ff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f6e000-0xf)='/dev/sequencer\x00', 0x0, 0x0) socket$inet(0x2, 0x80f, 0x7fffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000050e000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ba0000)=0xe8) mmap(&(0x7f0000f6f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000f58000)='./file0\x00', &(0x7f00001bf000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) [ 71.805164] binder: 13296:13297 ERROR: BC_REGISTER_LOOPER called without request [ 71.829765] binder: 13296:13297 got transaction with invalid offsets ptr [ 71.839718] binder: 13296:13297 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:32 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000060000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000001000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f000020c000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x23}, 0x1c) [ 71.860510] binder: unexpected work type, 4, not freed [ 71.868675] binder: undelivered TRANSACTION_COMPLETE [ 71.874369] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.880729] binder: undelivered TRANSACTION_COMPLETE [ 71.886072] binder: 13296:13310 ERROR: BC_REGISTER_LOOPER called without request [ 71.893824] binder_alloc: 13296: binder_alloc_buf, no vma [ 71.893843] binder: 13296:13297 transaction failed 29189/-3, size 0-0 line 3127 [ 71.903369] binder: 13296:13310 got transaction to invalid handle [ 71.903377] binder: 13296:13310 transaction failed 29201/-22, size 0-8 line 3004 [ 71.921115] binder: undelivered transaction 541, process died. [ 71.927192] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.932649] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000cf2000)=[], 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000fb0000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f000049b000)={@rand_addr=0x7, @broadcast=0xffffffff, 0x1, 0x1, [@local={0xac, 0x14, 0x0, 0xaa}]}, 0x14) recvmsg$netrom(r1, &(0x7f0000c63000)={&(0x7f00005f5000-0x10)=@ax25={0x3, {"192e1ddb1c9521"}, 0x27a20000}, 0x10, &(0x7f0000032000)=[{&(0x7f000010f000)="f16343a1501e0fa037c260ef2ebaf2f27ea61740251ec48f31eb8ff272d4ac8eee876d842f5a20b4ec8d47d4121d3a98fb122ed9ba77a60762f69a3af979a530e9f852e64fc0fd9bd35001acfd2f7b71da50048732aa9896802e4b2de9a3f29f041b1b146acb47072d8572abb87cda1c9e2e3177ae4df553fd6a2ccb62714938a783ac55def43898a8c21eee677ffe12fda5d2a65ee9a20f2ed0b402d07385c1cdf1c69909bd0c729957dc26b9f0740f275c4781915cf6ad83d1ce6c33a401964946c9bbc8ca5615a0a1", 0xca}, {&(0x7f0000773000)="85949006e007c954fe05cb987f64b963f33bc68307caaeda51db8821d05782d6a5f45bbd77951d83f72490534abee4f2cb3028d7aa13c3e3375337e5b93e642ef4b7600afd20b6b09dc354607898ea9126f6c38127ded4694fe477ae3d06151c4504c9e77db5328680a2a2ff4e25dbc8294ddf9c57ea391f414c35a0db5c5a03a6ed78583faf54169f7b301d48f9e03c4723f51f751e0f56c18928b6651a3d9ab38524a5267f62ee9c0dd51dc86be1a5877edaaf403b07921d", 0xb9}, {&(0x7f000042a000-0xdb)="5a7b5f03c0eb47206bc623a2748750a2d0053d8922e089c375e398c5a840eefd7f1e057dda684553a5ef3403c7676d1ccd29d9b6a6a6e541a28788b10241d844aa0312b3c6df65b7886fad6cc3a771b578e04923980f77c1a8b178b28e4532b6cfcee934a065a04e22c89b73f8f8c796f9c5822c8315357cf0dd1df3c21018ece3c1849f4fa7f9406905cd718b1aa19c3ec485da2c3d2a5f28413f158db5b51fb5f98216b26e084877ad77afc389e8edfacfd6fa69e0f25957d2a0afc07e1be347afc04c25149df5a3e7859597daf9074924f4093019a95ebef54d", 0xdb}, {&(0x7f0000558000-0xec)="d2bbee3a354593e29e87ac181b293ac7cc883af3a8d481a017da2a55a92fe5a57aa09aadb469b8e10ef4139e5fbce1818b645756a63a071e069973a32184801e42df8d8daa13335c0c63c710d52992f01e232198eed2119bac1dba757220eaf7e9c707e81d553336f684f2decea3498de2aa96601bbe59f021176f8ab20ef0b38addeef63f6e6064b8df49679016a53b919bdbfb396e5d5a9461f34f1eb2b80a09ecde7305a792729e60eec12e43bced7a0bcb690a6fc4977ea66f29756ed956c45916e10c44f4b427460aae0d196e82a8344899b939b623c988ffd093e16ac49fc331b7e1760fdc4ef73002", 0xec}, {&(0x7f000097d000)="e924cf2860d8da3abc7a50185e363edb54142e3a600e5cb8a2c254b8369413c97f7062131afd3283ff5b55213e560cd05222705d070720b97d29a3cf0baecec78036049ea3d8225b2ab479bc17e42778dcb096568f1dbd82ca90ec1b65bc6665d5ad02c8228a1d958c7d75f0672ca3a447c6be6e34ff37baf2d83ddd018f7e68a2b729585cc554faa9b446a9fec5ede66b82a73c292013c38cf7db54dff6f11400cf7f02e444fc7d8889568d95c4410f7643408c134d8f97295bbd3a7fe2e4bf928559464a19fb50632f9972edc0002dd1aacec2f83344eb6a169a2ae6b99f", 0xdf}, {&(0x7f0000753000)="eca52cdad550e0c4e93c6cddd4ae39085b7ebe3d80f8982adb2f46cb4746ed5d66ecf942b9401af71fc25bb12f901d109166a64bc6d61ced5722bb1808923e8d63a24e72465877736e2f16297bed78aa8bc774e2468943431b0e2c073a3214c9b5d9a7d079fb448716bb6e1bec94d3fa418b5db8f204ad81053bd931a9f65af515846b1e5eeaddef07387854a00af396abc112caaea7a7b0b733b4dd97f09a3f0e4bda610f9b0823837c3019155620e13a6bba68990971272b892a443d11bdaf5a30ba8667ad7b5b7321d67fa1aa", 0xce}, {&(0x7f00001db000)="c48d5eb3e87db4e762a764155127c06a490d9b7ba83169a9eca8b0da8c7d409ded2e32d3e300d06a978dec6828b2194ab4751c258bde71978ede3094b832a4857542656686007bd847d80e1c9762f0e0b28d9faa5135e41c243e4cee7fd0044de803e884d7e499cd261a3affe1a7100d15753b45f5431b7bd1f915d633418ae959205472e5f617645fc235272fcd545074b3da6aae07bbd15ebe1ca924a604d1d8d28438455e289a", 0xa8}], 0x7, &(0x7f0000f39000)=[{0xe8, 0xff, 0x0, "30ba04723d0ee1b2a314831a01f7c5021e0d94de44112604c9e606c40406ff074ea1472f05578ab36a13d25243b0501af5c4b95dc6e41c13c6880b520107f5d3684ccd17b3851753c8e118d987ab2ca473063d7c863442034e1a1420582f2966d24a515f7b5c224b797d38b0d24ca3d1093752d13b47a275dbd2a9edb7d51935289248c6dcd7ab50710581cf85975e5e3378fc2f220dff98f3fb4a428a4e8b199b30e4f288090d4ada2a3319a3afaa98923899cb54b1189d5b7197e5c79ed1e8fcf815ecfb772c0f652baee3046cf752e3c3d86e65bea9"}, {0xc0, 0x0, 0xd00, "8c92d16c4b0446dd4e8619a5ac790f119f468a18ec7b5807b9dac9e85dcc4e9b79688cf04f30752d735d20c08465935d52e483665826124499437de53dadaad509c08b9b6947e5f433cb3f3914d1037befff7e53cf3b81ce416d30452314374f1715b9e9c995ccc3e583abfd4fc87dd03936116ff443d019902e27b5203b1ec74f4735dce9b3064ec9feef1fc3a6e1952cc08bf72a6ffcf968cae8a3c3b343a20c39d551139c065bd332f4e7d6e4"}], 0x1a8, 0x20000000}, 0x10000) getgid() connect$unix(r1, &(0x7f0000805000)=@abs={0x1, 0x0, 0x0}, 0x8) 2017/12/24 06:44:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000715000)='./file0\x00', 0x90) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00006ab000-0x4)=0x0, &(0x7f0000024000)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000caa000)='mountinfo\x00') pipe2(&(0x7f0000f01000-0x8)={0x0, 0x0}, 0x800) close(r1) fstat(r1, &(0x7f0000529000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000371000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000aae000)=0xc) fchown(r1, r2, r3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00002f7000-0x8)={0x0, 0x4}, &(0x7f00008d8000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000066000-0x20)={0x101, 0x1, 0x7, 0x2, 0x44, 0x1f, 0x100000001, 0x6, r4}, &(0x7f0000cd1000-0x4)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 2017/12/24 06:44:32 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000c62000-0x9)='/dev/rtc\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00006c5000+0x4e1)=0x7fffffff) mmap(&(0x7f0000000000/0xfb0000)=nil, 0xfb0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000000008, 0x80a, 0x2) write(r1, &(0x7f00002a2000)="240000001a0025f00017fb1000f7fc0e0a0b00000004bf0202ffffeb0800040048186be0", 0x24) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000fb1000)={0x0, 0x401}, &(0x7f0000fb1000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000fb1000-0x10)={r2, 0x2c, &(0x7f0000af5000)=[@in={0x2, 0x1, @rand_addr=0x277a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}]}, &(0x7f000072d000)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000961000)={r3, 0x6}, &(0x7f00008c0000-0x4)=0x8) 2017/12/24 06:44:32 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000004000)='/dev/binder#\x00', 0x0, 0x2) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000003000)="f9bcef636b4f72b11e8d0c1070ab7e095dc57b26d8da405ba2a111b6d08528d85d4c46a8e6fdf1ff92f6d6b3beeea5da8f33d4065d961c7e17d1aae6f16898cad20f1b47458b88b4a5b06a3f67b6ee2884327dd4780dd7dc3dd5f7a395012f43e1d8a078e1939b5f40a8774a8ec66d966a27165cb2617942ccc0dd6c2c65be994e6cf3d8f062a914b1546326a996a36f29cf0cb387631df52b7bd10bb2194c0309fd59", 0xa3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000096b000)={0x0, 0x0}) r0 = socket(0xd, 0x2, 0x10) pipe2(&(0x7f00008af000-0x8)={0x0, 0x0}, 0x800) write(r0, &(0x7f0000b99000)="24000000130007ec0f1e798cfe2500021f000000000100030020170000000000000007ff", 0x24) 2017/12/24 06:44:32 executing program 1: epoll_create1(0x7fffc) 2017/12/24 06:44:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$user(&(0x7f0000431000-0x5)='user\x00', &(0x7f0000790000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000c56000-0x5)="f66b4c4b7d", 0x5, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000c88000-0xe)='/dev/keychord\x00', 0x40000, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000f63000-0x1)=0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000a92000)="", 0x0, 0x20000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f0000c75000-0xa7)="dedbed9ac6709e477dee2646573d4601", 0x10) sendmmsg(r0, &(0x7f0000cec000-0x78)=[{{&(0x7f00000b3000-0x1c)=@in6={0xa, 0x2, 0x400000000000000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x69f}, 0x1c, &(0x7f00005c1000-0x60)=[{&(0x7f00006b9000)="b6f80c7ffe9136e00a29d7cb09ab543b9df962fd25b0a21a794f981478a39f7e649ab101d8070f89e851c3992aca6344e0be6abd3d693d63c771f79f0448bc8860e04153fb3b9f73773b42b34cb39bb442b337066c9499553452751610522bff6c73f5bb189300463ce90d9cce6cb2a3c74e52239b36e5a734c9f5d4782c4828d825b4a3a90b37b04f3da0f2fa8d5cd939e2c87490a2e37c90eddf732d822574b610bb7a55", 0xa5}, {&(0x7f0000d67000)="962f52085e1e27ac6b6ec3f75471d4600de5c47717aaaf2722f29e8f978f312f24e30a072d160b02caff12a3d5836ee77fd4919006cb0607fa1a20ac42e4d093f15f608e8aab56cc0b09967d79dc43ace03906c90c6b9b5be67a42dd1a9dbb410339aab52fef0876", 0x68}, {&(0x7f0000553000)="aa3b60371291e46b31c67ebb7dc5a87f6b3a7811714ff482fd9aa4cb2bc4f2fc51787f4f446db9706de58cdf776ba355b2426dd9deeb6eb6d2769a62960f60e42eb921b20fb1608282fd1f009592ff03d764c8aee3ecee6a2caf5cda5c66615830f63c48542d26c0f400fed57588d9e446267d567b12880c10d2e018672f919b640c5ccfc622b7e5eb550bff27657961d2ef2b42c4c4f0b5bd2f5df8f75b36c966e6dd62a573608ed1e15d3066ca4acecb565db22e457fa134ba099b384f40e8c7", 0xc1}, {&(0x7f0000588000)="770ed5f53923b9f91ec5a5899f823901512ae0d9a2d43f6dfa7a9fa98204a1a34fa22767b89160a19b51fb736d1c99013b7c58f5ba034220da22e6ceed777df1a97e1c65d7613980ba3864a3a0e00a7896dad77e11fc188d0c2ff2ed6b7ffac1d1cf8ff6bd1c887dc8868f78d49e485a670ac27f64716989657a9fe75248a60b45136dca831a60274541ef5791edbbbb069c", 0x92}, {&(0x7f00003a4000-0x26)="45351a7c27fddd27868b6ccec6615eb26376ea4182b9d5731f916ba1b36abb12dfc53dacb71d", 0x26}, {&(0x7f0000259000)="f1143413a2ce04139f4e101b79be6b279f8c116bbcffcf962564425216f0ef22312519108a5b7c0550f47a3111260455203480cc9cb0f203944c312a5b8da77a596fad454387f03804b235e115ef5148b7beaeb45bdd9b55926812b0bb27c6e1f1941c29068ed4460840b156a9", 0x6d}], 0x6, &(0x7f0000f15000)=[{0xf8, 0x102, 0x8, "2c8018ada1d2b76a5416f3d181841ec0891f30d773dc553ea64b2375719b7e62e1df782c1cc5d0f1ff86decbe0894c7d265c02c7b206f7a4ca3b580da41267d3a61e65deb446a40336e0ea8bf35c3b341ce490abfc58e8f07d508ea37e9f2737639e37dde3cec5a054f5386f2d1b09890673928c23a560c763c0d2fd432c90ff512d92e126b634787f1991fb07c97aa0880853aa447487fcbe35525dc27cfc406947a021a46bbfd6345ed3472e41811c9f7f0b828072e38c72429948a757d21b0453f5aa09a681f61880ebc743b3679e7a5b72d6dcd6dfebfc95d3795798fadba654b6e514"}, {0x50, 0x106, 0x3, "e98b7860cff5bb236ae625b738d350260539f2a026c064830eb09961b24ca0351b50fce2bb7f7c96fd7a64f993f3b6c343e9d091a1fbc746cd5c77c3c55f3b"}, {0x98, 0x0, 0x6, "8a806f302b74e4dfee62684e57f3183858f20fe08ebfc86121a8ff8f698ad12357677c9cda579af445ca2cb6914c931d30991b147afeb6759a4f6bf0fdb78dc0753330feea997fc4901b0aeb2bef3f375f1a58aa37527fb59ffc6b8c31d35fd16237074ddde86b0b22b4d189b577544f220e19c8191cbcca64c667d9853cfd313b"}, {0x1010, 0x0, 0x101, "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"}, {0x10, 0x88, 0x5b, ""}, {0x88, 0x10c, 0x1, "8e39c95f13fbe27d22a24e1fc7b56690a7ab4670bb49ad0a01b5467858670eedda2fca8fe998e5d1bbff06c3f35bc664d139aa180b07ae12354cf523f53a08d89ce33707559a0c36361b71f16c508cd0f71b6db3ce8863b656fa0b901ec709d71ffab034b6c1473e016fc3f19482bdfa5d1782"}, {0x90, 0x102, 0x1b4a16d9, "a407d0fff246ebd25b6170efa2266a9634ffee2c097d8e5972257eba0a8a52625608b4aad02acc913604a20b85e4033f7f3bffa544a8a27acbadbe57020f949cc47d4e03e05590a94968d2a8155064297138cff9d35f0c35999537d8a2993ba4ad1a0d92efefbf62302a876a0f3cabf211b14ab0158f8e52c2"}, {0xb8, 0x105, 0x9, "cee866de35cef21ab17f7a07d6e5b1d4c72ea019cbf3f8739057bd95bd267929b379cc517b567d5225ef6f043777155bdefefbfec0f2d559ce4245be6a0585819dfb06109cea49300481ea808ae75f8abf48fe94a1cf5889d033d4194c29bd53d20a23117648dee5c8f8099ead8040ce95adf030cff3c034e3f8d75b7b6f1cb69c5126536fe5ecbece8f52d3ffaf48fa3da6140e01a0013ef76c773278bf54c43e4dbe9a6b1df135"}, {0x28, 0x0, 0x10001, "c7241f351d710b55055b7861f417ae8255d7e1"}, {0x80, 0x0, 0x10000, "4ccdf26ebc5a3812a33774844cd27028df379a0abdc6892b4ad77c5dbb87790c5efddfd1ff8612ab8b6c75f51919eb8fc3970f32af3539e158c2fe4c7157fcd67b3a9d93772b16f585281b32804099f0089f3f74f561b145ec6b7e5ba035483213dd7280005bf975cad7ca"}], 0x1478, 0x4000000}, 0x0}, {{&(0x7f0000f67000-0x10)=@llc={0x1a, 0x1b, 0x10001, 0x3, 0x3, 0xdd, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10, &(0x7f0000b0c000-0x80)=[{&(0x7f000016c000-0x6a)="04c48e54d01c78fe245d205f178c87b00a5d7f46d5018bf3c6f7d6539dbf4ca8c7cfa759d566a532e1e1c3ca5bab9b9280029241204537bb722f64bd04026fdac2770cd62150c117fcc6ccd91cc9db6c68f5298d5b06268ef90e058d1300b890e496110ee9e106670f61545d0e5e0f5e52545d92b9c5c91ecb27b5caa10ab94bc19d315dc5f37ce3454435d52adeb4c43b23dc89c9710804291e307070b474541990d46c3a8afd5cf391e467569a10efa500b6d0cb47dce0febf0bd68c45a4b91093c367ab740d8a998ae885a72309bb43da22029c", 0xd5}, {&(0x7f0000f35000-0x83)="bccdc6a3aaf007cbec9aa06376546e248ce22cd83d32b8e0331894362a06dbb192a5ede85889ec0fd30a3702fe662da562231d887e91dfcf279aca2314cc25978ea1e38f09597e06c8d6e5c1083d94bea245cd45c3d6b7f5bfb0d53663cb4454430b2652c80027e2ef9dc18ba6047d092dc0c3adcd9a1e4d6a2ea6dff5cf6a879c09a9", 0x83}, {&(0x7f000068d000-0x4e)="c65a72f1e66109821d6f2c35bd657dcfcdc4369fb4285cbda7099bf9686c9359c70816389fe742615f7d8a0f5bccc8e2e5b291565728909c9775380637a4aee9a62575347336cce816696cc7122a", 0x4e}, {&(0x7f00007c6000)="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", 0x1000}, {&(0x7f0000f23000)="6d794d191bf0629b92f19fc29599fdb41ee3933554806aa335bef329e00926fa50a148aa919fbda59e24c87e8f4475c0b0a8f8fb70b626635c63d05798738705d2f14f0b081c40a1b4bc8efeba04b59f495163af6e774e9039cc7d30fc1121e521c994ecc1b6a11655723f46177ffee95da862534c53fc37f5e20cf075622666d74c6c354b085dbbf91e6e", 0x8b}, {&(0x7f000074a000-0x4)="5f6fd9b5", 0x4}, {&(0x7f0000a05000)="25caa588ad2562ade6354e613a180262bf2b88546acb3850254061003dc887f42c643b82a97fa74697c417726b5f9407413f7fc36f3c4c64ce73fc7141b0b2e7c4a443e0aff498183bb85eaff876d10f9071b6d9a5df6a918663ceb0d61171acb73c6adbc1146f5373c79f707cecce34423c2ebc0f6e2dcb11fbe8b46a48c9a04f210314e1bf68f35f81962bb8c472b0e63230f1d911215a2a8ed4c5f3b51af04397fe94c182417a83444e8fa5a022c7429b9776a3a11b3a569df1c68248fdff4b69e004c789a8dcc69306323c160c9602cf375f18d50c161d4fe0c2f03d8f1984cf9cb799da01", 0xe7}, {&(0x7f0000271000-0xf3)="d82e44a7164b28418318913ef931e447240d6c3e8e3a91cb75510d817d588367ed4a4d841e79f469331e7056da8bdc331368e452ebbb21077ff812f0419eecb75699649ef0f9a467763c006a5cfeca2621b37de3a82ee3efb1b539223921f479af5f9e26fa22165753383fe30b8061228f54e7cb47f436072f7ae58c12601f3f78b1845e98c74a22c75941238e741c12e2bba895662dba35c110bf32f98b5b5321dbaa68c45b2f3e977f3255ec672d90e7e74f3c376325dd750ec390e1ba73a2155d7fccc3bff119d9aa355a8c32d74733951f4ad2b7c6c501101a6853718e5361153a9cc2e003deb9e66d3b111a1371d671d5", 0xf3}], 0x8, 0x0, 0x0, 0x4800}, 0x1000}], 0x2, 0x1) 2017/12/24 06:44:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) sigaltstack(&(0x7f000083e000/0x2000)=nil, &(0x7f0000bb8000-0x8)=0x0) r2 = syz_open_dev$tun(&(0x7f000079c000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f000083e000-0x28)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0xc01}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000a07000-0x20)={@common='gre0\x00', @ifru_flags=0x202fd}) socketpair(0x11, 0x3, 0x4, &(0x7f0000b50000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f000081d000-0x50)={{0x7, 0x4}, {0x9, 0xbd}, 0x100, 0x1, 0x2, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00009d8000)={0x0, 0xb0, "02b892a9abca1be0608ba602cecc61cfba8400c07a579e8a47171f15454d81b71b203c82f80b2cf6287ea8b9d26f7403cfab188dafceca6c36e589b5efb1421d454eb38c250521f4773979bab23369e64516e268a714184427606d7002094eee2d4a02c9159b49313912b0120889fb1a78453e04ada2154255f0fd0d62dad5457792c7e404ac263f544e2e1cf70afca3ff3f60cb6699891e144a96933c980609f967c76bdf99eb6a21d839f7035542d4"}, &(0x7f0000cc0000)=0xb8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000b23000-0xc)={r4, 0x7, 0x30}, 0xc) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000008000-0x17)={@common='gre0\x00', @ifru_map={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000074000)={0x1, [0x1]}, 0x6) 2017/12/24 06:44:32 executing program 1: mmap(&(0x7f0000000000/0xfed000)=nil, 0xfed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000fed000)='./file0\x00', &(0x7f00002ab000)=[&(0x7f0000fee000-0xc)="73656c696e75782623d34000", &(0x7f0000fee000-0x8)='.md5sum\x00', &(0x7f0000e85000)='}nodev-nodev!user\x00', &(0x7f0000418000-0x2)=',\x00', &(0x7f0000548000-0x43)='-securitybdevselinuxem1posix_acl_accessbdevkeyringposix_acl_access\x00', &(0x7f0000be9000-0xc)='cgroupeth0\'\x00', &(0x7f0000de8000)='\x00', &(0x7f00001ca000-0x2)='@\x00', &(0x7f00006c9000-0x1e)="65746830776c616e30757365727b63707573657485707070306264657600"], &(0x7f0000fee000-0x50)=[&(0x7f0000a60000)='\x00', &(0x7f0000fed000)='wlan1\x00', &(0x7f0000fee000-0xb)='loselinux^\x00', &(0x7f0000a9c000-0x1)='\x00', &(0x7f0000504000)='vboxnet0cpuset\x00', &(0x7f0000fed000)='systemvboxnet1vmnet1bdev&\x00', &(0x7f0000e69000)='cpuset\x00', &(0x7f0000fed000)='#-$userem0.\x00', &(0x7f0000053000-0x6)='.}lo[\x00', &(0x7f0000d3b000)='wlan1trusted*self{-\x00']) writev(r0, &(0x7f0000a5b000+0xc90)=[{&(0x7f000050e000)="2900000018003109da00030000000002021300000000ff0680000c000c00080004000cf8000005ff01", 0x29}], 0x1) 2017/12/24 06:44:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f00003ef000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c8a02a5932fd69adc52c8e0345c26db185e9ed5355ea1469f94049d3f3fd34cbd156009cd21e847417b4", 0x2d}], 0x1, &(0x7f0000b88000)=[], 0x0, 0x0}], 0x1, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x8001, 0x0, 0x0}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') syz_open_dev$sg(&(0x7f000047e000-0x9)='/dev/sg#\x00', 0x3, 0x80000) ioctl(r0, 0x5e, &(0x7f0000204000)="24e9d9cafa3c483f476abfa27030ebcfd1f82616cbb41a8a164e55e705429b417e4a69db2398023a20f1dca075448ef2e8ef4c7b718e655bcacd4e896d9fa80627e11bd2ecfa0aaceaf4112412d7") [ 72.043719] binder: 13334:13339 ERROR: BC_REGISTER_LOOPER called without request [ 72.081400] binder: 13334:13339 got transaction with invalid offsets ptr 2017/12/24 06:44:32 executing program 1: mmap(&(0x7f0000000000/0xdeb000)=nil, 0xdeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000363000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000de6000)={0x0, 0x0}) vmsplice(r1, &(0x7f000004c000)=[{&(0x7f0000380000-0x23)="c3", 0x1}], 0x1, 0x0) epoll_pwait(r2, &(0x7f000003d000-0x6c)=[{0x0, 0x0}], 0x1, 0x8000000008852, &(0x7f00004c7000)={0x0}, 0x8) close(r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000de2000)={0x0, 0x0}) 2017/12/24 06:44:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000e24000-0x8)={@empty=0x0, @empty=0x0}, 0x8) r1 = add_key(&(0x7f0000feb000-0xb)='pkcs7_test\x00', &(0x7f0000c72000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000015000-0x29)="93a0748e3f1f70169d392afa73c565932c4a145e8849739dc460f2d4e0f404e73f745ea88eddc73545", 0x29, 0xfffffffffffffffc) keyctl$clear(0x7, r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000d4d000-0x1d)="441f080b0100000006ffff00000302781305004da600e211a1bf03025f", 0x1d) 2017/12/24 06:44:32 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000001000)=""/63, 0x3f) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000b69000/0x2000)=nil) 2017/12/24 06:44:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000dd6000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tun(&(0x7f0000165000-0xd)='/dev/net/tun\x00', 0x0, 0x80000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000601000)='/dev/autofs\x00', 0x111000, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f000029b000-0x31)=""/49) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000253000-0x4)=0x8000203) r4 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00005ad000)={0x0, 0xe4f, 0x30}, &(0x7f00009f3000-0x4)=0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f000064e000-0x4)=0x5, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f000049d000)={r5, 0x9}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000c47000-0x28)={@generic="8095c53ccc105d424f2a01537aa94e3d", @ifru_map={0x2951, 0x0, 0x0, 0x0, 0x0, 0x0}}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) [ 72.088690] binder: 13334:13339 transaction failed 29201/-14, size 0-8 line 3155 [ 72.110916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 72.123733] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 72.124488] binder: BINDER_SET_CONTEXT_MGR already set [ 72.124496] binder: 13334:13354 ioctl 40046207 0 returned -16 [ 72.128100] binder: 13334:13354 got transaction to invalid handle [ 72.128108] binder: 13334:13354 transaction failed 29201/-22, size 0-8 line 3004 [ 72.139942] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.140001] binder: unexpected work type, 4, not freed [ 72.140004] binder: undelivered TRANSACTION_COMPLETE [ 72.140009] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.140017] binder: undelivered TRANSACTION_COMPLETE [ 72.140023] binder: undelivered transaction 550, process died. 2017/12/24 06:44:32 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x101000, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00002a1000)={@common='bond0\x00', @ifru_flags=0x9102}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000002000-0x10)={0x2, 0x2, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = socket$inet(0x2, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r2, &(0x7f0000afc000-0x10)={0x2, 0x2, @rand_addr=0x8001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) flistxattr(r1, &(0x7f000063d000-0x18)=""/24, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) bind$inet(r0, &(0x7f0000f02000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00003b2000-0x10)={0x72, 0x1357ccce59c491b1, 0x1, 0xffffffc000000000, 0x0}, &(0x7f0000e02000)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000f67000)={r2, 0xb9, "d54f08af047e34136e7f483a194230fa8a83de63129dbc30bbc6c6331889476ac6580f3e69470fc86176a99a274da9282966f4f1f2e34e314c50320415fae122a2bbcbe81833b642e1016b7dd3bd44a9a20e929a1262ff80cf6126aad86111d8cf5348fb7d863b89e002c2b251832d32554bacd377cc9d6183bab9388673aef66e3717eac2ed377987c9436a3cf1184bfd1c6741fb948198ac63eb1d7bbd2774c86cfd44981c8ceb24f6cde2638620ca792954fdac804a51f7"}, &(0x7f0000299000)=0xc1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg$netlink(r1, &(0x7f0000083000)={&(0x7f00005a2000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00008b6000)=[{&(0x7f000082f000)=[{0x50, 0x0, 0x0, 0x0, 0x0, "54023489ca32da3103bc7e45faf2e6649677c2a9a9f4c595b7feff4d63c06188843883a8b4cb52dd3d996edd30c1724ac97c9ec21df34abd3ee859374ad23358"}], 0x50}, {&(0x7f00002b1000-0x38e)=[{0x36, 0x5, 0x2, 0x80, 0x3f, "aed5cce705d97c7e9c0805b028fda8f830de6eb8537387d031d56e681d26f1eb33fb21c6bfd5"}, {0xb1, 0x9, 0x300, 0x2000000000005, 0x3, "b230698a592904e267544a2f8f2a0c5e558df7ce3ac62d0ff2b6092a675ff37ed6f47969937c0c37f7e891fa87734d67e437496746c9fccbd45b06c26260ac1072365646afb6ca65cd9fc41741274d91869eedfc6fc52551f851afa0f42b5375d4892608282c7fb1d0fe41d29af5d1cec53badf3d260c498750e13d3df26c0aad76c501b59390001203d2f9db7cae30bd758a386e577d6f74dce07e5ace81ed603"}], 0xe7}], 0x2, &(0x7f0000eb0000)=[], 0x0, 0x20000000}, 0x0) sendto$packet(r1, &(0x7f0000681000)="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", 0x18e, 0x1, &(0x7f0000bc8000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="39a61ba65612", [0x0, 0x0]}, 0x14) sendmmsg$unix(r1, &(0x7f0000917000)=[{&(0x7f00004cd000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000fae000)=[{&(0x7f0000c0d000)="ff5399edafe413c356493ab5daab315dac634ad497fbb603cd3452f190e1060479ec66ef17fb0a379d2ed9b832fbe1262bc23c2b404d349ebe02fd8aa4a6b78e014b242494311542fec89de8b0485c429cefc8aa6244", 0x56}, {&(0x7f0000c17000-0x73)="1cba748f28710c72387a1c52507fb800fb281e04c401e6017cb1c0e03c57683feb9083dd6c89c0147a4da00bc629ac948826b9ad71fd728cf910c5cce3b586f9ef703b3863e76882034ada898dabc180e7bd6daf9bcb3866c62701c531c7627b6e86be72ee97da197f0a28e2fc23c4da21bfc1", 0x73}], 0x2, &(0x7f0000d7c000-0x30)=[], 0x0, 0x0}, {&(0x7f0000c41000-0x8)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000edf000-0x80)=[{&(0x7f00006cb000)="0a67a71fb0eb29cfafb0d77569fed9a0b2f4322f8a3c91058ba8676edb0da478e6c2d53020121ee6d6b111aa7a311ea7b4c1466d5762b11019337b67289752443ce8ffb8706889c00f7e6dd629ee1dfc74502c65bb575d4fd6f5be72f1a7591e0aa8c6a392650c9919d12e087c2c8f16324cbf50e261e2b620936599bf0a2635b122f216718557f7ee683b5ecb4c6a4a0a0292e7db57d598bfbe9e7e47945379939ebaa72643dc22277ef2383e103b9b4c8e26e87e", 0xb5}, {&(0x7f00009b4000-0x1b)="ee9833550e1f44267a518ebd85255887a1afc9ffbdc8361368158f", 0x1b}], 0x2, &(0x7f0000a9b000)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}], 0x108, 0x4}, {&(0x7f0000eff000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00007cd000-0x30)=[{&(0x7f00006ac000-0x3f)="a452db69acb318834be4ddb49b9d6a54e2012db317e4a72747975a50265ce184c87a52a844d47724569c93b7604bd4379ba7656556a8a489d61dbe65d294df", 0x3f}], 0x1, &(0x7f0000ecc000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}], 0x48, 0x10}, {&(0x7f0000c6f000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000ced000-0x90)=[{&(0x7f0000d43000)="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", 0x1000}, {&(0x7f000094f000-0x1b)="855efe7010ad8ed938c5c366b880ebe2ae3db1e5ed871cd2222148", 0x1b}, {&(0x7f0000527000)="f71852bbacf518bae516f65bdb9e62d7eaf57fe945b9e70a1e893a60a122d058ef99ebe81cfb114a8ee1295a4119badd6df30298a477175dd4bd0431c4c9ae3520c769a7ca1c3523400a4319157df223b84394515d8524e74237591be47fcdaa99edaacd97757f50d2cd9413838c1b0e4912a5b85cf59da3fe713791e47b9f581e0e380408a8ad3f2943bbaa1532dee0d45c07a8d8c79eb765bbc1fade52962f9cd8aafd819852317eee7982d7a8f8ac29d416791e47d5648d30a8ea25df76d061", 0xc1}], 0x3, &(0x7f0000cab000-0x20)=[], 0x0, 0x20008011}], 0x4, 0x800) 2017/12/24 06:44:32 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x3, 0x4, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000002000-0x8)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/4096, 0x1000) getsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f0000001000-0x4)=0x0, &(0x7f0000a5a000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000b2000)=0x0, 0x4) 2017/12/24 06:44:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000b30000-0xa)='./control\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xffffffffffffffdd}, &(0x7f0000dd8000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) open(&(0x7f0000dd9000)='./control\x00', 0x6c02, 0x0) getxattr(&(0x7f00009e1000-0x10)='./control/file0\x00', &(0x7f0000576000-0x6)=@random={'os2.\x00', '\x00'}, &(0x7f0000fe0000-0x39)=""/57, 0x39) 2017/12/24 06:44:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000265000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x8407, &(0x7f0000bd3000-0xc5)="b177a98ce2fd94170cfa6e45d9d9cbe5f3950efa65ff0c368e207f4f95145e6a39c9839ab114d764a71701bc8001eabbbaa6a9d207cd265ce3a0de928a49b22d0b1f90b0d2ccd70f56a3a657a6c86b4b7f7cee9e5d47e47a2000000000000000538d107d29ee5de27d96f2908fb1630263935674b7c4cac11cd05e7c28416dd0e477081439415d7dbd3a29da62b55320f8ea61b7e014af9ac9eead8ec4e7e07ded17baec24049386b0c2c63cec44d0e57cdbe826910eef5bf275d338a16060b982ce381724") 2017/12/24 06:44:32 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f000000a000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:32 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xfffffffffffffffd, 0x8) getsockopt$inet6_buf(r0, 0x29, 0x400000045, &(0x7f0000003000)=""/30, &(0x7f0000003000)=0x1e) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000005000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x14) 2017/12/24 06:44:32 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000+0x56d)='/selinux/load\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000001000-0x4)='$\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10001) write(r0, &(0x7f0000001000)="15", 0x1) sendfile(r0, r0, &(0x7f0000001000)=0xffffffffffffffff, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000001000)='./file0\x00', 0x0) 2017/12/24 06:44:32 executing program 1: mmap(&(0x7f0000000000/0xb26000)=nil, 0xb26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a94000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x2, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil, 0x0}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000b1d000)={0x0, 0xe52}, &(0x7f0000003000-0x4)=0x6) mprotect(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000006000-0x1d)="", 0x0}], 0x1, 0x0) splice(r1, 0x0, r0, 0x1e, 0x7, 0x6) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000014000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000012000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000012000-0xc)={r1, 0xc3f, 0x30}, 0xc) ppoll(&(0x7f0000004000)=[], 0x0, &(0x7f0000004000)={0x0, 0x1c9c380}, &(0x7f0000012000)={0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00005e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00008f6000)="1f0000000a03fdde000080fdffff0ffffffff8000900010000000000007fff", 0x1f) r1 = syz_open_dev$sg(&(0x7f0000953000-0x9)='/dev/sg#\x00', 0x3, 0x20000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000fde000)=0x0) capget(&(0x7f00000fb000)={0x20080522, r2}, &(0x7f0000446000-0x18)={0x1, 0x81, 0x37fddaec, 0x4, 0x40, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000b94000)={0xce33, 0x8001, 0x4, 0x200}) mq_notify(r1, &(0x7f00006a9000)={0x0, 0x1, 0x0, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r1, &(0x7f00007bf000)=[{0x6, 0x8, 0x5, 0x3, @time={0x77359400, 0x0}, {0x3f, 0xffffffff}, {0xfffffffffffffffd, 0x8}, @control={0x3, 0x200, 0x401}}, {0x4, 0x6, 0x0, 0x5, @time={0x0, 0x0}, {0x0, 0x1000}, {0x5, 0x10000}, @connect={{0x3, 0x2}, {0x3, 0xf7d}}}, {0xff, 0x5, 0xfffffffffffffd7c, 0x40, @tick=0xbf9, {0x269b, 0x1c}, {0x20, 0x2}, @quote={{0x0, 0x9}, 0x4, &(0x7f0000af3000)={0xfffffffffffeffff, 0x5, 0xeaf, 0x4, @tick=0x2, {0xfffffffffffffffb, 0x3}, {0x3, 0x100000000}, @control={0x6, 0x80000000, 0x4cc4}}}}, {0x9, 0x4d, 0x9, 0x401, @time={0x0, 0x1c9c380}, {0x4, 0x736}, {0x100000001, 0x0}, @time=@time={0x0, 0x0}}], 0xc0) 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdc000-0x8)='./file0\x00', &(0x7f0000888000-0x8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffc}, 0x0, 0x8) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fe7000-0x18)={0xaa, 0x48, 0x0}) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000fe5000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) r1 = creat(&(0x7f0000fdf000-0x8)='./file1\x00', 0x0) fcntl$getflags(r0, 0x401) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$unix(r1, &(0x7f0000fe7000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000fe7000-0x4)=0x8) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0xc) mlock2(&(0x7f0000dd4000/0x4000)=nil, 0x4000, 0x0) sendto(r0, &(0x7f0000f32000-0x14)="14000000070ae718ff0000000000000001000000", 0x14, 0x0, 0x0, 0x0) 2017/12/24 06:44:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00006db000)=0x0) getgid() mlock(&(0x7f0000627000/0x3000)=nil, 0x3000) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000db000)={0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f000015a000)='/dev/input/mice\x00', 0x0, 0x1) getsockname$ipx(r1, &(0x7f0000f69000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f000071c000-0x4)=0x10) fcntl$F_SET_RW_HINT(r0, 0x40d, &(0x7f000059f000)=0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f000001e000-0xc)='/dev/rfkill\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000487000-0x4)=0x0, 0x4) r3 = socket(0x8, 0x80006, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00009b6000)=0x0, &(0x7f0000b3d000-0x4)=0x4) write(r3, &(0x7f0000ea0000)="220000001900070400a7c600090004000a0002000008000000ad000006000180a427", 0x22) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f000082d000-0x4)=0x8, 0x4) 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000596000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000045c000-0x4)=0xffffffffffffffa8, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00005c6000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000017b000)=0x2c) r2 = syz_open_dev$sg(&(0x7f000022f000-0x9)='/dev/sg#\x00', 0x7fffffff, 0x0) ioctl$KDDISABIO(r2, 0x4b37) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000e04000)=@assoc_id=0x0, &(0x7f0000bd3000)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000a55000-0xc)=@assoc_value={r3, 0x4}, &(0x7f0000363000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000a67000)={0x0, 0x20, 0x0, 0x5, 0x7}, &(0x7f0000a93000)=0x18) r4 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x40, 0x1, 0x0, []}) ioctl(r4, 0x8916, &(0x7f0000000000)="") socket$inet_tcp(0x2, 0x1, 0x0) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000906000)={0x0, 0x4}, &(0x7f0000efa000)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f000090c000)={r1, 0xfffffffffffffffe}, &(0x7f0000118000)=0x8) getsockopt(r0, 0x0, 0x6, &(0x7f000020b000-0x3)=""/3, &(0x7f0000da6000)=0x3) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) lseek(r1, 0x0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001f9000)=0x0) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xf71000)=nil, 0xf71000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00009e1000-0x26)="26000000240043f8feffffff00008d4003000005010000005b60030000000000000503c76e35", 0x26) prctl$setendian(0x14, 0x0) [ 72.407609] binder: 13394:13407 ERROR: BC_REGISTER_LOOPER called without request [ 72.431591] binder_alloc: 13394: binder_alloc_buf, no vma [ 72.438093] binder: 13394:13424 transaction failed 29189/-3, size 0-0 line 3127 2017/12/24 06:44:33 executing program 4: getpid() r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000bdf000-0xe)='/selinux/load\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x5) r1 = syz_open_dev$loop(&(0x7f00009d0000-0xb)='/dev/loop#\x00', 0x10000, 0x311802) read(r1, &(0x7f0000f77000-0x200)=""/512, 0x200) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000ddc000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/enforce\x00', 0x20000, 0x0) [ 72.472112] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.486697] binder_alloc: 13394: binder_alloc_buf, no vma [ 72.487289] binder: 13394:13407 ERROR: BC_REGISTER_LOOPER called without request [ 72.487609] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. [ 72.488923] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. [ 72.524436] binder: 13394:13424 transaction failed 29189/-3, size 0-0 line 3127 [ 72.534791] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13cecb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697ae707d4a70f330e6fe3a1c9c76f314ffab329", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"2ad27f26"}}}}, 0x36) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x7fffffff}}], 0x30) accept$llc(r0, &(0x7f00004b7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000494000-0x4)=0x10) poll(&(0x7f0000df9000-0x20)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2017/12/24 06:44:33 executing program 5: r0 = socket(0x2000000011, 0x8000000080003, 0x0) getsockname$llc(r0, &(0x7f00001f8000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000f96000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000c87000-0xc)={0x0, 0x6, 0x20}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000145000-0x10)={r1, 0x58, &(0x7f0000001000-0x58)=[@in6={0xa, 0x0, 0x9, @loopback={0x0, 0x1}, 0xfffffffffffffffd}, @in={0x2, 0x0, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0xfffffffffffff4bc, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfda}]}, &(0x7f00008e4000-0x4)=0x10) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b29000-0x8)='./file0\x00', &(0x7f00008f9000-0x8)='./file0\x00', &(0x7f0000b4f000-0x7)='proc\x00', 0x1000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000fb4000)='./file0\x00', 0x1dd27fe8a57d92a, 0x0) r0 = geteuid() quotactl(0x6, &(0x7f0000810000-0x8)='./file0\x00', r0, &(0x7f00003ad000-0xf2)="3b117981fb6667c56508bd9041710048358d9845fee0282c29dfce493fbce345062d0bead198bb39d8d72e1a8f7ea19f54e0dab6a37d2ce6b6cb33352387df70c36eb9b02ebbab277ca3b7453a10422a27d5bcedb6652e5212580d0cad3f0a2087dced0f5fba70b465d3938cb29270054f87cb5e355d392215a5df8596da1b8acb2b0eda34ccc6fd6d12fe13cb580881a3c04b65f2f4302f1ac9a51bcc938385837561eb0b4277a43efd6dcacdf18ade886a1f0b537eaaef3a8ed6a92ac2be4616645861beb250c8f19ac6a7a57791f56b61ce1c4d30e2e1f76f1e754b8059698fdfa668932d2e819149d4603c4db003ab31") 2017/12/24 06:44:33 executing program 2: unshare(0x20020000) r0 = getpgrp(0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00008bb000-0xc)='/dev/rfkill\x00', 0x2000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000931000-0x4)=0x1, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000adf000)=0xc) fcntl$addseals(r1, 0x409, 0x5) setpgid(r0, r2) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000000000/0xfa8000)=nil, 0xfa8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005fc000-0xc)={0x0, 0x0, 0x0}, 0xc) sched_setaffinity(r0, 0x8, &(0x7f00003a8000-0x8)=0x7) r1 = inotify_init1(0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa3000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fa2000)=0xc) fcntl$setown(r1, 0x8, r3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) accept4$inet6(r2, 0x0, &(0x7f00001b3000-0x4)=0x0, 0x80000) ptrace$peek(0x2, 0x0, &(0x7f0000fa7000-0x8)=0x0) 2017/12/24 06:44:33 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/checkreqprot\x00', 0x80080, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000008000)={0x4, &(0x7f0000006000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) close(r0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f000000b000-0x4)=0x0, &(0x7f000000a000)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde0255e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) getsockname$packet(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000004000)=0x14) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)=0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000005000-0x10)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f000000b000)=0x0, &(0x7f000000b000)=0x4) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f96000)='/selinux/context\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000603000)={0x0, 0x0, 0x0, 0x0, 0xffff, 0x20000000000000a, 0x5, 0x4, "d09bed4f94fbf06b7e01c0d2fcaa99b8936e3bdf409c29f44dbb53009a21fe4dfe941cdf235a0ae99c040f6fbeb4895789f28e1b56ee675dca8af6abeb5d9c06", "2ea5c20c0a377e95683f0bdb783fd81660975a85560a8235aeed689499ce7a9c", [0x8001, 0x0], 0x0}) connect$inet(r0, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000d05000)="", 0x0, 0x8000, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmmsg(r0, &(0x7f0000f4e000)=[{{&(0x7f0000cd8000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d526326c0b3b78b78a507be193da132ebe67f55c5b43b66cb15438108fbbf329a25e6b5bcca2b09c3a429d72be2de37fd9617ecb235b9472e3dda72c4186d8", 0x0}, 0x60, &(0x7f0000b32000-0x10)=[], 0x0, &(0x7f0000fdc000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000a21000-0xd)='net/wireless\x00') preadv(r0, &(0x7f0000ebe000-0x10)=[{&(0x7f0000986000-0x35)=""/1, 0x1}], 0x1, 0x400000002) fremovexattr(0xffffffffffffffff, &(0x7f0000795000)=@random={'user.