ca8e7232ad7880e8cf41b5eddaf40da35608616018c2a5f24b2abeed83d89b7635184dfc487894ee548ec15bbc318a6d1d4ae4a7c4aef67a3a3de98abce728753dfbccf976d2e432cbbb62c227ac3fb8b2635b1acd7ac1dea35e4329670052c8f17aba4cb4380521ed698a2da41b574de5ae0637c5c8737e8bd3a58e9fd300cdb8a14cdd", 0x91, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) 2018/02/16 18:03:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000513000-0xe)='/dev/admmidi#\x00', 0xffff, 0x200) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x0, 0x0, []}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000003000-0x10)=@pic) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000ea6000-0x8)={0x9, 0x1000}) [ 191.828843] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.834839] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.861877] FAULT_INJECTION: forcing a failure. [ 191.861877] name failslab, interval 1, probability 0, space 0, times 0 [ 191.873181] CPU: 1 PID: 30660 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #315 [ 191.880535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.889869] Call Trace: [ 191.892437] dump_stack+0x194/0x257 [ 191.896046] ? arch_local_irq_restore+0x53/0x53 [ 191.900711] should_fail+0x8c0/0xa40 [ 191.904407] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.909498] ? reacquire_held_locks+0x1f9/0x3e0 [ 191.914146] ? check_noncircular+0x20/0x20 [ 191.918368] ? find_held_lock+0x35/0x1d0 [ 191.922437] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 191.928296] ? lock_downgrade+0x980/0x980 [ 191.932427] ? rcu_note_context_switch+0x710/0x710 [ 191.937330] ? lock_release+0xa40/0xa40 [ 191.941290] should_failslab+0xec/0x120 [ 191.945245] kmem_cache_alloc_trace+0x4b/0x740 [ 191.949820] binder_get_thread+0x1cf/0x870 [ 191.954041] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 191.958952] ? __might_fault+0x110/0x1d0 [ 191.962996] ? __fget_light+0x2b2/0x3c0 [ 191.966952] ? fget_raw+0x20/0x20 [ 191.970384] ? __check_object_size+0x8b/0x530 [ 191.974863] binder_poll+0x8c/0x390 [ 191.978466] ? __might_sleep+0x95/0x190 [ 191.982418] ? binder_get_thread+0x870/0x870 [ 191.986817] do_sys_poll+0x719/0x1050 [ 191.990607] ? binder_get_thread+0x870/0x870 [ 191.994999] ? compat_core_sys_select+0x9e0/0x9e0 [ 191.999833] ? trace_event_raw_event_lock+0x340/0x340 [ 192.005003] ? _parse_integer+0x140/0x140 [ 192.009129] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 192.014994] ? find_held_lock+0x35/0x1d0 [ 192.019048] ? get_pid_task+0x93/0x140 [ 192.022916] ? perf_trace_lock+0xd6/0x900 [ 192.027050] ? find_held_lock+0x35/0x1d0 [ 192.031116] ? get_pid_task+0xbc/0x140 [ 192.034984] ? proc_fail_nth_write+0x9b/0x1d0 [ 192.039458] ? map_files_get_link+0x3a0/0x3a0 [ 192.043941] ? find_held_lock+0x35/0x1d0 [ 192.047988] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 192.052982] ? vfs_write+0x374/0x510 [ 192.056673] ? wait_for_completion+0x770/0x770 [ 192.061261] ? poll_select_set_timeout+0x12f/0x210 [ 192.066174] ? do_restart_poll+0x2a0/0x2a0 [ 192.070382] ? __sb_end_write+0xa0/0xd0 [ 192.074347] SyS_poll+0x10d/0x450 [ 192.077779] ? SyS_poll+0x10d/0x450 [ 192.081383] ? SyS_pselect6+0x650/0x650 [ 192.085340] ? do_syscall_64+0xb6/0x940 [ 192.089299] ? SyS_pselect6+0x650/0x650 [ 192.093249] do_syscall_64+0x280/0x940 [ 192.097112] ? __do_page_fault+0xc90/0xc90 [ 192.101325] ? finish_task_switch+0x1c0/0x860 [ 192.105794] ? finish_task_switch+0x181/0x860 [ 192.110268] ? syscall_return_slowpath+0x550/0x550 [ 192.115175] ? syscall_return_slowpath+0x2ac/0x550 [ 192.120085] ? prepare_exit_to_usermode+0x350/0x350 [ 192.125081] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.130427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.135255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.140419] RIP: 0033:0x453a59 [ 192.143584] RSP: 002b:00007f43877b8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 192.151267] RAX: ffffffffffffffda RBX: 00007f43877b96d4 RCX: 0000000000453a59 [ 192.158514] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020867000 [ 192.165756] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.173000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 