\x00', 'net/wireless\x00'}) clone(0x0, &(0x7f0000295000)="", &(0x7f0000090000)=0x0, &(0x7f0000fa3000-0x4)=0x0, &(0x7f0000232000)="") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000127000)={0x0, @multicast2=0x0, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f38000-0x4)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00009bb000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000db0000)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000bea000-0xe8)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x3, 0x9, 0x3, 0x3, 0xa, 0x20, 0x20, 0x9, r1, r2}, {0x5, 0x4, 0x1000, 0xfffffffffffffff7, 0xf675, 0x8, 0x0, 0x59d8}, {0x97, 0x0, 0x2, 0x6}, 0x10000, 0xd57a, 0x2, 0x1, 0x30, 0x3}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x6}, 0x19, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x6b, 0x0, 0x0, 0x3f, 0x6, 0x2, 0x0}}, 0xe8) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f000031a000)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000781000)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x100000001, 0x4, 0x80000000, 0x40, 0x2, 0x7ff, 0x2, 0x8001, 0xffffffffffff7013, 0x5, 0x0, 0x10000, 0x80, 0xffff, 0x8]}, &(0x7f0000d2d000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00001b5000-0x10)={r1, 0x10, &(0x7f000074d000)=[@in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000f68000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000058b000)='/selinux/enforce\x00', 0x3fe, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000fe9000-0x2c)=[@in={0x2, 0x0, @rand_addr=0xc101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffb}], 0x2c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000656000)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000efe000-0x4)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000848000-0x3)="510164") exit(0xfffffffffffffffe) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000c3b000)={0xff}, 0x4) getdents(r4, &(0x7f0000bcd000)=""/145, 0x91) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f00008a5000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f00008e2000-0x10)={0x77359400, r5}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000d63000)=0x80, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00008bd000-0x9)='/dev/ppp\x00', 0x0, 0x0) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f00000f9000)={0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:33 executing program 4: clone(0x0, &(0x7f0000fbf000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f00000d5000)="") chown(&(0x7f000042a000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000bfe000)='./file0\x00', 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x9}) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) get_thread_area(&(0x7f00008b6000)={0x8001, 0xffffffff, 0xffffffff, 0x3, 0x4, 0x80000001, 0x2, 0x1, 0x800, 0x9}) ioctl(r0, 0x8b35, &(0x7f00000e6000)="") setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000c9b000-0x33)="13e14bfe5994c7b49cf7afdd6be8438e42ae1bf4d8f186aa1c44a560f37d9908e971690b8b4b46b3312dcd29f3ebb010b42742", 0x33) 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000475000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000acb000-0x4)=0x0, &(0x7f000056f000-0x4)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000008a000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) write(r1, &(0x7f0000726000-0x2a)="49f9d8968ab4cc5975ee374cc105571b1323ddd041d00407458a6ae33f160bd15b624836e6e35a7792fc", 0x2a) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000533000)='/dev/vga_arbiter\x00', 0x40000, 0x0) bind$netlink(r2, &(0x7f000088c000)={0x10, 0x0, 0x4, 0x1}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000fbe000-0xd)='net/mcfilter\x00') ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00006e6000-0x20)={"54605920bbed2d60f35895153da9195b", {0x4, 0x1, 0x8000, "02f1901b0891", 0x4, 0x0}}) setns(r1, 0x40000000) readv(r3, &(0x7f000093d000)=[{&(0x7f000068a000)=""/81, 0x51}, {&(0x7f0000ad5000)=""/212, 0xd4}], 0x2) msync(&(0x7f00009e5000/0x4000)=nil, 0x4000, 0x1) connect$inet(r1, &(0x7f00008de000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000006000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000c8a000)=0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000050, &(0x7f0000888000)=""/16, &(0x7f0000f27000)=0x10) [ 72.598741] binder: 13463:13472 ERROR: BC_REGISTER_LOOPER called without request [ 72.627907] binder: 13463:13472 got transaction with invalid offsets ptr [ 72.637552] binder: 13463:13472 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0xfc0000)=nil, 0xfc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc0000)='/dev/sequencer2\x00', 0x8006, 0x0) mmap(&(0x7f0000fc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000844000-0x8)={@loopback=0x0, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fc2000-0x4)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000fc0000)={0x7, 0x20}) write$sndseq(r0, &(0x7f000086b000-0x30)=[{0x10081, 0x8, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) readv(r0, &(0x7f0000fc0000-0x30)=[{&(0x7f000097d000)=""/123, 0x7b}], 0x1) [ 72.674117] binder_alloc: binder_alloc_mmap_handler: 13463 20000000-20002000 already mapped failed -16 [ 72.696371] binder: BINDER_SET_CONTEXT_MGR already set [ 72.706581] binder: 13463:13483 ioctl 40046207 0 returned -16 [ 72.714073] binder: 13463:13472 ERROR: BC_REGISTER_LOOPER called without request [ 72.721774] binder_alloc: 13463: binder_alloc_buf, no vma [ 72.729843] binder: 13463:13483 transaction failed 29189/-3, size 0-0 line 3127 [ 72.748398] binder: 13463:13472 got reply transaction with no transaction stack [ 72.761621] binder: 13463:13472 transaction failed 29201/-71, size 24-8 line 2920 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000003000-0x20)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x3, 0x0}) syz_open_dev$sg(&(0x7f0000011000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xc50000)=nil, 0xc50000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000c4c000-0x38)={&(0x7f0000c4c000-0x48)=@full={{0x3, {"e144d831a9bd4b"}, 0x0}, [{"6f3f36943d41bb"}, {"54b60d04bac924"}, {"b1a18accb8176d"}, {"fe773d3595fefd"}, {"501affbe7dfcff"}, {"2b672b2ab1cd37"}, {"cde9a9429d98be"}, {"48022b30edd990"}]}, 0x48, &(0x7f0000795000-0x60)=[{&(0x7f00001d4000)="01", 0x1}], 0x1, &(0x7f0000794000)=[], 0x0, 0x0}, 0x0) rt_sigaction(0x37, &(0x7f0000c49000)={0x1, {0x0}, 0x0, 0x0}, &(0x7f0000000000)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000255000-0x8)={0x0}) r0 = open(&(0x7f00006ec000)='./file0\x00', 0x20000, 0x40) mmap(&(0x7f0000c50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000c50000)={0x0, 0x101, 0x10, 0x3, 0x40}, &(0x7f0000717000-0x4)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000389000)={r1, 0x9}, 0x8) lstat(&(0x7f000052e000)='./file0\x00', &(0x7f0000c1a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000c51000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002c6000)={0x0, 0x0, 0x0}, &(0x7f0000c52000-0x4)=0xc) fstat(r0, &(0x7f0000b51000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x40) mmap(&(0x7f0000c51000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x3, &(0x7f0000c52000-0xc)=[r2, r3, r4]) 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00008d4000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) process_vm_readv(r0, &(0x7f0000a6e000)=[{&(0x7f00000ce000-0x9d)=""/157, 0x9d}], 0x1, &(0x7f0000e02000-0x50)=[{&(0x7f0000598000-0xa9)=""/169, 0xa9}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000a8e000)=0x0) 2017/12/24 06:44:33 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00003bd000)=0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x484, &(0x7f00008e6000)=""/0, &(0x7f0000000000)=0x0) 2017/12/24 06:44:33 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000000b000-0x8)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x90082) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001000-0x24)={0x3, 0x3, 0x9, 0xff, 0x1f, 0x0, 0x1, 0xd506, 0x0, 0x2, 0x8, 0x5}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000002000-0x10)={0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000001000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000002000-0x10)={r2, r3, 0x6}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001000-0x24)={0x8, 0x9, 0x545, 0x2, 0x10001, 0x4, 0xfffffffffffffffd, 0x7, 0x10000, 0xffffffffffffd118, 0x0, 0x40}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000058c000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000a4a000-0x4)=0xc) fcntl$setown(r4, 0x8, r5) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000e00000)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000acd000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000566000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000df7000)={&(0x7f0000896000)=[0x6], 0x1, 0x1, 0x8, 0x80000001, 0x8528, 0x7d5, {0x10000, 0x7, 0x1, 0x18000000000000, 0x1, 0x5, 0xff, 0x1, 0x3f, 0x4, 0x1be6, 0x1, 0x5, 0x2, "1005bc848c7cb2018f673f521fa935bf2a7094a597f1d5f081a7f268d2ebd5a9"}}) ptrace(0x4207, r6) waitid(0x0, 0x0, &(0x7f0000c30000-0x10)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000023000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000461000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000089d000)=0xe8) r4 = getgid() syz_fuse_mount(&(0x7f000036c000)='./file0\x00', 0x5000, r3, r4, 0x8, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00006f1000-0x4)=0x0) sched_getparam(r5, &(0x7f0000a33000-0x4)=0x0) r6 = epoll_create1(0x0) r7 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267, 0x0}) timerfd_settime(r7, 0x3, &(0x7f0000005000)={{0x0, 0x0}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000337000-0x2b)={0x0, 0x3, 0x1, 0x1, 0xcfc, 0x20, 0x2, 0x9, {0x0, @in6={{0xa, 0x3, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f, 0x1, 0x7fff, 0x100010000000000, 0x3}}, &(0x7f00005cd000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00003ef000-0x8c)={r8, @in6={{0xa, 0x3, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001b000-0xc)={0xffffffff80000009, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000022000-0xc)={0x2001, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000019000)={0x0, 0x0}) 2017/12/24 06:44:33 executing program 7: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000012, 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@generic={0x0, ""/126}, &(0x7f0000dec000)=0x80, 0x80000) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000fda000-0x88)={0x0, {{0xa, 0x3, 0xfff, @loopback={0x0, 0x1}, 0x1f85}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f000065e000)={0x0, 0x1, 0x1, 0x3, 0x5}) r1 = syz_open_dev$sg(&(0x7f0000a13000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x2286, &(0x7f0000c96000-0x2)="") [ 72.783738] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.789216] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.794672] binder: unexpected work type, 4, not freed [ 72.799941] binder: undelivered TRANSACTION_COMPLETE [ 72.805024] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.810667] binder: undelivered TRANSACTION_COMPLETE [ 72.815752] binder: undelivered transaction 561, process died. [ 72.825551] binder: 13518:13524 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000026000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f000002e000-0x2)='/\x00', 0x3) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f000002d000)={0x0, 0x2}, &(0x7f000002e000-0x4)=0x8) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f000002e000-0x108)={r3, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x9, 0x5, 0x1, 0x7fffffff, 0x5, 0x6, 0x5, 0x2, 0x1c6, 0x3, 0x80000000, 0x4, 0x800, 0xa727, 0x200]}, &(0x7f000002b000)=0x108) recvmmsg(r0, &(0x7f0000002000-0xb4)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000001a000-0x4e)=""/1, 0x1}], 0x1, &(0x7f000002f000)=""/0, 0x0, 0x0}, 0x0}, {{&(0x7f0000003000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f000001c000)=[], 0x0, &(0x7f0000030000-0x57)=""/87, 0x57, 0x0}, 0x0}], 0x2, 0x10000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000018000)="", 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f000002b000-0x9)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000016000-0x4)=0x100000001) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000005000-0x8)={0x0, 0x7}, &(0x7f0000028000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000004000-0x8)=@assoc_value={r5, 0x1}, 0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000021000)={0x0, @empty=0x0, @broadcast=0x0}, &(0x7f000002e000)=0xc) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f000002f000-0xc)={r6, @multicast2=0xe0000002, @broadcast=0xffffffff}, 0xc) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f000000a000)={0xaaa, 0x80000000, 0x1, 'queue1\x00', 0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000022000)=@assoc_value={0x0, 0x0}, &(0x7f000002b000-0x4)=0x8) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f000002f000)={r7, 0x5}, &(0x7f0000013000-0x4)=0x8) lsetxattr(&(0x7f000002f000-0x8)='./file0\x00', &(0x7f0000022000-0xe)=@random={'osx.\x00', '/dev/rtc\x00'}, &(0x7f000002f000-0x5)="2d965d2800", 0x5, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f000002e000-0x160)={{{{0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xffffffffffffff7f, 0x3, 0x2, "eceeb0f2b400cab40d8771fe39ca77b2c9b32fc3edf92b28658d0a0c5a2aeb2a30959104a947b067015ca476f010ec44c9621f07a89f974a7d83ded6f0347837694a2dae9cef9a6a55dea00dab06c432"}, 0x160) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x0}, 0x8, 0x0) r1 = gettid() timer_create(0x3, &(0x7f0000dbc000-0x60)={0x0, 0x14, 0x4, @tid=r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f000066d000-0x10)={0x0, 0x0}) capset(&(0x7f0000946000)={0x19980330, r1}, &(0x7f0000e41000-0x18)={0x4, 0x3, 0x80000000, 0x8001, 0x9, 0x5c35}) ppoll(&(0x7f0000835000-0x30)=[{r0, 0x0, 0x0}], 0x1, &(0x7f000005b000+0xd56)={0x0, r2}, &(0x7f000005b000)={0xfffffffffffffffe}, 0x8) timer_settime(0x0, 0x1, &(0x7f000020b000-0x20)={{0x0, 0x0}, {0x0, 0x9}}, &(0x7f0000002000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000f6a000)={@multicast2=0xe0000002, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfb9000)=nil, 0xfb9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000fb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000fb9000)=@random={'os2.\x00', '\x00'}, &(0x7f0000fba000-0x35)=""/53, 0x35) mmap(&(0x7f0000fb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000fb9000)="1f00000002031900000007000000068100ed3b8509000100010100ff3ffe58", 0x1f}], 0x1) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000009000-0x4)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x220800, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000008000)={0x0, 0xa6, "48082151be4b14ace5b50b784136d5783bb8b59587a2144bbfefe34bbe6d14e6866e9728c93fafec55d12347142caa3f657dad7c1572b7ffd413c179c3666b97732ecf39429075005194f3c244eb66ef9c039e42d292d7e4bcfbb2ea36893a5a13d656398464a31cafd7c16050393a58b4f7e06518e0cc15f79bcbdde94cfb2b6bbccbc2858201a31d86446e4edb44567a76cb430606beed4abdfd8a854466fa0fe8f500d6b8"}, &(0x7f0000001000)=0xae) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000009000-0xe0)={r2, 0xd8, "40fc3d69ff64a21b1ab77e74a0fe256dee0639be040717ea8ea8909a8d4905017f631ab488e9190179d699120faffaaff5a4238d780d2ec4dd07c9a56457e0aa8ce828721979cc859c6f8b20dbc9fc7e79c9e43c9a84125d4bef2b943905ab7c92e7f65010e5938d4bb0ef8f68f06c4d1ea06251812bcd23c6cdd778fd64357890f39c46ca66cecf69fc56d767c37705002949b916f13ced232c7da0a6f34aa8a269814656b20ee39ab2ccf2c0c90062a1c899b0559369b4bd2ef98e1dc1a531b437c15f00734724612ebee31587dc46df660c908bd8733f"}, &(0x7f0000009000-0x4)=0xe0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000003000)=0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x200) 2017/12/24 06:44:33 executing program 6: sched_yield() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000062000-0xe)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000d12000)=0x0) sysinfo(&(0x7f0000916000-0xd7)=""/215) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000815000)='/dev/pktcdvd/control\x00', 0x800c0, 0x0) listen$netrom(r1, 0x99) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000001000-0xa)='syzkaller\x00', &(0x7f0000268000)='eth0mime_type\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f00004ca000-0x4)=0x0, &(0x7f0000746000-0x4)=0x4) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000060f000)={@common='ip_vti0\x00', @ifru_flags=0x1800}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000008000-0x17)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00003db000)={0x0, 0x0, 0x0}}}) [ 72.849897] binder: 13518:13524 got transaction with invalid offsets ptr [ 72.854434] IPVS: length: 116 != 24 [ 72.869848] binder: 13518:13524 transaction failed 29201/-14, size 0-8 line 3155 [ 72.888158] binder: unexpected work type, 4, not freed [ 72.893959] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000707000)='self\\\x00', 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00007e0000)={0x0, {{0x2, 0x3, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f00008ec000)={0x0, 0x0, 0x0}, 0xc) r2 = dup(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet6(0xffffffffffffffff, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x20) sendto$inet6(r2, &(0x7f00009a1000-0x1)='\a', 0x1, 0x20000001, &(0x7f00008d7000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000783000-0x4)=0x263, 0x4) fcntl$setown(0xffffffffffffffff, 0x8, r1) socket$inet6(0xa, 0x7, 0x7) mount(&(0x7f0000519000-0x8)='./file0\x00', &(0x7f0000dd1000-0x8)='./file0\x00', &(0x7f00003d3000)='nilfs2\x00', 0x1, &(0x7f0000140000)="1d424cf38fa7b345cc291604abce16d27c6e38d58408e4224b61dc8f74adfa07dfe0526187105abc2eec22eec90dd559df4200b503e0aaa442f10f6c3d22d5b36cee5f0312d365cb1005313d49d405026d39e2bff0da5950bdc0dde094d27e571db66e5320e608efa6ae7f7f8ffd87a3821ef53add1cd1dd51434a40d012a27188479b8e2225c417ed458cb97be13cbdb6cc9a34c88bf6efa111729eb0145c6b47dcf8b8933aa03f0ab6866e07d5c44302ea963a612c68a87772c1734c7fe6dd49054ed722207d8df7462b010d81be1bfbdd599273") sendto$inet6(r2, &(0x7f0000e2b000)='t', 0x1, 0x31, 0x0, 0x0) [ 72.897624] IPVS: length: 116 != 24 [ 72.900252] audit: type=1400 audit(1514097873.480:57): avc: denied { getattr } for pid=13550 comm="syz-executor2" name="NETLINK" dev="sockfs" ino=24598 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 72.937572] binder: 13518:13539 ERROR: BC_REGISTER_LOOPER called without request [ 72.938898] binder_alloc: 13518: binder_alloc_buf, no vma [ 72.938916] binder: 13518:13524 transaction failed 29189/-3, size 0-0 line 3127 [ 72.947699] binder: 13518:13539 got transaction to invalid handle [ 72.947707] binder: 13518:13539 transaction failed 29201/-22, size 0-8 line 3004 [ 72.969234] binder_alloc: binder_alloc_mmap_handler: 13552 20000000-20002000 already mapped failed -16 [ 72.992647] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.998519] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000001000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000006000)=0x0, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000004000)={0x0, 0x1}, 0x8) 2017/12/24 06:44:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt(r0, 0xffff, 0x6, &(0x7f0000395000-0x63)="72436f19376abd1b32147d5e398c8862fd5d312aed7d6828ce2f4c51400b403ef69cfd8c3a1cdab0d7157fa5ec38d91adc8cd2c7fa90dcb1087da5130656639be8f2023a1be5e3ae0c7f5b60566b29b773e45cbaf5d7783d6e52844f2481626986d310", 0x63) r1 = socket(0x11, 0x802, 0x40) write(r1, &(0x7f000073f000)="24000e001a0025f00000000400fffc0e0a00000000040000eff2edeb08000300010000000a0d05d1900c96d6350ca24641d7a0c9aee6e5751dfcfd921d986db555e08d9c62db3282b98b8353ab531c53083903b3f0b9a66924b6317f792b8f2358be4cc0cc240a53c4d7e29084a1998dc10debccc19d5bbfd7e55415d4221d03fbe08bdda33deeea6110073bdc3f56eac92c2072a53c78e409d2395571f3e5d224a4ba5d13b5995f12590f4056605f4e2115ac8478f90583ac92d5baddb93583635fac9153c22c14e53251d1fa8bf8854edf53f5dff535b12e6e2127c282467beef61bf35dfc387fd535", 0xea) 2017/12/24 06:44:33 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000009000-0x8)={0x0, 0x0}) close(r0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000009000-0xd)='/dev/usbmon#\x00', 0x7, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000009000)={0x0, 0xb8, "2ec543ec4a6cc1298e03caaf9b0d3ff1cefc974bb076cfd2ca97dd0ace321f6ced056e9015420d996c9763c941ec239d04c95a5d14d204c0cfc133d457366ad6532fea78bdd86c8680b4998aa219332de33c9a7b0fa5a11591f2105193f9e93156b50e835ebff0576f7f2b88ded9e6447756a8c0066deca965feae20d4add6a7c906b76bc9b7b73f0949a342f40d4a6f0d57badf782275e9c8dac9e2a063b80cba4ee2cf1499bdc7d05fe0e077287b5bf09517f140b0ce18"}, &(0x7f0000001000-0x4)=0xc0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003000-0x10)={0x3, 0x2, 0x6, 0x1fffe0000, 0x0}, &(0x7f0000009000)=0x10) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f000000a000-0xb8)={r3, 0x8, 0x9, 0x3, 0x5, 0x910, 0x6, 0xfffffffffffffff8, {r4, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0xff, 0x69b, 0x4, 0x6}}, &(0x7f000000a000-0x4)=0xb8) ioctl$TIOCEXCL(r2, 0x540c) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f000000c000-0x3b)=""/59) getresuid(&(0x7f0000006000-0x4)=0x0, &(0x7f000000a000)=0x0, &(0x7f000000b000-0x4)=0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000503000-0xc)={0x0, 0x0, 0x0}, &(0x7f000003c000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000ce5000)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00007fa000)='net/protocols\x00') 2017/12/24 06:44:33 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x4}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001000)=0x200, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f000090f000-0x59)={r1, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000f50000)=0x8c) clone(0xa1000000, &(0x7f0000794000)="fccd", &(0x7f0000d6b000)=0x0, &(0x7f0000d4d000)=0x0, &(0x7f0000a59000-0xff)="") r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000a62000)='/selinux/policy\x00', 0x0, 0x0) wait4(0x0, &(0x7f0000e6c000)=0x0, 0x40000000, &(0x7f0000870000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000a6d000-0x10)=[{r2, 0x40, 0x0}, {r2, 0x2004, 0x0}], 0x2, 0xff) connect$netrom(r2, &(0x7f0000000000)=@full={{0x3, {"937f6a760816db"}, 0x2}, [{"035caccce743dd"}, {"64d344e83c548e"}, {"0f08b40bc31a74"}, {"8a819f8fdb866d"}, {"b3590390ccce0f"}, {"85414c0dc4d67c"}, {"b8e2e73ef65e50"}, {"1e3c9e89e106be"}]}, 0x48) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000b27000-0x15)='/proc/self/net/pfkey\x00', 0x10001, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x9973) r1 = syz_open_procfs(0x0, &(0x7f0000b23000)='net/ptype\x00') pread64(r1, &(0x7f0000e61000)=""/0, 0x0, 0x0) 2017/12/24 06:44:33 executing program 6: r0 = inotify_init1(0x80803) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2) read(r0, &(0x7f0000000000)=""/120, 0x78) r1 = dup(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0xe536, 0x80, 0x1, 0xb0b}, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) keyctl$session_to_parent(0x12) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000f49000-0x4)=0x0) 2017/12/24 06:44:33 executing program 7: mmap(&(0x7f0000000000/0x6b000)=nil, 0x6b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000063000-0xa)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000003d000-0xa)='./control\x00', 0x220001a1) read(r0, &(0x7f0000059000-0x11)=""/32, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000040000)='/dev/rfkill\x00', 0x20400, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r1, &(0x7f0000006000-0x40)={0x53, 0x5, 0x5, 0x8, 0x79aa, 0x7fff, 0x14000000000, 0x8}, 0x0) mq_getsetattr(r1, &(0x7f0000042000-0x40)={0x7, 0x9, 0x6, 0x9, 0x4, 0x1, 0x2, 0x9}, &(0x7f000006b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000032000-0x10)='./control/file0\x00', 0x0) [ 73.003607] binder: undelivered transaction 569, process died. [ 73.009662] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.015101] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) getitimer(0x3, &(0x7f0000a7e000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000089000-0x8)={0x9, 0x3, 0x19, 0x5cee65d4}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setresgid(0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00008d4000-0x10)={0x0, 0x0}, &(0x7f0000453000-0x4)=0x10) setitimer(0x0, &(0x7f000000f000-0x20)={{0x0, r2}, {0x0, r1}}, &(0x7f000000b000)={{0x0, 0x0}, {0x0, 0x0}}) write$evdev(r0, &(0x7f0000002000-0x24)=[{{r3, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x7530}, 0x0, 0x0, 0x0}], 0x30) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00007d1000-0xb)={@loopback=0x0, @loopback=0x0, 0x0}, &(0x7f0000356000-0x4)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f000037f000)={@empty=0x0, @loopback=0x7f000001, r1}, 0xc) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000a22000-0xc1)="18000000020001000000be8c5ee18c001e000008020100ec01da1e03366f3cdc0200000074fffffff74852bb6a8800001500000000000000000000006d98e2010067fc3763e0209cee4a5acb3da41f0000ba00000000c88ebbff060101010b01000000b121cf140900000000000000ec007702cfb7d1e7ec7ee87cccfff6ba000000024f7c98e9e9f55406aa0100050000040108000006d791a2ffe3c5632c1adb8a335bd7b2e97fdea21b38100000000000000000041ad0b4d2c200efff01b6", 0xc0) 2017/12/24 06:44:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000551000-0x11)='/selinux/enforce\x00', 0x200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000856000)={0x5, 0x1, 0x5, 0x28, 0xbb8e}, 0xc) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000f63000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00006ab000)=0x8) sync_file_range(r1, 0x1, 0x7ff, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000038000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000b7b000)={0x0, 0x200, 0x2000000000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f000002c000)={0x10000, 0x8}, 0x8) 2017/12/24 06:44:33 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000004000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000012000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000-0x10)={0x0, 0x0}, &(0x7f0000004000)={&(0x7f0000000000)={0x0}, 0x8}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000-0x18)={0xaa, 0x18, 0x0}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00003f5000)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000471000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a64000)=0xe8) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000f01000)={0x0, 0x0, 0x0}, 0xc) capset(&(0x7f0000e40000-0x8)={0x39980732, r2}, &(0x7f00007e8000)={0x1f, 0x5, 0x1, 0x2, 0x3, 0x2}) 2017/12/24 06:44:33 executing program 5: mmap(&(0x7f0000000000/0xf0e000)=nil, 0xf0e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000f0f000-0x4)=0x8000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000dbb000-0x28)={@common="6c6f0000210000000600000008ff00", &(0x7f0000f0d000-0x2c)=@ethtool_cmd={0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) pipe2(&(0x7f0000ec3000-0x8)={0x0, 0x0}, 0x800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000b10000)=0x1f, 0x4) sysinfo(&(0x7f0000916000-0xd7)=""/215) 2017/12/24 06:44:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000031f000-0x23)="220000004a000700ea091008090007000a0000000022000004000300040001008c45", 0x22) pwrite64(r0, &(0x7f0000d51000)="f1d88dc7d350839955b446d9d384a7d8a605a970a6e2b3c36719b8bfd176fcfd21b9d5882542c76006b3c7f3ff785344b99ed6051857a6d336d11c65bd9a59db37ef1f2e834a33bbbbde7cacd59541109175bb8d97043f66e44f6bec6ffd1c3a119d60a2b16251e2f51b2c73ea2c7967e7d7c6a5652ce9a6e5725b4dbf1b8a08cc8d42b4bcea74a5edf6789280f399b9fcce945d30e68c43868e71356de9d749724f951cf7e9974b839a4016a4833602f9294b4a7443935bfae031c0c42a45514f53b1ab3436de6037832784111050361ff030d6a3", 0xd5, 0x0) [ 73.081654] binder: 13585:13588 ioctl 80605414 2000bfc5 returned -22 [ 73.096329] binder: 13585:13588 ERROR: BC_REGISTER_LOOPER called without request [ 73.114846] binder: 13585:13588 ioctl c0306201 20008fd0 returned -11 2017/12/24 06:44:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000413000/0x5000)=nil, 0x5000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00003d3000-0x30)={0x58, 0x0, &(0x7f000050c000)=[@increfs_done={0x40106308, 0x0, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bfc000-0x38)=[], &(0x7f000025c000-0x40)=[]}}], 0x0, 0x0, &(0x7f00003dd000-0x7f)=""}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000005e000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) fcntl$notify(r1, 0x402, 0x1d) 2017/12/24 06:44:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000001000-0xf8)=""/248) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002000-0x11)='/selinux/enforce\x00', 0x418400, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)=0x0) [ 73.123708] binder: 13585:13588 got reply transaction with bad transaction stack, transaction 577 has target 13585:0 [ 73.137424] binder: 13585:13588 transaction failed 29201/-71, size 24-8 line 2935 [ 73.146911] FAULT_FLAG_ALLOW_RETRY missing 30 [ 73.146921] CPU: 1 PID: 13620 Comm: syz-executor1 Not tainted 4.9.71-g2506378 #113 [ 73.146926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.146940] ffff8801c421f670 ffffffff81d922b9 ffff8801c421f950 0000000000000000 [ 73.146951] ffff8801c5f13610 ffff8801c421f840 ffff8801c5f13500 ffff8801c421f868 [ 73.146963] ffffffff8165fb7a 0000000000005b31 ffff8801c9f668f0 ffff8801c9f668a0 [ 73.146965] Call Trace: [ 73.146978] [] dump_stack+0xc1/0x128 [ 73.146991] [] handle_userfault+0xa3a/0x1310 [ 73.147003] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 73.147012] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 73.147022] [] ? handle_mm_fault+0x117b/0x2530 [ 73.147031] [] ? handle_mm_fault+0x1fc3/0x2530 [ 73.147039] [] handle_mm_fault+0x1fd1/0x2530 [ 73.147047] [] ? finish_task_switch+0x1ed/0x630 [ 73.147054] [] ? finish_task_switch+0x1c1/0x630 [ 73.147062] [] ? __pmd_alloc+0x410/0x410 [ 73.147079] [] __do_page_fault+0x5c2/0xd40 [ 73.147089] [] ? mm_fault_error+0x2c0/0x2c0 [ 73.147100] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.147107] [] do_page_fault+0x27/0x30 [ 73.147115] [] page_fault+0x28/0x30 [ 73.147123] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 73.147133] [] ? core_sys_select+0x3be/0x730 [ 73.147141] [] ? core_sys_select+0xa8/0x730 [ 73.147150] [] ? do_select+0x13b0/0x13b0 [ 73.147160] [] ? recalc_sigpending+0x72/0x90 [ 73.147169] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 73.147177] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 73.147185] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 73.147194] [] ? __set_current_blocked+0x80/0xa0 [ 73.147202] [] ? sigprocmask+0xef/0x290 [ 73.147209] [] ? sigsuspend+0x250/0x250 [ 73.147224] [] ? __might_fault+0x114/0x1d0 [ 73.147233] [] SyS_pselect6+0x2ae/0x550 [ 73.147241] [] ? SyS_select+0x1e0/0x1e0 [ 73.147248] [] ? SyS_futex+0x22e/0x2d0 [ 73.147255] [] ? do_futex+0x15c0/0x15c0 [ 73.147262] [] ? entry_SYSCALL_64_fastpath+0x5/0xc6 [ 73.147271] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 73.147277] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.147285] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 73.147670] binder: 13585:13636 got transaction to invalid handle [ 73.147680] binder: 13585:13636 transaction failed 29201/-22, size 0-8 line 3004 [ 73.178535] binder_alloc: binder_alloc_mmap_handler: 13585 20000000-20002000 already mapped failed -16 [ 73.197245] FAULT_FLAG_ALLOW_RETRY missing 30 [ 73.197255] CPU: 0 PID: 13620 Comm: syz-executor1 Not tainted 4.9.71-g2506378 #113 [ 73.197259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.197274] ffff8801c421f670 ffffffff81d922b9 ffff8801c421f950 0000000000000000 [ 73.197285] ffff8801b6bebf10 ffff8801c421f840 ffff8801b6bebe00 ffff8801c421f868 [ 73.197296] ffffffff8165fb7a 0000000000005b31 ffff8801c9f668f0 ffff8801c9f668a0 [ 73.197299] Call Trace: [ 73.197314] [] dump_stack+0xc1/0x128 [ 73.197324] [] handle_userfault+0xa3a/0x1310 [ 73.197335] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 73.197344] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 73.197355] [] ? handle_mm_fault+0x117b/0x2530 [ 73.197363] [] ? handle_mm_fault+0x1fc3/0x2530 [ 73.197371] [] handle_mm_fault+0x1fd1/0x2530 [ 73.197378] [] ? __schedule+0x64d/0x1ba0 [ 73.197386] [] ? __pmd_alloc+0x410/0x410 [ 73.197396] [] __do_page_fault+0x5c2/0xd40 [ 73.197403] [] ? mm_fault_error+0x2c0/0x2c0 [ 73.197411] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.197419] [] do_page_fault+0x27/0x30 [ 73.197425] [] page_fault+0x28/0x30 [ 73.197433] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 73.197441] [] ? core_sys_select+0x3be/0x730 [ 73.197447] [] ? core_sys_select+0xa8/0x730 [ 73.197454] [] ? do_select+0x13b0/0x13b0 [ 73.197462] [] ? recalc_sigpending+0x72/0x90 [ 73.197470] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 73.197478] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 73.197486] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 73.197494] [] ? __set_current_blocked+0x80/0xa0 [ 73.197502] [] ? sigprocmask+0xef/0x290 [ 73.197509] [] ? sigsuspend+0x250/0x250 [ 73.197516] [] ? __might_fault+0x114/0x1d0 [ 73.197523] [] SyS_pselect6+0x2ae/0x550 [ 73.197530] [] ? SyS_select+0x1e0/0x1e0 [ 73.197537] [] ? SyS_futex+0x22e/0x2d0 [ 73.197543] [] ? do_futex+0x15c0/0x15c0 [ 73.197550] [] ? entry_SYSCALL_64_fastpath+0x5/0xc6 [ 73.197558] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 73.197565] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.197572] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 73.214716] binder: 13585:13636 ioctl 80605414 2000bfc5 returned -22 [ 73.217234] binder: BINDER_SET_CONTEXT_MGR already set [ 73.217241] binder: 13585:13646 ioctl 40046207 0 returned -16 [ 73.219224] binder: 13585:13636 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5422, &(0x7f0000a9b000)=0xfffffffffffffffc) syz_open_pts(r0, 0x20000) fcntl$setlease(r0, 0x400, 0x2) r1 = memfd_create(&(0x7f00003c3000)='@proc\x00', 0x3) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f000031d000)=""/46, &(0x7f0000690000)=0x2e) 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000003) mmap(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x801, 0xe000000000000000, &(0x7f0000fe5000)={0x0, 0x0}) r3 = dup(r2) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$netrom(r3, &(0x7f0000fe7000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000415000-0x4)=0x10) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000dd4000)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000852000-0x10)={&(0x7f0000a3a000/0x4000)=nil, 0x4000}) r5 = accept4$inet(r4, &(0x7f0000fe5000)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000098000)=0x10, 0x80800) mmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000fe6000-0x4)=0x3, 0x4) writev(r0, &(0x7f0000430000)=[{&(0x7f00005d6000)="290000001a0019a8553d7546010a00f70208fe00210000240002f70009000900010000007f00000401", 0x29}], 0x1) 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f000077e000)=0x0, &(0x7f0000cbc000-0x4)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000198000)="", 0x0, 0xfffffffffffffffc, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f000057e000)=0x0, &(0x7f0000290000)=0x4) 2017/12/24 06:44:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x14, 0x4000000000080003, 0xfffffffffffffffe) setsockopt(r0, 0x107, 0x80, &(0x7f0000212000-0x52)="93af4d962b0b3fa4bae98737e061e17a28281d8566e1f88d039b5d42e2b82dfb9102ffb14002d4ae7f5eb610d2960154bad7c1833a7a769557894b16eb09ae1b5e65d3e81c150629b0401a80d3c9d32a54", 0x51) poll(&(0x7f0000c64000-0x30)=[{r0, 0x2000, 0x0}], 0x1, 0x7) 2017/12/24 06:44:34 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$mice(&(0x7f0000007000-0x10)='/dev/input/mice\x00', 0x0, 0x4000) sysfs$3(0x3) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000b000-0xc)={0x1, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r3 = socket(0x11, 0x80003, 0x0) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00002c8000)=0x0, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000009000)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x38, &(0x7f000000b000)=[], &(0x7f000000b000)=[0x38, 0x0, 0x0, 0x48, 0x38, 0x38, 0x20]}, 0x9}}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00002a3000)='/selinux/checkreqprot\x00', 0x1ffe, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f000036d000-0x30)={0xa, 0x0, 0xff, 0xf06, 0x401, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000143000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x20) 2017/12/24 06:44:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x8, 0x4, 0x4, &(0x7f0000042000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000ac9000-0x8)=@assoc_value={0x0, 0xffffffffffffff80}, &(0x7f0000a27000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00007cd000-0x8)={r2, 0xf10ab27}, &(0x7f0000084000-0x4)=0x8) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000d8000-0x4)=0x752b, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000c9c000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r3, 0x0) sendto$inet(r0, &(0x7f000087a000)="", 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000622000)={0x3000002, 0x8a17}, 0x8) close(r0) 2017/12/24 06:44:34 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000007000)={0x0, @in={{0x2, 0x1, @rand_addr=0xcb000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0xfff, 0x1, 0x5, 0x2, 0x5, 0x10000, 0x5, 0x800, 0x7fff, 0x0, 0x7, 0x5, 0x5, 0x400000000000000]}, &(0x7f0000009000-0x4)=0x108) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000007000-0x65)={r2, 0x5d, "2a1db28dd6225ed3f7daddf0d9d97cfa1bf7cbcc370a132b111ad9f210a639d837837905096faa8ae915e01757f736dd698f059daea085df1a505dd068e2fa0192e14ae20f64d594b5a78baa0b4a694b572114c9ef7ebda55ed16d8a97"}, &(0x7f0000008000)=0x65) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 73.219235] binder: 13585:13636 ioctl c0306201 20008fd0 returned -11 [ 73.219274] binder_alloc: 13585: binder_alloc_buf, no vma [ 73.219289] binder: 13585:13646 transaction failed 29189/-3, size 0-0 line 3127 [ 73.751101] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.756781] binder: release 13585:13588 transaction 577 out, still active [ 73.766604] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000bcc000-0x4)=0x0, &(0x7f0000f4a000)=0x4) syslog(0x9, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r1, &(0x7f0000647000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6b1b366b7234cf2024c29407a7013e3580ea1a3e6936a89b15bfff72a381149d2b00d1ab977fa22fb0970a347cb70d8653a4e16d54d3db16592b5870510490", 0x0}, 0x60) 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c60000-0x8)='./file0\x00', 0x1) mount(&(0x7f0000cfc000)='./file1\x00', &(0x7f0000bdc000-0x8)='./file0\x00', &(0x7f0000dea000)='tmpfs\x00', 0x0, 0x0) 2017/12/24 06:44:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000880000)='/dev/sg#\x00', 0x0, 0x4400) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000274000-0x4)=0xff) mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000802, 0x6) write(r1, &(0x7f000096c000)="24000000190025f7060d1ffbfffffc0e0a8000fbffffffffff5cffeb080002000021c1ff", 0x24) [ 73.782022] binder: release 13663:13669 transaction 582 in, still active [ 73.782029] binder: send failed reply for transaction 582 to 13663:13669 [ 73.808463] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.816478] binder_alloc: binder_alloc_mmap_handler: 13663 20000000-20002000 already mapped failed -16 2017/12/24 06:44:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000d93000)=@add_del={0x2, &(0x7f00003a9000)=@generic="5e62a014f5428ce767dd4e66d3c464f5", 0x0}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000c55000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f000000e000-0x108)={0x80, {{0xa, 0x2, 0xa85, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x400}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000fa7000)=@assoc_value={0x0, 0x0}, &(0x7f000074c000-0x3)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000260000-0x14)={r2, 0x3, 0x5, 0x8, 0x7, 0xffffffffffffffff}, 0x14) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bdc000)='/dev/hwrng\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000647000)={r2, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000b73000)=0x8c) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000457000-0x8)={0x0, 0x0}) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f00002d8000-0x4)=0x7, 0x4) 2017/12/24 06:44:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000bad000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, &(0x7f0000433000-0x4)=0x98) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000482000-0x10)={0x2, &(0x7f00009a9000)=[{0x80, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000f0e000)='/selinux/user\x00', 0x2, 0x0) bind$llc(r3, &(0x7f0000f3b000)={0x1a, 0x1f, 0x13, 0x8770, 0x1ff, 0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00009e9000)="", 0x0, 0x20000040, &(0x7f0000532000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:34 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7fffffff}, {0xa, 0x2, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, 0xed, [0xffffffffffffffff, 0x3, 0x8000, 0x9, 0x3, 0xff, 0x1b, 0x2]}, 0x5c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind(r1, &(0x7f00001cf000-0x9)=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9) pipe2(&(0x7f0000ba7000-0x8)={0x0, 0x0}, 0x27c1ec66d5f57b6f) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f000008a000)=0x0, &(0x7f0000f47000-0x4)=0x4) 2017/12/24 06:44:34 executing program 4: mmap(&(0x7f0000000000/0xa77000)=nil, 0xa77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000671000-0x8)={0x0}, 0x8, 0x0) mmap(&(0x7f0000a77000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x20002, 0x300, &(0x7f0000a77000)={0x0, 0x0}) clock_settime(0x7, &(0x7f00004cb000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000a78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000a79000-0x11)='/selinux/relabel\x00', 0x2, 0x0) signalfd4(r1, &(0x7f0000505000-0x8)={0x8001}, 0x8, 0x80000) mmap(&(0x7f0000a78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000a79000-0x4)=0xe68, &(0x7f0000a78000)=0x4) readv(r0, &(0x7f0000a73000-0x10)=[], 0x0) signalfd(r0, &(0x7f0000a77000-0x8)={0x8000000000007}, 0x8) [ 73.817717] binder: BINDER_SET_CONTEXT_MGR already set [ 73.817723] binder: 13663:13674 ioctl 40046207 0 returned -16 [ 73.822498] binder_alloc: 13663: binder_alloc_buf, no vma [ 73.822516] binder: 13663:13684 transaction failed 29189/-3, size 0-0 line 3127 [ 73.848586] binder: 13662:13670 unknown command 18742488 [ 73.848595] binder: 13662:13670 ioctl c0306201 20008fd0 returned -22 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000059000-0xd)='/dev/snd/seq\x00', 0x0, 0x40a000) r1 = epoll_create1(0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000bc000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e88000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000d71000)=r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4, 0x0}) ppoll(&(0x7f00003d0000)=[{r0, 0x6, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb8000-0x8)={0x0}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000cd000-0x7)='status\x00') getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000349000)=0x0, &(0x7f00003a3000)=0x4) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000282000-0x4)=0x0) 2017/12/24 06:44:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000002000-0x4)=0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000002000-0x14)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, r2}, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001000-0x10)={0x0, 0x7530}, 0x10) setfsgid(0x0) 2017/12/24 06:44:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000ad4000-0x9)='/dev/sg#\x00', 0x3, 0x80100) r0 = socket(0x10, 0x3, 0x9) write(r0, &(0x7f0000fdb000-0x24)="240000005a001f0100000000000000002300071008000100feffffff08ffffffef000017", 0x24) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00002b8000)=0x5, &(0x7f000053d000)=0x4) 2017/12/24 06:44:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000212000)={0x0, 0x0, &(0x7f00008ba000-0x10)={&(0x7f00003c5000-0x20)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000469000)='/selinux/member\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000d07000)="") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000002000-0x1c)={0x55, 0xfffffffffffffffe, 0x4, {0xb2d, 0xfffffffffffffff8}, {0x8, 0x400}, @ramp={0x20, 0x5, {0x90, 0x8001, 0x9c, 0x0}}}) keyctl$revoke(0x3, r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000a2e000)={0x0, 0x0, &(0x7f0000c58000-0x10)={&(0x7f0000000000)={0x2, 0xd, 0x15, 0x9, 0x4, 0x0, 0x100000001, 0x1, [@sadb_sa={0x2, 0x1, 0x20, 0x3, 0xccb, 0x4, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x20004004) memfd_create(&(0x7f00009bb000)='eth0(bdev-\x00', 0x1) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x4) [ 73.848858] binder_alloc: 13662: binder_alloc_buf, no vma [ 73.848875] binder: 13662:13670 transaction failed 29189/-3, size 0-0 line 3127 [ 73.854997] binder: BINDER_SET_CONTEXT_MGR already set [ 73.855005] binder: 13662:13670 ioctl 40046207 0 returned -16 [ 73.859843] device gre0 entered promiscuous mode [ 73.922281] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.922676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=90 sclass=netlink_audit_socket pig=13718 comm=syz-executor5 [ 73.928192] binder: 13662:13670 unknown command 18742488 [ 73.928201] binder: 13662:13670 ioctl c0306201 20008fd0 returned -22 [ 73.928251] binder_alloc: 13662: binder_alloc_buf, no vma [ 73.928267] binder: 13662:13683 transaction failed 29189/-3, size 0-0 line 3127 [ 73.942235] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=90 sclass=netlink_audit_socket pig=13718 comm=syz-executor5 2017/12/24 06:44:34 executing program 7: 2017/12/24 06:44:34 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000-0x4)=@int=0x80000000, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000ad2000)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000248000-0x77)=[{0x14, 0x105, 0xd09, 0x0, 0x0, "006c6db5"}], 0x14}], 0x1, &(0x7f0000fa1000)=[], 0x0, 0x0}, 0x0) 2017/12/24 06:44:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000000039, &(0x7f0000ff7000)="ff0204000000def31d001100000000d8144e000000000205", 0x18) finit_module(r0, &(0x7f000057d000)='cgroupkeyring[%]\x00', 0x1) 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000d66000-0x8c)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000008000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f000025b000)={0x0, 0x2000000000000080, 0x3, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:34 executing program 0: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00006ff000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x2010, r0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x6, &(0x7f0000eb8000)={0x0, 0xfffffffffffffffe, 0x5, 0x5, r2}) 2017/12/24 06:44:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000137000-0xd)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000c78000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00008dc000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$netlink(r0, &(0x7f0000461000)={0x10, 0x0, 0x2, 0x0}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000687000-0xc)={0x10, 0x0, 0x2, 0x0}, 0xc) close(r2) 2017/12/24 06:44:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x77359400, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x80000000001) getgroups(0x5, &(0x7f0000409000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0]) lstat(&(0x7f0000ae8000)='./file0\x00', &(0x7f0000f30000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) creat(&(0x7f0000236000)='./file0\x00', 0x0) 2017/12/24 06:44:34 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000003000)='./file0\x00', 0x111c00, 0x1) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f000000a000-0x24)={0x2, 0x2, 0x8001, 0x7255, 0x3, 0x100000000, 0x5, 0x40, 0x9, 0x1, 0x1f, 0x5}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000000b000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f000000a000)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xe, 0x0, 0x4) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f00008de000)=0xfffffffffffffff7, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000663000-0xe)='/dev/keychord\x00', 0x101000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000a23000)='/proc/self/net/pfkey\x00', 0x111100, 0x0) capset(&(0x7f0000401000)={0x20080522, 0x0}, &(0x7f00000da000)={0x0, 0x0, 0x0, 0x791c, 0x0, 0x0}) 2017/12/24 06:44:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}, 0x0) rmdir(&(0x7f00001ec000)='./file0\x00') syz_extract_tcp_res(&(0x7f0000f86000-0x8)={0x0, 0x0}, 0x7, 0xbc0) [ 73.985162] binder: send failed reply for transaction 577, target dead [ 73.992044] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.997628] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.003095] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.008784] binder: undelivered TRANSACTION_COMPLETE [ 74.013863] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000482000-0x10)={0x1, &(0x7f00009a9000)=[{0x6, 0x0, 0x0, 0x0}]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000)="", 0x0, 0x20000040, &(0x7f0000caf000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000ff2000)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000e1d000-0x10)={0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00004d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000084b000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0xffffffff00000001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x420000008923, &(0x7f000040b000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000560000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000a8b000-0x8)={r3, 0x24}) 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xd1d000)=nil, 0xd1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000d1e000-0x6)='logon\x00', &(0x7f0000865000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000d1e000-0x1)='\x00', 0xfffffffffffffffd) add_key(&(0x7f0000c3e000-0x8)='trusted\x00', &(0x7f0000d1d000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000d1d000)="c9b9f4b7e0dad22bc265d029ce60cb1fcaf5a68222dfbd9a5a9940dba612c51076ab990cd3e25cdbc47eb2e383ae799823", 0x31, r0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000b52000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000008f000)='-nodev]:]posix_acl_access\x00', 0xffffffffffffffff) 2017/12/24 06:44:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000d93000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00003d4000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00006f3000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) read(r0, &(0x7f0000e50000)=""/10, 0xa) 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00006bb000)="2200000014000700000910f7e2ff05000200030001000000090002000000000003ff", 0x22) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000cc0000-0xed)=""/237, &(0x7f00004f4000)=0xed) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000b9c000)={0x280000000000000, 0x0, 0x7fffffff, 0x5, 0x0}, &(0x7f00008e1000)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000ac8000-0x98)={r1, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x81, 0x3fac}, 0x98) [ 74.059833] binder: 13740:13745 ERROR: BC_REGISTER_LOOPER called without request [ 74.098652] device gre0 entered promiscuous mode [ 74.110693] binder: 13740:13745 got transaction with invalid offsets ptr [ 74.120463] binder: 13740:13745 transaction failed 29201/-14, size 0-8 line 3155 [ 74.133216] binder: unexpected work type, 4, not freed [ 74.138817] binder: undelivered TRANSACTION_COMPLETE [ 74.139901] device gre0 entered promiscuous mode 2017/12/24 06:44:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000e000-0x38)={0x0, 0x0, &(0x7f0000022000-0x10)=[{&(0x7f0000007000+0x7fa)=[{0x21, 0x26, 0xcffddcf8d9b2dcfb, 0x0, 0x0, "29003d5d0100000000000000000000001f"}], 0x21}], 0x1, &(0x7f0000014000)=[], 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000c4e000)={&(0x7f0000355000)=@llc={0x1a, 0x7, 0x9, 0x8000, 0x6, 0x80000000, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10, &(0x7f00009e8000+0x3b3)=[{&(0x7f00004d8000-0x1000)="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", 0x1000}, {&(0x7f0000115000)="f6fb585ac5412e4fe3241b1d26dacfb1575314aea455dbdd468f3318c49517aa405146fa0c6058d40507eed661d33fba1356e77cff3bb7ca54062a6cb814d308b1300b6041f0d62bc9fb817a8dc8bd9b3d7aed3034cb04fffcf15b6775cafadc66268b60a566c6f6dd9bc5b3c815316cfdb715df23525b24152e3eb807074f0bc322cc450d742ca112b564b9d18a5ee333097d6eefac615e42dd542f879a67e6acf09a021148602175ac05dc5c85e22c743f8384980ccf170dd020786ef05adc6e243aff7e4638544227c9e851104f25a26be3f1d09c648a", 0xd8}], 0x2, &(0x7f0000121000)=[{0xd8, 0x11f, 0x3f, "d92f931a60d8f1b1a7d4df28ad5fd3a412f8e980e2f5c00a6416f5be772d3e4583a5337c6c57ed45e5f7ac6d3f5e4fe01ea44c86c2f06d42e6b1f0aa5a7d040b9a205cfd74eae7f778b9497192a3c3f8a866ebed0e6c511f752413c32c1c4ba8ca81a1f8a4586da297f6d3ef48c4c7fe3ecad7350c063a5772ab9c8e7f1516f32081266f90e7a4c32751124dcc10104379d430f23cfd05b0e98c40fd8ef961354b88be5b349ecfa269104d6a600f9dc2d584ed32f86c751baf886c3476d7babd196110d1cc7328"}, {0xe8, 0x10b, 0xffffffff80000001, "d350fdf4affb992fc47971f606c723afcd48898bc9ca0e4c44a96a735894e5193e19924748476ca9e8d8f5eb50ebbbf5392450d9ac412c588a968954829f6a23d54bd55a3d1a63e965cc071a414783b9eb66f4aec7b4c26cbdacfc23b20e29868be1783b0313245b647c272f58ceec80dc0d796a80ab693526d48e34b2225cc5151c73248f88742d65ddbc79dcc353503f763fc7b4fc09bf857610eaf8d0851dbf76937d66a82a425c736c5419a71ec5401efeed8955dde0c60f225478552c777ebe0697670c25a3b48d0f7f319e84f867"}, {0x38, 0x1, 0x10001, "22b38857b5185c6a26ab8ae44e3fd28eda83ea2453d3ebe6aa65d35a01386023e057ed6d91"}, {0x110, 0xff, 0x53, "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"}], 0x308, 0x4048090}, 0x1) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000be7000-0x8)={0x0, 0x0}) accept$inet(r1, &(0x7f0000995000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000039e000)=0x10) 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000de2000-0x1)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000d3a000)=0x0, 0x4) r1 = accept$inet(r0, &(0x7f0000ff4000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a20000)=0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000a87000-0x8)=[{0x7, 0x80000000}], 0x1) sendto$inet(r0, &(0x7f000072a000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000ddf000)={0xfffffffffffffffb, 0x2, 0x4, 0x1f, 0x9}, 0x14) sendmsg(r1, &(0x7f0000a9a000)={&(0x7f0000a96000-0x6)=@hci={0x1f, 0x5, 0x3}, 0x6, &(0x7f000057f000)=[{&(0x7f0000aa7000)="956e43a9e397311bd25179a72d6950e60c8539dbebfc12a902e305bf", 0x1c}, {&(0x7f0000f73000-0xdc)="06a09aac9c1814010abcad6536c4407bc6de35199b6c0b945a05fda82ed944b8267d76444fd5d6519f1bb3e1e41e3bbc430552e27e6aa48da7648a233996b2d9f223a215f0b5ec96a28b31b0de01e3d61ac5bbefe8e0399aaa7c7adb8b29fff4c2403bd0e7d6f249691d83f3079f043501a187a0a5f3b03730fa3ec81c7f4b24cbd26dced27a90abcdb64bf8c84938a5af3be0e7e7013219903f6f27b6cb6c0b158b6dc7ed91eddb19735ef4dd7e5bc1638af8f12b2952b17588fe24aeb0cd3400c2f3958c0c7948efe24457a822acd7c7c9556a0cc668a9be870ce2", 0xdc}, {&(0x7f00007c9000)="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", 0x1000}, {&(0x7f0000dc8000-0xec)="94ef7017f055e59f1a6f316209ca10ce0e1689ee8247f9da3d11fdff9a200e17efaa887533c2292aa8ae73314a4dc5b234d0494624577bf63b2b8dd4e432e62d587a83754e35e3f27241d66c14295b8d8d2382897a2cd4fda50f6c8bf87a474c2564c40350260396ea332364ae29791782e5d993cd230ded0bf012f6b1eba1f9856aec86a7a62a140d11579af84e1e2a32f7e2d00245a299592e94708a23f4b715bd33abddeede5003b25883c200dd05bf362c790682741cda059d35ba90b14c6a935959593d705fe4152023f6507457b5a2c16942fb78f999e0df8656d7d13e55a74d34c114f4131f96b643", 0xec}], 0x4, &(0x7f0000833000-0x1288)=[{0x80, 0x102, 0x5, "204c24924692e87a69426a8658f8e7b7e1bdf0bba55069230b8376f17a3ba4a9956d49f9e23334a009df54de2121cfe8d8b77c1d979ef389338777bd126f340272f9bf7df1e36cacb3ac73c3fea4521bc44fad3073b566f7b38a38a81539b5da94a3a51c2e5f305060215a7affbdb266"}, {0x1010, 0x101, 0x6, "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"}, {0x68, 0x110, 0x101, "e5a69d04dbc49a5c590d3aaac705c31e253d66935eac10e7589917e622ee0421db04e1ce253eb0627de5bd48034dd010b526be8faaf123af338cf0ef6abef549d5af738b8264467714666455a8deb22fcd"}, {0x10, 0x108, 0x4, ""}, {0xf0, 0x10d, 0x1, "e89502e81004164fe25789775b9e7f57f6829adb40d03bc73e4d0ea8e3a823229b4ead59c1c51fc7e695700e70d3b6fa2124470f1a44df3fc4bbd17a7fb5f22e30d25aea9e2ddacd936ed51ff680e72c578c4635cdbbc3c68dcb396ca5a6f6e5dd7b039bd24226e2125717907682ba36b891cfa5c2858fb60c0652ada8ca24b176312654c847a3e1b3093fefea97409949a4b07261b1bd1e45a45191be5cc540660f25c3c50019d79e7994df194785c6865c024ead2ac10856cf8fe0062db341ea0149eed201f6f0220946f1d53347ee50b1adb9545d75948c9fca89ba8696"}, {0x90, 0x6, 0x5, "fe0841afef3d7a5c37efe1025d179ab79af25e1fdc5b9fac99af086ce15ab5f2877c4b08d8b96876c9fb16041d697a680a27a9ee580ef74c17ba94110ce997f7c8747eaa2702cf732340d6d3227d52f98b9c65889a1c77259964630d695227ce162e1111c53522e79a31551ffbec6da79effb275c7398a985ca624a1f2"}], 0x1288, 0x20040800}, 0x4040010) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00008ee000-0x4)=0xffffffff, 0x4) [ 74.160822] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.168587] binder: undelivered TRANSACTION_COMPLETE [ 74.179163] binder: undelivered transaction 589, process died. [ 74.185458] binder: 13740:13745 ERROR: BC_REGISTER_LOOPER called without request [ 74.196933] binder: 13740:13745 got reply transaction with no transaction stack 2017/12/24 06:44:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000710000-0x8)={0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000027000-0x4)=0x1ff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000012000-0x8)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x0, 0x0}) times(&(0x7f0000013000-0x20)={0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:34 executing program 7: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000308000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00005ff000)=0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10001}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000d5e000-0x8)='./file0\x00', 0x3f) mount(&(0x7f00001cf000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000fc2000)="") mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000fa0000-0x8)='./file0\x00', &(0x7f000069f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ec2000-0x2)="") mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) lsetxattr(&(0x7f000097e000-0x1)='.', &(0x7f0000042000)=@known='system.advise\x00', &(0x7f0000493000-0x6)='ubifs\x00', 0x6, 0x2) mount(&(0x7f0000378000-0x8)='./file0\x00', &(0x7f0000188000-0x8)='./file0\x00', &(0x7f00009b1000-0x6)='mslos\x00', 0x1020000, &(0x7f00003a0000-0x1000)="") mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f00006a0000-0x1)='.', &(0x7f0000eb9000-0x5)='cifs\x00', 0x2000, &(0x7f00002f5000-0x1000)="") [ 74.204434] binder: 13740:13766 got transaction to invalid handle [ 74.204443] binder: 13740:13766 transaction failed 29201/-22, size 0-8 line 3004 [ 74.248452] binder: 13740:13745 transaction failed 29201/-71, size 24-8 line 2920 2017/12/24 06:44:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f00003a7000)='/dev/net/tun\x00', 0x0, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@sco={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00004fe000)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @rand_addr=0xffffffffffffff00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/12/24 06:44:34 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000003000)='/dev/usbmon#\x00', 0x8, 0x30001) ioctl$TIOCSTI(r2, 0x5412, 0x10001) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000b000)={0x44, 0x0, &(0x7f0000004000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000004000+0x2e0)=[@fda={0x66646185, 0x7, 0x4, 0x25}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f0000002000)=[0x0]}}], 0x3f, 0x0, &(0x7f000000b000)="be7cf9fa3fbbd376832843551e226e573581778d269d393e38fe0a76b1e1eed19069edc8ed800000013b222c361c3048995af339bd4cf17436c1d582e7e43c"}) [ 74.268151] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.273848] binder: release 13740:13766 transaction 594 out, still active [ 74.288637] binder: undelivered TRANSACTION_COMPLETE [ 74.300225] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.307154] binder: 13796:13798 ERROR: BC_REGISTER_LOOPER called without request [ 74.319921] binder: send failed reply for transaction 594, target dead [ 74.348933] binder: 13796:13798 ioctl c0306201 2000b000 returned -14 [ 74.356202] binder: unexpected work type, 4, not freed [ 74.361464] binder: undelivered TRANSACTION_COMPLETE [ 74.366892] binder: undelivered TRANSACTION_COMPLETE [ 74.367878] binder: 13796:13801 ERROR: BC_REGISTER_LOOPER called without request [ 74.370277] binder: 13796:13798 got reply transaction with bad transaction stack, transaction 603 has target 13796:0 [ 74.370284] binder: 13796:13798 transaction failed 29201/-71, size 24-8 line 2935 [ 74.398063] binder: undelivered transaction 599, process died. [ 74.404363] binder: release 13796:13798 transaction 603 out, still active [ 74.411550] binder: undelivered TRANSACTION_COMPLETE [ 74.419793] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.425274] binder: send failed reply for transaction 603, target dead 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x0, 0x47, @cisco=&(0x7f000000a000)={0x0, 0x0}}}) r0 = syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r0, &(0x7f000000e000-0x1c)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000006000)=0x1c, 0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f000000e000)='./file0\x00', &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)=0x0) 2017/12/24 06:44:35 executing program 0: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000e37000-0x10)={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000789000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8001, 0x7ff, 0x1000, 0x4, 0x8001}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001000-0x6)=@assoc_value={r1, 0x5}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000236000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x26, &(0x7f000001d000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = memfd_create(&(0x7f0000a79000-0x13)='}!systemvboxnet0\\[\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f000078b000-0x8)={r1, 0xf6}, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f000039a000-0x4)=0x10, 0x4) fcntl$lock(r2, 0x5, &(0x7f0000e0a000)={0x1, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet(0x2, 0x80003, 0xffff) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000899000-0x8)={0x0, 0x7}, &(0x7f0000861000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000e04000)={r6, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x4, 0x2224, 0x8, 0x8}, &(0x7f0000ce2000)=0xa0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000b2f000)={r7, @in6={{0xa, 0x3, 0x1, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x9, 0x2, 0x7fff, 0x20}, &(0x7f000031a000-0x4)=0xa0) recvfrom$inet6(r4, &(0x7f000027e000)=""/108, 0x6c, 0x2100, &(0x7f000043d000)={0xa, 0x2, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, 0x1c) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000013000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000265000)="0000000840000000000000000003000000a1160005000104000007441f51df0900abd6a69f5edc6848c67e27195f6c4da7bfd5f5be99d0ab5ee34b37a6099ad3f17e79c7b0ad721651348405bf4b1416277aff0785c87fb8b5d6cb019e37164033dc57460620c56e4649df0cfdb0f9173b5e52d7afac55e43af9f89258f4dff1ed8ce32b63a72c21ae6d303197878858437341cfcecaf8ac79191f74c6300438d3b5d7904093946bc2cf3ead2cd4c71b56e875921bed373ac4f18759d53383fa2a902802000000000000007a3200be93c409553acdcaba44f5588d9b85837b27c5279ae5e17cbdbe2979", 0xea) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00003a8000-0x4)=0xfffffffffffffffa, 0x4) 2017/12/24 06:44:35 executing program 7: socket$inet_icmp(0x2, 0x2, 0x1) getrandom(&(0x7f0000b88000)=""/128, 0x80, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000000000)=0x1c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002000)={0x0, 0xe1, "24b6e0c058d5487371dcdd77d98dfa9aea0c50451c21a3f9706bde0692a037cf9e7a4677a816cf1c0b93a83ab0088e4f08250d4116ec7f2671d892b4320cfaa9f91a048822741a15192dbe82d14db4ded2e593fcb892e9fecab844b24376d0cf492b392a661cf01f20dd09e4b23f3e9ad53bb387ee166347225f577373bf4321c229211d3c3eefdb28cb0eb8215b1a6621d912c7369e253c00619c6697b10278ad0ef16c5cd23128c6443e2f04f0c6d98c49f31da828789463bdd902f6754dfd26f995f22b530d5d604bca75f2624329e03c65ebee5aac6bd372db2fffd850d65f"}, &(0x7f0000003000-0x4)=0xe9) fanotify_init(0x8, 0x101000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000004000)={r1, 0x1000, "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"}, &(0x7f0000004000)=0x1008) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000005c000)=0x0) r1 = getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f00002e9000)='\x00\x00\x00\t') getdents64(r2, &(0x7f0000001000-0x1000)=""/4096, 0x1000) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001000)={0x0, 0x89, "8a0fb3efdec8313be079cca832301e29b006042c36db6b11551ed76630d222a2587c48ef675af4b79d774a6854b97ef180775ca3f8639e08a53873779ef67bdec2a28630445a74762a77e01759c5bba385d45207cef126af098a7a36dfdb45567bc7090c315f07049e997a89c4238ca3c7e0b205b8e2b65fe09fc1d6708ca7dcc3df0621cb10e6bb18"}, &(0x7f0000001000-0x4)=0x91) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x401, 0x40, 0x8000, 0x5, 0x19f9, 0x2, 0x8, 0x7, r2}, 0x20) sendto(r0, &(0x7f0000001000-0x1000)="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", 0x1000, 0x40080c0, &(0x7f0000000000)=@nfc={0x27, 0xa2f, 0x2, 0x4}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$llc(r1, &(0x7f000020c000)="7c6e7c81d825816ae77938c03e004e2f2a16be23426973ba62eff2bffbca6cbfd7bc13dfbd5ec6080d7abe984e4f6a7e2f87c83c52e856be0011d9bd524a4601e588a34ada4b5d6058640ebc71f452bd027a95a72eddb4efbb468927132cd4e952811ece5f8c114ba8b5e66ea8175c397cf14c50455c8ae44eeca7f551a32f7e4160464964f9146b111f1cd5afc6388e3ef6c5f64fd8f4590c7e5128048bc7ff321bcfcbe7c9f9b9645c315ea5808ca9a5163a7c5bda8094f9b9cede6bb4740003812505c3a3439df84f817dc8fcceabc7634ed376fc0c57fc1a326dde2b518dfb", 0xe1, 0xc4, &(0x7f0000b20000)={0x1a, 0x15, 0xffffffff80000000, 0x20, 0x27868271, 0x4, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000406000)=[{&(0x7f000011b000-0x3c)="3400000013001946e100ff00000900ffefffdfe6010000002b78ffffffec800511000100fff1f2fffe000000031100010018e907", 0x34}], 0x1) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000000b000-0x8)={0x0, 0x0}, 0x800) r3 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xa, 0x811, r2, 0x5f) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000-0x18)={r3, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) restart_syscall() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f000000b000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00006e7000/0xf000)=nil) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c4c000+0xe53)='attr/sockcreate\x00') sendfile(r0, r0, &(0x7f000017e000-0x8)=0x0, 0xffff) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000854000)='/selinux/validatetrans\x00', 0x1, 0x0) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000001000-0x8)=0x7) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fallocate(r0, 0x2, 0x6, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/rfkill\x00', 0x400, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) pwritev(r0, &(0x7f00006d6000)=[{&(0x7f00000e2000)="786115016cb2fffe55971c0529b2a57e35933597ecaa5aeb77cb8a27cba3e810fd7298bf880ecf8c95aac222b61fb72653a55147d8f79b25a7ea062a7c30d6a69578422bfd22fe775cf47288ecaf1dc97f6b0b", 0x53}, {&(0x7f0000e62000-0x9a)="92e312f5f7ec31a5d8d12ddbeb45ed30e8ab66f60688b6aa5e36cdfe12a4a6a1d4af808835614aaee50a8ac016c17941d93f1b0695edb54ec7332cf275bf88a26f93401adc2fe21dfb985b0c98043f6857a2247cf07bd977633e1a8bc6d90a7f178816cd5afa0985e5de2100071fd586bb47d5fe23f67ad71f4a5742475f3fd6b1e698194ad1df8c7b6a695a4a6f8abfc830d29128b1457b79bd", 0x9a}], 0x2, 0x60) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007dd000-0xc)={0x0, 0x0}) [ 74.514677] binder: 13809:13810 ERROR: BC_REGISTER_LOOPER called without request [ 74.525294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pig=13821 comm=syz-executor1 [ 74.544343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pig=13832 comm=syz-executor1 [ 74.549677] binder: 13809:13810 got transaction with invalid data ptr [ 74.549696] binder: 13809:13810 transaction failed 29201/-14, size 24-8 line 3146 [ 74.549703] binder: send failed reply for transaction 606 to 13809:13830 [ 74.550040] binder: undelivered TRANSACTION_ERROR: 29190 [ 74.550048] binder: undelivered TRANSACTION_COMPLETE [ 74.550053] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.561186] binder: 13809:13830 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000364000-0x28)={@common='sit0\x00', &(0x7f00007b7000-0x48)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00003bc000-0x9)='/dev/rtc\x00', 0x800, 0x0) mremap(&(0x7f0000d70000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9c000/0x1000)=nil) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000e56000)={0x0, 0x0}) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000f27000)={"2d755c85c4b753fba9456b4983e45a0e", {0x4, 0x1, 0x6, "0e85a9b6a755", 0x10000, 0x0}}) readv(r1, &(0x7f0000021000)=[{&(0x7f0000f8d000)=""/168, 0xa8}], 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000f90000)={0x0, 0x2, 0x30}, &(0x7f00008de000-0x4)=0xc) getsockname$packet(r1, &(0x7f0000cb3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000023f000-0x4)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f000001b000-0x50)={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9, 0x280000, 0x6, 0x500, 0xffffffffffff9103, 0x4000000, r3}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00003cc000-0x6)={r2, 0xfffffffffffffffd}, 0x6) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000a2f000)={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000ed7000-0x4)=0x10, 0x80800) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000eab000-0x7d)="43bf29b234ebfe5afbf8dd51c257e31299d476eeed82de5693ac449431e467e728934a5bee5ae174a28b2be5689c03cce8f30ae55e1ff12f4000d524a6deb15375986d50b79bf4731970c23c6b27e1c1d4ea14e44a6f9115db8882df7f57fbff8ee4bac5be99122a1d51989efd9bb4495dce06437d6bf001972a6f9b0d") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00006e9000-0x4)=0x1ff, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000001000+0xa9e)="020000f401000100a900be8c5ee100000000000001000067", 0x18) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x10080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00002f7000-0x4)=0x400, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000684000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000358000)=0x0) 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000fad000-0x10)={&(0x7f0000764000/0x1000)=nil, 0x1000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00008f7000-0x10)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001d8000)=0x10, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000517000-0x10)='/dev/sequencer2\x00', 0x20200, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000a19000-0x30)={0x44, 0x0, &(0x7f0000a26000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f00002a2000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f000092c000)=0x0, 0x1, 0x6, 0x6}], &(0x7f0000321000)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x81b6, 0x10}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001000-0x10)={r2, 0x6, 0x5, 0x8}, &(0x7f0000004000)=0x10) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000a000)='/dev/hwrng\x00', 0x10a02, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f000000b000-0xc)={0x0, 0x10001, 0x30}, &(0x7f0000006000)=0xc) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000002000)={r4, 0x800}, &(0x7f000000b000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000002000-0x28)=[@ptr={0x70742a85, 0x0, &(0x7f0000008000-0x1)=0x0, 0x1, 0x1, 0x30}], &(0x7f0000003000)=[0x0]}}], 0x0, 0x0, &(0x7f0000001000)=""}) r6 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001000-0x70)=[@in6={0xa, 0x2, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffffffffffff0001}, @in6={0xa, 0x1, 0x400, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x2, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, @in6={0xa, 0x3, 0xfffffffffffff801, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}], 0x70) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f000000b000)=0x0, &(0x7f0000009000)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000008000)={r5, 0x2}, &(0x7f0000004000)=0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f000000c000-0x18)={r7, 0xbc, 0x30, 0x9, 0x7}, &(0x7f000000b000-0x4)=0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000454000)="cfe82b8c316741c8e95bfe103de302256d33e98eb96f232ac72692e3189720120e4d342d261f9546f44c8d152f9f42b2227e3df8d5e97a5b1342c1cb2a8bbbce8423d52e61055596ecc1ea055175d40b8269c0664fc529149c9e5874edcd163472fd9022685f29f6a4cb02ac247bf54d19fadea771d42602a410848163bf07d3cc1f021946423223f781cb559f736885265be70fca72083b9339e8bcb74e54968d1b8be130fad3bdc4a2ac436b1e082e4f0b0bc375e17f07e249b94c9c981eb1c3567f1c0a656ebf619d22eecd374d6234075fbb80b1dc36c9342364dc3a73b3fa6cba131f") setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001000-0xb)={0xebb0, 0x374, 0xa4, 0xfffffffffffffffc, 0x9, 0x80000001, 0xfffffffffffffffe, 0x8, 0x5, 0x8c, 0x6}, 0xb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000002000+0x901)='dev ', 0x0) r2 = dup2(r1, r1) write(r2, &(0x7f0000321000)="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", 0x156) sendfile(r1, r1, &(0x7f0000001000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) creat(&(0x7f0000dfe000-0x8)='./file0\x00', 0x0) fcntl$F_GET_RW_HINT(r1, 0x40d, &(0x7f00003e7000-0x8)=0x0) mount(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000)='./file0\x00', &(0x7f0000231000-0x5)='9p\x00', 0x0, &(0x7f00006ca000-0x9a)="") 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000007000-0xd)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000007000)='/dev/pktcdvd/control\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000005000)=[{&(0x7f000000a000)="f64b6f802ded", 0x6}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x73622a85, 0x28, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = fcntl$getown(r2, 0x9) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r3, &(0x7f000000d000-0xa)='net/snmp6\x00') 2017/12/24 06:44:35 executing program 0: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000-0x68)=[], &(0x7f000000a000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x0, 0x0, &(0x7f0000011000)=[], 0xde, 0x0, &(0x7f0000006000-0xec)="ef7e012f6dedee7f24f0f1408ca3662d07dd3b564a5f775291eb7cfd3c7303c239d60396a2b0d00c7ba73cdf425373ba6c0ed9c15ace0e07973b0a7a4e896178660036ead3c45e3db404d38c7f0abf8a7e1e2e710447f0ec93e717de20a81366c5f0b3c57795367a4fbafbdf474a87cbf7a461c1d785883bb7da6c67f03f21703efd5cd3de10a906355794d2fd44028a3501650048ae53bbccc20a6f9f2a05992946010124d71b64a7e7c389302d34fff8983fc8cf5f39af11cf4f5edd6a75b820e0767c839fefc0220df5f72da23f52d4c73aa7df4388f5c736869601b2"}) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000006000-0x10)={0x1ff, 0x6}) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fa1000-0x12)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0xc97) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070d000-0xc)={0x0, 0x0}) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x100000, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) poll(&(0x7f0000ffb000-0x18)=[{r1, 0x0, 0x0}], 0x1, 0x0) [ 74.562824] binder_alloc: 13809: binder_alloc_buf, no vma [ 74.562839] binder: 13809:13810 transaction failed 29189/-3, size 0-0 line 3127 [ 74.581591] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.648700] binder: 13845:13857 ERROR: BC_REGISTER_LOOPER called without request [ 74.657085] binder: 13851:13859 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xc34a8b8393c99bbf, 0x0, &(0x7f0000002000)={0x0, 0x989680}, &(0x7f0000001000)={0x0, 0x0}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) symlinkat(&(0x7f000051d000-0x8)='./file0\x00', r0, &(0x7f0000793000-0x8)='./file0\x00') [ 74.659940] 9pnet_virtio: no channels available for device Ðïµ™ [ 74.672751] binder: 13845:13857 transaction failed 29189/-22, size 0-12 line 3004 [ 74.688118] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.699212] binder: BINDER_SET_CONTEXT_MGR already set [ 74.702909] binder: 13851:13869 ERROR: BC_REGISTER_LOOPER called without request [ 74.703635] binder: 13867:13875 got reply transaction with no transaction stack [ 74.703642] binder: 13867:13875 transaction failed 29201/-71, size 0-0 line 2920 [ 74.710164] binder: 13867:13875 ioctl 4010640d 20005ff0 returned -22 [ 74.712380] binder: 13867:13878 got reply transaction with no transaction stack [ 74.712388] binder: 13867:13878 transaction failed 29201/-71, size 0-0 line 2920 [ 74.722557] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.724682] binder: 13845:13857 ERROR: BC_REGISTER_LOOPER called without request [ 74.724717] binder: 13845:13870 transaction failed 29189/-22, size 0-12 line 3004 [ 74.729162] binder: 13851:13877 got reply transaction with no transaction stack [ 74.729169] binder: 13851:13877 transaction failed 29201/-71, size 32-8 line 2920 [ 74.756904] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.792193] binder: 13851:13859 ioctl 40046207 0 returned -16 [ 74.792224] binder_alloc: 13851: binder_alloc_buf, no vma [ 74.792242] binder: 13851:13869 transaction failed 29189/-3, size 0-0 line 3127 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00004e5000)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00002b3000-0x28)={0x57, 0x1f, 0x0, {0x23, 0x6}, {0x8b3e, 0x7f}, @cond=[{0x0, 0x7, 0x0, 0x63f, 0x0, 0x3f}, {0x938, 0x3, 0x80, 0x81, 0xff, 0x432c}]}) socket$inet6_sctp(0xa, 0x40000000000001, 0x84) syz_open_dev$evdev(&(0x7f0000ebf000-0x12)='/dev/input/event#\x00', 0x9, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000adb000-0xa)='blacklist\x00', &(0x7f000060b000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sg(&(0x7f00003d5000-0x9)='/dev/sg#\x00', 0x6, 0x10000) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000ea8000)={0x3, &(0x7f0000781000)=[0xa8, 0x81, 0x0]}) 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000017000)='./file0\x00', 0x80040, 0x0) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000014000-0x6)='./bus\x00', 0x4000000) inotify_rm_watch(r0, r1) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000019000)='/dev/rtc\x00', 0x8041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000010000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000017000)='./file0\x00', r2, &(0x7f0000019000-0xd)='./bus/control\x00', 0x0) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000521000-0x8)='./file0\x00', 0x101042, 0x4) ftruncate(r0, 0x7fff) creat(&(0x7f00006fb000-0x8)='./file0\x00', 0x0) 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000fd1000)='/dev/input/mice\x00', 0x0, 0x20000) recvmsg$netrom(r1, &(0x7f0000692000-0x38)={&(0x7f0000c01000-0x10)=@ax25={0x3, {"1bca9b4e7d89d3"}, 0x816}, 0x10, &(0x7f0000f73000)=[{&(0x7f0000f4c000)="2933d07b4968c2edab8ac338a61f332bd1e2271e7b3ace27b0a8feccef3ac395589fd65839eccd125c58c6bf73f5710b48ab013e98385e9f3735a622c5d3509232a23edb5de48dab8852fb2c80da5f5ad069c25b40ba96f0ebc6a1595f232e4070c247d3151d4936cc62bf012c9a971bb9949fbd0c2ab366219eaffcc1753d2a3e0b04852b61f465fa0e4c841a126972dd3b39b225ca1b38e845d151cca376a97f144626f071211a112d3f92db1e398f00d5bf8425cc3f9bb7a785b48efcb431b7506f89de7e6305bc6d791de77efd3e9f3161f9113487ba718dad467e824a43ba1c6f9f2d5c96cef76cfec2fb5bc7b87671cd646f2e7632ff7faf74297efcf58be4bdc0f288d0fcd1fed89e8d48d45d63e6fac168c807a7f85005f02fe890e1827304d4682ab9c8c8a30a5abcfa5bd42e1bb7d8afc01c78cd0ef8f0868f8b97c1bbe6f9768518c39951d26107457694c0661a5ef770d32119282ded174342deb9740860e1b2264071b8dcd2125c9904a1dc7f100155a896560ee5e8234162a383403eb73ee62265cb12af128211714f6598f39543fe7eaa19b52f3292454a02787070861609d9834a03ec1ff1852e2f266e9f841f143abc8e6bc9eab7949fd10ee9c3b9e9ab4499e71fa82c56d8659c5dd2a45d0efb07d4508d6ab17dca64bdfb0f403a234910aae8da491b94516c358324c4067ce787eda86545313c9131ea99133181098182630d3e90220a0eb5f970d7bdc29e233d01f0729cb5ef6815401867c2d87cab18af0c7b6289f8a578d39986ec4ef7e020467f9e55f65b8cb68180470d5746d29854b6a42ac38bd50d146b8a6ebb5029ef3ee045f33e1344589fc891e263c7b95e7facdc61d40c4b6e14c1e192849bb0dad7e87085cb0cd6f2f1a37734b9fcce6804ef1ccd59dd944daa4e857fd7ef9c865a9b723574e5d3a4a4f2a4735179d0a906fc14e1b00cf29f1a6c3acbb040adfac549eb5c4c421fc59ff26d41b4a2694b061f4d6df6854faf5965ada7cfe39d116637971b6aa29303a4a86257d0bf026002e29c1185c4e63c41f934c265043f81f9efb92c15be0afbec49c94ab4789d02981be7f72050762031bf5998564d491d3a0b93f21e1ebf406d4adf609b410229fa6f6a8f8334eca6b5727a61d30c0365893db9c1e00b42e832f009261aab8daf18b37d61505122442cf24dac7c85bd0597d46618534288ca98f9284a60442026c13cb9e48087e7a1bb85c2524b2bce6156d0b1cd90bc9d2cf087c5b5faae5479a27af3cb42c667aa200c5a50e47a19473513e80c54e8692b0e66347ef55c08601fab6dd33cba5c67650b0c026ac14df2c22f2902f9f34fd1598e749bad6267ed6b7e26bd6fa8db23677b717d430a4affa11504369038e7f2339aa464e5b60502dd78e6a99e7b13e3683c9cf79bce3dad7ab712cea4ca0ee9b4b269bbd96fdec3cbfcdbd81d9aec3a215ae84e6ac9b2599104e5d2aeb5f0472e1b8212820292e2055ab4bf48f7845b9d3fee3d6e9749d77988da1b0d4d98aaa1c4b2b4851d1dad4d6486d5563278776b57b40fa201327b587df9af9de2830dde4023ceb5fe082113d665882262f8823a6fb6ebe98481221734d86ed3e99d28ba23489bcef6447e6dd1333ac5353570c6777414addbcf9bf841d0ea26ce7ce82b681ab197b7126dfed93eab9829f57d9698d5f0ce1f4c4641659eace68012fb30f6ed6fc9241fcd9e9e91fe0e446163923a21f9365e3c3fd6db03f2c9459acdc6dfb02b7a12724fefbee35d1425859240b8197c54823c609d50ae5b8f7120b7d50cafee706b7744a98e99c2db966a2955ef7e19fc8669a40cb759281b3d608c2c8f9c9df0d315b978df71dc57fd6449addcc252f61f14f8199c761e62dcfa2804ff97bffd71f74bba16995fdff489daa3d68718b9c49f179c07909b93612d65c135a269884004cb96407519ff1303b4cd38d97a1cfe1c432ca6c883a7e1a365cc1acf522cecad7c9182c45ca2c08f529a34841ca8d25bcdbb27931445071e6860cf9d8ec03a8be74f76a2213c4813a9db7914973754bdaa4264f192ed21f48e77bfe33534ee460d83fa491f33ce22ce81f249389b9886759e4f6c21baac7152eb58f01ca88bd7dfb9caa645b831f0bbda212f95a59359a763d7cb38467d5194f975360fd95de35c0b0b24eb15ebd985c3e20f1ab0be5e3974d39193b52a67c3b7ca8a2b7c6474d5223374c8d0f760c7089e0de0a73bd3b7ce7d1502143ff097e45241a809fc22f2710045149a75bf6365a1f7328d3b1e7103cce53d29eddd3e8c0c92608897876b1378e0ae35809c4fbfaa830c323a9996cf7c1224ceef5b31cf504b5c7dafe1219de166117b2b3d41a5ba583ee975c326046b9dd1a93b6a31174de80939c67fa93141fde947be7f89c015df3f90f2b6e36548254003bf55f2e9fe48ca953f76d080a7ed14f5e6a32efe2daacdbab6115e425b691d08d1f7dcf1c98e172edf16f347d2893157f01c37c95f6d9df87726d0208ab4cc1435191c23f5d2c64cb8015780a18364623cfbe82dce66042e25a324c1a9b70b6c28e6097bb051d93ecf8bfcd805d1a0d7178efafed9c3c08ab9a34ab026253e0e6bc527a7b8ca87f2198bc275b2db2a279ad13150fdce962b455cc0431f5bd486ba2d956f158f689e057fc7009c8ec0d49416322d0a268ee6f23c94226da0fbeb960cc8de5c4774e047f31275405869223339090e92a3417b92a7fbbe13ffc8ed755442413c7a55afe0c07d3d9ecb7dc533150d089e66a1cdd9dd1bb1c2dd904a752341be627e677f94be4d23da6225530674232ac37965c9b283a276492a94f6984b6f48ce80d6b96733a3e006b70cdd9723911175e636e98aadd21bdae6cf3975597d0667ed2dd8835f7647c2abf01527def495388c0a1b096343bc7233718556cb72a711049bf37433271f0bc8ebd98ef668fcc4e8ed72c4452a4c44278c4c49697952eef56b4b62985d15576bde6ffe26a049d64e6f1b4bc1ee9a41ea22a7792ecba6860ca7f30ea167cb670a71c06040f0777f2f3f26fc3ff49a912f43eb3c57cefcb736a3f35bc75fc7963570f34c5d1467eb3ceeafb3ffc28f8b426da812cb1d5b4f3aac3e9e8519fb04289a3eadd8b9e3386f0790cd52c34922dcf56ba271a2199affee395544f19391701311e6c4e3ec426fb0a1192a8dc936ff3115af384473751ff714aad32084dd5ba6c033d9f02aa00c6a4b7d8e380f7dd7614847c93adff97f20fc6933de1418c42e8eb9fe1992e5a67d208e67c4be6c03afb06b19c8f3de02224a91dae4eba98628572884c9a051debf5105d375828929d1bcd16be8318adc16cc88b88dfcd6767e7c688033d8c08bede37232b9e7ca247f13891b4a951b9d9a281ca341901da64c5fa2615b9a0c8b3bcd9733631182737699a669bba1c9586e0fb2f918fa6b31075a793656a8c077c05c97a67885edd544dcb87404cd31732e083b7675746bb56a077a431b1b2ae565f19a5ec83857d9ae546c4348ce73a00d0c10945260d8e2b08982d59fad4029e6e175e9665e348d5ca91eafa33f33b650f8952b9fcd229f21654eb847d616b79b89bca6923483a5481b14761b2da4f5bb4b0cfbcbd6dafb9c945e54d1d9459b4cf9d984e4a1f1a90ea3b1fabd7c104c2611dedb8b9f209156b6248e448b6d43ccd4cd34512d153e7dc1a298cc982028982685a8b37c3a950668df637c5e18c0c6a1795bd467e2a5aff3d6e5869ac5ed637142e8797c93bb39a7f27eb0822125b8a48b605fb4c38e2ba22a15096c9fa77eb001be526fda6e4c05900f668089b6ca3255dc455c21f77d50c4f389449d2cc322f5f5bbd0f1cb44430258bddb1ba18e7ac92910b65f8e5de33646e9a228d2d9739302293043c9990f945cbbc8feb2c70a4c042fe4901ccdece151d156e4e31d41a8d5b1fd93a580a80732178e7c226604f757bb2b108f4833306c149611c2f5390ed5a1965c1de4f6f4ce59539cac86899dd044edb3cf663f06006e6cd834d5a23dca18761105baf56895e6ffecc1ee403c6ba4c19e52a706ee6801baab645876a8edb82e88bcfeb09b92c26da48b7415b4bdb731539bdd4d311a4276dd38bd2fd4586fed2b113368f2ef776c40430df2d807a7e67f436ba4c1bb718e85446f497f6f4b083bece55427f4b55a4b5ef984837740dc98ab2a1e717940f05da08353ebe2d91bd39f74e6d1f7cb49d08b103655afdd85f471dfce5e4ceed978b6c9aa1d0bb92e5cabedff4591e0f62d63a070a7f713aca3b963407950fd84216cc2790364ff9b159777472237f992cea440b4e7215a9fd2d881391c0b004801ab2ba17a6ccc27e07b97c3774c883f7c76b49098d70ef96f0b72503a3d9dccf3a9b8961ef0301dd06358e814a5aeaf95be154b8ca3294c036daed8a50bd51ab63cb9836bdc39c761c0b7f5bf353f187146ed151d3a223bd4d1d71327b6c0676360d680107f94912cf0303ba203f388122a3197b4b9f961973ab4e562af6c88b96754ebcd64a7c778d6f98f330647dfd251183d7dd09d6147b8ae87ecf48cd683e3847e2c36f37b719f140a81eed859b12341fcafc049bbc182934acc5791913634fc521fcf2b70402d18d14c0fce10ff315b540a7cbf7dbc884e18144efe7f9eac13a12efa67ee1af0bff44fdfd1873beb9f175649c1209293e83b3bac7b96bf92c735a9a2f14b6b171b8392dae71ce98f25f4cb8b232bb53d5fcd0961eeb01255ea4892c10751c2081a07acf5059b7fbab3059b4dd4c0399d503939e6fc9292b2ffbe203da1bcf18416b50bbc99513d1d40b1db27074a56aaf4e762d4cc50db6780fcebbed07e59b8c8cce180095c13e9e97351556d47619230363c116fccbde7cc6f62cc300b6651301c7a49af5949a7a79157722646191fdce8f835c0f2432bc8c02b35fe261d4669491aae613161f7f9393ce36746164fec4624c364b5916f5316551ead75cdf5ea853a43c4d2d44426d55ac6b5aab3acd2da8cbe9d54546f7adac45585fa6aa2dc750ccaa94add973096186fd6ff99450e306d90d02e28be3f8bf92f6494bf077ab93207f54c21cfc81ce48728e5bc4ae579d080b35fd2b33a420085b980d6a23da45fe9571c13b2c69140a56eaa0b25489357aa7a26074134b7699ae8ea58b0e572703379cb36d267e7e07adc739572be33c10c059bfc68bfbb1ea74fe8c5ee6d6b34ea1449c690f718d3f9b84089cc0803097f4dfd06cc80076481723dabba7b44dceac0058ad23258138b193479152ad5284f646695022b136d90398706d0159c1e384d32383140e5fa4d71d3f8f55990ffdb15c59137780ab9d1759437478b8f49184c76e0c30607d04f8044b081db4d35a6cc7d39292ff439018e2e81ad3c05e0d49d70a56cacf8aa62b6ccb2182ac86999a02c2d62165ccd0bea489ead4f8f1e45e9815269bbef4b43eb261653524611c4982c801e22e7eb10f76913d51c32889f90b2902e0845bebf03760825ba52f35e69f6c82753f48ba794899acb1998722832b612a7598a002abb7b7d41eb201fecca385efe08118ad2c6488bb0f6500da828ef2b215d8a4741d2042624bb76cc229a269fb1d889dada4b7a48a3d3b5f80e1acdb8bad11c553842acdbfbf3b52bd97d52b88a915296b4480ab990cb3692c2a1a183d6b4063b75da9031fab87770ea882999b92d2ba4cbcbcb8bc0c13b11093729ae7babc95f2619d627677ec8a0b9e4095dad3269d4015be796e09e5697e4001525e1bb86665f48a84d5d95343aa0c6e1", 0x1000}], 0x1, &(0x7f0000e82000)=[{0x1010, 0xff, 0x20, "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"}], 0x1010, 0x24048000}, 0x40002000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000046f000-0x8c)={0x0, 0x200000000, 0x2, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd", 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r0, &(0x7f00000f7000)=[{0x9, 0x4f2, 0x200, 0x9, @time={0x0, 0x0}, {0x81, 0x2}, {0x0, 0x80}, @ext={0xd1, &(0x7f00009e6000-0xd1)="bcc70b6c310bdc5e8f3fb7d68e87e508cae58adf501204c84aa790ef726238fc20d41e314ee0aa446393c0ce9cdfd423d86ad7736f48709d01b31cda098ff77b7c4316f1f1ff0c22a4e8103527d5952906bb49da4460e6d6652402ebc0f82ab1dde766199b8963baab757d891e4b8053f43d067885d5073c857b49a1ac62d3c4a7f53555cc7820e549c36cfe42cd29d9b79bb312725601df47ec4870c7e8bb4b214b7c8e070f2647719d0db461a70e5be9f740b2794967d9bbf1eadc222050bdc6f1ed7e9fe50aa47a2df64171ae57a122"}}, {0x2, 0x0, 0x77, 0x80000000, @time={0x77359400, 0x0}, {0x40, 0xffffffff}, {0x1, 0x3}, @addr={0x1, 0x7}}, {0x100000000, 0x9, 0x88a9, 0x2b4f4e6d, @time={0x0, 0x989680}, {0x1, 0xfffffffffffffffc}, {0x3, 0x80000000}, @raw8={"90bed21cb5b4ba21e50e2b37"}}, {0x20, 0x5, 0x0, 0x7, @time={0x77359400, 0x0}, {0x3f, 0x5}, {0x5, 0xd1}, @queue={0x2, {0x7, 0x9}}}], 0xc0) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60) fallocate(r0, 0x2, 0x80000000, 0x7fffffff) setxattr(&(0x7f0000df8000)='./file0\x00', &(0x7f00008b9000)=@random={'osx.\x00', '/dev/snd/seq\x00'}, &(0x7f0000433000)='\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000e4000-0x50)={0x303, @tick=0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20f60000) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$llc(r2, &(0x7f0000009000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000009000-0x4)=0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b6e000-0x1)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000b4f000-0x4)=0x0) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x807, 0x101) bind(r0, &(0x7f0000a09000-0x10)=@nl={0x0, 0x0, 0xfffffffffffffffa, 0x8}, 0xc) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x20000000000802, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x3, 0x0, 0x80, 0x0}, 0x20) 2017/12/24 06:44:35 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004a6000)='/dev/sequencer\x00', 0x80, 0x0) sendto$ipx(r0, &(0x7f00004a2000-0x2a)="ac01c1263bf0401ec45a7af13e699e900724725223313fe1efb46021e5a4743aa8471e6c75735778394f", 0x2a, 0x4000, 0x0, 0x0) fchdir(r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c1d000)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x989680}}, &(0x7f0000c20000)={{0x0, 0x0}, {0x0, 0x0}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f000003d000-0xc)={0x7, 0x0}) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00005a7000)=0x410, 0x4) r1 = syz_open_dev$tun(&(0x7f0000206000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000373000-0x28)={@common='gre0\x00', @ifru_settings={0xff, 0x288, @raw_hdlc=&(0x7f0000848000-0x4)={0xff, 0x40}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) mq_open(&(0x7f0000624000)='nodev}\x00', 0xc0, 0x14, &(0x7f0000b73000-0x40)={0x40, 0x4, 0xc2da, 0x80000000, 0x3, 0x9, 0x9, 0x6b05}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000a05000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x14) dup3(r1, r2, 0x0) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000-0x8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000cfd000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) lstat(&(0x7f000008b000-0x8)='./file0\x00', &(0x7f00000f1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 74.811969] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.819229] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.833855] binder: 13882:13892 ERROR: BC_REGISTER_LOOPER called without request [ 74.848558] binder: unexpected work type, 4, not freed [ 74.858307] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x101002) write(r0, &(0x7f00007af000)="270000ddff000dfa3f0000bd1ef50a00110003000308ffff", 0x18) fcntl$setstatus(r0, 0x4, 0x4000) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00008c5000)=0x0, 0x4) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f5a000-0x11)='/selinux/context\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000d9000)={0x4, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x308, 0xdbc, 0x200000000000000, 0x543b, 0x100, 0x0, 0xfffffffffffffffc, 0x1f, 0x6}) pipe2(&(0x7f0000098000)={0x0, 0x0}, 0x80000) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000d0c000)=0xb29) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f000000b000-0x9)='/dev/ppp\x00', 0x101000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f000000b000-0x8)='./file0\x00', 0x10000, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00001ec000)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000e7f000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @addr={0x5, 0x5f2}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @raw32={[0x5, 0x0, 0x0]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {0x0, 0x0}, {0x0, 0x0}, @queue={0x0, {0x0, 0x5}}}], 0x90) [ 74.868223] binder: 13882:13892 got transaction with invalid offsets ptr [ 74.868245] binder: 13882:13892 transaction failed 29201/-14, size 0-8 line 3155 [ 74.881608] binder: BINDER_SET_CONTEXT_MGR already set [ 74.881617] binder: 13882:13892 ioctl 40046207 0 returned -16 [ 74.881644] binder: 13882:13912 ERROR: BC_REGISTER_LOOPER called without request [ 74.882829] binder_alloc: 13882: binder_alloc_buf, no vma [ 74.882846] binder: 13882:13892 transaction failed 29189/-3, size 0-0 line 3127 [ 74.884565] binder: 13882:13912 got transaction to invalid handle [ 74.884573] binder: 13882:13912 transaction failed 29201/-22, size 0-8 line 3004 [ 74.894441] device gre0 entered promiscuous mode [ 74.914293] binder: BINDER_SET_CONTEXT_MGR already set [ 74.914301] binder: 13930:13933 ioctl 40046207 0 returned -16 [ 74.914371] binder: 13930:13933 ERROR: BC_REGISTER_LOOPER called without request [ 74.948413] binder_alloc: 13882: binder_alloc_buf, no vma [ 74.948430] binder: 13930:13938 transaction failed 29189/-3, size 0-0 line 3127 [ 75.010353] binder: undelivered TRANSACTION_COMPLETE [ 75.012521] binder: BINDER_SET_CONTEXT_MGR already set [ 75.012528] binder: 13930:13938 ioctl 40046207 0 returned -16 [ 75.012582] binder: 13930:13938 ERROR: BC_REGISTER_LOOPER called without request [ 75.013728] binder_alloc: 13882: binder_alloc_buf, no vma [ 75.013743] binder: 13930:13938 transaction failed 29189/-3, size 0-0 line 3127 [ 75.014976] binder: 13930:13938 got transaction to invalid handle [ 75.014982] binder: 13930:13938 transaction failed 29201/-22, size 0-8 line 3004 [ 75.060788] binder: undelivered transaction 613, process died. 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xaff000)=nil, 0xaff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000215000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x2, 0x1, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000657000-0x50)={0x80000000000, 0x400, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000aff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000b00000-0xe)='/selinux/user\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7869) 2017/12/24 06:44:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000cbe000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000053000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000906000-0x15)='/dev/pktcdvd/control\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000d7c000)={r1, 0x80000, r2}) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000ce5000)=""/68, &(0x7f00009a0000-0x4)=0x44) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000899000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1000}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000943000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) r4 = accept4$unix(r2, &(0x7f00005cd000)=@file={0x0, ""/2}, &(0x7f0000477000)=0x4, 0x80800) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000c36000)=0x0) sched_rr_get_interval(r5, &(0x7f000016d000-0x10)={0x0, 0x0}) 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_map={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000bfe000)=@sack_info={0x0, 0x5, 0x4}, &(0x7f0000c5f000)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000405000-0x6)={r2, 0x800}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000002000-0x1b0)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xc000800000000001, 0x10000, 0x1}, 0x10) r3 = socket(0x11, 0x802, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000623000)=0x2, 0x4) setsockopt(r3, 0x104, 0x80000005, &(0x7f00006cb000-0x2)="0530", 0x2) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa, 0x0, 0x0}) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000b83000-0x10)={&(0x7f00004b8000/0x3000)=nil, 0x3000}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000122000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000bc6000)=0x0) 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00001f4000)="76731934ea99b4811b57d3dab66a17ae334c97e5881e041e3dce99a18a7bf1d6df39d884cea01160e000733e8b95a23aaa9f0aa2853921ede930d71892006f93e28aee5f8cd6ab0e", 0x48) 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000e5000)=0x80, 0x4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$packet(r1, &(0x7f00005c7000)="4445df3b9e59f2e78da8f713dd8f9444af07537421b405bcfc736cf567497dd58ef8c5a4177f605f636339dab9c9abcc483116dac806b5ac70ec111102f3336cee4f80865b943896415ffad5f8cce3efd526f75b9f4dfb615738ad87b39b68136c80ef4a165fb7e392ec1c9b3d32ecf019ca07509adfad1ccc891d18a4655e185aaf7c07b954938ee87fdb5e0672bab0aa927e15eb5e8f6fb82a377a43d6c6051736fbd3d457821efdd67c4ff3e0114944d9a5a13cd96aac965a61861d9cad236ebf56c824121b202de2088583682b23e8201ee985f7b32e8cb0b3db38d8b5fe8bef3e481c8fa6153c2a727f579cce47abeffb0e5cf1d1ea06221cd2c3e275c7954580cbbc7e3960ebb09929befccf3b3538bfdd1312ab8f1c6c134ada74a449f5085de4dadaf19d088c4a29934190dfa512867c598ef11acec2aa424b8fe45f8c34b7e51dbb8bf66d9a02534a948beb6c6d05d3be261c4fe0076183e86d5d9c7e800211574db5af9401857215ffa31ac65f258b7809a805ae7e833b699592307ac9a9924a35e85cf796df8f7e305d8341855dd9a3b9542f25d768b9d9b1538d4672032305f60dc71c3e97cfae8722f4266b7d73b768ece2199dd4e6a45111fec979725ba2bf630a2ef7a5657e9e2d90e15c5bdc4d5292080ebf7f9a438793f7cde1a41c8003246136f22e64148faadfd44f1bdf5974f90e6512065f998b1d9bd15ebefeae4acb895954c2a69308eb9bb66175427ec17a0506d04359ec3889e60e62ef9cbe6a769eb1f2a6c588ede27f34f527dbaf5cf758e4ee19729d6a615da08cc8f213dabed8cced5ce6615c0c47487d4e419e8827124ea7f679f7dd6ed0314ca9a32db00daaf7d81b3e127db20da4d1f423c55d0ab22200f7ecbb93d432128b033d0ad8680c68e7593c041461db6291a4719900e2594909a7e283b29d4bd2c20bb96edb4f968f1fac6185bca128b43ecda271015864ffcac54b6a179a8e7416b594d26f4b7fce3539121891412ac9d0c90d3b50dc30944c104acadcb7883f5d631531e1e17b88ea1e860cfd383d8a4bf6907a1073dc8b6e6d713bdb95c216d022ef37db93f7e5e162fa40abd5617476fffbd818f762e3badadf42402c5a5a0c299a5599e1a7e70e55c7c2175c72072c4c74947198024e65cedf9e3dec6e6e733d436b56723482576e700f6bb10c4d9c9b24e4e4c4c5fbe9c01fc9d724a18cc8490abfd7e912c2e7d0b476c718a409f029bcb6d83f2a160a22f5b3b6c6a81502b5cffeb7fb123e6c2a8a2e4b737a4498085dcbfcf336ce1329a5cce973ed0f1977c12d24f64ff34b5df2760f9d09b9d796cae08b2b309df0a295cfe3591fa9b64f25ef26b0ec66843cdb4b0e3161ee9aa22d9d7b74fafe5170a2a8abc1bcf47262144224acd4c674dc8f7a285ff90d9d3707ce86100653f1a4f738608b7eb08d6ffc8788d7901b233d1cf95dd0bc2d9343d95824bdac95b9c8074b51a99edae7d2a2bb3b23265a8920597e70d10eb6b5e977ece8a2f06767a8984e550f2a53ac49cd78b8d3cff57cc9e36e491dc1be8a5397b86564d84789b707fb2c06826b0c9b496fb06e1e1abe8f5327b472da03020bc7cc39ddefe20541bded00ae2706f88de7262c76f11dbdd0abe29636fb9e3dde652bf60fdf0157dfc7f48fa813070d8b1b388ad5c0242af98a02d830bc6b5e5a1649543644f7eac555cfe5dfcf55627bc37aed352208b82fb41282f1fef19dda1582fad9d3ed5d70f76e204044edf2d7ac060587dde1578e74b60986234e99e4fc15257df5dd6e565f41177432bb1857a5e21e1c9f25ff522ab4d98940bc7d30e0fddfedd65be16fa83394ec45d3e3271649a4a38ce1cecce0988d7b736ea4f40ef2986bb8736bd4eb3636f8106b1acb1b58ce632bda85edb59686939a764a3dc4ddec955f3d62ed04be040b3491e07a8b734b5c49baaa83f7b3d18e7bf96a077362671252d8f59ed294540fcce72c9c6161ade1c5fd37cc03d44972b654536d2159bf2fc556eb9c6ee9cf05a56edc8149bb9e2b923770c8ee32a69cf6b0a3326ffffc50d0a9e449c2612679bc84b46819ee3367f82cc89e3b1ce889e8c07f1f319cba184c2d2bade26bd92a0600a76dd9cd7d0d173f17e89f43e19b85ddf650a3a8f93c55f00bfc5b5d2af7963dc55a12210b7471413b60cc6edf202e0952e337310e4eb990c895220e0ef932f60ca32007aecc545a97bcbab665f6dbdf7511c591bd9fa2de5171748c5a4a70e6d1b937329f6c322c4ffa4e14952f06aea32199a169d5b61d7e7c261521054327e547c44db47cb0837b7fe7628ec039c7d5bad3af30f7f10382b1cf485d6f6963cc0dc3af868e6cdbf94e1c426562c582d1a48949049d482ca6d01b59e474c6629d20e5da2c8f244120ce0bb70690c32fc2733aaf1f76731bee78c31b392807024beda11f6e1a6a8e38387177d4007dbe907c3453cb2249fe6d858c3bca1090e14d66455e13ac350afdd69078a1d4c844de0c99cfdd5d0f6f1fdfdd2febf5a2", 0x700, 0x4, &(0x7f0000dcd000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="714981799501", [0x0, 0x0]}, 0x14) read(r0, &(0x7f0000ce1000)=""/4096, 0x1000) shutdown(r1, 0x1) bind(r1, &(0x7f0000f6d000-0xe)=@l2={0x1f, 0x800, {0x5, 0x3, 0x3, 0x0, 0x8, 0x6}, 0x7, 0x2a}, 