192.180249] R13: 000000000000043c R14: 00000000006f6640 R15: 0000000000000000 [ 192.187835] kasan: CONFIG_KASAN_INLINE enabled [ 192.192443] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 192.199856] general protection fault: 0000 [#1] SMP KASAN [ 192.205464] Dumping ftrace buffer: [ 192.208976] (ftrace buffer empty) [ 192.212658] Modules linked in: [ 192.215828] CPU: 1 PID: 30660 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #315 [ 192.223156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.232492] RIP: 0010:binder_poll+0xa0/0x390 [ 192.236872] RSP: 0018:ffff8801ab0cf728 EFLAGS: 00010246 [ 192.242208] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff841dd7d0 [ 192.249539] RDX: 0000000000000000 RSI: ffffc90002017000 RDI: 0000000000000282 [ 192.256957] RBP: ffff8801ab0cf7d0 R08: ffffffff86b42700 R09: 0000000000000000 [ 192.264201] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10035619ee9 [ 192.271443] R13: ffff8801ab0cfa80 R14: ffff8801c8e68300 R15: ffff8801ab0cf7a8 [ 192.278689] FS: 00007f43877b9700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 192.286885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.292738] CR2: 00000000004d6144 CR3: 00000001ba66c003 CR4: 00000000001626e0 [ 192.299984] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.307230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.314473] Call Trace: [ 192.317041] ? __might_sleep+0x95/0x190 [ 192.320993] ? binder_get_thread+0x870/0x870 [ 192.325391] do_sys_poll+0x719/0x1050 [ 192.329176] ? binder_get_thread+0x870/0x870 [ 192.333563] ? compat_core_sys_select+0x9e0/0x9e0 [ 192.338386] ? trace_event_raw_event_lock+0x340/0x340 [ 192.343552] ? _parse_integer+0x140/0x140 [ 192.347672] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 192.353535] ? find_held_lock+0x35/0x1d0 [ 192.357578] ? get_pid_task+0x93/0x140 [ 192.361440] ? perf_trace_lock+0xd6/0x900 [ 192.365567] ? find_held_lock+0x35/0x1d0 [ 192.369612] ? get_pid_task+0xbc/0x140 [ 192.373477] ? proc_fail_nth_write+0x9b/0x1d0 [ 192.377951] ? map_files_get_link+0x3a0/0x3a0 [ 192.382431] ? find_held_lock+0x35/0x1d0 [ 192.386472] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 192.391291] ? vfs_write+0x374/0x510 [ 192.394981] ? wait_for_completion+0x770/0x770 [ 192.399554] ? poll_select_set_timeout+0x12f/0x210 [ 192.404458] ? do_restart_poll+0x2a0/0x2a0 [ 192.408667] ? __sb_end_write+0xa0/0xd0 [ 192.412626] SyS_poll+0x10d/0x450 [ 192.416053] ? SyS_poll+0x10d/0x450 [ 192.419657] ? SyS_pselect6+0x650/0x650 [ 192.423611] ? do_syscall_64+0xb6/0x940 [ 192.427562] ? SyS_pselect6+0x650/0x650 [ 192.431512] do_syscall_64+0x280/0x940 [ 192.435379] ? __do_page_fault+0xc90/0xc90 [ 192.439590] ? finish_task_switch+0x1c0/0x860 [ 192.444055] ? finish_task_switch+0x181/0x860 [ 192.448525] ? syscall_return_slowpath+0x550/0x550 [ 192.453429] ? syscall_return_slowpath+0x2ac/0x550 [ 192.458337] ? prepare_exit_to_usermode+0x350/0x350 [ 192.463328] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.468671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.473494] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.478655] RIP: 0033:0x453a59 [ 192.481819] RSP: 002b:00007f43877b8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 192.489502] RAX: ffffffffffffffda RBX: 00007f43877b96d4 RCX: 0000000000453a59 [ 192.496744] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020867000 [ 192.503986] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.511228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 192.518470] R13: 000000000000043c R14: 00000000006f6640 R15: 0000000000000000 [ 192.525725] Code: 03 80 3c 18 00 0f 85 3c 02 00 00 49 8b be 90 01 00 00 e8 04 f7 ff ff 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 02 00 00 48 8b 3b be 2b 11 00 00 e8 29 89 [ 192.544853] RIP: binder_poll+0xa0/0x390 RSP: ffff8801ab0cf728 [ 192.550749] ---[ end trace 2688209751709126 ]--- [ 192.555510] Kernel panic - not syncing: Fatal exception [ 192.561532] Dumping ftrace buffer: [ 192.565053] (ftrace buffer empty) [ 192.568732] Kernel Offset: disabled [ 192.572332] Rebooting in 86400 seconds..