0xe) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xc4000)=nil, 0xc4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000062000-0x94)='!', 0x1) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfffffdff, 0x0) fcntl$setpipe(r1, 0x407, 0x0) dup2(r1, r3) fcntl$setsig(r3, 0xa, 0x1) mmap(&(0x7f00000c4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000c4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f000005d000-0x38)={&(0x7f00000c4000)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000073000-0x30)=[{&(0x7f000000d000-0xe5)=""/229, 0xe5}, {&(0x7f0000093000)=""/228, 0xe4}, {&(0x7f00000c5000-0xe5)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x20}, 0x40) writev(r3, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) read(r0, &(0x7f0000012000-0xaf)=""/2, 0x2) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000000b000)=[{r1, 0x0, 0x0}, {r0, 0x8, 0x0}, {r1, 0x0, 0x0}, {r0, 0x1, 0x0}, {r1, 0x84, 0x0}, {r1, 0x8, 0x0}, {r0, 0x20, 0x0}, {r0, 0x1182, 0x0}], 0x8, &(0x7f000000b000)={r2, r3+10000000}, &(0x7f000000b000)={0x2}, 0x8) [ 75.066853] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.072287] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.077770] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.083237] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.088702] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.094178] binder: unexpected work type, 4, not freed [ 75.100577] binder: undelivered TRANSACTION_COMPLETE [ 75.105697] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xf5d000)=nil, 0xf5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000473000)=0x0, &(0x7f0000f5e000-0x4)=0x8) sendmsg$key(r0, &(0x7f0000f58000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d4d000-0x158)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) recvfrom(r0, &(0x7f0000f5d000-0x3)=""/4, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000f5d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000f5f000-0xe)='/dev/keychord\x00', 0x101080, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000f5f000-0xfc)={0x0, 0xf4, "bb907f79249fa729fa0ca9d48f069009954e48af5432f671e589955a690eb0050c5578e544b2bf80090fe15309136c5efb5023d3cc41ae06384f1677b9bab28fced10835d08e36aeb86ecb44b07be5569f07dd92f86089b0c26a7ad5698362100597cbf014b9181eac9cd6c8b2980aaa55fa2ada02cf1f8680176c9af26f73c6db6616822243d5ed03d89cd64332e6741c3ed7f7c9edf9e13078582af54fa0ffd3162a4552309babd459f4e1c0c0a2be3c091bd75e1bffe0478e44336be2c473722d819bbc08ce994b418f4b105e46cb356e10e92008ce2b03133fb876b17dc78c20eb55c750e79412455edf9b912d9c9f7c8d12"}, &(0x7f0000680000-0x4)=0xfc) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000f5f000-0xa0)={r2, @in6={{0xa, 0x0, 0xffd, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, 0x50000000, 0x3, 0x8}, &(0x7f0000f5f000-0x4)=0xa0) r4 = syz_open_dev$usbmon(&(0x7f0000f5e000-0xd)='/dev/usbmon#\x00', 0x4, 0x80000) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000f60000-0x18)={r3, 0x5, 0x30, 0x193, 0x80}, &(0x7f0000f60000-0x4)=0x18) recvfrom$unix(r4, &(0x7f0000310000)=""/250, 0xfa, 0x2, &(0x7f0000b1c000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8) 2017/12/24 06:44:35 executing program 5: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000006000)={0x44, 0x0, &(0x7f000077c000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000077c000)=[], &(0x7f000066d000-0x18)=[]}}], 0xfb9, 0x0, &(0x7f0000426000)="0e9be53a9591d45b33c9fa76a64b7bee33c8bd1bfd99d02bbcb9b82b34702226a7628df3ec061912273de0799cfad41713fc2ee6309c85e2b60c2fd61e5b78bc2534c76450f5d919f19d998e64f92f166c6ce8952d5374af226caced893022873e5ff41f32f99ab2a742f8f9d3a814e6403f6e4e67aae80a546ddd000ea4190264fad529b0f15b5c7de32432d496c93ccb3bfd741159c992e227953ba7d1a080920949865f9703a9b7c51dead211f4bfdac1341afc60046f144199d3942f8f36b95164f0bcc6ab7383f71bc6b0f921a47ea507bb7fb26901c36f47f49d42ac66b0dc42ca760562b7e4347867c305c695597cf57e345afb055b7b6202666066e4118d0419f5092d2139c2c6b278f9efaef1e25ea1dd238b4c136eca3227da758136dd60ee32e6c710475f707fffc220740804ad3be4a90096111abfec91caed86bffb524ba808df589a0b08b564d46c9c062a1b03519462d86b7f5b69f3a968255926f8701594316b2bac01f0e1aca9b8589ae484696e91e3d950d07482838f603c107c4cf635d15a753a45d03f26fb50b15679e4516a120e9fff946a1daaeeed5e2ec5d069b03703db9d7d30351b0324ed669cc367da0cc8447795d65542f7381b8cd2ea1fa01befb0432c4e813381afe15a3656a7573ae2cc09f618757942e0d1b1c1a25e53bb86b45b4053b7a9a2940c4d818c5d6a261defa7715b591b1d8dd55c6ed76ac7e73b97bbe10ddd0205bf9852d6c26bdbdd2769786e5c62783f11aa9299369977605220a157a9b9deae9f45d52dbfc9b759a91381d511dca409e3911cd51f82a7132a7954b0ba4a275f9ef02c6685d7a376f3fee768473a4fcb7a38eb65b19525f096a265f502b46e979bee1642f509e5c0ee24e3d8366103d3511be68ed18a8280b821baca6c6f569ba35d6bf6ade97c188866a510642bb8e3208479bbcada2b8303ab398ef9634dc05b5946c4f324dd605970888b066157a34183e186cfbd018cb30a3d70697f692937788ada399407aa6f5c8d433af29a35e5a9b783e64702b4b8c6f13ccaae3eb60e1cce25d3fb28e69eae4a96e724572a349d56d3e1246013dde30d92446d4edaf84f09766b386e36fc7d318f763d6d38be11fd439288164e601e843e1e56841cbdb6b14e18e9027823c26896f5ec65445f7b87a0a3c52b6f3edd8be99816a23a635f869a097a7eac6ea5dc56161ab00b702cf4455c8f05c4afb5c499e1412afdbc5d968d42d4207203046c981ddd29efce784f0575dbd1f6084d9463d7f88178db55c822727b8b1892d3e0a65b375ddd5b9fafb79eb6c8d4b2936e5b75389755e94ba07d0c5f3d03ef8207a281a2cb731a8252b6da8855498b0672786cb20a10fcdc6865ef3e4ee4660200b1f3ed0eca6647f4d7d16f666120a9a25e8361edeae73c239bd550591053b75b5b59759d2b143de19f8e84332bc13b2b7bcc03277b179b3a1a3abb3028585478e3e8866487f68521f4950b535ee63fa97f10a9be1c1a194853eaeac3f91b69149db3989865ed6e7853ad6ba5892d7f02bb4d9f8ef951acfd14fd0deb485fe64fe743b434300fbfce5e04d061ba442a87ea34181f70a4c302b7b0376c2c2e282321fb5a803ba84ff6cd26ba347392a55c1651fb8bc934a3a50ecf2c357a098a23a53f7c026409f72be8a41a8eb592e6839af08396fccd8705358f422cbbd399fcb696c503128dd5b05112314fd3a555780a57ef3a676131c547c0c048436d6fdea8d970855b2be36a3af072be060520ce47204989b228d23ea1c04d87eec7c6ba06893c440d6e60f7ee7600d45dbc8c4654bea636f9855a02d5c36ce48c9c4ac731dc24a769fff82109d73c47e33395c5e26252b09cff815f5b899cb6c2bb7483e371aadfa4c6d19c2e9bec9e7bbf0ca6df4bf24ea781bc934b4fd55243377816eae0a5c9c397a880df385e21c92b6d799355928e2d801936399673075d3775bafd27a251de82a2069540c786cd4bb366427780763df25a9d0fb729335836fb3b5203b640eb45bc4449d4fa9c74589573bcbce2b665c39092346223c7fd5a6e3d99b4a18f0728c2cd62c49406db709833ddf7c0c3c0702463f22533a453d812ed95e781df08dfb0363a2391b6519102d2b6a15be861b0f405ddb67b8b51d9e6c6297e7e27e451d789dd5789223a823621303f21912e580fdd034db304c4dfc42fc8f68a1a507cd711dc5d19b56f930ec233e4e634a345685e11482621ade80e47b8cf711c16e4f45831caeffed76c5ed207455f95c6e1ea6d727ff5fdf2331a68ff54e91d62e4635b22cf8200137f62f3e2ee0721e05ed1c2ba9a6887791ea450611ab91985b2a20dcc45ead1ed9de0f5cba7e6bf6bf7caf5f17f03c0a1375f501ada10e564ac6aae4a7b5db261d739b689f191b0919743d04157c043fc5aa77cb770f112c62592ee9705c4dd0c28e25872b2d41133ca2a797d9931c1350394b92e3878fc6c1066f289ad59a736f935293f91734b13ac85bf0567590cbfdbb5a81232a3bff259dcddaaf745301d375d81b7ad147af46b570d181f8444f5d47eedb8f642331e040960f0359d87aa1a57ce87b830f17b81411fd19ca65c22df71b79ca46a416087b0a34f83072d27ceb6556802582444e82295187e52ddc59e26655c43896d0426d9d8e4725452ba7f7a6e26a68ae3a2bde6381f8eb40f9c5d4794cf06957121d97fdb9af7e24cba0fe387b3b3ca56190611fd9669fcad8d6221c46676868b863d94f891dd1e7f80aedd3f9c0c29b766213fb6fe20cda1eadaed23962eba5448391822089f78896e69d33ad249ff1e93df5ccc850a0d211482e2e07f1403b294d5d1bfb9451ffe0ce86ad631afaeb5efc6ad76a9b3e0b2dd3235872cf6d15f90d0f0ce940004cd64554e7265f4e9098382ec113fcdbf428b8b74f636583c1ba2b638b9d1ad265fb58d075ce579b903a34367fc8623d9f15fbd08edb6089739d12cb77c436352f7ee25b12758f78dccf2558c8d59ca0e58060d95e0d4e6293d751c72ffeda2a18c5ffcc057a47dd4b8c51304dc26977719327eae4265b0c0da5f7acfc395384324a2ab207b78b63b39b689389024c0188f34c9569c5725d0e13a0d5e42c88567d419eb35280ac60b4d6c70ab067886db10b39b16dc93862a8c9cca7c62868020e0214ccdcf119e4f9bb31afcd2bc7126f2a813ba34548c6385d035ed28126fdcfabff577ad8766d46fa95ecbc23fbd06c1356c3985b1419413615975f8f10766428916e8be79bea763f6d3a03226554300270bd206e35607af2f1570831604abcb6a6ee4e6a80a6a6fe5cd30b652026e5b63494736945d7526130a35f1a9e0ca10ea94e6477e2953abe557ecbde39c6f12d2a4cdc35afbb77f25ce3237859efb2b8f648f4c8de8601ea9cc298a1e71e69760dde9784de7b1f3bccf74f412c41e2133894d36fa96a23c5ca199a05f3c9566031462bd1fe3f89cc0672d87142bed3f5deb1fbe9fb04915ca5ca377c11a622c734051916c94330f7345498f79cdd8958f2d093d831e69cc4983029bf03a90bd3e68e19dd6a70f707533f696ca9ebde1018b9a6ee81fe27c8ce23284910e1d695de0bade240ef15aad3d575c9f5d3c867012abd592daf9fb34a1107318bea9501c773a7fec3413ef9c0ef5a9d19fdeb269fb45a450e3749a8f8be2f68d2326bf4e4d4e64fbacbcfe45b68ce9fc72007a44cd2078e5431364edc181dfa48a92a7421f1c123d4f88e47bd52681bde769d368211633b743053b0111e0720544e187b7045ac5a5ca0303d5e186fb3844d19c25673acff107ea553724cbfa17ebb57ede3b76033f92cf7369131ddd04b233838cb43bbab5acafeaf14df486522283f44df2cbf3a5c9edbf313c5c901962a7c2293397f50f404cf92378227027f0e60b143e706fee43f9c847184698d3345f33685fe3595412e0c6faadc31a57e32ef2ab5828f293b9011c89eb24fa0af8e336559209c4a42f5b5dcb5844d0e37b6df02186ee3f5bbc6695c5b10397f4399eca9dea474b1d3ccfc60999e1b11af89186c523309a30b36845cf7db4f466691ee5b5c5fbd6cacf1c665d1179cca7023336e67e52d1b9795774be62ba72e70acc1cbe2bde95d0e4b27fb71c074cd601e891de3a27fa89bff234517294f676b0104bf59cea03d0103ae9d00598d9fea6a034e66c9dcf2c672dfe606c1575dae2fca013c583f52d933db5ca55d1017973c505285a7895b66c2bd4b923857a254e4e1258dd3f59dc05e7968b5bc77a0200fa07a013abe5dcc13409c8976c34344612199462746b0590805569e0b9a5d4689b6247cb1c033d4caea02d2735d74544238cddcb16c7a2ddcecb792d62e6156d255677a6247558d73fcfa314e8bd9dbc11fd1d2bc4725dc589b018c84cf4d185f7dd337e881df32dad45f9ff30ac50d8da9312609118ba1230f4270101460383d27cc66fa31fe4bb29c9a4b56d1829e389a3489253e5acb3748b16cfd5d230905ae893f8aacac9e3d44f8eadc5d9ebb5b3518d24de78ddfe5982c03369221a9c705e994400e6b08d0f7fa05def944bfe21e40206e482123fba1ac0e14bbaff6d8a3ec02fd7c145b677b98bf1d68fe9e3472d263e8d30d9bba82de699968a1306d50516b3a2e423e009bd781256ffbfd49d1f6fdae29decc7166b2d93918420e9c4f1550b66b3fdd504e96986bebe5808ec27178385d2afec369fee22ae87fac839707fa8bebc908f9c0008d5bd7c49bc2f4f8a0e9b33b6a4d06247c58410ae83c7263b8d9bb2b6578dd0c95f61202831b8603d16d8dc2fd3f3a7f2bd1a878f7eca86eb3b5225d1bb2fbadf4cfc0b3fe6ba280ecf33474f4019f422e985519497d3aa2a37d1afa1bf49393d1a66ca0ccf5bf7d3da44c70799aadde9705fe0d27d3b7875bdbf0e2b454328ff7427cf8b39812624941acbb5ccf36c90192996967f34086355d89efc69b48b7c7a5432c5cc8948699ec4a8a5f7362fd5923dad90d17526674e3817efcbeff99f7b900c3bcf52cba101b772f55dc9d9c311eb54a65f09848b0ca90e0419c677d843086c671c8ad7b6d80193463b8acf3f3b8837311e0d14818f183b3fdbc0f0c3739cd3d548db914ebe019ac17826285bd050c07d43c4cf62ffffff7feaae98fab4fab956c19d5c88aff9a04336acf7b183053689c393ff2b591a1528de7421cf28955fcbb20aa7510202f403a087a8e742321278653d31ce32458c1f8e10bd090aa7220da594f1d6efa92f742ac46102890e384f03ad8e765bf837f4b4dea3dd191cafb8ad104ed907d67a205c3a6a2a00ba2a535eb54895c7b3ff87df959821fe32537a1f237d9ab63a845270f5cb5a524d84c31fb51c4113698d8c7a47c4dcbb6c28624322024b46c61615494eaf2c089daba8ac2eeb0fa2e767ff04dd6a37b2a53653c7440b8a708fbc4ed134865924fe08d9f15a4a068e99464abdf415c016ca711a794b34530fbff1f7e708a78a59fe5bd9ab4ef245f0a3257aca359e3ab2d00f951a6233a944d3e0400b56dc2c8c391aa21bb2f267ee63f6754820157e6f415d3e76ebaa82b12cc9015f7d62447daf8f2805238a4f0fbe93849fa0907ea5bf7bcea7b4c7406a66fb31eff158828e1a55a6d4cbcf7f72a25f8602fb8ec163aa37690763eaa54e37280be85bd160f8a0ac2e8233fc892c2d"}) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000077b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000699000)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000040b000-0xb)='/dev/loop#\x00', 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000426000)='/dev/input/event#\x00', 0x1, 0x200) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000e44000)='/selinux/member\x00', 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000876000-0x4)=0x8001, 0x4) syz_open_dev$evdev(&(0x7f000033d000-0x12)='/dev/input/event#\x00', 0x246bd8e, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000265000-0x64)=""/100) ioctl$LOOP_CHANGE_FD(r0, 0x4c02, 0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f000086a000-0xf)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000b8b000-0x10)={0x2, &(0x7f000057b000-0x8)=[{0x0, 0x0}, {0x0, 0x0}]}) [ 75.118894] binder: undelivered TRANSACTION_COMPLETE [ 75.127644] binder: undelivered transaction 623, process died. [ 75.134088] binder: 13945:13953 ERROR: BC_REGISTER_LOOPER called without request [ 75.155070] binder: 13969:13970 got transaction with invalid offsets ptr 2017/12/24 06:44:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) r1 = syz_open_dev$tun(&(0x7f000079c000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000705000)={@common='gre0\x00', @ifru_flags=0x2002}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000096c000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c6d000-0x4)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, &(0x7f000038e000)=r2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000006f000)={@common='gre0\x00', @ifru_flags=0xc01}) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000c55000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000bde000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x202fd}) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x9, &(0x7f0000fcb000)={0x0, {0x0}, 0x0, 0x0}, &(0x7f00007b4000)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f00003ed000-0x8)={0x0}) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000bd8000-0xe)='/dev/keychord\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000568000-0x10)={0x0, 0x3, 0x4, 0x2}, &(0x7f0000ac2000)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000442000)={r1, 0x10000, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000f5e000)={r1, @in6={{0xa, 0x0, 0x1fc, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) timerfd_gettime(r0, &(0x7f00002ab000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) listen$netrom(r0, 0x800) clock_getres(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) [ 75.166776] binder: 13969:13970 transaction failed 29201/-14, size 0-68 line 3155 [ 75.174943] binder: 13945:13953 got transaction with invalid offsets ptr [ 75.174965] binder: 13945:13953 transaction failed 29201/-14, size 0-8 line 3155 [ 75.175837] binder: unexpected work type, 4, not freed [ 75.175839] binder: undelivered TRANSACTION_COMPLETE [ 75.175845] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000008000-0x8)='./file0\x00', &(0x7f000000c000-0x1a)=@known='com.apple.system.Security\x00', &(0x7f0000000000)='*ppp0eth0GPLmime_type:vmnet0posix_acl_access\x00', 0x2d, 0x2) 2017/12/24 06:44:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x101002) openat$rtc(0xffffffffffffff9c, &(0x7f0000160000)='/dev/rtc\x00', 0x20200, 0x0) r1 = dup(r0) write(r1, &(0x7f0000255000)="2000000014001d07060e00000000ee001100e8fff608ffff", 0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000418000-0x8c)={0x0, @in6={{0xa, 0x3, 0x90c, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x71c0000000000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000e7d000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000568000)={r2, 0x7f}, &(0x7f0000df9000-0x4)=0x8) 2017/12/24 06:44:35 executing program 1: r0 = creat(&(0x7f00003a4000-0x8)='./file0\x00', 0xe0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001000-0x20)={@generic="7203f3fa0e69ff07fa132d079daaf081", @ifru_flags=0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000002000-0x2c)="648d8f2141bf3b31e3f9d02b96cca1ab1899a989450381abaab90f63e578a0380ac95b83bb4f6c8eb38280e7") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000761000)='user\x00', &(0x7f0000640000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000085e000)="2cfce379ba8eef149fe69fc036edc0c061c5319c44096339c58d2b4195bf51fd245ce7f8e1010c4750393894e41c4b72f0e989b1d8b8621a0bc808f9b8b0fd511edb304d7e33f5da77e839", 0x4b, 0xfffffffffffffffc) keyctl$describe(0x6, r1, &(0x7f0000e73000-0x38)=""/56, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000976000)={@common='tunl0\x00', @ifru_data=&(0x7f0000c06000-0x20)="0100000000000200000306000000eb00ecff000000000300044dfaf5238f7e23"}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00009eb000-0xe)='/dev/keychord\x00', 0x420000, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000ae9000)=@req3={0x100, 0x800, 0xd3b5, 0x8, 0x400, 0x7, 0x4}, 0x1c) 2017/12/24 06:44:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x10) writev(r0, &(0x7f0000928000-0x50)=[{&(0x7f0000ea8000-0xed)="01b609d94b60927e0771457373e16269d3f11b880f33bfe38c4891f9d12f9e86d9da63f479b71a9400f9f97bc1c701cd0eec0a58247164a9415b78555d36337130b4c0cdf773bfbe54f6601345839f135d31c4a7780da4d7e18e897d4ede1cd9afa523543e0ba64e975645fed53f333aaf68202cfba010a81d505b148cacfda008b9b621202b49b93b025bf3eeedcc368f547eb4cc22a1cb64834183611e5e683c6f657b2c112bbdd26b22128a523ea2359a0607a85fee017caf37e4b0e9269f6197a4df3f8252212d546b5d539d4cc86fbd9e668e8671d72d800cff82e4853c314a5954e26d6866b2dd52b8f5", 0xed}, {&(0x7f00001f3000-0x45)="62fee46b51b27c91b9f492e888627d641b75c42be483bd1ce555d874eb2baf5070b91b3e4d1fc6446eb50b6a338ef78c2c696300583d5c4dcbb4502cd91542096f7070acf7", 0x45}, {&(0x7f0000d81000)="80ad6e53f78c0cb89dd9ec5216c32c1eeff2b08affa9eab3db780da1545bb957ea7b43341ed609b2a3d89a51854eb1550314aad25f4db01d71e873a740b3ab8022fb7fb2ab65c265817dbbee598324c92d809a19e33fc3835e187886eca6dfd4c32303f560ace2c554e7d8a4a57313187138b69d", 0x74}, {&(0x7f0000c4e000)="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", 0x1000}, {&(0x7f000020c000-0xb9)="5d25c94f96b806c8b26fb7e83c02892cd59a1bcfa683e72068781d23b1e27bf3ab726fb720462f8a03439c8387e7be1a965fe41f85c0c674b64aa01e7e004c7141d4baef3cd074d5ce8681f8456846aaf4ba151181c14aec9be8e2da3b63999381810160cf650c6d9b78bc8bef99a276b357de9cb4024cfc7174f5fada93e14115c34ffc967726b39ae993387e259c8a8876d38fc1279844e713c67b8271837ccf82e8fdff84e10a21f51142292a7f126ca371e2c3c4a43699", 0xb9}], 0x5) write(r0, &(0x7f00006a2000-0x25)="24000000130007ffffffe600000009000500000cf80000000000000008000700f9b816ad64", 0x25) [ 75.175855] binder: undelivered TRANSACTION_COMPLETE [ 75.175862] binder: undelivered transaction 636, process died. [ 75.184301] binder: 13969:13977 got transaction with invalid offsets ptr [ 75.184326] binder: 13969:13977 transaction failed 29201/-14, size 0-68 line 3155 [ 75.193689] binder: 13945:13971 ERROR: BC_REGISTER_LOOPER called without request [ 75.196075] binder_alloc: 13945: binder_alloc_buf, no vma 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00007cc000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000000808b) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mlock(&(0x7f00006d4000/0x1000)=nil, 0x1000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000927000-0x4)=0x0) clone(0x0, &(0x7f00006cc000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f0000dbb000)=0x0, &(0x7f000076f000)="") timer_create(0x7, &(0x7f00005b9000-0x60)={0x0, 0x2f, 0x0, @thr={&(0x7f0000142000)="f6d383e902ddd4185b6cf2b7612cba6c21655b7a88a019330e1457ec01a202c4d06093ea33388d083492b933392031dfee246bfdaf5522f521be7d5decf76b9ecc494ab607e85608ff1836bf295f2fc745dfd5e94b4a852f58ad5c4b0c08f0ba71bb6576c098ce0b27b3a0c16b754e815c4cca7b4d9da0772d68cde6d2a01f3e47d16080cd88a1c1b33ed66fc22297703941eb641284f66a334ceabea19d3185fd8fe220ada54c5d99d22dc9e6ad0d33f0008e77442833302f93a5e776f3dce9fa9ffaceba86d2e6ce66813d458f49f52e5930a863fba22c19ab192b64b05c4507de3238591c1711f763", &(0x7f0000791000)="03b45fb31156d190eac60322f2b982bccc6108edac6a963a20fbd5d178174c48ecb0d23a996b2420a9055e448e8da55fa1e03da33272518e13153e8cb016f7f1a3c4a376be30856928b309ebad15fae0d49d2a2d86d40e"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000e4000-0x4)=0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00007e3000)=@add_del={0x2, &(0x7f0000a36000-0x10)=@common='nr0\x00', 0x93}) timer_gettime(r2, &(0x7f0000fb3000)={{0x0, 0x0}, {0x0, 0x0}}) [ 75.196091] binder: 13945:13953 transaction failed 29189/-3, size 0-0 line 3127 [ 75.197632] binder: 13945:13971 got transaction to invalid handle [ 75.197639] binder: 13945:13971 transaction failed 29201/-22, size 0-8 line 3004 [ 75.210841] binder_alloc: binder_alloc_mmap_handler: 13969 20000000-20002000 already mapped failed -16 [ 75.219006] binder: BINDER_SET_CONTEXT_MGR already set [ 75.219015] binder: 13969:13977 ioctl 40046207 0 returned -16 2017/12/24 06:44:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000002000-0x8)=0x34) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001000-0x28)=[{0x0, 0x5}, {0xa, 0x40d6}, {0x2, 0x9}, {0x0, 0x0}, {0x2, 0x5}], 0x5) lookup_dcookie(0x2, &(0x7f0000a83000-0xa5)=""/165, 0xa5) 2017/12/24 06:44:35 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000004000-0x18)=[], 0x48, 0x0, &(0x7f0000006000-0x48)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000005000)=[], 0xdd, 0x0, &(0x7f000000b000-0xde)="a7156034f1c0edacd718c7afe76def61bb8c63056bd697be729f00c42f04d7dbbc2699eaf7bca2fc3ad0bceecdf941b0cfb27a3655db78ce561bb9c6da6f7efb7bc725afa6ad947f04c22a9174e31a5e44a52886ff05e95e838a32b1d07d4b7890b8ed095392a1fa16d1f5a6cde0a62e3162127fe191de780bf8be4b703aca7b14932062165fd75a6267426404ef826375c1eabf4082fa1e26828bfc96015b08db9f7908e052d65a72c5429ff4208ce24e30f3cf85054565a1a697ec293ee5cafa7d666bc6c97fde52c13b54da83bd258f3271cf25b155c3df2837b6d8"}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000008, 0x72012, r0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x130, r1, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f000000c000-0x4c)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30, 0x20, &(0x7f000000a000-0x30)=[@flat={0x77682a85, 0x1, r2, 0x3}, @flat={0x73622a85, 0x100, r3, 0x1}], &(0x7f000000b000)=[0x40, 0x28, 0x18, 0x18]}, 0xfaf}}], 0xbd, 0x0, &(0x7f0000004000-0xbd)="dfbd87df7a70b56918ade10e689db247a9692d560c4de4d9173e15b4693f821232927d155dece88f29f79cac74653a4f7ee33a52aa3538ec0d07d5b46c507ff5de36ef47c3f5018e06b2b3c2e3d8a0c6ddf43d5bf6c54d17597bf9b82d5a7f97691676fa3295db7c25d714c9176ddc994fed6816997955d0a5a892fc5ca95bcad20cd3ae3c25417d35e39879aa01150b826b2e0f49538c3eeed5548993ecb392d3e144b5752c4080f88434df1f84e93308ec81e32b4516c0f83db7e044"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f000000d000-0x58)=[@ptr={0x70742a85, 0x1, &(0x7f000000b000)=0x0, 0x1, 0x2, 0x39}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f000000a000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f000000e000-0x20)={@common='eql\x00', @ifru_flags=0xc800}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000df9000)='net/ip6_tables_names\x00') sendfile(r1, r1, &(0x7f00003e1000)=0x0, 0x3ff) 2017/12/24 06:44:35 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000ae2000)={0x0, 0x0, 0x0}, &(0x7f0000e12000)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000a3f000-0x4)=0x0) ioprio_set$pid(0x3, r0, 0x4001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000001000-0xf4)=""/244) ioprio_get$pid(0x1000000000002, 0x0) [ 75.220438] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.220465] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.227276] binder: 13990:13991 ERROR: BC_REGISTER_LOOPER called without request [ 75.234166] binder_alloc: 13969: binder_alloc_buf, no vma [ 75.234184] binder: 13969:13982 transaction failed 29189/-3, size 0-68 line 3127 2017/12/24 06:44:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0, 0x0, 0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000859000)={0x30, 0x3, 0x0, 0xe2, 0x3, 0x1000, 0x8, 0x1}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x8000000004) ptrace$setopts(0x4209, r2, 0x4000000400203, 0x0) 2017/12/24 06:44:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000f93000)=""/108, 0x6c) symlinkat(&(0x7f0000c88000)='./file0\x00', r0, &(0x7f0000d84000-0x8)='./file0\x00') [ 75.269512] binder: 13990:13991 got transaction with invalid offsets ptr [ 75.269535] binder: 13990:13991 transaction failed 29201/-14, size 0-8 line 3155 [ 75.269989] binder: unexpected work type, 4, not freed [ 75.269991] binder: undelivered TRANSACTION_COMPLETE [ 75.269997] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.270005] binder: undelivered TRANSACTION_COMPLETE [ 75.270012] binder: undelivered transaction 647, process died. [ 75.292665] binder: 13990:13997 ERROR: BC_REGISTER_LOOPER called without request [ 75.306027] binder_alloc: 13990: binder_alloc_buf, no vma [ 75.306046] binder: 13990:13991 transaction failed 29189/-3, size 0-0 line 3127 [ 75.315472] binder: 13990:13997 got transaction to invalid handle [ 75.315480] binder: 13990:13997 transaction failed 29201/-22, size 0-8 line 3004 [ 75.337275] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.337301] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.346705] binder_alloc: binder_alloc_mmap_handler: 14003 20000000-20002000 already mapped failed -16 [ 75.346773] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. [ 75.466480] binder: 14008:14019 got transaction to invalid handle [ 75.466488] binder: 14008:14019 transaction failed 29201/-22, size 48-32 line 3004 [ 75.471186] binder: 14008:14019 got reply transaction with no transaction stack [ 75.471193] binder: 14008:14019 transaction failed 29201/-71, size 88-0 line 2920 [ 75.487709] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.500936] binder: 14008:14010 got transaction to invalid handle [ 75.500943] binder: 14008:14010 transaction failed 29201/-22, size 48-32 line 3004 [ 75.503527] binder: 14008:14010 got reply transaction with no transaction stack [ 75.503533] binder: 14008:14010 transaction failed 29201/-71, size 88-0 line 2920 [ 75.546046] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.566458] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@generic="6b0b9e043847f41ea9367a03cbadec54", @ifru_settings={0x0, 0x800, @fr=&(0x7f0000002000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r0 = syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000005000)="dce57caa2573a1bb7872e88cd6cbfa88e31701366617ef80e7cf6fcbb0aa7bca0c9f18971f43ce53ac79ffaa79089e0a811aa2b4d4a7848d41c08c2683b12f40d58ab57841e762184432b05392f07f1a1fb3936d4c20ff474af90715c10435f2340e10bac8d5492a6c5c7469708679dba0f479d06920") getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000009000-0xef)=""/239, &(0x7f0000006000)=0xef) 2017/12/24 06:44:36 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000a000)='/dev/hwrng\x00', 0x101000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f000000b000-0x4)=0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d4d000-0x158)={0x2, 0x2, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9, 0x1, 0x0}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00005c9000-0xd)='/dev/usbmon#\x00', 0x3f, 0x400000) ioctl$TIOCEXCL(r1, 0x540c) 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000805, 0xfffffffffffffffd) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000f5f000-0x4)=0x4, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000017000-0x4)={0x0, 0x0, 0x0}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00006df000)={0x0, 0x0, 0x0, 0x0, 0x24000000000, 0x0, 0x4, 0x0, "ccff2cbc756df9e0855fbe61469f53d74df835ef68e49b41b0178ae245f1fbc876240dc37e31dfe1fc01842df29c68c17df06df3c3c7df2286be22905a7aa77b", "9e1b8e5d7185a1fec058a9201ebbe3e27afebf23d59ad7e89510c5d06be0c067", [0x2, 0x3ff], 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000fbd000)="", 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/24 06:44:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000011, 0xa, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000c3b000)=0xd6c4, 0x4) bind$nfc_llcp(r0, &(0x7f0000887000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1c37973c71f0267be84b80f4ae9e6d2390c9dc0f7d38e80a64c6057455ab90c699cb43ff1b8fa65040f98ce73d103dc422aef5e4909d0bd9b576b6e06d9a00", 0x0}, 0x60) 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000002000-0x11)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000002000-0xe)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000fd7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000fd7000)={0x0, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000847000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000fd8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000d04000-0xc)={0x0, 0x80000000, 0x10}, &(0x7f0000fd8000)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000f9d000-0xc)=@sack_info={r3, 0x0, 0xc000000}, &(0x7f0000b3a000)=0xc) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00005dd000)=0xffff, 0x4) setsockopt$packet_int(r2, 0x107, 0x1e, &(0x7f0000201000)=0x6, 0x4) 2017/12/24 06:44:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) futex(&(0x7f000023c000)=0x0, 0x8, 0x4, &(0x7f0000512000)={0x0, 0x0}, &(0x7f0000558000)=0x0, 0x0) 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000001b000-0xc)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000afd000)=[{&(0x7f000030a000-0x63)=""/1, 0x1}], 0x1) close(r0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a01000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f000038b000)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom(r3, &(0x7f0000017000)=""/0, 0x0, 0x0, &(0x7f000002d000-0x10)=@alg={0x26, 'hash\x00', 0x0, 0x0, "6c7a0700000c19e30000000000001302000000000000e2ffffffffffffff0000000000000000000000000000000000000000200000000000000000000e000800"}, 0x58) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000179000)={0x0, 0x401}) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x13) 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008ff000)='/dev/net/tun\x00', 0x0, 0x0) chmod(&(0x7f0000ef7000)='./file0\x00', 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000167000)={@generic="00090000008000001607067d08b1bd5c", @ifru_settings={0x2, 0x0, @cisco=&(0x7f00006fb000-0x8)={0x0, 0x0}}}) r1 = dup(r0) ioctl$TUNDETACHFILTER(r1, 0x400454cb, 0x0) [ 75.572037] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.577500] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.594238] binder: 14035:14036 ERROR: BC_REGISTER_LOOPER called without request [ 75.618769] binder: 14035:14036 got transaction with invalid offsets ptr 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000f96000-0x8)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000965000-0x5)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000e2c000-0x78)="cabfe6b2a806c44a5c3efb6f92df073523146e3b7129fe15b6256dc79e36456c848003c59ff8c763c90b24420491eb2f5396c62260f4e63f02acf6b831e1a22ae83a70a405dbeefb992050f18483574e8f24a1a677ada9ed1dfdde9236b7528237e2637a3baae4286559884cd1851b2996ac0cb3c71f3326", 0x78, r0) r1 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f00000d1000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x80000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000d1000)='cifs.spnego\x00', &(0x7f00000d2000-0x5)='self\x00') request_key(&(0x7f0000002000-0xa)='encrypted\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000001000)='user\x00', r0) 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000114000-0x8)='./file0\x00', 0x0) lsetxattr(&(0x7f000022a000)='./file0\x00', &(0x7f0000404000-0x19)=@known='system.posix_acl_access\x00', &(0x7f0000fbf000)="02000000020000ddffffff000730de2d6a1f06a0", 0x14, 0x0) r0 = creat(&(0x7f00006b0000-0x8)='./file0\x00', 0x100) symlinkat(&(0x7f000080d000-0x8)='./file0\x00', r0, &(0x7f0000b92000-0x8)='./file0\x00') 2017/12/24 06:44:36 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) clock_adjtime(0x0, &(0x7f0000013000-0xd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000627000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000002b000-0x48)=[@in6={0xa, 0x2, 0x800, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in6={0xa, 0x0, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x48) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") userfaultfd(0x80000) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb7000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 75.627219] binder: 14035:14036 transaction failed 29201/-14, size 0-8 line 3155 [ 75.635388] binder: unexpected work type, 4, not freed [ 75.643253] binder: undelivered TRANSACTION_COMPLETE [ 75.648617] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.655211] binder: undelivered TRANSACTION_COMPLETE [ 75.661666] binder: 14035:14051 ERROR: BC_REGISTER_LOOPER called without request [ 75.670367] binder_alloc: 14035: binder_alloc_buf, no vma 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000e35000)='./file0\x00', 0x200000, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f8d000-0xc8)=[@in6={0xa, 0x0, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x100000001}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x20, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffff}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xff, @loopback={0x0, 0x1}, 0x3f}, @in6={0xa, 0x2, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9f}, @in6={0xa, 0x3, 0x90d, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x400}, @in6={0xa, 0x3, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}], 0xc8) r1 = syz_open_dev$tun(&(0x7f0000bff000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)={0x0, 0x0}}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) 2017/12/24 06:44:36 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00002f3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000793000-0x28)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) close(r0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) pipe(&(0x7f0000007000)={0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000008000)={{{@in=@multicast1=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000b000)=0xe8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 75.670383] binder: 14035:14036 transaction failed 29189/-3, size 0-0 line 3127 [ 75.676349] binder: 14035:14051 got reply transaction with no transaction stack [ 75.676356] binder: 14035:14051 transaction failed 29201/-71, size 24-8 line 2920 [ 75.701393] binder: undelivered transaction 662, process died. [ 75.708294] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.713731] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.728364] binder: 14066:14069 ERROR: BC_REGISTER_LOOPER called without request [ 75.752075] binder: 14066:14069 got transaction with invalid offset (0, min 0 max 0) or object. [ 75.763783] binder: 14066:14069 transaction failed 29201/-22, size 0-8 line 3190 [ 75.777296] binder_alloc: binder_alloc_mmap_handler: 14066 20000000-20002000 already mapped failed -16 [ 75.789254] binder: BINDER_SET_CONTEXT_MGR already set [ 75.789275] binder: 14066:14076 ERROR: BC_REGISTER_LOOPER called without request [ 75.796003] binder: 14066:14077 got reply transaction with no transaction stack [ 75.796011] binder: 14066:14077 transaction failed 29201/-71, size 24-8 line 2920 [ 75.817741] binder: 14066:14069 ioctl 40046207 0 returned -16 [ 75.817766] binder_alloc: 14066: binder_alloc_buf, no vma 2017/12/24 06:44:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000000002, 0x0) bind$inet6(r0, &(0x7f000002e000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000003}, 0x1c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00002ff000)=0x0, &(0x7f000001a000)=0x0, &(0x7f00009eb000-0x4)=0x0) poll(&(0x7f0000002000-0x11)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x4061, 0x0}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000002000-0xe)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockname$inet6(r0, &(0x7f0000f62000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000e9d000)=0x1c) timer_settime(0x0, 0x0, &(0x7f0000084000-0x20)={{0x0, 0x0}, {0x0, 0x0}}, &(0x7f0000af5000)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/24 06:44:36 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) fallocate(r0, 0x2, 0x0, 0x200) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) tee(r3, r2, 0x9, 0xc) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0xb1, 0x0, &(0x7f0000003000-0xb1)="52bb26ed173b88eecf156b35b56c1b84957ecfdc08b93fce4761c574bdee4785e56346570a8146203a6a07f8d243815f426d85cb778293d92f718b57a9c274ff115f854b3458c537000000605913dceba211a8734411bca45a0d4bb7f0c8901f0b8ca20bfaba82687cc67784144d301b91f5730f4989ac6e4b62c66d6d94652c865e5dfb862be7bf372d33f4bd67600d5445ca1e811e93aded03d85cfdac1f6c46a7bec72d19c8133301dbf9f2613efe10"}) r4 = syz_open_dev$mice(&(0x7f0000006000-0x10)='/dev/input/mice\x00', 0x0, 0x2c00) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f000000d000-0x1)=0x4) futex(&(0x7f000000c000-0x4)=0x4, 0x0, 0x7, &(0x7f0000006000-0x10)={0x77359400, 0x0}, &(0x7f000000b000)=0x1, 0x9) pivot_root(&(0x7f0000003000-0x8)='./file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$KDSKBLED(r4, 0x4b65, 0x5) 2017/12/24 06:44:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) stat(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000+0x9aa)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000002000-0x5)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000008, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000)=0xe8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$getown(r0, 0x9) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={&(0x7f0000001000-0xc)={0x10, 0x0, 0xffffffff, 0x9}, 0xc, &(0x7f0000001000-0x50)=[{&(0x7f0000000000)=[{0x17, 0x401, 0x20, 0x3, 0x2, "4789ce15e70f89"}, {0xed, 0x0, 0x400, 0x7f, 0x20000000000, "4de9e7a015655f15e3fc04b59c59816e7b6e71254f47bb00fbedd9ffea8c03e6fdedfde610b31df564572ff1ac73f0d0f9bb7704e4bf2c66ef0b64929d946941a0c95d31af19baaf4cfab47d250d99cd04fa75e8640e103c760315f5903940f5ec1bc588dda1e5bb008a2a9e1eded6e3f6d56bf10e594bcc2b03bfc6f9afad25b29d00981f17ff70dba92d0f892bcfd25fe9365050182b7bf86461518ea9c06d90e3f6cb345f7cff755fe2010c91939d62161cdbbb51aa731c600425edf4c4d1c2b33d8ea3129cb5cc25572bf57f9cac59fdf3e2f5f3a33d2e949ecad0"}, {0x3e, 0x100000001, 0x304, 0x9, 0x68, "aa0c2d44d31795f28243273306832d00a7831ecd10cf8720d2c7bd7b9fdd41c1d027a5d6e135c0f6db3ea4db3486"}, {0x64, 0x0, 0x1, 0x8001, 0x6, "91b1f94631e018a74cade9cf9ac37d8002bcf5bf7d089702fd846531d640f5477945aecbac8e0de65ec9dedffa8276c38f20b1ccf1be494b1aea21ebe27108e96d8f7c51232c75db4e1626e6ac37cdd2aacd0993"}, {0xed, 0xffffffff85ae2560, 0xc10, 0x0, 0x7, "0b1fa02b1d0bf78b674699d83995e63b9a210d3f5984c7202705c1bd825b46f18526f805690aaf29833f6dc0ebde7eea5aee191f8c5c0ac8b49446a140546158deb54042a4a3ddf52ddf25472a1c937eb9ef33c322450a62c04323335f94e715567a6a163677691ac3b3311321eed85adf946fa3d98e02a40ae6aea8a42239e78493d3bcce508a5c9d426dd3a797264c4f0e77d0b8de6cbbf78dbbf83086bf09b74122a79909cf8b7037eea41b1cef6ea972208cb66e6e2df9eb30dbd14e1977555ba68e29abcf622a6768cc444d511fd1be7f901b9ea6f0a8d64e00e8"}, {0x4e, 0x100000001, 0x730, 0xfffffffffffffe00, 0xfffffffffffff64e, "f6beea3c1d302750343395034ec5029a9841192fdda22120ec1ca0868fc5545b6e193b06c83fe3ae663e06dca5b457c738ffde72c4306dca752232ec9273"}], 0x2e1}, {&(0x7f0000002000-0xe7)=[{0xe7, 0x7dee, 0x110, 0x1, 0x10001, "9f92d80d125fb2186b333982280b6e51d6c19576b1c3d1a825de33977b8e07b77803d5d52b66fdf1312470ffe52e9989835b02a2161cdd773611eb62ee552d7fee43f638f878b3d62bf5f0200681bbac2daf5b8f40eeb4c36e667bb19fc20eb45e22aa9f4aef152d91ed9d85f58e00c1a9ac7aaf90db477c007c705f6bc53d680c4300cbf780bbb3808776eaf7d243edbf1282ea7ea11d136d01a925b499bc2596b5eea9a5db301f49f4d03a1d8fb2c53e96e0e0ad343d3830eae8dcb55d1a915fe22ebf84115cd13ae1a993df6a38368ba87ba7c56358"}], 0xe7}, {&(0x7f0000001000)=[{0x9f, 0x2, 0x900, 0x100000000, 0x8, "9c90743797b09977551b26b1431284d2a16c3eb10796d14923ffc732956c751dafd828be48ad80bf58c5b701a25011300f581cdc6736eac9ad8fe9e2c0ffcd757763e254bf86551611bd807ac79ac3df2ac3af63faf4d11dbadbb4c8581c3452c6185f8ab7b167e69a4e3afb82c7c5dedf8d4443a497681ed9a5dee4cb62753fc8801083f9298484d16b7ca02a0075"}, {0x56, 0x9, 0x100, 0x20d36df5, 0x8001, "8e32833966e3a6ef60ffe5f09941f435e23fba070b78b124d0abc9b2d2de174f4e50ab00633e68177ae2a00fe5f9570290e3c75a95b83ee0c5825da4307fdf56cfdc6156804f"}, {0xbc, 0x2, 0x101, 0x1, 0x20, "2ce6e910ab2209bb6a9150fe5eaa6d3da6fdb32d569bd595854376e576a88820666fd94a48b00126c520e81fb10dfbad742d832d62e9878897a96567e156edd6c3afe31467155d8edefcb357e232ba07ebecc16bc9f844a10bf30b94197b27f92bee3a15a2ebb3d9f5e5b9f7dcf3d3e59f2572e96acad31ad3d16207f1199b9f7503f507753f8dfc0c3c5972d319ee439d563be9f61bb5a8416a61cec38af80a6defe5d0738ba42d2331bb50"}, {0x9e, 0x7, 0x1, 0x9, 0x100, "af417fd92fa8f851a635b8aa3bbfd92fce74511dce2d7ddf3e498558cd68d8248e1bbe75d49f7e906037b9017e7b48d2c65e6f27ff9a095064d8407722c875019ab95e36058d5a8c6194e50a34360ea4c49bd68cc541ca6bfe8ca5aedfb023e8031d87aae86b8eccc07d62f9d40007076b4e26f3eaa71aeae2d059005357e898a4281cf3e786eab40aa2fbb98aa9"}, {0x81, 0x4, 0x0, 0x6, 0x1, "ce4a7c23847104414d60c8bd361d19ec1c9437ddf5d0e7eb0eb2a0287a266cfaa2ac0d5d6e206a2a2299d1d573b2182228f4bc516b2cf13fed1ce6effd594048915125f216c23f0d2c7329bc32fc91a3b4bcb9d0ead9a2904580e2ec89d7853b4f0f4dbca38507b1b809626fdc342a407a"}, {0xc1, 0x2, 0x800, 0x0, 0x3524, "4e4abae9b059421642715dd0558a42bbb75f2d32750a87258486a286866e8ecc8c8acabce76782c75bf233fb526be7cd14946c0c962f04e2d7569779eddb1491766b61cb0dc55993c4f8e817dfac784e55265535a0d99a8365ac9ccd0549ba837b40621fde8994de1f0d5b8c8c3a06e6d474613d74a297b81a9fd74b34ea9a29cd2c6b362bf24d01af75472f50da0ddad7d3a33ea3acc6a10c830310283d80e812d4d388472b3368a717da918bd109f1b2"}, {0x10b, 0x7ff, 0x400, 0x80000000, 0xd0, "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"}], 0x49c}, {&(0x7f0000001000)=[{0x87, 0x7b2, 0x410, 0x28d80000000, 0x8, "f69d526938944ed4be9fc4cd78d4080a63dfc250606d052e4ca3e0103772739d614e788fef75ba9d418b157dd99e42a9ce3037cda0b8f068311cdc204e8e7b834be7184a1798f7da804b1c43595c67cac71ac00899e28e617316fb2c0244525770c06c4b8a7d2d6b21967ec2c1372ff963d123f855abe3"}], 0x87}, {&(0x7f000057d000)=[{0x1010, 0x8, 0x200, 0x1f, 0x6, "e268dcbf55623b41a6f2ec49a2325b6cdf95b2106841c46e5988abd4bffd7ae8a927b475f09b758d8892132f634025072b728824dfdf6f6edb2eede4db9e8f0abe00f08ad676ad27197aa928af41b653d3ab2e010d5d707d33d9685dc0087ff88f335d912a9d599fde1dd0a544ceb3afb13093ea23a08bdb01cf8dfbf09c663df8dc87b5994a180b441851e5e6dd44b58aa9db92aa0bf5b90885e0bfd774ea02ea2db5d59ea38296e8625f3da75e56cca76a5b431511c2c8f0352e4f90fc97a3fdc7e2b89c349004b378a2ce67d8e299c397cd66aa808b61bad0c32119244c07cdd02d1de78db9116b6d4d54ad302fe7851762d8ef28499797eae9a925335da22736f4a76215f616ad9151c351d4ff1523bdf9c542b4f5b9555d65626ff3bea461e079ea31b244d6e6f6fab9ffba62b35df474cbbd46a5a93ed53ac7777f9819d7eb6342bd557eed90bbe54cd05ac998b94be1473ef2981a71dc956cf54e94c13b282c0843b35b06f60d45f9efdb9d1340f88dc902d64e951b949334b7b983bad60a03ad00ffb7c1dfcecc7e13ac0440d74d1225c93dfee6189fc249e0b635af806cd8af6d491fc2c5d8b8ae39e92fa9fe3ee2b1978567008e427243562d425af55b620980ef631c0dbcd5f0a7f31e9f8774bd7f0b056c2552883742923451b7a1cdfaac29fbe0f866e81d6702295bbf7a6b327c96777d2fcb08aed8692b0ace292fe5930fbdc90288001c06864682ec1eab82dcc0ad2c8f0d88129de0942d5b7dee8413854a4ed847b6d17c5e9bf502f7b85139567c3cc20351179137c17b99e2565745efb69b508ccd192cc2114c3f586296055698e25fdd106bf135fe95ac01960a36aa79343f0d5e26389f51ba7457ed38954a0822b58fa2e104f76ac3473af56e7e657864d6272ec4f774dcc1ae2c5f2fe28d6f6d92f0cdb3a71ca3b7c241c7d8e99b76641760c1c8718a9609095aae6ee50cddc6529c2e3579b6b8e1bfdd5cd00d4ff024451d5ee8b6110adcf38b894686aa0bca64ec9ab8c68c0d30167b0f2a56c92311b13da46d1d20d7eadc607c5fa5b71eb4e87d47a8f5dbed2c45ec3040d120180d65912b465636c0f8b2388572faa4d285b937b64fac021de97fb300641e1051b1e007b0567976c22ef0f34a552f9410ab08a80ad8eba0aaa2c3d325d539c7108ea72f50a5c5c267a901b0452e476e394e333a76763f6020b474764c0af81b4cae90f12fd3bcc53414b869fa5c4ceba0338a9d73c0952b5df61b55d0d76a478ede08ab8a5be1bf591d203baec12bc40a21a2ac61f63b760df6989a90a1ed380c5dfe4dd6198302e63c710e220f17db3490d6f3f62ebebf1e58443287b7b29868e4bc5fe227255454cb22b86a25d3e39d8640dab1929f7094c4b3fe8e37478561cdaa32b819cc73904e07648e34f394c70a2950ffed4dd356876a49382ccdeed6e17ac136f5e1de0b972a84cee2d75687189ca8036e9c83791aee0e9b8ff3ea08ef92760ca6f79f20bd71f4717f6f247c7604683ff2e9adc779cfbdedf77e2b750912f0c672db15fc691d2e05a16bb1443f59afde280ff1cc35d23096d93e04373bd633577cfd85e20cd220f929cba548dbbc1803ccb351f39091a7ee0ee19739787a416fef1f31215fedd4a7092ee78450e159c31b92a23af3007793f3b0e2605aae6fc58eb94dc24d4efb3096f7851b6c3b0fb8c74e8198923d081858b99110749d341a2ecd0f7a93b0326a1d02bbbb1e735e41e61f8f189b061726e88b4b4774ad6f9ea8067c3143f1122e71c5b6f3f4bd78e560366f2a538fcf3c77d06af9de6bea197078e4dd60e219b71d39abb5297da8f7b0ab9ac0cb748755dc31c87bcd36fa90ba7fa7606da678542139feb46cdb2d2ed23305d03738811ec84993352eb3a8d65c12c197a3da4c1d93af9ddf5e875999bb4ec94142554e6ed6c184bfaad185f6345fcfea7f6d58a3917e1089f0738d83037f1a6f62c0d28417391c5728e36d6f7c43767fe483dcfc1da3f242412185195a90c9d4e43312aae0d03e752b8032ff88ddfa4b3ca446a5db61e931949525e604eed90237c39b0629b14434ab5d6ae3758d839550fb386465435ac49a1110f5af5a2a0696e8800ad5649199c3c9fdb922a578ad39d7b5d852ad956dea200f66da1e1472cadd81b31caad114f241949169621cac9c61b1de545304fad0d26119d730973d229269d16ab6a18f72895fd01d04ff65e283deac28c0cf4ebca7e78d2f2b136c136c34af9ba79bcc5f9f9446fb46c353d89cc7b5115c109d5f7eb2962430694802ec1278ea82867e591fbe4e7a9959606cc72430462d499d5b53d5f393b8d9ead88d08e7967b86001c667f347aa39fd7e0563152f33cb6925b91235f592a0af04ea271d47a4818fc5432e7f7f56f8c33f21339b41692157dcfdb5e5b0e7aa92f1e6c3a20e4e0992508c7eca1e389d0e6d457bcc4d1cff920f1c4613796c6801327f8e94746fc7dd23fdb810014e07c8af46a8f8a38bde8e17b1d8d194cc5e06baeb06ba988340eef1c59e69d1f27e161c1c60e18aba2c53d4f01fa5be0eafbaeeaa47a0a98e563799804ec90e6e7aa2aed54fd86d32572bf03d0cb46efad1c9b6cf9a9c737730844fb2b459094ab5d565d259ba674529b8f8ad785f47d6b7017e2a7d83e867b55ef084a98230f080ec92a1ca430b29637b0fc02166efa145a25d5f31c01620ea916d455e38f733a18469050e22a219530f3db4a9552677f73d7106274f99b8772e445046780721ac1aeca9bbf048317287684aecba245beb0cf89408110769b51c04e54d193bbdd64289d760fcc9ff46a8998954bf020fef932a6a7dbd4feed2622045e33dd7a0d45659704f407ea393fbef3c4f5db90deb561bd0615705b77321462ae1c16f646101d0ff456460a7266a2854140eb8bf92a18255ccc37c9f0d6719bb9e56fe963804baa2208e04ef2a9fe8ba9fa9ceb11ed41136e5fd2eb64bf3589018aeeec685a557321d1fc75cde1f2640a911faea81e2834dfd9b75046678dd11e69ee5799170c7993862d918a7625c16a636f53a646315b94ee0fe75325a9395cd23472f97a3ca9b3a044c1315c65bebce313bb87a62cb2c5007ed1bc618f926f9191982bd34b73d7188656ac24d163f89a8bb1db62c49bdd14aa870a96829542fc463c9f1f1d96ae71c73ebf38ac132448654b94c73cb6a55ea64725f486f018cac594c0d6da89d8facf11b47f81b328be8c0885fd940708d96f50023594f1dabceb4a1d12a774f6bb2b0270f402f0c1092a90a0762f894a153a26a4986e6a71e324755cdfff6fe1219e06c311c835fcf07c356a77a844946a4eddcbc5e8da0ca90f7d679be1aca2f8978fd4463b53161ad7b3cdd40906deca5a3183bdfd4c4ba8b1479009dfee42f785591684b68fcb7949d9524701b0f49e1f12f5040f2aaefb4a57fed13486581bc1345a13297a04a2c2e18f95e636527bd8b8ca765891044c77bf18de04524d6c74d16d4ceb6717640efc0942b5f34c169e02ab9b2d1cfb1ba994bfa58de0400ec640beba9284acb0f65b96c5f410b2afd3d6e7d60c02f7b4bb9f64da588d98cf7f3b7818d0d1866b31450897e73cfed195568399c5851ba830a7c933c72fc60d5d867878b942bc7d02aafbec9be7f50731c653314356c254c408f4c913a69916b42e902d3004b56204226e8f86a64bb61f8b2de5162669da6b897bcf0fad389b54871c8ab8add0e73aee32c859e8c113530fc2e9a9e96f2c101ec4eae4fe5c24d5cd9725423e8d3633aa72a92e3cbb7ac07630871f70743b63ad599ef124b9d4ec11bbf38fb8254be65b453fe4a2e52b0626f4909d2a05f28f2b3be50907084ef0a599bcda632224fb1fdd4112e32c05bcbb38fb1d0ad005bba71416bc497979a72979d15d987f6b6f50dbf00022ce4ff6196668f3ee57e023f0d5d36ea8b1f67105334d95c9e50a6f4246918d1e8d16a13c9c08ab406318035d18540abf548527417b55fcbd20a7590c0a8ecfa5437194671dfa0efb3e03b9a2ca19834a58bd45f1ff0045679f27a058d0317fb804405eda23171e49ce7bf6c4f948185ea01bc7d40baf993ee4f6e2f0870fd61786a7ec57bdb07b936abb325700d93c50a4ed16c403c4d96af29abdb094f3742e13964b79650690b421b1ab908a7118105d59818387f8bd1c60f171cd2402e2868e07b1b7d7a4ce9b6235c84ef627eb879a7dbbdb6c2fe3b445dda65cff45ebe7d2638074639609260bd46c8b28bd3055dbb15ed33fee8be9841ade0def16c7b0e7988b9c2d88fc0b93cac26d210f76593d9083502d8fe2f8911ac1b386bc09c12489af3b7b8bde99155cc988204be3db8a02e70e88886fc2a471150da0ce4756d5f287d3dda871f8d9ca3c19b1986f0fb309b15322af7fbbac355e4f67be2935f92c942cc80c023c1b5ac6053329bf1788847bd7f2f4e9a5b400c0fe5ce084173036714b6dd035b4e6159dac244e3f9d25e32e64d076f237106c662e449cc13257d5b46af5471b9bbfb6a2b17aa8990e45c7c5dba7960a451726d4191f101764c67de5af699e1e27f6cb7aec9c33af1b22e28fce418f519e839c23fa164f10ad9aee8c7dc4161852e055fb6a47e343480ca730179aa5d5965c3f7ede3457f9ebd09c278e5a5f5e0024e7c738ace13a8085d4aa4690bc402256792508ad05b25c8444b677e0cbbae8eb2045fd988fc41210152f48f856ef01bd107ca7c9332e0fe047be2009a69240c85f1929235c18c1cf7d1b01a53a40f163481b1709b2ba3e5ea92317bb169ed79cd0253423d667db2c6b32c7795dd5e7468b9d0d96c0474d2e2ac118df9d344cbdb85dd953679fd89c5778eca06a8d565c3f22a83af3f4820eba4b4b5fdf72313bc90f3047c7e61af09cc7b36a3aafbbc25f0f73e3f9609e4ea4a1e9f3c6dfd9c00deacd61386fb87f8e51f05e02dc031ed8bc01fc724b36c20e3a4c7ebc22bb5ab6f324d453a0b49ab1b290429d800aed9d06905ebc1256de5720961d2a5af74807d0094f4d6757455120af86187bbff195b4ec3a8e67c988368c81ea5e58a3571fc71c2f988d4dd93f1f23a7c37fffc5927d444284769675908992df027cfbd52a9ca564f9890ac13f1afd0e958f165aa66d093feb0d00595b194889a146d4bb26b53c27800bf8cfe2fa51a79e0e2ff15e83acf12c978b64dba6ad5357f6eb441014be587a9cd24f16394aa04f60d9bdd2c5fea89abd75ca242b5595116266209858d440aa03a78bc00d6dfbdf9a1f66991977ef71fde04684c98fbf6c77cb168965429ca311e922ca7b94dddc6b94da810c47aee6509feff1d9bfc093b7c219bc84e0503b10711af1730ac271f43328c1e537c19586f78a4e1ba8d75e393fc0904f8038f8ca581ea433c82d2870711d1c21f01a67b22ed42a00894da53f728b6b82501feaa989ac1704cd113cfddc3f7a1ade6b3f46283b65bce43abf165f55c1fcc42886cc833ea6a72338b599d93b5408d1fc5ee559a6e8cd755d6d95b3fd21df19ea7a6b92d404a1aa05cac39d4de02e6342d9dd8f3c865ada1c6186fa50365c1c3bb53fa7a093249f044258b4fbc0b7ddf2878a7d190d3643f033902839d7fce95ac15b8df2e625d08fd603c5af3bb06286fae86151afd8c98399b637ef8cce3c4d574d294b794c43ec9554bd57b396fc03e3f04013e4e25b321228294c385b5fae4ebeecf767de7a294ee914023b64bfd344be1e2b653cd2e935a230fc37f12dffa7af7694510185e38719fb9fd003337a999619fc"}], 0x1010}], 0x5, &(0x7f0000002000-0xe0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xe0, 0x0}, 0x24000804) keyctl$describe(0x6, 0x0, &(0x7f0000001000-0xa)=""/10, 0xa) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000002000-0x4)=0x0, &(0x7f0000004000)=0x4) 2017/12/24 06:44:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000055000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x200) read(r0, &(0x7f0000fa6000)=""/1, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00004a2000)=0x1f) ioctl$TCFLSH(r1, 0x540b, 0x1) 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00001af000)={0x0, 0x6, 0x0}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f000025e000-0x10)={0x1, &(0x7f00008b9000)=[{0x10000000000006, 0x0, 0x0, 0x0}]}, 0x10) close(r0) 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000742000)='./file0\x00', 0x0) mount(&(0x7f00004bc000)='./file0/file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000051000)='ramfs\x00', 0x1, &(0x7f00005dd000)="") unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f000095f000)='./file0\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000809000)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000a4a000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000010000)=0xc) fchown(r0, r2, r1) chdir(&(0x7f00003ad000)='./file0\x00') 2017/12/24 06:44:36 executing program 0: umount2(&(0x7f0000847000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rmdir(&(0x7f0000384000-0x8)='./file0\x00') 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x280) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00005a1000-0x4)=0x800, 0x4) mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000069000-0x8)={0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000fd6000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x17, 0x0, 0x0, "00020107066a"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 75.817783] binder: 14066:14076 transaction failed 29189/-3, size 0-0 line 3127 [ 75.838545] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.843981] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.849437] binder: unexpected work type, 4, not freed [ 75.854686] binder: undelivered TRANSACTION_COMPLETE [ 75.859835] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.868159] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000119000)='./file0\x00', 0x0) mount(&(0x7f0000901000-0x8)='./file0\x00', &(0x7f00008ec000-0x8)='./file0\x00', &(0x7f0000ca5000)='ypeppromfr', 0xfffffffffffffffe, &(0x7f0000443000)="") r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c10000-0xb)='/selinux/policy\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000ea3000-0xb)='pkcs7_test\x00', &(0x7f00004cf000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000305000)='/selinux/policy\x00', 0xfffffffffffffffe) r2 = add_key(&(0x7f0000d64000-0xa)='blacklist\x00', &(0x7f0000011000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000daa000-0x1000)="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", 0x1000, r1) keyctl$link(0x8, r1, r2) recvmmsg(r0, &(0x7f00003a9000-0x258)=[{{&(0x7f0000248000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x60, &(0x7f00003bb000-0xa0)=[{&(0x7f0000da0000-0x40)=""/64, 0x40}, {&(0x7f0000744000)=""/177, 0xb1}, {&(0x7f0000598000-0x1d)=""/29, 0x1d}, {&(0x7f00003a5000)=""/108, 0x6c}, {&(0x7f0000248000)=""/172, 0xac}, {&(0x7f00005ae000-0xeb)=""/235, 0xeb}, {&(0x7f0000c42000-0x80)=""/128, 0x80}, {&(0x7f0000265000)=""/253, 0xfd}, {&(0x7f0000053000-0x79)=""/121, 0x79}, {&(0x7f0000330000-0x7b)=""/4096, 0x1000}], 0xa, &(0x7f0000394000)=""/83, 0x53, 0x4}, 0xffffffffffffbf53}, {{&(0x7f0000a13000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000b4c000)=[], 0x0, &(0x7f000090f000)=""/217, 0xd9, 0x7fff}, 0x2}, {{&(0x7f0000377000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f0000111000-0x50)=[{&(0x7f0000aad000)=""/0, 0x0}, {&(0x7f0000463000)=""/4096, 0x1000}, {&(0x7f0000918000)=""/4096, 0x1000}, {&(0x7f0000c82000-0x1000)=""/4096, 0x1000}, {&(0x7f0000365000)=""/72, 0x48}], 0x5, 0x0, 0x0, 0x7ff}, 0x1}, {{0x0, 0x0, &(0x7f0000626000-0x40)=[{&(0x7f0000d43000-0x1000)=""/4096, 0x1000}, {&(0x7f00003d0000-0x56)=""/86, 0x56}, {&(0x7f0000985000)=""/115, 0x73}, {&(0x7f0000fe3000-0x87)=""/135, 0x87}], 0x4, &(0x7f0000e8f000)=""/211, 0xd3, 0xffffffffffff0000}, 0x8}, {{0x0, 0x0, &(0x7f00002b2000-0x40)=[{&(0x7f0000d29000-0x58)=""/88, 0x58}, {&(0x7f0000d49000)=""/68, 0x44}, {&(0x7f00006f5000)=""/223, 0xdf}, {&(0x7f0000530000-0x1000)=""/4096, 0x1000}], 0x4, &(0x7f00002ee000-0x26)=""/38, 0x26, 0x39}, 0x6}, {{&(0x7f0000a7a000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f000049b000)=[{&(0x7f0000d7a000-0xad)=""/173, 0xad}], 0x1, &(0x7f000050b000-0x27)=""/39, 0x27, 0x650f}, 0x80000000}, {{0x0, 0x0, &(0x7f0000f60000)=[{&(0x7f00000d3000-0xea)=""/234, 0xea}, {&(0x7f0000cbf000-0xfa)=""/250, 0xfa}, {&(0x7f000015a000-0x9f)=""/159, 0x9f}, {&(0x7f00001f7000-0xbc)=""/188, 0xbc}], 0x4, 0x0, 0x0, 0x6}, 0x80}, {{&(0x7f0000bc4000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000bb1000-0x40)=[{&(0x7f000033e000-0xf4)=""/244, 0xf4}, {&(0x7f00008e1000)=""/124, 0x7c}, {&(0x7f0000614000)=""/181, 0xb5}, {&(0x7f000063e000)=""/73, 0x49}], 0x4, &(0x7f0000f82000)=""/201, 0xc9, 0x8001}, 0xff}, {{0x0, 0x0, &(0x7f00003e1000-0x10)=[{&(0x7f0000897000-0x93)=""/147, 0x93}], 0x1, &(0x7f0000c25000)=""/96, 0x60, 0x9}, 0x2}, {{0x0, 0x0, &(0x7f0000e4a000-0x70)=[{&(0x7f00005b6000-0xe)=""/14, 0xe}, {&(0x7f00009b4000)=""/17, 0x11}, {&(0x7f00003e5000)=""/199, 0xc7}, {&(0x7f0000099000-0x96)=""/150, 0x96}, {&(0x7f000027c000-0x6f)=""/111, 0x6f}, {&(0x7f0000a6d000)=""/0, 0x0}, {&(0x7f000024b000)=""/247, 0xf7}], 0x7, &(0x7f000087f000-0x58)=""/88, 0x58, 0x8}, 0x4}], 0xa, 0x40000000, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000018d000-0x10)=@syzn={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) rename(&(0x7f0000b0b000)='./file0/bus\x00', &(0x7f00005b2000)='./file0\x00') 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xafa000)=nil, 0xafa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000afb000-0xb)='/dev/hwrng\x00', 0x84400, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) r1 = inotify_init() mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000afc000-0xae)=""/174) inotify_add_watch(r1, &(0x7f0000304000-0xa)='./control\x00', 0x800) 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xd3, 0x4) bind$inet(r0, &(0x7f0000f02000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg(r0, &(0x7f0000ce4000)={0x0, 0x0, &(0x7f000079f000)=[{&(0x7f0000f2e000-0x1000)="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", 0x88e}], 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00003e3000)="c219cf27bdbad3dc3b5d0af026f47f672019776a6083b7037e2ef597ce5dbbfa8a944ddc89534b92fb4e0e276aedbe04cbfd02fb77bfd1928a55ac51e5facd4bb8f1cb022d0452dbf00bcd2e97c9053aac95d6f3689d42f8621c8b40e4c0b5fbb50d8992a3256c358b5bdf4e5eb93b5a7982e769627abdd5383489a868b36d33470caec1cab740f996b98ab634793572f89f1ac7bab1c0222f3d9e261ce0ef8c1adef18e7475a88c83452a922be2f3987c5a85496475001ccf4d8d901fb63abb25bdf9fb91c556f9b66f36f24c4a8f5164465dbe969f52383df9b70356d168bb44959852fb38ec26d36f48a0", 0xec) sendto$packet(0xffffffffffffffff, &(0x7f0000681000)='>', 0x1, 0x1, &(0x7f0000bc8000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="39a61ba65612", [0x0, 0x0]}, 0x14) [ 75.883705] binder: undelivered transaction 671, process died. [ 75.896235] binder: 14079:14087 ERROR: BC_REGISTER_LOOPER called without request [ 75.923184] binder: 14079:14087 got transaction with invalid offsets ptr 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x5) r1 = dup2(r0, r0) setsockopt$inet_int(r1, 0x0, 0x10000007, &(0x7f0000012000-0x4)=0x0, 0x4) 2017/12/24 06:44:36 executing program 0: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000007000)={0x7fff, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000007000-0x4)={{&(0x7f0000009000/0x4000)=nil, 0x4000}, 0x0, 0x0}) r1 = gettid() process_vm_writev(r1, &(0x7f000000a000)=[{&(0x7f0000001000)=""/225, 0xe1}], 0x1, &(0x7f0000006000)=[{&(0x7f0000001000-0xf2)=""/242, 0xf2}, {&(0x7f000000b000-0xd7)=""/215, 0xd7}], 0x2, 0x0) 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000337000-0xc)={0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000c5a000)='/dev/usbmon#\x00', 0x401, 0x10040) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f000077c000)=0x800, 0x4) fcntl$setstatus(r1, 0x4, 0x2000) signalfd4(0xffffffffffffffff, &(0x7f0000004000)={0x0}, 0x8, 0x0) dup3(r0, r2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000315000-0x8)=[0x3f, 0xfff]) setpriority(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$autofs(0xffffffffffffff9c, &(0x7f000042d000)='/dev/autofs\x00', 0x80000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 2017/12/24 06:44:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000267000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000bec000-0x1c)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e5d000)=0x1c) [ 75.930694] binder: 14079:14087 transaction failed 29201/-14, size 0-8 line 3155 [ 75.940253] binder: undelivered TRANSACTION_COMPLETE [ 75.945735] binder: undelivered transaction 679, process died. [ 75.960447] binder: 14119:14122 ERROR: BC_REGISTER_LOOPER called without request [ 75.976671] binder: 14079:14087 ERROR: BC_REGISTER_LOOPER called without request [ 75.986842] binder: 14079:14105 got reply transaction with no transaction stack [ 75.991722] binder: 14079:14118 got transaction to invalid handle [ 75.991733] binder: 14079:14118 transaction failed 29201/-22, size 0-8 line 3004 [ 76.011389] binder: 14079:14105 transaction failed 29201/-71, size 24-8 line 2920 [ 76.022964] binder: BINDER_SET_CONTEXT_MGR already set [ 76.028292] binder: 14119:14136 ioctl 40046207 0 returned -16 [ 76.035282] binder: 14119:14122 ERROR: BC_REGISTER_LOOPER called without request [ 76.035362] binder_alloc: 14119: binder_alloc_buf, no vma [ 76.035378] binder: 14119:14136 transaction failed 29189/-3, size 0-0 line 3127 [ 76.055982] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.061743] binder: release 14079:14118 transaction 686 out, still active [ 76.068862] binder: undelivered TRANSACTION_COMPLETE [ 76.073975] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.079461] binder: send failed reply for transaction 685 to 14119:14122 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000c32000-0x4)=0x0, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00005b8000)=0x0) 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0xf63000)=nil, 0xf63000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000001000-0x1f)="1f0000000104ff00fd0007c00700000cee05f00008000100010400dcffdf00", 0x1f) fcntl$getflags(r0, 0x40b) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000f5c000)="1f0000000104ff00fd4345bb07000000000000000900010001160003000000", 0x1f) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000f5c000)="1f0000000104ff00fd4345c007110000f605e0000800010001160003000000", 0x1f) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000b88000)=0x10001) 2017/12/24 06:44:36 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000077a000)='/dev/sequencer2\x00', 0x141800, 0x0) ioctl$void(r0, 0xc0045878) mmap(&(0x7f0000000000/0x9db000)=nil, 0x9db000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000090d000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00009da000-0x8)=0xfffffffffffff003) 2017/12/24 06:44:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004d0000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000007000-0x58)={{0x50f, 0x0}, 0x1, 0x0, 0x22, {0x2, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:36 executing program 6: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000fda000)=0x1c, 0x4) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000fdc000)=0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000fdd000-0x10)={&(0x7f0000fdc000)=""/80, 0x50}) 2017/12/24 06:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x10) 2017/12/24 06:44:36 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000000c000-0x18)=[@flat={0x776a2a85, 0xa, r2, 0x1}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00009b1000-0x78)={0xfffffffffffffff8, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0x1f, 0x0, 0x5, 0x1, &(0x7f0000cc6000-0x10)=@common='rose0\x00', 0x800, 0x2, 0x9}) r1 = dup(r0) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000255000-0x91)=""/145, &(0x7f0000741000)=0x91) 2017/12/24 06:44:36 executing program 5: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f000000e000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xdd5000)=nil, 0xdd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7b000)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000dd6000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x8000000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00001af000)={0x0, 0x6, 0x0}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000878000)='/dev/autofs\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000093000-0x8)={0x3, 0xffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000604000)={{{@in6=@loopback={0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008ba000)=0xe8) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000f79000-0xc)={0x0, 0x0, 0x0}, 0xc) fstat(r1, &(0x7f0000f61000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f000025e000-0x10)={0x0, &(0x7f0000209000-0x8)=[]}, 0x10) [ 76.086354] binder: undelivered TRANSACTION_COMPLETE [ 76.091427] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.097128] binder: send failed reply for transaction 686, target dead [ 76.109279] binder: 14141:14145 ERROR: BC_REGISTER_LOOPER called without request [ 76.121154] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000df1000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000f88000)=0x14, 0x80800) sync_file_range(r0, 0x101, 0x0, 0x4) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00008f9000)={0x0, 0x0, 0x0}, 0xc) ioprio_set$pid(0x1, r3, 0x401) fcntl$setpipe(r2, 0x407, 0x0) writev(r1, &(0x7f00002df000-0x10)=[{&(0x7f00009ae000-0x1)="f3", 0x1}], 0x1) vmsplice(r2, &(0x7f0000c57000)=[{&(0x7f0000071000-0x5c)="", 0x0}], 0x1, 0x0) dup2(r2, r1) 2017/12/24 06:44:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) signalfd(r0, &(0x7f000037f000-0x8)={0x462c}, 0x8) r1 = socket(0x10, 0x2, 0x10) write(r1, &(0x7f000077c000)="24000000130007ffffffe607000009000500000c0d00010002000012ff000000f9b816ad", 0x24) [ 76.132237] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 76.133710] binder: 14141:14145 got transaction with invalid offset (0, min 0 max 24) or object. [ 76.133729] binder: 14141:14145 transaction failed 29201/-22, size 24-8 line 3190 [ 76.133736] binder: send failed reply for transaction 691 to 14141:14165 [ 76.134101] binder: undelivered TRANSACTION_ERROR: 29190 [ 76.134113] binder: undelivered TRANSACTION_COMPLETE [ 76.134119] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.144574] binder: 14141:14165 ERROR: BC_REGISTER_LOOPER called without request [ 76.146443] binder_alloc: 14141: binder_alloc_buf, no vma [ 76.146460] binder: 14141:14145 transaction failed 29189/-3, size 0-0 line 3127 [ 76.149191] binder: 14141:14165 got reply transaction with no transaction stack 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00002e1000-0x8)={0x0, 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000267000)={0x0, 0x0, 0x0}, 0xc) setuid(r2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000461000)='veno\x00', 0x5) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00002e4000+0x5d8)=0x1, 0x4) connect$inet(r0, &(0x7f0000987000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) shutdown(r0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00002a5000)={0x80, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x280, 0x9, 0x9, 0x771, 0x4, &(0x7f0000739000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x16b, 0x2, 0x6}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00005e9000)=0x9, 0x4) write$eventfd(r1, &(0x7f0000713000)=0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000526000-0x1)={0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00006f3000-0xb0)={{0x3, 0x5a64}, 'port1\x00', 0x20, 0x100000, 0x9, 0x2, 0x2, 0x5, 0x80000201, 0x0, 0x2, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000ca7000-0x4)=0x1, 0x4) [ 76.149198] binder: 14141:14165 transaction failed 29201/-71, size 24-8 line 2920 [ 76.151804] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.151829] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.188999] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 76.195403] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00004fe000)=0x6, 0x4) r1 = socket$inet6(0xa, 0xb, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000ad2000-0x4)=0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000991000-0xe4)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000403000-0x4)=0xe8) sendto$inet6(r1, &(0x7f00001e7000)="", 0x0, 0x0, &(0x7f0000d2a000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/24 06:44:36 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000c000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000006000)=0x0, &(0x7f0000006000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x1, 0x0, &(0x7f000000b000-0x1)="90"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0xc, 0x0, &(0x7f000000a000-0x7c)=[@dead_binder_done={0x40086310, 0x1}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:36 executing program 0: r0 = add_key(&(0x7f0000001000-0x3)='user\x00', &(0x7f0000142000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) 2017/12/24 06:44:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = memfd_create(&(0x7f0000d80000)='/dev/random\x00', 0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000c05000)={0x0, 0xc50}, &(0x7f00009e1000-0x4)=0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000f20000)={r3, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000dea000-0xc)={0x4, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000017f000-0xc)={0x0, 0x0}) ppoll(&(0x7f00005d7000)=[{r1, 0x0, 0x0}], 0x1, &(0x7f0000376000)={0x0, 0x0}, &(0x7f0000e98000-0x8)={0x0}, 0x8) 2017/12/24 06:44:36 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000005000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = geteuid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000002000-0x8)='keyring\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r3) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000001000-0x4)=0x0, &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2017/12/24 06:44:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f00004cc000-0x8)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00009ba000)="") creat(&(0x7f0000756000-0xe)='./file0/file0\x00', 0x0) chdir(&(0x7f00002d7000)='./file0\x00') umount2(&(0x7f0000f66000)='.', 0x2) mount(&(0x7f000000a000)='.', &(0x7f00008a7000-0x8)='./file0\x00', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000882000)="") 2017/12/24 06:44:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000bb8000)='net/ip6_mr_cache\x00') ioctl$TCSETAF(r0, 0x5404, &(0x7f0000aff000-0x14)={0x3, 0x1ff, 0x7, 0x6, 0x5, 0x6, 0x401, 0x11b, 0x5, 0xfffffffffffffff9}) preadv(r0, &(0x7f0000482000)=[{&(0x7f0000da5000)=""/127, 0x7f}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x8) 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000029000-0x10)={0x0, &(0x7f0000be9000)=[]}) socketpair(0xe, 0x1, 0x5, &(0x7f00009ce000-0x8)={0x0, 0x0}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000fa0000-0x10)={0x17, 0x4f, &(0x7f000055a000-0x4f)="e592ec80c1defffc6e587d380cf889a49a1ee09aa59ca12d8e0fc776f41ec5bd361756202819ec8aa7c61b514eddd53e85e95b31ad483389d9a00085f794eebffc5d13abac3701a088e492391cce4d"}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000404000)=0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000b69000)={0x6, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000f70000)={0x7, r1}) unshare(0x10000) 2017/12/24 06:44:36 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000001000)='b', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x20002, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000760000)={0x0, 0x2}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in6={{0xa, 0x1, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffc, 0x7}, &(0x7f0000ff6000)=0x98) 2017/12/24 06:44:36 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000073000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x8, 0x2}, &(0x7f0000e66000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x101, 0x3, 0xcc, 0x6, 0xc1}, 0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00001a9000-0x8)='./file0\x00', 0x10442, 0x0) ioctl$TIOCLINUX2(r2, 0x40305828, &(0x7f0000e1b000)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r2, 0x400, 0x3) ioctl$TCGETS(r2, 0x5401, &(0x7f000063d000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = getgid() fchown(r2, r3, r4) 2017/12/24 06:44:36 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000001000)='./file0\x00', 0x100) getpeername$llc(r0, &(0x7f0000b93000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000241000)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f00004b8000/0x1000)=nil, 0x1000, 0x100000a, 0x11, r1, 0x0) [ 76.338421] binder: 14187:14195 ERROR: BC_REGISTER_LOOPER called without request [ 76.367755] binder: 14187:14207 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 76.379543] binder: 14187:14207 got transaction to invalid handle 2017/12/24 06:44:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f00007be000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000d8d000)='smaps\x00') mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000015000)=""/0, 0x0, 0x2000000000) 2017/12/24 06:44:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000dc8000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000745000)='/dev/binder#\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ac9000)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000008000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004000-0x24)=[], 0x1, 0x0, &(0x7f0000002000)="b1"}) socket$inet_dccp(0x2, 0x6, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e4a000-0x48)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9000+0x815)=[], &(0x7f000069d000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4f)=""}) 2017/12/24 06:44:37 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000b35000)='/selinux/checkreqprot\x00', 0x10200, 0x0) connect$inet(r0, &(0x7f0000474000-0x10)={0x2, 0x0, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000a30000)='/dev/keychord\x00', 0x20040, 0x0) r3 = accept(r1, &(0x7f00001db000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f000008b000-0x4)=0x14) connect$packet(r2, &(0x7f0000822000-0x14)={0x11, 0x1000000000000008, r4, 0x1, 0x7, 0x6, @random="90292af5b0f2", [0x0, 0x0]}, 0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000002000-0xb)={0x55, 0x4, 0x4, 0x80000000, 0x0, 0x2, 0x1, 0x8, 0x7fffffff, 0xb000000000000, 0x80}, 0xb) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00009c6000)={@rand_addr=0x0, @multicast2=0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/enforce\x00', 0x40001, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000001000-0x8c)={0x4, 0x7fffffff, 0x20000000000, 'queue1\x00', 0x9196, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet(0x2, 0x1, 0x3) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000002000-0x10)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001000-0x8)={r6, r7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$random(&(0x7f000002f000)='/dev/random\x00', 0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000004000-0xc)={0x4, 0x0}) poll(&(0x7f0000dad000-0x20)=[{r9, 0x0, 0x0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000000)={0x7ff, 0x7, 0x203, 0x8002, 0x7, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000002000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x9000}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000001000)={0x96c5, 0x6, 0x0, 0x7fffffff, 0x3, [{0x0, 0x1, 0x7, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0}, {0x800, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x5, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0}]}) [ 76.386462] binder: 14187:14207 transaction failed 29201/-22, size 0-8 line 3004 [ 76.409384] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.421052] binder: 14187:14207 ERROR: BC_REGISTER_LOOPER called without request [ 76.434010] binder: 14187:14195 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 76.434053] binder: 14187:14207 got transaction to invalid handle [ 76.434060] binder: 14187:14207 transaction failed 29201/-22, size 0-8 line 3004 [ 76.457273] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.462955] binder: release 14223:14227 transaction 699 out, still active [ 76.467554] binder: 14223:14233 got reply transaction with no transaction stack [ 76.467561] binder: 14223:14233 transaction failed 29201/-71, size 0-0 line 2920 [ 76.484866] binder: undelivered TRANSACTION_COMPLETE [ 76.491687] binder: BINDER_SET_CONTEXT_MGR already set [ 76.497363] binder: 14223:14233 ioctl 40046207 0 returned -16 [ 76.497398] binder_alloc: 14223: binder_alloc_buf, no vma [ 76.497416] binder: 14223:14238 transaction failed 29189/-3, size 0-0 line 3127 [ 76.506427] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.506472] binder: 14223:14240 got reply transaction with no transaction stack [ 76.506479] binder: 14223:14240 transaction failed 29201/-71, size 0-0 line 2920 2017/12/24 06:44:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000494000)="1f00000003010100f5fe06ffffffffffffff7237090012800600000006190e", 0x1f) r1 = creat(&(0x7f000032b000)='./file0\x00', 0x40) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000f43000)={0x10000000000, 0x9, 0x7, 0x0}) r2 = dup3(r0, r0, 0x80000) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f000055a000-0x4)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00008b5000-0xb0)={{0x1, 0x6f49}, 'port1\x00', 0x40, 0x0, 0x84f, 0x40, 0x200, 0x800, 0x2, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00008ab000)={0x0}, &(0x7f0000106000-0x4)=0x4) 2017/12/24 06:44:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000689000-0x9)='/dev/rtc\x00', 0x40080, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000c9d000)=0x0, &(0x7f0000028000-0x4)=0x4) capset(&(0x7f00000fc000)={0x19980330, 0x0}, &(0x7f0000244000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000b9a000)={0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00003f3000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000eef000)=0xe8) writev(r1, &(0x7f0000e03000)=[{&(0x7f000069c000)="b6f794dd6855c9f8173c6d287b5eb6d9ca0e90849f36ab3f870b76aa7c7d6aeb429b8856e5482d566f7ca89dba5bb808f69cc2cca1b8b9264ac3b33da963c362eceb8083f926dcc05d713f4403be6d5ff6a449b7efe2b5991d6c00349b6112afc9b60afa3380e913beab8cf3", 0x6c}], 0x1) setresuid(0x0, 0x0, r2) rt_sigsuspend(&(0x7f0000b2f000)={0x8}, 0x8) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x8, 0xfffffffffffffffc, 0x40, 0x1, 0x0, []}) syz_open_dev$binder(&(0x7f0000c68000)='/dev/binder#\x00', 0x0, 0x2) bind$unix(r0, &(0x7f0000334000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8) madvise(&(0x7f000083a000/0x4000)=nil, 0x4000, 0x22) ioctl(r0, 0x8916, &(0x7f0000000000)="") 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000c8c000+0xf8c)={{{@in=@broadcast=0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b88000-0x4)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0}) setsockopt(r0, 0x29, 0x30, &(0x7f0000000000)="", 0xe5d) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000491000)={0x0, 0xfffffffffffffff7, 0x0, 0xd265}, &(0x7f0000b67000)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000008e000)={0x6, 0x1, 0x7ff, 0x2, r2}, 0x10) 2017/12/24 06:44:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f00007be000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000d8d000)='smaps\x00') mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000015000)=""/0, 0x0, 0x2000000000) 2017/12/24 06:44:37 executing program 4: unshare(0x20000000) ioperm(0x0, 0x1001, 0x0) clone(0x0, &(0x7f00009d8000-0x3)="", &(0x7f000072a000)=0x0, &(0x7f00004d7000)=0x0, &(0x7f000027b000)="") r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000004a000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000c20000-0x4)=0xc) r2 = getpgid(r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000002000-0xe)='/dev/keychord\x00', 0x280, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000002000-0x88)={0x7c87, {{0xa, 0x3, 0xe3ec, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sync() prctl$setfpexc(0xc, 0x40000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000002000-0x5c)={{0xa, 0x3, 0x306a, @loopback={0x0, 0x1}, 0xffffffffffffffff}, {0xa, 0x0, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, 0x351798a1, [0x3f, 0x3, 0x7ff6, 0x4, 0x614a, 0x886, 0x5, 0x0]}, 0x5c) ptrace(0x4207, r4) wait4(r4, 0x0, 0x0, &(0x7f0000540000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00001f8000)=0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000ccc000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00006f1000)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000735000-0x4)=0x0, &(0x7f0000350000)=0x4) setpriority(0x0, r0, 0x3ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create(0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f1a000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x20) 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = dup(r0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000003000-0x14)=""/20) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000004000)='/dev/binder#\x00', 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f000000b000)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) syz_open_dev$evdev(&(0x7f0000003000)='/dev/input/event#\x00', 0x10000, 0x4000) [ 76.538383] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.546433] binder: send failed reply for transaction 699, target dead [ 76.553652] qtaguid: iface_stat: create6(lo): no inet dev [ 76.563888] binder: 14248:14253 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$ipx(r0, &(0x7f0000896000-0x10)={0x4, 0x10001, 0x5, "2083f3361189", 0x9, 0x0}, 0x10) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x8cf2ef989a078572) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000fc5000)='/dev/autofs\x00', 0x40001, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000fc5000)='./file0\x00', r1, &(0x7f0000fc5000+0xc53)='./file0\x00', 0x4) r2 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fb7000)={0x0, 0x0, 0x0}, &(0x7f00002f5000)=0xc) fcntl$setown(r2, 0x8, r3) fcntl$getownex(r2, 0x10, &(0x7f0000fb4000)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000fc6000)={0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x0, &(0x7f0000c3b000)={0x0, 0x0, 0x400050077918, 0x0}) ptrace$getsig(0x4202, r4, 0x0, &(0x7f000020c000)={0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xd3, 0x4) bind$inet(r1, &(0x7f0000f86000-0x10)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004bb000-0x9)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg$netlink(r1, &(0x7f0000083000)={&(0x7f00005a2000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00001b9000-0x30)=[{&(0x7f00004f3000)=[{0xe2, 0x0, 0x0, 0x0, 0x0, "4ba14d6894caf8df4e4634d713309bb56d966cee0d92ef8845e3ce8ef1bb92efc8148cf5acf319784019f56256be442c00fff27f5ac164b0a27c1478df5861e65a0b038219b0b33dd1282e5f7632c166c4c9c0736c157c4c0e4766c40664c705d1173c785a799a3646d41daa771b2c8c7372feb45c4b8a22fc53c99b2908eabd0188c746fabe94f3345d604c8535d159df58a27cf275edde27edc379902140c5a88f120a0ff1d2a2de701af25b9caec63f3650080f9600000000000000e080baa252c741665cbe10c14efc64518eeb2e8465"}], 0xe2}], 0x1, &(0x7f0000eb0000)=[], 0x0, 0x0}, 0x0) sendto$packet(r1, &(0x7f0000681000)="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", 0x18f, 0x1, &(0x7f0000bc8000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="39a61ba65612", [0x0, 0x0]}, 0x14) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000e14000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000c98000-0x20)={@generic="d197a961df291b984ce9f3c88b090c16", @ifru_addrs={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f000093d000-0x8)={0x0, 0x0}) write(r0, &(0x7f0000e2b000-0x1000)="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", 0x1000) sendfile(r0, r1, &(0x7f000021e000-0x8)=0x0, 0x2) read(r0, &(0x7f0000c83000-0x43)=""/67, 0x43) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000a92000)="", 0x0, 0x20000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000d53000)='ns\x00') mkdirat(r0, &(0x7f00002e5000-0x8)='./file0\x00', 0x0) [ 76.563900] binder: 14248:14253 ioctl c0306201 20008fd0 returned -11 [ 76.565727] binder: 14248:14253 ioctl 8040451a 20002fec returned -22 [ 76.566241] binder: 14248:14253 got reply transaction with bad transaction stack, transaction 706 has target 14248:0 [ 76.566249] binder: 14248:14253 transaction failed 29201/-71, size 24-8 line 2935 [ 76.574827] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) timer_create(0x7, &(0x7f0000992000)={0x0, 0x1f, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00004dc000)=0x0) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400, 0x0}, {0x0, 0x0}}, &(0x7f00006dd000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000972000-0xcb)={0x0, 0xc3, "66c5a97e778c21e1316a4557abc8e77201193ca0234099b85d84e8673d4cecc3aec4e0458057cc7a3ca1430d2f5d2523c71dcf3c64dcd7ed5198f70f8f89c79f962071a7a5de8ef9edd75ec9214750eb0084025db878a2e434d8f64e8b67f7191fe2aa015e9af9c89d8c2d0b2e5c5818c512e8a7bfd079a09d32b44744d81ddd050372f69637e6bf8d97c4067c58b030c73acae8d4a6ca98665b30baf447429149da6dd51caa5f44a9b1b01789ccae451c8b819bc8caf1aa3170d014b75901723fca9e"}, &(0x7f0000290000-0x4)=0xcb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00009ba000-0x8)={r1, 0x0}, &(0x7f0000734000-0x4)=0x8) 2017/12/24 06:44:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000ca3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000074f000-0x8)=0x7) recvfrom(r4, &(0x7f0000013000-0x8d)=""/0, 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}, 0x0}, 0x10) r5 = getpgid(0x0) vmsplice(r2, &(0x7f0000379000)=[{&(0x7f0000698000)="23fbbabe7a0d22ffb1897b4584e53a43", 0x10}], 0x1, 0x0) fcntl$setsig(r3, 0xa, 0x12) modify_ldt$write2(0x11, &(0x7f0000f74000)={0x7, 0x0, 0x4000, 0x0, 0x4, 0x2, 0x7a0000000, 0x100000000, 0x2, 0x3}, 0x10) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r4) readv(r4, &(0x7f0000dd1000)=[{&(0x7f0000fb6000-0xb0)=""/8, 0x8}], 0x1) fcntl$setown(r3, 0x8, r5) fcntl$getownex(r3, 0x10, &(0x7f00006ff000-0x8)={0x0, 0x0}) tkill(r5, 0x16) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000051b000)={@multicast2=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f000022f000)=0xc) getresuid(&(0x7f0000f0b000)=0x0, &(0x7f0000ce6000)=0x0, &(0x7f00007f6000)=0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000c5000)={{{@in=@rand_addr=0x7aa0, @in6=@loopback={0x0, 0x1}, 0x2, 0x10000, 0x2, 0xffffffffffffffff, 0x4, 0x80, 0xa0, 0x6, r6, r7}, {0x7, 0x6, 0xffff, 0x3, 0x5, 0x7361, 0x5, 0x8}, {0x200, 0x7f, 0x6, 0xc}, 0x7f, 0x1f, 0x7, 0x0, 0x40, 0x3}, {{@in=@multicast1=0xe0000001, 0x3dc, 0x330}, 0x2, @in=@multicast2=0xe0000002, 0x81, 0x3, 0x3, 0x4d07, 0x6, 0x2, 0x100000001}}, 0xe8) 2017/12/24 06:44:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00001ce000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f000019c000)=0x14) pipe2(&(0x7f000040a000)={0x0, 0x0}, 0x800) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f000062d000-0x1)=0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000294000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00009eb000)={0x7fffffff, {{0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffb1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x7, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) mremap(&(0x7f0000360000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000c43000/0x1000)=nil) mmap(&(0x7f0000333000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000370000)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000bbd000)={{{@in=@loopback=0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e4000-0x4)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f000062d000)={0x0, 0x0, 0x0}, &(0x7f0000933000)=0xc) r6 = geteuid() setresuid(r4, r5, r6) r7 = fcntl$getown(r2, 0x9) get_robust_list(r7, &(0x7f0000d10000)=&(0x7f00006b9000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000d60000-0x8)=0x18) socket(0x4, 0x5, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000735000-0x8)={0x86, 0x4, 0x1, 0x7fffffff}, 0x8) mmap(&(0x7f0000334000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind(r3, &(0x7f00008a7000-0x8)=@un=@abs={0x1, 0x0, 0x2}, 0x8) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006f6000-0x4)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x20000400) clone(0x0, &(0x7f0000141000)="", &(0x7f0000f13000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000961000)="") ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000942000-0x4)=0x859) fsetxattr(r0, &(0x7f0000de2000-0x18)=@known='system.posix_acl_access\x00', &(0x7f00005a6000)='mime_typenodev.)\x00', 0x11, 0x0) [ 76.574834] binder: 14248:14253 ioctl 40046207 0 returned -16 [ 76.574858] binder: 14248:14261 ERROR: BC_REGISTER_LOOPER called without request [ 76.576078] binder_alloc: 14248: binder_alloc_buf, no vma [ 76.576101] binder: 14248:14253 transaction failed 29189/-3, size 0-0 line 3127 [ 76.577256] binder: 14248:14253 ioctl 8040451a 20002fec returned -22 [ 76.587343] binder: 14248:14261 got transaction to invalid handle 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000d83000-0x4)=0x8, 0x4) clone(0x0, &(0x7f00007b6000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000710000)="") chmod(&(0x7f00000ef000-0x8)='./file0\x00', 0x0) 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003000)='/dev/hwrng\x00', 0x14000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f000000b000)={0x9, 0x7ff, 0x81}) r3 = accept4$inet(r2, &(0x7f0000007000-0x10)={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000000b000-0x4)=0x10, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003000)={@generic="e9c77c7e1c76cc4de2b36428f62231dd", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$packet(r2, &(0x7f000000c000-0x14)={0x11, 0x0, r4, 0x1, 0x8, 0x6, @random="13b784a2170d", [0x0, 0x0]}, 0x14) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000007000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f000000d000-0x28)={@common='ifb0\x00', &(0x7f000000c000)=@ethtool_flash={0x33, 0x0, "24d8c2476a1f9308a4bd10994399333cb2911f8d85f5513d65d97c3593111a8ed7219a4c699f1552659719a16c9e814bb731ea0c33791b13d96a67e9d7a2c1a0109aab2c8ad0932bf41aa12bf197b0a5337a6d6afa45100ecd72024ddb643c468cede8b6c6957c6f1eeb6faeef7644b57ce40cd1542606479bad36c87a2924c0"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f000000e000-0x8)={0x0, 0x5, 0x5, 0xe4cd}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 76.587351] binder: 14248:14261 transaction failed 29201/-22, size 0-8 line 3004 [ 76.621107] binder: BINDER_SET_CONTEXT_MGR already set [ 76.621114] binder: 14266:14272 ioctl 40046207 0 returned -16 [ 76.621186] binder: 14266:14272 ERROR: BC_REGISTER_LOOPER called without request [ 76.648441] binder_alloc: 14248: binder_alloc_buf, no vma [ 76.648459] binder: 14266:14288 transaction failed 29189/-3, size 0-0 line 3127 [ 76.699413] binder: BINDER_SET_CONTEXT_MGR already set [ 76.699422] binder: 14266:14300 ioctl 40046207 0 returned -16 [ 76.700614] binder: 14266:14288 ERROR: BC_REGISTER_LOOPER called without request [ 76.700670] binder_alloc: 14248: binder_alloc_buf, no vma [ 76.700687] binder: 14266:14300 transaction failed 29189/-3, size 0-0 line 3127 [ 76.720695] binder: 14315:14320 ioctl 5603 2000b000 returned -22 [ 76.720807] binder: BINDER_SET_CONTEXT_MGR already set [ 76.720817] binder: 14315:14320 ioctl 40046207 0 returned -16 [ 76.720923] binder: 14315:14320 ERROR: BC_REGISTER_LOOPER called without request [ 76.752237] binder_alloc: 14248: binder_alloc_buf, no vma [ 76.752257] binder: 14315:14325 transaction failed 29189/-3, size 0-0 line 3127 [ 76.799253] binder: 14315:14329 ioctl 5603 2000b000 returned -22 [ 76.806211] binder: BINDER_SET_CONTEXT_MGR already set [ 76.806218] binder: 14315:14329 ioctl 40046207 0 returned -16 [ 76.808007] binder: 14315:14325 ERROR: BC_REGISTER_LOOPER called without request [ 76.808059] binder_alloc: 14248: binder_alloc_buf, no vma [ 76.808075] binder: 14315:14329 transaction failed 29189/-3, size 0-0 line 3127 [ 76.862093] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.867609] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.873099] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.878594] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.884103] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = open(&(0x7f0000f96000)='./file0\x00', 0x1, 0x4) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000713000-0x4)=0x0) sched_setscheduler(0x0, 0x6, &(0x7f00005aa000)=0x80000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000742000)={0x0, 0x2000000000000080, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:37 executing program 7: clone(0x0, &(0x7f00001f9000)="", &(0x7f0000d21000-0x4)=0x0, &(0x7f00004e5000)=0x0, &(0x7f0000882000)="") add_key$keyring(&(0x7f0000f8b000-0x8)='keyring\x00', &(0x7f00002c9000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/56) 2017/12/24 06:44:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000e24000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000000c000-0x7)="666400000004bb") utimensat(r1, &(0x7f0000016000-0x8)='./file0\x00', &(0x7f0000016000-0x20)={{0x77359400, 0x0}, {0x0, 0x7530}}, 0x0) 2017/12/24 06:44:37 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) fdatasync(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0xb, 0x10000000000000) write(r1, &(0x7f0000e42000-0x1f)="1f00000012000ff20500050000000000f84c004106001d00c3000000fffe7e", 0x1f) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00008e8000)=0x7a3, 0x4) 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f000000b000)='/selinux/context\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000002000)=0x1) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x109001, 0xc0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000002000)=0x14, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f000000b000)=0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f000000c000)='/dev/rtc\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x200) 2017/12/24 06:44:37 executing program 6: prctl$seccomp(0x2f, 0x4, &(0x7f0000000000)={0x0, &(0x7f0000ab9000)=[]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r1 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x1, 0x100) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000001000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, @empty=0x0}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000-0x108)={0x3ff, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) 2017/12/24 06:44:37 executing program 1: 2017/12/24 06:44:37 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000001000-0x4)='trusted\x00', &(0x7f00000b7000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000bdf000-0x8)='keyring\x00', &(0x7f0000122000+0xc3d)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000002000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000001000)=[0x0, 0x3]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000ab7000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000a5a000)={0x4, 0x100, 0x6, 0x5f5138e7}) r3 = memfd_create(&(0x7f00003ab000-0x3)="ff29", 0x0) fallocate(r3, 0x1, 0x0, 0x10000) ftruncate(r3, 0x4fa) fallocate(r3, 0x1, 0x0, 0x10000) lseek(r3, 0x0, 0x4) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000893000)="51c8450db76e09b15c481099ebd63cddc87c0db29d92f13437a26a819c647f0e18179ba365ccd60c28f4f7acf14639eb4fdeb10d82f125007975d142c89ae38e0afa7a8194f8541287be430f02079c20ef73e827c01b5cc52c96eee04015") [ 76.889565] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.895022] binder: release 14248:14253 transaction 706 out, still active [ 76.901932] binder: undelivered TRANSACTION_COMPLETE [ 76.907025] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.912463] binder: send failed reply for transaction 706, target dead [ 76.919253] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.938570] binder: 14337:14341 ERROR: BC_REGISTER_LOOPER called without request [ 76.962319] binder: 14337:14341 got transaction with invalid offsets ptr [ 76.969271] binder: 14337:14341 transaction failed 29201/-14, size 0-8 line 3155 [ 76.978092] binder: unexpected work type, 4, not freed [ 76.983465] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = syz_open_procfs(0x0, &(0x7f0000528000)="6e732f6d6e7400c552c5ba9e2c33e308163dd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000bf3000-0x4)=0x800000000000000, 0x4) r1 = syz_open_dev$usbmon(&(0x7f000026b000-0xd)='/dev/usbmon#\x00', 0xffffffff, 0x181240) getdents(r1, &(0x7f00003e1000-0xd4)=""/212, 0xd4) clone(0x30000100, &(0x7f0000e69000)="", &(0x7f0000063000-0x4)=0x0, &(0x7f00002e2000-0x4)=0x0, &(0x7f0000a46000)="") 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xf73000)=nil, 0xf73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00001a6000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @empty=0x0]}, 0x18) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000f70000-0x1c)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000558000)={0x0, {0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0x7, 0xff, 0xfffffffffffffff9, 0x2, &(0x7f0000af6000)=@generic="bc6977bd5025112e3f7494d38a1be368", 0xfffffffffffffb10, 0xfff, 0x8}) 2017/12/24 06:44:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000c22000)='/dev/loop#\x00', 0x0, 0x2) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000ea0000-0xc)={0x0, 0x0, 0x0}, 0xc) ptrace$pokeuser(0x6, r1, 0x10000, 0x5) r2 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(0xffffffffffffffff, &(0x7f00008b0000)=[], 0x0, 0x0) sendfile(r0, r0, &(0x7f0000a02000)=0x0, 0x100000001) signalfd(r2, &(0x7f0000f8d000)={0x6}, 0x8) 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000693000)='/dev/sequencer2\x00', 0x8000, 0x0) sendmsg$netrom(r0, &(0x7f0000e1d000)={&(0x7f00001ac000-0x48)=@full={{0x3, {"5b659e10a4a674"}, 0x1f}, [{"66a151c82eee07"}, {"404d6ad0ad8072"}, {"7c03369de49783"}, {"61eaba3ac6f837"}, {"820a8cf7aee385"}, {"40b4fb937cc247"}, {"0c2ae97ee38397"}, {"395675b7ef841e"}]}, 0x48, &(0x7f0000d2a000)=[{&(0x7f00000c8000)="06062771bcbc9edd75187e32329e1e830e563426db40e71068c0e441178e73f52bc25c2510764e0a4706f6b26f8bcb706ef1ad68b66afbfc30ad024a7f384cc860bbcfad1e72e9b190d84bef3fea35aeae53114c66370e", 0x57}, {&(0x7f00000e8000-0x1000)="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", 0x1000}, {&(0x7f0000ab7000)="ac1e10f733f0a9cc1cf4161bc5710c33b9f1e531ab53fb4c1bfddbae0292742bb2e23a9f09410310131e4a77b1ac125c4b584656eea93515547d1dec84698b7da379049b0fd95df2205cc4624d3ced83b4c78f0908c1cf74d6fcb60e69a9dd49d95fee1e4ba2ca92dcfc2ded7b079a6c21704c94fbe9ecd868b5b55216d42554b7b7847f0dae774a0c8e2d926064b3f587d7e53e6e64f2702f43ad5320cf2bf595dfb5ebdbc65d134f43772276d480fb859eeb4baee117d09303fba0dd5e8869f306aac1d017b41d07db8266ebc96f9bc2c7e20c64f4a2e2edc18a00acb0e56158a2de63e115", 0xe6}, {&(0x7f00002b9000-0xfa)="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", 0xfa}], 0x4, &(0x7f00004d5000-0x1010)=[{0x1010, 0x100, 0x0, "ffa4f0b6935652a04bc43570d1ab36e5df182a98d46571dbea96154d10a5d5a1a9f6a5ce56b559f9ae9fdda4e9131a9eba5ee368fb43dee96ad4dd2252ab6c6d99bd00c7dfc1a9375213c93ba57b93844c7d0b178aef57c2acb9d91997ecd0690a9195b7bc0f77fcbb277e1f938f73763d9098b555d9fc3e692c007acf01a96c8a0c96919074e76b3bfa7390488caf09f04c6fb1223a2b99dc30e9d593d2d3a81f11975075599bb81f4c765cd49cf16b0d7fbf2c0a0d231f7a7cd41e2875940691dbade0864160b8f9f398884fe2f2f19f99297d028d7004260d556622cbacf79f2a99c75f094e9715864f51148ba8d43e5ae0460496dce7c45f7208e3f26f3bdb2abd2a30ec62b93a29fa34a3cbbb383c431c122d68d64e25e9af801eb2c20778e313cb7532eddbcff040d61d275af2a884790bba1f25f5bb7581e909ddb5fc8b7ce9e414ac293f410db3410468c47456b2b871d269d1a1431770fbc7618f258ea04215016f63beb0759919c6a6da3313a0f84a4d34fd5311cfff10ce9344d4967fa0fbd561edbd7d437cfee361b79c79784b9938dcac1356d789a920cc332b151952b8c24cca0c0dbfc9782792fd5aca05a052f28b69a42546ad15267ebd8deda80e281c15bd5d3ac3a082cc49e4a3c174698f52c7c978f0ea32e33448be2016d90ab7953f1e47a7a5b27f04b6964071021b89d699852109d64a12e68d78cacf0918b17ba05d922cda7f26ce75ac4e32ac4855ad9e0cf562a32d3a5c018e5833cdcba2e8c56e7357f71192413ee938eaec2d48f4b98fbba7a1f71d07a85a27a55c28ab34ab5dac8284e90f65d3899c0d628b061bd85173848bd5b89e2855c41847694cc724091d66798742a6fd476e3eb939167a724b4e55c6c2a9bf9b48842ab96e4e00a62eabf2ee74e924e831ff3379e79c3fb44a58925b66cfa94fce50597a3f2a5be213fe261f132f24b4507fa92130dca81a0e77c6e7d96065f8fb08eb60bd5d62698825cca46641a49af4fb1e855e6301185426893b3e6f8376b66eaf5806f90439330473637a7b6fe351af6c858a2df2c1d9fb78917b4552d85eb551095291e37252a46e80321fafd7f886498e3522bf9ebfd80f00f8a79c637b3e29e08ccf970d5705e8fb2c7d1c4ef22ef25d4ace3058ca9480ad5d345eee36886383b48c524251a441f7f30ba8af7c988286a22d421192220cf58dcd01d50f64c7cb8dbcf37e928c9d7ebf78835a609207355a97b49e722f0715f9a6f46905bf525284af49674e1b3f959ddfd1198ef109a3c5286e269ce92174d87dc6dae5bd7b1d5efc4968f38c65459c6a386ec3250312eb11932c845716971bdb90b3d9df20ec36314b0bd8bfec5f009f073f2b0fa8e4aa0a915fbd99f4ccb534d4e96e8b7abf8134c5efd6d26a063921d03b1230e6fbf13fd5b04d89dcfd0d9b47a20f67c8bf3e4d79bccde6bb4109a3d84f3229baf15b441d4c1678eb1b96599d6d65e52e58b652387dfcfa9baf82c5f181063cb3926fdf96608647f01bde60c5db6f0807fc14e00d4fa0713a332c62eaf42ea78b7f0d8b26d7645a7a8c09d999217a4ca19a371ecd9fa3befc8b1c5b42ae23421110213a5bff74f430cab81c7a12b2945fd3d7435c2211ca2618a83be4dda1efac7f9b7968d822f6bc36b3a5872b40344d314ff9d4cbd21f6e0b833e515077f220072379d59bdc77173afd3b928d33dc6c6d5fb3359d4aead09dd9c1d8d72218985903b1a4975a2e85ae08c03b50c455c81732abb1c00bb08869b5d91c06e8a205625bc1e81047692ed1d5e3719e8c6caa26254d21e9af74a9f02c31509821b988f99be667873493ce94a26e9cd3571e89774ebdaea571e31c515d3af49268836b8cbcb86b8da48635d91f063ca7efb695b98c7318ca65f9aa6b964d44178adc8e912a07a1e64b1803b6787e3a49a980b1dd10f0fd787cd2dbadabb9b191a7c3dad7bcf7bd8d77b2bff532b9bebded4d229ddfb848b2055df05c48d56b6c40a5f1a9a1089b26b79277844c06291a660473600cedbcb97c64edb0425c5404c4c2baf05f910b66eddf14fbd8851360b43ebeadc316f8672779f6d7b38195f3203b11c7041451a8cc5100ca43ce2add97756a1c084c18f3b299c4228ed9daca41cdf98d3fa0d14da92c2561e67cb302c364bf635ea52adb9cadafcb3b0d5134c4907f9537b97aa641c50bc4cbbde52a7741a5bf2ae7f2404721f2cf34a9aec7e300023481e01d6c3e66afd1863224631de342ecc182a841600e8c6efbef424fd7d6b286f86224665442f6b706deef537e529bccdfa3c46fcd065a0d5a51ce6d7263720c222d3c14f067ee710748261676d61c9129f574b987136241bb243ac5faa0e0917c7618cef9f578cebc0db0da7547a2068aaf573c98f2c5a4e737fb57c2f18380eb32c52014f7f0f78adb7dcf50665df20f2c31ae25e96a31571a3437a2c54edfe81f166c5b5844aff32d9348887f0ee90a61366273f369a90628accccd43f5059671243be96fcf77c715051bfe8fff4887146ca46c1837a99f37cc2bf5e46ce2dc33410653b3e8ac07ce9b851130fede486d56c4901262e586a49508420f9ba870cf7f4c6eccd0fb8f70f9731dab1735df32a0281dc7cf65aba3380c0522469eaea992f0aa8ee062526c8ecebb82fcd8d41a4bd3dafd3223e95676110c074b37b3462bf8029c9bfc7cf624258cfcdbc1cad1d3aef80cb94bacfcda8f99e163d84a94831840bced8148f7cb2a7c8f5a6c0595407ec8a4600f1b00253bb603d9cc0e2b96a3559ca83e232180a4d873cf9471e9ab41f3efa49bb03b6c25922b3d1aeaccb9a961e5df9dea15d82185c5632e9730d11cc94cb48c855e9ad4ed7929aff1a688eef4eb78b6b02f4312d141a401f3522aa19fd71f12d31c1ac9deb97f5ed9927a598381140f2eb398816ab3922ff9d59b6980498a9b2e9cc2bcc022f703f29a16221591dca6b4b1822c7eac2ca4f489c231e532ef5ed4693a3b40163856d6b1804a544228b6e15fa5fc71c485a544d8842e9d59591b70a3a1525f3b1834914ec08d98e6c1fde0cf80ee53b2c6761fa587721af56bd0a62abe07258f305ca2e73e1215a7de3f7ed05ff773dcce245af3d6e327cc2be9718a46a3002e1653cf29fb94c0bf5c67ee0b54a38e51d0b86fd29b64a9afa9028ff18ff2084a80f1c2aefd9ca9e261ace3d652e3fbafbd670f5e8641bcc4269ac125dbd2c26557e0a4b0ffcb12411a719a3638101b9080b45e49e221e0b98f5fedab87050455c28f34b8733f988fceaaed51eb6a2f3bac8e8b0b41a043edb36b2a63eb3b47b8937a4f1041f7c1c4f97ec9c2e54a3cce0b026429fc89167e3ae2ce607d506f74b2c21519c4aca0b5aab774d98539ca3f5fbf6b4255ed628bebc8edae8a9ae0dda762d985ded8e2860660ea0c29b2835d1961a1e712519ffacc48a275d8c3fdee5a37459ef2f53eeaf0fb409f9edbb33cc4108f430f5bd9e50d89e2b6dd651ab97a7ccdede38171072e7d5500580225fd06ea6d1afdd592f2e246be641d61aada8883fe9bcb9e0045ab25f8b4171befe30c4ac3955cf5a8632e0da8bd66ecc55e8808fc9377c6fdaa466e928c4f57621cd25c75e52ec76f73513671bf71ef14f45c8ee0f4ec38bd89f8b2806d4f5f79d3e93379e0fa662f3d2a7fe55a777e966d55965b44b4a385228a9d8102847000abe72bab202c0a4375517edc6496d3c4667dfda8ed18f1748e34ea1211734e911375a61540ba6484c0c87ed38ea363f3499e3952e59bd86f779b197b8630f44e730da13774ee5e216d2235fdacc8e9d47b600cfbb80a27e27ca180f924a1577029924fc008cfd7282e48c5657bdbdef2eb939ac1108d649d029befe887b34e2a9f5ebe55521c81dbcb239f21f653b83e3d3198382ea895bc53f0c2153f5270137150a729850de5936b165250b7bb3caa1f40ae3201a7729d87a2acde07b5d9c89483e3fbd2769f932993b8f8d83050867870a186707aef86ccda3f42c663ff40e4accc617b5896e8678c87a4106058aafac5ace1767ca44890e90e56383e722e53d565f4e1857167acbd4cc35dd546d6578b8bdbaaeb3e4c5de6ebb41574b163441adc478a0ff8ab04ed2195991777a453a3aa5e887f52f4536ab6cfbff9d29e9fd829449386dfc622e2c57c66c178ade1ed5cb2786baf231bebebf7e3f604b7e07dc536f84120a61d5f6fe0767411cb22eca76885b5708dd2e5bc9eeab5a51e51abfedc16fdf0ef88ca899d7222942bd1013844332afe07e22c0dab4aa9d715589ed37f4b7f4790889b9237ee02505f6ea896461b7b4ccf846757f2ee926f796e2fcff1425c8157ab108563bb6ccf92431150d0de54e8a7c2a6e9b851db554e8d63ddbc83460ce1691299a45f280ed9c968ab672c1958dc948c853bbb2b4f3bb64589423e6c2507769e91cbbc2404d1b65bd2f86ca8831cad1b4fd913b53763a9b400700a725bb29e9458ab250488a6c0d3fad033c3cd82a3b76e8ee5f9914b8d871c8a59efaf8f1fd25010463e8f40f335336df9360c0251c064c801d7c223940c997cde83ae257499c84f8db6ba6a35de25b24ee9b6aeda08718153c5062541c802e823e939305550b94b414da8efbc8bfee478ef6c678aa24610ce677007387339ac32924c6c29172aba73337e5276649a8b8a7262c3310895b7d945727af1be699f15f3a37a1749ccd2cdcd855b0d09f1e07ea6f984f39af90d160a976ef10266a2ec5f2fb3ca61c8e00c091a937f259c0c65180260d22b28d8f7d03c7f2a7192317411acc4f2e6dc3cf7f8d66e7b65778ae9b00aacaa227d998195ed98549956a46e0c3bacaf66142809643bb0d34b3b70eaf9f9288cddd61f0e25456d538c347529caab340e2a5b7eee3ea38b103a689307fe3840792d28894fb96ce316592a15f36a9eb8bf9d83c19d48ae1aae20e843681dd00b0b604ddec43f1aff841125b0c14795ba9bfc9e0b98cb6959c9eb278b6776dd8c9b0b20784514ec48c7e5cf916b58b68e4a501fadd2461451f59425b217e2b56758150e0db177eb5ed03b9b92ccaa198023a1e90c2ceb1095679927ee548580765fd4e8b68872ebd7060ce608dd6f96814f7c386c30ab356870294699cceb6711e0d80c1289e31f723253a5e78caca98afc656317db482fab28c1b7adadc1e1312c49d8cbcf6671459e4b56b9e66b08b5bd30863906502831a9a56935f957b3fd53991e65035fb2c913b108beb7f7db623a268236471dff0ed6fef3618f82a63fc0936617aa3d795ad0997ca7ff2c05aede0af9e4ad538b223fe85197bd77864cd30e769677d4ac57cfaf90f2b5c4cf6ea0640b73e24de5dad37fe258738ec93972098b83042916f7e1e576817a1706fc5eec1c67b7d555e07dfa53c8c8775a074eaf182084946aa95d8e110435c5072a0021649cc46ce2203cf5eee97c8358f38894223dd23210525e69814ad88eb6d6c718202a043161a76205f15ef74ad72124958c06d3a0b36ddcaad6792c185890280a937f46073695d7ccde2f5aee70da93911c3d5c4ec221699260cca0513bf97af81ca59854c17e4e8f2bd560e0f0fb4fb63e9d439dbf1a330f485695280b7e5e1b792b6f1ef232efb0bd6dd7b957ae8e63ff7906849d2a7f683068733c4798259dcf5d0f80acf5bf472466570ad8b0d15ca47a799bebe0bc968dc0a3f82436b2e73680fab3857fa20a207becaeec5c4c76831a9827ba386608f50b231ec3d764ce877ac2a8b427314a797e7fb2577f2a87756c2024b86b39"}], 0x1010, 0x40000}, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={&(0x7f0000859000)=[], &(0x7f0000003000-0x24)=[], &(0x7f000044a000)=[0x0, 0x0], &(0x7f0000c3b000)=[], 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt(r1, 0x29, 0x23, &(0x7f0000000000)="", 0x264) r2 = socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f00005ef000-0x96)=@hdr={0x2, 0x0, 0xa844, 0x401, 0x8, 0x3, @eth={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [{[{0x9100, 0x8, 0x3, 0xfffffffffffffffc}], {0x8100, 0x7fffffff, 0x1654, 0x0}}], {{0x0, @ipv4={{0x6, 0x4, 0x8f60, 0x0, 0x76, 0x1, 0x4, 0x401, 0xdf, 0x0, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x0, 0xbb}, {[@noop={0x1}]}}, @icmp=@dest_unreach={0x3, 0x8, 0x0, 0x0, 0x5, 0x9, {0x15, 0x4, 0x1, 0x7, 0x8, 0x1, 0x5, 0x5c, 0xff, 0x7, @multicast1=0xe0000001, @multicast2=0xe0000002, {[@timestamp={0x44, 0x24, 0x3ff, 0x3, 0x8, [{[], 0x1}, {[], 0x2}, {[@multicast1=0xe0000001], 0x0}, {[@rand_addr=0xff], 0x1000}, {[], 0x3}, {[], 0x80000000}]}, @cipso={0x86, 0x1a, 0xfffffffff46e6f59, [{0x7, 0x3, "f1"}, {0x1, 0x8, "23bfac47f854"}, {0x7, 0x5, "158a7e"}, {0x0, 0x4, 'tq'}]}]}}, "e276"}}}}}}, 0x96) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00003db000)=0x7, 0x4) dup3(r2, r1, 0x0) 2017/12/24 06:44:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000d64000-0xd)='/dev/usbmon#\x00', 0x0, 0x7) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000f35000-0xc)=@file={0x0, "e91f7189591e9233614b"}, 0xc) poll(&(0x7f0000ef6000)=[{r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000029000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000909000-0x4)=0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000c8e000-0x16)='/selinux/checkreqprot\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000e9d000)={r2, 0x7}, 0x8) 2017/12/24 06:44:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000def000-0x15)='/dev/pktcdvd/control\x00', 0x200, 0x0) syz_open_dev$tun(&(0x7f0000788000+0xecc)='/dev/net/tun\x00', 0x0, 0x400000000008000) r0 = eventfd(0x40000000000000) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000dc000-0x5)='maps\x00') pread64(r2, &(0x7f0000ead000)=""/0, 0x0, 0x5fffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000777000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfff0000000, 0x2, 0x0, 0x4, 0x2c, 0xffff, 0x9}, 0x20) 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000008000)='/dev/input/event#\x00', 0xe5c, 0x400300) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_str(r2, 0x1, 0x19, &(0x7f0000009000)='/dev/input/event#\x00', 0x12) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000009000-0x67)=""/103) close(r0) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:37 executing program 4: mmap(&(0x7f0000000000/0xffd000)=nil, 0xffd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ffd000)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f000087d000)='/dev/input/event#\x00', 0x9e, 0x80800) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fde000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000dd1000-0x10)={0x2, &(0x7f0000ff0000-0x10)=[{0x3c, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) sendmmsg$unix(r2, &(0x7f00006a2000-0x1f8)=[{&(0x7f0000fe6000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000fe6000-0x20)=[], 0x0, 0x0, 0x0, 0x0}], 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$llc_int(r0, 0x10c, 0xf, &(0x7f0000fff000-0x4)=0x5, 0x4) [ 76.988851] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.990439] binder: 14337:14354 ERROR: BC_REGISTER_LOOPER called without request [ 76.992852] binder: 14337:14341 got reply transaction with bad transaction stack, transaction 721 has target 14337:0 [ 76.992859] binder: 14337:14341 transaction failed 29201/-71, size 24-8 line 2935 2017/12/24 06:44:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000c82000-0x8)={0x0, 0x0}) r2 = dup2(r0, r1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x1000000000000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000ef7000-0x28)={@generic="33769f0acf4f8039e9fe8cca2d6897f9", @ifru_settings={0x1ff, 0x1f1, @sync=&(0x7f0000be0000-0xc)={0x7, 0x2, 0xc0}}}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000a47000)={@generic="b4f08ddf85854b0c5eebbea64e71754a", @ifru_addrs={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000e000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f00001bd000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x1f}) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000324000+0x9c4)=""/140, &(0x7f000099d000-0x4)=0x8c) 2017/12/24 06:44:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000a45000-0x9)='/dev/sg#\x00', 0x7d8, 0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x7, 0xae77, &(0x7f0000000000)={0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x400000000010) write(r3, &(0x7f0000484000)="240000001a00091cef000000efad000001ff0006090001007f0000010005000000000001", 0x24) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000e28000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f00000aa000)={0x0, 0x0, 0x0}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000e14000)={{{@in=@multicast1=0xe0000001, @in6=@loopback={0x0, 0x1}, 0x3, 0x6960b4ff, 0x2, 0x7, 0xb, 0xa0, 0x20, 0xffffffffffffff01, r4, r6}, {0x20, 0x5, 0x8, 0x2, 0x8, 0x96, 0xfffffffffffff800, 0x100}, {0x401, 0x81, 0x4, 0xfffffffffffffff8}, 0x0, 0xff, 0x7, 0x0, 0x30, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x100000000, 0xffffffff}, 0x2, @in=@loopback=0x7f000001, 0x6, 0x3, 0x2, 0x3, 0x5, 0xd3ae, 0x2}}, 0xe8) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000262000-0x10)={0x0, 0x0}, &(0x7f0000da7000)=0x10) r8 = getegid() r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000bc2000-0x15)='/proc/self/net/pfkey\x00', 0x200, 0x0) lstat(&(0x7f0000e90000-0x8)='./file0\x00', &(0x7f0000324000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$usbmon(&(0x7f0000f0f000)='/dev/usbmon#\x00', 0x1, 0x200) sendmmsg$unix(r0, &(0x7f00000bd000-0x188)=[{&(0x7f0000dc7000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00002ad000-0x10)=[{&(0x7f00007e6000-0x77)="96cfd133afbb1c418404a26f8bec6d27581fc75ac2ab0611fdc787279c0f5f5cda764653cda550a2b8c064d84b3e2d3d89ca1864dcdd01a4e8e436084fb8ae4a329a0e2fe2a6704cf6d9500f9e66a81cd754827857450cad1329d90157d8f7001b4b1ba4ba861f4e8b49727630584e02d4976e8d3d514e", 0x77}], 0x1, &(0x7f0000c7f000)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r1, r3, r0, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r8}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0xe8, 0x0}, {&(0x7f0000fb1000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f00006ad000-0x20)=[{&(0x7f0000312000)="34b1ad1c07dd02ca4c70d4d7d926649c393831931b6d251058eb4b0416aa3656527150e8c9c5d471bb7cac02bac0dd868f4318f2f9f1c675517e15b443248dcd72758d8ae1c430dca805526636800121f1448be6dfa5bc17860d10ed0933f6f14df084f2b5f0f14f1365e7de54d84917bcb5f6bb973e8d1f840a", 0x7a}, {&(0x7f00006de000)="6a12da12ecee27f2346041b720ff9e5296d6a7b87a37e1c2c7c8d8dff3b114c8c6da78b3aa808af4c9f86bcee0ebdcecbddb6895a202ba9df5b056e69baac936b7d929452b09e4531880a9a0da4e4434fd816381e7fbc0e8", 0x58}], 0x2, &(0x7f0000da9000)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r2, r0, r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x68, 0x8000}, {&(0x7f00000d8000)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f000000e000)=[{&(0x7f000080c000-0x1000)="ab450436c1631a009439d0af564042da455584d4ee22122430ef78e5b1e333975663e4cbdd2abe4ccd4e9b33528ecee3c14eebbadf0d9b777a584349d806da2118b9e1d59f44fb832298162c4a8fd9de833f8bfb3fd3e3114b3d5d75b3c3dffe9d980f536169458c379360ff6277df07f93259d4bac15f9b0e7aa147266f50b26db817c6fda6d005b8dac8b47c1ddf611cfc7db67856306d391a878fa11b8d1b572517d7a8d4464ec91dfa89770fb37e6e72b4e2bda004057d5784c28aeb08eb119e0428458c85354e990ccdd19596b1eebb1e0291e06fa2edbf5b54fe244ad5dae81e5f63183509ba1dca0f7626a628e07da846fd3faa70f406a23aa06213c59adc07b5ff2341f90082b3103961f88ba13e60715bd1bb054b994f7be5ac92b42a2e1f4aa860de8fd133aa38c2377276af485dd691537c3c628192c0c0200043704c2fafebbcb5a1c9e08ec44afaf81eacfe988691b6ca09930fa24a223cddca6276f47ced8ee648f92a9236beca7f95f4592f4ee181ed4fa7df0c0158cd8aba19e52081c7ee22a0532f793f9abc46f86ae7eff889c46ea8e5ab8bdc7d43f85714c67c07aa414f9b3c1a05637c5ff7f6b0fa27d1749e859d3465c8c4c02fe9dcc39a7b9936d620ada557a6c9f7876c6c6df99ac411d03c0c859eea60c9ad90f97ad5a1a817f22299fdebadcd72a4214853f2d443207ac42e307a299ae01421482af54520e740e3671cf100ffe1152cea30085de7de3f1bcbf29f73f1127cfed7adb808842e398f5e2431ad9408c273311c5467f8afe47ab7e3d2b7dd50e5caafcdf114571f31c0ced5c3527a9ed30dc044484987a474e7607bb3b453829d6ba364b13459eaacb65f4364bff88a65162220e74be39f00b31738720f4419f261d6f9d9240d799fceba9e43125e9026b04c08049f008f63669cf89678524574de5eb14bbd8f3d84479041fbd7d66c57217c96a0c1bbdb8e539bd99a8fb9275b5d948ec04e893bba2bbc3094652a3c9f36e20f1d6f365b95712f28469fcd394739da2485c0976be1d6f4e74e53677da80fadf6f88c19ff48605cb3847b4fe900c0786e6bc97d1766c88d4c2b03a1aa939290bbdfd703c0eb4560bfa0b48aeae9003e893431a37363746964ff6c4587a82ded92cbba99649ddb7c1e8086abb953984e193ab3ca10e5ed35d4aee12e04f60eaa2c75381297c9a1b4d477fef2dcb298a79d4bfd48aae66de7e22ec3eeb47b290ce2c423902ba5b202f992dfa4a51c1a40504032f3447e8f844ae3abd27c8b69111f56afb660f5db303c3003d27e906a209837b48bbc45042f7c875ac34d3d938a5d4ad24f46088edba0e446fa124a2284f28b1dae4ac2d64cc56bd04e84a7f152eebe0e2f0a2809d29b3d96bdf7c6594fc82f9e36257e36c55fa2863a8a7f3fa4c2147e495bd98abba0732bd0aa760024737200365b4ee49c76b9e7f7aee0f67073963d3e1b9c03fdf214efc3d09470562b37790ed9e199ebb8656aab1257556e3723f94273b070fa084f6036f318a2a8c33474d18b8736d967cc4df950da9cec40ee7ed345d4131eaffe48c243263f399f719620527a30bda6d576df07089dc9b0fa33db88c5b160865620d66bb352d7c5ea4851c9ba04d634a727e767194e3695b738e1d7bf35735602c1fbb8463a370233aecfe720c4b1f48eaaa2a68c50ae68e1bf58ffa3a57fe331dbdd61b8e1f73b92a3bcfbfd68d13f5fddd160286c426b3d6fbdaefdd90fbed5afe940e57dea2b12cb87cfd8e2a716ad9b26e4a712615467302e9a8b1a2f5bd8f4cbae68def1f07fa4bbcea36accb778499727ccf297c4352ddbc4aee9bd3606720f530b758530c21f78f847583491583e2b6307767f739b6dd5a44b11c1325833a3f34b317af3f8ba64244aa458485bb6dedf02c598a14f4e731aece3ea5de31b37f910530b570a6b963a0e625f49b39ff356d6b6fa197774570b98dbef5e5a6061c9084727fde19ea73ffc2f1660f39ba77f98a0e5a27f84adeea5372256bb52e13bff686771498248c6c5f40a213831c6f2c7f067ad3b45459889d59928f38086543f34eefa6629693f6c8b88aea7208f588bc5c4bc5e22ce62adff62641e0483ed7a69bd829d31b43b3e8224f26aa82b75a9f79c40dbc92b7dab091ed819801ab64ec8aa9908f2ec739ebb97b6b69b420942f23b3bc2ceeac45d7f0bb1fd725ce24950e523e2e4789d9bfbaf290654f6b6445d63443ef22aa00219f471281536f2bc573eaf12d29253db107064b892bd2332eff38f7142163eaf0545cb732c6154df26390ba186a9c2fe885aa445daca17f080c7a1944987323d0b557339767087c62ce23192864d39a5839455c90572b81f767f4af6241257b0f73765c0298ebf2241641917511034257f9fefa4b4a3bcd8eba855ef1dc71dd9e4a4086afa74ec310090d9435b97c0c9477b6e9fd2878ff208e4e92d41b12ff0cd11dece7e8b42ab628aae04b0ec89668434098c066b9c3cb1ff75bb7e097371b1d827b4656172b0e0facfefaab04c415cfead82bc26a707fc318c5861f290181e9ec89194fcfbeb3a2ecddf7fcae72c2fbe6b8eced2844f8cbc23939f937677abba85d9f094dc342f89760fc6c10283aa30a10d4ef9de041eaba6df406c1d6e0a6c48588441250124df73332d10b9a87cbcbd150b542d4677eb6e397c4b58acbcbe6016552dd58d75b189c00d42ce8b729cadb265da77fe46a07d9e682a984a67b6ec886df8bee9996a77055b495cfb0840931c9e089185bbe2b3678b6bfc170fdc820adbadb310e342b3c18557d67f392d57a85d504aa32c19074d9a672f9bb9a6d5cf009b8fd71905c687d481ae5f062d047a75fd24e390050a32b29e92c089dbef5b6d426a04a32248f70445cf677bd311587a582862188d351534433a21db85f12d091165dbf6f797b5c2a05e1ba1cc45e821ec87c0aff68df0aee177e78f93dd6f11bc4dee0c0f595547dbd2f89b9e242e05663ed3d070643f3b436d0ca2824a21280547a6afb8b399ccb40ad805c022e49b8d83173c5fa2421ef16e38b32dba2f71ed9e7e2c9ace53b11ae7535be5c5b40d0b7233f0baf07ceaad44e87fe3c5c2e95796cf3df6b34f31bc05a9bbcb6f7e46902baedd29dcb91b99f86141d3b4bf7ef2e8b7bec68339114d6a8472b4225cd5f39e34d784d7fc48b895e1d4ad67ce18e51777855dac8d9bd40cb32f0e70db41b9ba065664fceb992c31a6966ced2e0835206547aa1c5c42e6c3115f7880a3ff291b56adf91265bf211fb30b843d0bcd668928f3f1d190acf40c829d4a25c3b599036ebfdf25d967f2902b2d7f9ac4746498ea4b5efb3ddc3748fc1b9820e4daaef8feed81cad85eba4c84d1c3528a8f77171fcea05f0ff08885c90a4f050648cf0d44d83b10148c5ccd2877ce52b6e19679be460a3f220c051e9df71fbb8902f63c2a3a4f2e6de62791920de1beb549ea3fa1bd67c9b63eed31ee1821f113bcc75cb57ae4d6f4bb4e2a10150424f3c06b914f8e505d09cad541741efee8c013ac3960a32dff00856af92642d2ca778aaa8114e66145e43e1644077e8160cca890e35e1802fc14b8341e74691c97ddd300a35470ce695734f5283ae629888c3799badc48fb11a7c73ffed3eee2835b51b239fe9960ba98bd95a158e1632d9b5c1809b542fa3f6cf7dc90c5297319255f45701d748666f95a1651975932f910c2984728ef5590addb6ef8d2d70bf48d2645b29c213679cf1e2e21c857e21bcce2b8da2fac03b593522aaa614ffb7d0f17aeaa033b6ff1d3b4ea786ef5bdb773a3695628b4d3faed0484ecad31d58ecd4650e4493a94a47549b91f2d30320fc31c87be101221a605faabf9d47162431919046e0b6d2e7ea2a8c52730d038e8bf814383ceaf30937bfa390ef5a2d92e5aadb12a65fb7180b11b6cbd550b0786d883fdde71ced6dd309283fec3eb434449243f5f2054cb512dd0beddd940d89ade6dffae807d4c8785f02d57690d9ae9077f205178a3cc3523f532c37087103f584fefe71183705d0350527676064931468073908f13ee88db40048fc0d4994e5bdf194bc681707100258cbce80347610245e2fe8fd20cb2d3939f7f584b57aef3b7429b6096339c39f03de22d4d95eee9336be1cd207e9362885fad47ab74bf32a91b1c6ae2604958c64516a6ee90812bd73b53a286af10d7254d80084551b9697b3f4ed2cb056d032f963df1f083bc9f3b33a68cb07130968d8075042377698be8264846467e420aff75ee9eff23efca56fa02c9d8ef539f8019d606145d633050eadc64b529df67d8acfecb36cabdcfc2c29f9bd9988d1b1dc47217e5dc57001080f4da052ac00c7cfbcef3de64cc5b49ff4e3dd1da56525b32a27667f65afcb3b881f5a5a3cdba8dee5806425288c903d003cd72c9559c1a9559f5f76616d9d763d1a8910f03410f5e78f9dc6c76215b826dbc94ebc8a6f64ec6a3128cd3989c00bf478ae4b37a1292736d3acfb300a6f14134c151cb59cf9296c4907a304a013c2123c85fea8a3f1825d6bac49a1e77193891f0495aa36f17dd6fd9e8a143c41f6443f8175dec461e1f571339dfe0af2edb6f0945d48b31515e94d30c509e571562538f660583c137e1c4ffa186813a932984b63751f7f578e3e45cb6979233ac22b69cd3dc57236dc607dba32ba981353416f9599e2820f8da2ffd458ed95780d3b1bd7f9d87c71698e37928f570057f8b610883cc68d2a32b9f2bc7244d9fcdcdfe6e6455518b69284450955008aedd1e7c662654e8264b44640ec92b0cc7e242d1a350f9e81f185944383caf3a1837842574e33cd300ed38b8d2774ae4210a02eb091c70b9d44eb7d43efb9352b9ed786213c008a9acd602fb7e7a2802f08d03c4a51e541cab46089c0dc1c1b1bd91cc3512513a2a8ecfd8f97009207938c3e0ba016249802f2c00e1b63aeae626c2af364faaebf18bc5766baec22d97234a8e72a3a57ec5c8147eac2ac2f6830a38e383d122c98de26e7f8c38bfd32f9c57fd0ce5ff90183d0b1ed274dde26fce874fa966adaa02a4a3760c58950ca7e8cf07ff1c665ccebf5ee9cbb3b9e4c90cfd0c8322ee152b083c1abc5be2b4de964ec6d2df4b8dccdec1422ac21a917a47a196a5edc104d66a626f3da2b3c6a0f38a42d3a6468e2d9525167a2fcb99edce667e1b6a316c16ac91303e208f3dc0bb0d11895034f0b8cfcee0171d9ed294e36f47d4c65f6fcbec77c41eca99f7460b3ae21e06e07a959804dc454d07442cd3f35b768efbba6eb1043b0002239b98158f3a5d4415924a8907c8b566e62b7cfba67f75a5ca093fcef6cf126e8ad386e7e5093a1b0324fe83ff33b13b61c3d388647f4fc36ffe4d585ed80e275b0cf7bf2c5cabe3bcad08a607453a51d2dd4a49d5e8ee5540a3002f1b7bf7ba1521a68e32cb47c0c499f020c3fb8a463876bbd5c43f1045f1f18e1f1df2bdd803583cdf6f509cea2871d763e9001a5de163ef71c0d27c0a31438244c2a69ee159adc5276a573378ca18274431694be0cd5d47d628a13b2d446fae25705514c0bda5f06ea1173b9a07b8332d4575a96716ff4240476e1a0d1c9dc35cfb6e0cde41ec7161b06eb6391bb1fb3514bb15b31ba1a5242ab649445ac9a1e0dc69ea0f79130b0e16c5ffc787e3da870a49733db25eb4cf99b5ae4181e99238c2bf9b2cb0ca4c86fe9189921683de8d85ca0d0d01dc8c745f481dfa23acd0d486fab22b6364b3608c29256e188ba99360fae5d0e80cca898b616efc1d", 0x1000}], 0x1, &(0x7f0000db4000-0x20)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x4000}, {&(0x7f000064a000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000b62000)=[{&(0x7f0000d52000)="c2f222bfb4b55345e27639d9301100466fcdb87c9a49818e63941a7cc3c87b4d7613bee023ccbccbbb3dc2e0ed754517dd28bda28a132e0c0f3b08cda587b1ee7b253a29b032c06f4801d08c1bf59690061a4e659ae97c849f2630266fbb3312f8565b773df21b5da4525ec979bc953067fd5d8f", 0x74}, {&(0x7f0000020000)="5798b6a966e2718c312f30339e906bb8496a037a731ac1e12305e3313ab86118d9dc39fe44adbbced257e802e16f5552a495a70548e8c6577e4efe75b944d5b1cc48ba6f8f38a7bc02b72029873daece61fd096b812159c3e9a5838f687043a034679c6eed47bb8d9f35b45bdf90c9fc426abd042ce32d7378851e16aa3923ea486a0b104658fd86b4fa51b4110e187aacf1788bc5468ed06dd5de6cbd5c5b8b1dc70cb77b5ad62f5e23f91f9a799c0a5a4f309d6a57ae18bdd4827913ec80c64583fa56a94b0a56ee6dae9318324cffcc130b25e166203f1710629b8796aa70635fb2f00b67576382247fa91d2d3e2a3e078ad435e39d", 0xf7}, {&(0x7f00005bb000)="65374cc7ef332c26c192bdd2a32ba1ff81adce1b0b18565b9ad58488c8cc37e867cbd5e161b08003bcb36230fb302280f497b4cf25b71e2570a65e2a840b7399fd1784116757b148ab6d127da0c2a9c8169a213e9bdcc1cd7a9e4e6dbbc93f03030f48f7429eb0682050bb0e722a276c22a033033b611766ba74454d16314b38396d15930a506c9991a043769172a8", 0x8f}], 0x3, &(0x7f00002da000-0x48)=[@rights={0x18, 0x1, 0x1, [r2]}, @rights={0x30, 0x1, 0x1, [r9, r3, r1, r10, r1, r1, r1, r2]}], 0x48, 0x4}, {&(0x7f0000009000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000c58000)=[{&(0x7f0000025000-0x90)="d345bacb534f8259b1290cf2f24b30f2898ad020a16cd870e58f45b5b52d8ebc0a24d9bedd0d8850aac2f27d6aa9d714d7b2eecc75994cb97c7e61cb0bfd7936da004c27da59839eb486fc4966b55bbbd76f31d16ddedbd410da30953226dd9178d6528528b0ec2a809cebfddd946fc7916146182383e131df14555c612583b90ce0755f5c14764318a5ff332da88fbf", 0x90}, {&(0x7f00004e1000)="58f7c1c58fe7620fbb308c6657e45da86a63e7decb4c991b0c73d0116ae85ba6af13bb95c2f95b36ed3510c3dcd026a08817239bce0ba14abbc3ec03fa91201112470d9d51c52a70c2b5cc1a7ba23c21ed35643a8b59427466357c0895d7a7d8172796e8404382744a5996e7b6f40b1ec7813447151e5942c7b6eb22765736aafe9a", 0x82}], 0x2, &(0x7f0000dd7000-0x118)=[@rights={0x30, 0x1, 0x1, [r2, r1, r2, r2, r0, r2, r3, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r3, r1, r1, r3, r0, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x118, 0x20000084}, {&(0x7f0000e7c000)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f000037d000)=[{&(0x7f00005ae000-0x1000)="a817d7759fd7de908bad7c2a3cc36b70813dbdf1315da59c001d774f0abba94dde37e5ca3e7e3cbd4103180f58e3229061908edb42d3c92eb3542bebd9f453a12627c46d7e4e8c00040f58e347d8ddf7a5b0c819a17edb8ea9d01eee4fd54b2677740aaefa64be70f566fc88e456ebdd40d2da421e549fb676d1e6d1385701ddfe7b2e8815aed4cf1a787e9224167bb8164e6867a82b67d9bc46a9254694d047edf2add3e784c45ab58b01e23dc0dd0a659d28fa363dd94d616b76c846ae4aadc6c968efab1acce4d863ed0936b54f524db31f8c3054e7863096e26d407005ae00f2f45dc5198ebf339841ada7999f1e04296a8102b1c72c105ca8a8d24798aae85ce159b909fd4cb4316086e4896e792e2ec35e7c7fa3d5c89831a3f4293a9bd0d47c96bf19d633261d4d76ef4fe971b5995b73d03fd284347768f7e735d4d2cd028d99c47b0e6ea396df4b4796eb416da9d44f1b1c50afac0eaab07648748b6fe12df8308174d42c3afdcb0f4d09c019c449de13a3cd0f993849465dbb3cfc0b5009b093172df3943bd081a13bcaa3a52293c7b95adb74f62c52789346ab51509abdc065a45b62a5256ece84428ba8669e0f7c2390e8c811244cd4ebe9229b8f4c5a571633a7cabed246ba53e19420dc1bb16f34bb7a1bb115d2812cf709d92bcdf83b38da85c7d8717fced324771990883f5c15acfd08562d7b5bda9e43a6840504706e1a016fc5087cb66a68e9c645cc66b06adaf55d3f2c4704c3efc98447f534a6834de31f3c939c80bb6dc5f103d45821bd49d067dffb1d0efee6bc2a9bf31998f0a3b94675e83d91c711e9ea9e086154cf5a441d58d144bebb26ad9458451f7327f9acdc5c2839e773e2b9f5c92cd25f55d61d74f2a3890886b89ae8f7ff8f885c4f600f12b147a1297f4c9d8c992c4b835c46e147bf26a976f5ddf0ca698f1216455adf834f0f9a50713d500218b35f3f40320433c314bea3cf68031d704d09e0e100de2f0dac312bd6c7636e698e78abb6e91e9ba4a47e1154be939b0aa3c61d088a949430a7f698a7af1f279434a066a0b4420e8196c662a36c640b3d5b26e1d907b293570fb91cb8a8a943ac003bad476762da3cd0c365b415b08faebc12ca36becec02d367eb913411637668265fb6ad313b61f00dcf1c01cc5e4f7321e3a4b0804ff20a8c4a89e04c15405751b49b8cfcaa31d9110d860bbd1467f621a5dcda6f94fb8582847299fdbc31ba39cf3cbcf75758ecc2d10ae7d89ca46c292782c0943923f1a7857702a508153735fc72fd395867ba92fd7fe52199f1a33f1c792cbe977270b6e3f62364a9a9fb9aa2f67f507ed2dff86e3c5fcac312f10e4e0b3155e3e308f230bad9082c8664f60adaef09a16785309ec67d3d2b4781a218fd8aa7e596b2646badbf864b52fd15c21f87c80c0e7a93b3d43f9ffb9e5549a45c1025a677d501b08ee4cd2031bba7fb6c9a218d6e02cfba23f5437f59d04176f5511253520f623a4fad4f2cb411df1cd455270e392af6275c2ec6de330a1ba408132ab8435eed30068daac4d235447ca37545e327b7b8362eb4488c75976e3354a2895d220d4fb78c226019ead30cdf4522ae52696bc1b1810aee7d1f8c227e9d6ea0c08110e889bd5a0815e226780db4993e93faf4d185e149bc5449aeb64038176497dc40c7140c0e8f022016e034b0caf23bbbbe5c795ecf68e8fba12e0a4dc445130261573699cbbc5d9048f65bafe280702c83916dba695878257eeabb00dbd034b5e1a7d893805606ce1c39d7ed5b9f23e80149c3b97ccc3cd4542e8a27cd800d0d082faac7a94fb186d4594da78c6351e7b3bf3eb71f1694250249b60b7a7d225831158d16aa3c3a18416afce5873adcada9f0878638d70fc6e083bfa57d9e7a08b89470a25e2140118d1085bf5c3402d1bfb50776dcde6eaa94a3621d2eae7b64134983c0a958835c794242b9dad02d1a3e33aaf8e72b6af5ac0fb03b220eb135c15752f5926e54e535ebd91bce9a12c08ee0049b89b84799040a2cce34d9309e873f6b762d5efcbbab6351dd24b19670fd4e5d1fc912e70841bccd0f205fedb13e42df135c8baa9325605ab7451b9dffc542522e625850b9b960791c442bb461c40908605f716daf5b7b6da83a2447ef58df17bdb51a57aa0d38b2f49bf311949ef54fe72e1676287f0714f9783c62ed05665bfa927c62a28522548f0d70566ad9f47a17bf3b9d092b1d2495151be4a798dfdc0a43d583bbba6a68778d6cc19f02059e470c843a0cecb293476d89ace4ac6c68b04249cfa56b216ca5e4f2bbd7d37043fc33fd001a42800ffc4eac0c8e23cd7d890428b2539df03793dc2e223c8c7883484803df7cd4c8d405623047ec2bf8b381bc70a16f00e9e3ec4686ed71adcef682365e9a7ced80bda20427f0e856bd6e1fbeb9c48429dec8045681e393c0b4ca7f7fd2fdca152101ffbd82c95982ffc3d9f1c9ab36b5940db968059cbee85f0fbc26884a8731c725025ad816a94359fa521cb3bb1c659bb3750cd20088b66cdb163cc73a6e9a31e97df6c7aedff108441f50070217467954d93e9b3ed4344bf017a6e00cab98e0d2470f8d9cda0c37aee36037611bf3d61df07559d1c65f61636c505aa39ff59257c416a154d2d8c5cf0b0339688e3b66ea50c77a96a514473411fff3d0a3fea8d8f90946da7f9712375302d8221263f89b8a7961044d93b0e417b53e4103ce9ad5cecea8cbdc3d13fecc2f57cac000846e51a3dc48f070acab01b30c822e7f86a930204958ad36b535c35094f92f104f9dec408f9c1421da7e177832164dc67c9892d473ac11d76bada1aadad8a9c9d56c23fe6eb89aa0e5e5664856aed1129ebfdc537ad62b9eecea89646e214e915e8569eb8b769de8aec027a1097f567fb778d826a3430dc7037ca43923cf8c2b674119dde488ed12c01b909afa9a3787a13099f4dc8b0416966a627007a9c61c120d2662b3ff50e304a80e54cdd6bc87518e5824cd392aa5671f2876b804a0c8a896f3b73845e3c828aced217961d7955060529d2a579c1b6041c69e529665c65337d6696fa1a4641129e69e9fd14d2f889da0965e18ad1d7fbb37fd38ea0b7e2712632b9037ddd1db5b0b405964b77293cbdbeb50c0e56ce95ced5b72a1fd5fec2c8e32dc213c1d7aa169b060af3bbf204bec885d0dbfe19f6382302a95b44e0e0064c106b0288a5aa3f5b58a57ad62adeace64465ae4935467a1d6f9b5afcb068af65330fc73ea856f10e7fedb0edf4ef09981ec73cd5b56ce7ee1759da93537bbcf5a1a3703b29172ec7736ede4bd2d56fe9c974e0bdce6aa1d6a46215fdb856aa8af918b6353264280faba8edb9d312467fe896d42aaed56b4c21fea4c583ad69b2a3545ef87808d5befb126aee2b2168dcb560836fc0c37fce42390a850ea29aeedcbfe8be81b87e8b69b0e3f46989a4763f649adec12f49a1dffabc5234d7902fa7814680e70dc1b8290d8ef9dc5eb290480631093a0e66e44a8e7902e5cf483468205d53ca0fb5cd12c16a0a628d535c50d5bc85e44cda431e27303344aaab54d9c9a9170c5b718b0813e544f23ccdf1d9cd2ed3c8926d35d804a5821c10f8eaaad36cb813e662aae692825366446ab4fbbee23292058cfb5d12dfb5e7d2b41191e00a5a7d96e46b0f7c35415cdda9042f62c0e6f60432dc75fe0b7ba1951556d4531eee1c25cf264091743ee8b51be2375cd2a403dbfb6ef1c09102a129b0ff3652755f16b0507ce41665a03c1130d3e7d331cf30424c67fbf4d420623cbf47254332b0717acd2f78e6b185981742e8b78c01522428e07e050611a5153cf0cfb53573cb284115967f4ac3326a1a5adc033a2c9df2da942d38741918824c992614a642b39408e07e7a6807ce08ebf81bd9e1e11457e6789af7781ecf3de0f3e9576b1bfe9783b5c44133fa29bc1fb41036639a8012bfdb451aa8cac7b5186f87f456ab4b89794672cb237ccebfdaceaef6b92a3b4ee2bb19d5056780152f2798770f80badca8a1920651cdd2baa59b39e26dde2450b5bae7156bc016226329b96f32eb6691355f8a81efd435594d7b59bb839c543596423ec19b8e25a7981a4ff1fe9a7bfbf4e97a5ca2ad86f2abc2cfc673272acbfe9e68d5beaab91bf907d177580e5ae75e0abfd5d93fa6f5d22588bb0501011b125071928ee369dc42a23b006ec133b64c378c26f2bfe5b75bbbd866896021a1938e3694241047e0d4cdfd316232a4a5c798903fa262453aeb294f869816037714d723b785ed1671a3dad4dac2a063ccd572e24bdb6d8858e156334ef249dc2ee02594bffe852f004d4f5c927ce4828dd4780452a8a2a72668a8b78e2660e559ef5d91014526629e070e36ce540cf44b03b0cddb3f0fc90d688b786d34946407b7ecbfba3684127d65fa75038c84eb80c240c2fafbafb253f05403879d06b3f8fe6b388e2672f1455238262c283cb03a974128d043eff569114d160dd4312d8087f0468d3c589459a6bc54afd1cda4c0b06aaee40bff0697c5fd3733373f045f193a7fbde054e03c0a28fadbd9f41d26ea39910306cdcb1ef724d997d312c40eb1bb294db8f5610f685af22adce877d2f210724df9c44d5910a7b4d0623162e6f12e938513c2c581f9324e93b948887d44435009680b862eb38b9261dc14c48bad5477e95c8082c448b10c68c1be721e4377a5df8331f0495b2a5296be19d75d2201b0796cc025f4bf8ebc5ed1daf4ee396dd8fa09142f4d9622e818af6863dbc39ea846fa0e4daa0152e3e389322ce8bc7b2ef2b4604031327630d89e0c97ab5b075b6bc4c265cac377495932e98f2c3f71375c0af431cc14002fdf57638a92f6b1162d37c4042491aac5258d8e0dd6211af6975a0e123af5e09ec18ef51e5a7b977f19a5212169c17f6c691e9ed13abea3bb6f9216ae2eb764e47d782e2ab46829fa2d912b7464394716d8324e0eb9f72c17ccfb3ee80cd13721665206b475715ae530f7b3e04660e11f0ddfbd18c1f0b1046dc4bab898a781ed5495ba649bceb6d5deecd2e7c9d0ef8c002310cb11c3397b6aa94238de80211895c9e35f06ac7a0bcaf0ca11c416595bb4c962bf9ef5b34053dcb1fb101d0f155575d45108c55d245de71f86d2286bfdabb81235394da6e984b483672e0034a0d52d66600d0e513b2d78e4608d808e08adbd219a6b235f5a030d6ce9ce737b056fba17427f8ad0737d826c9339da4bce83eb4bae8e43c48d553d01d16db00a18f9b9f295c4c3e1d42d1c6d8b78346ae32b467a75e09a3d927bc8577512bec4060a6fd297cfa5f732e2e1845b0067dd910cb92869c1f591f93e1c869586b25055ea095fcf96a93eb954248f978fc925e7f233f7c764e01f3ef030fe4aa5439715574ce31c31fc6f6fe5c1a5f6c3c1a15dc748b2e04ed45fb9dcacb8f1dfeea9875f13e71e7dccec8633600a51a038734cf47d40b551161fc8048e3d23216ccb2abee62c49b1cd89385416a133f4436ca3ce9dfd52964c16668d686e4d3a5ebbcdd9c07d9ee28dc59046043747b0df0c9d61949f84a484b431be5e682dbcb7d324c7c6947ebd6cd4d8c6c43260a85d30d9d649ae057cec62cb7c91b1ba295cc3647eeb4e26722ceb0b88648aabd2bf93eda12ce5db5240f1d4898d5c9ebdee64428237de25d0e8f5a9563d2e223889071e38f3fffed641dd533cd61350700096bce87044bb5f730cbf310320ab27307775e2781735f0b0a0d6146237ca8c6f68e776e7515142fc6038e412", 0x1000}, {&(0x7f0000eac000)='4', 0x1}, {&(0x7f0000f11000-0xd5)="b8df02fb6fd4ae27a51fd5f672674978cf8c4b08201c2a260482b9ae21a116a9e4b98171481723d75ad99ffa32b526acfb4fbfb86f8484038bd8097bfeee3a63d2f6fd0ece3ada7630c038890299204c22f5525f50371d29eabbf0e98b8e611c082f39893c15c8d1f8a26645f3a5311f8f7e21886f2d44151387ee2a86337370ad27b478bf437db872854fab9bb7cbd911c0b29c1783e3955a6e1d91218773191670bf0bcbb9ac0760691b078df2e9a47b1f4c6deeea1f4cf711ffa3d24a483042f9b6c327fc96b38f77d850367f88a7b45ad5a969", 0xd5}, {&(0x7f0000118000-0xa7)="331ed2fe240162fc32d58e5b3148712fd50ddcf8d285cdf281eeaffef653932ef05c32ec808edb013c876426cf2bba71068cedc4d2079ac18656703b8bb8b2d9fe5f345dda710ea9d29ea6cf7a7bef8b197db74b556338de1109d7e148bf4c0c97c2979645ebeb7fbe0215c71c18e224ed9830eaa9d2b7b8a20592fb7cd3f809ea69516e8006fea10a512f26c7b04aced708095b4ea23c9044dadd4e3b1eec20a6fa45bb50e794", 0xa7}], 0x4, &(0x7f00005a3000-0x48)=[@rights={0x28, 0x1, 0x1, [r3, r1, r2, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x48, 0x80}, {&(0x7f00004da000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000d1000-0x10)=[{&(0x7f0000fb7000)="2f89c787dea84dee1fe99e15b0601ceaa60e5a4f20ab9d6339d5cb0c152d1ae229e5192f5fc0ed2eee64ae7005622ea1264471d4d7c770d148a0221eb9bfa86999a311ca7dc5d746f05e67a24e6e68eb2c789b15db9647493035335ee90593f67ecffdd1260e3a781d4dd8420b7406a289d4b22877b3b9a09ca9ee7c52b2c93d0d5107c2277b562a4a6af9f0791fb3400824aed85cfdb4a814bde7525c21f2b6a0a64c7ce3319525e8484d6d08ad9ad3f3a6100c908629b7aa93ca25e61e7e25d692ff7959087bcc5a521dba29911f1e69e3e6b10b1b4d915b0b07f160bd50061bf7c2ede3dfc0b67a5f", 0xea}], 0x1, &(0x7f0000b32000-0x78)=[@cred={0x20, 0x1, 0x2, r5, r6, r11}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r2, r12, r3]}, @rights={0x18, 0x1, 0x1, [r2, r3]}], 0x78, 0x20000081}], 0x7, 0x24000080) 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f000008a000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000513000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f000059a000-0x50)={{0x4, 0x9}, {0x7, 0xfffffffffffffffe}, 0x700000000000, 0x3, 0x7, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000fbe000-0xd)='net/mcfilter\x00') lseek(r2, 0x0, 0x4) readv(r2, &(0x7f000093d000)=[{&(0x7f000068a000)=""/81, 0x51}, {&(0x7f0000ad5000)=""/212, 0xd4}], 0x2) 2017/12/24 06:44:37 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002000-0xa)='/dev/ptmx\x00', 0x1000000000000040, 0x0) tee(r0, r1, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000002, 0x7) r3 = syz_open_dev$tun(&(0x7f0000820000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x11, 0x803, 0x300) mmap(&(0x7f0000000000/0xdeb000)=nil, 0xdeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000304000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000de6000)={0x90000008, 0x0}) fcntl$getownex(r9, 0x10, &(0x7f0000f79000-0x8)={0x0, 0x0}) waitid(0x2, r10, &(0x7f00002ea000)={0x0, 0x0, 0x0, 0x0}, 0xb, &(0x7f0000b59000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000349000-0x5c)={0x8, 0x0, {0x0, 0x3, 0xfffffffffffffc01, 0x3, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_pwait(r9, &(0x7f000003d000-0x6c)=[{0x0, 0x0}], 0x1, 0x8000000008852, &(0x7f00004c7000)={0x0}, 0x8) recvfrom$packet(r8, &(0x7f00005eb000)=""/15, 0xf, 0x1, 0x0, 0x0) close(r7) setsockopt(r6, 0x107, 0x9, &(0x7f00001bf000)="bdbb45d1", 0x4) sendto$inet6(r5, &(0x7f0000f5b000)="", 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000662000)=0x0, &(0x7f0000426000-0x2)=0x4) 2017/12/24 06:44:37 executing program 2: ioprio_set$pid(0x1, 0x0, 0x680f) r0 = getpid() ioprio_get$pid(0x1, r0) [ 76.996356] binder: 14337:14341 got transaction to invalid handle [ 76.996362] binder: 14337:14341 transaction failed 29201/-22, size 0-8 line 3004 [ 77.035476] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/24 06:44:37 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000604000-0x15)='/proc/self/net/pfkey\x00', 0x200040, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000062c000-0xb)='/dev/loop#\x00', 0x0, 0x6) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000034a000-0xd)='/selinux/mls\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000187000)=0x0) fallocate(r0, 0x11, 0x0, 0x200000800) 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000188000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00005b2000-0xa)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) read(r0, &(0x7f0000b25000)=""/174, 0xae) [ 77.035484] binder: 14359:14367 ioctl 40046207 0 returned -16 [ 77.035552] binder: 14359:14367 ERROR: BC_REGISTER_LOOPER called without request [ 77.068026] binder_alloc: 14337: binder_alloc_buf, no vma [ 77.068044] binder: 14359:14377 transaction failed 29189/-3, size 0-0 line 3127 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r0, &(0x7f0000a9c000)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = accept4(r0, &(0x7f0000d91000+0x528)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f000059b000-0x4)=0x14, 0x8000000000000802) accept$inet(r1, &(0x7f000071b000-0x10)={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d94000)=0x10) recvmmsg(r0, &(0x7f0000db5000-0x78)=[], 0x0, 0x0, &(0x7f0000efa000-0x10)={0x77359400, 0x0}) [ 77.072890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 77.098261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 77.102062] binder: BINDER_SET_CONTEXT_MGR already set [ 77.102070] binder: 14359:14387 ioctl 40046207 0 returned -16 [ 77.103285] binder: 14359:14377 ERROR: BC_REGISTER_LOOPER called without request [ 77.103358] binder_alloc: 14337: binder_alloc_buf, no vma [ 77.103389] binder: 14359:14387 transaction failed 29189/-3, size 0-0 line 3127 [ 77.188580] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000001000-0x6)=@hci={0x0, 0x0, 0x0}, &(0x7f0000dc7000-0x4)=0x6, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000001000)={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="375a81f0025d6b9f5f7747553bae8553"}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000e3a000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000078c000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000f30000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x400, 0x3, 0x1, 0x5, 0x80, 0xa0, 0x7, r1, r2}, {0x1309, 0x4, 0xfffffffffffffffa, 0x7fffffff, 0x3, 0x1, 0x9, 0x7fffffff}, {0x6, 0x400, 0x7ff, 0x2}, 0x3f, 0x2d5, 0x0, 0x1, 0x2a, 0x1}, {{@in=@broadcast=0xffffffff, 0x8, 0x3}, 0x11, @in6=@loopback={0x0, 0x1}, 0x9, 0x1, 0x2, 0x4, 0x9, 0x2, 0x3}}, 0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000cf5000-0xc1)="18000000020001000000be8c5eff8c88360000f1010300000000000000d90000f7b933d898055bf748bb6a8807787e59dba67ef147b3550400000067a1e2010067fc2163e000250000000453ff1f00000000000000c88ebbff060100000b00000000b121ad1474d722f542002700ec008b6207000000047ee87ccc000000080000c50fff04e9e9f57406aa01100b1b04000000cc08000020ffe3c5452c1adb8a335bd8b2d17fffa200571068395533b594fa00041ad0b4c2c23eef679567f8da", 0xc0) 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000938000)="", &(0x7f0000744000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000804000)="") getresgid(&(0x7f00000c6000-0x4)=0x0, &(0x7f0000c91000-0x4)=0x0, &(0x7f000030e000)=0x0) socket$inet(0x2, 0x80805, 0x58) r0 = creat(&(0x7f000052e000)='./file0\x00', 0x50) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000002000-0x8c)={0x10001, 0x9, 0x7, 'queue1\x00', 0xffffffffffff8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_pwait(r0, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x8, 0x800, &(0x7f0000d66000-0x8)={0x1ff}, 0x8) r1 = request_key(&(0x7f0000001000)='pkcs7_test\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000001000-0x1)='\x00', 0xfffffffffffffff9) ioctl$VT_RELDISP(r0, 0x5605) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/128, 0x80) [ 77.198524] binder: undelivered transaction 716, process died. [ 77.209099] binder: release 14337:14341 transaction 721 out, still active [ 77.216582] binder: undelivered TRANSACTION_COMPLETE [ 77.221754] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.230926] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.236962] binder: send failed reply for transaction 721, target dead [ 77.246374] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.266251] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:37 executing program 2: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000001b000)='/selinux/enforce\x00', 0x200, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000008000-0x4)=0x2, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x20000000007, &(0x7f000001a000-0x4)=0x0, 0x4) 2017/12/24 06:44:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d63000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000804000)=0xb) recvfrom$inet6(r0, &(0x7f0000740000+0x57)=""/4096, 0x1000, 0x40000141, &(0x7f0000193000)={0xa, 0x2, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000001000-0x4)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000001000-0x1c)={0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000e78000-0x1)="", 0x0, 0x20000004, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000a5f000-0x12f)="744136c6c9e7472238d0e51375a830155f9f2fd324540a30d7c3a1082e29c214b863347943fcc1a6d4c3e1aa2c9544e3de8e5a46f75f9afcd592ae50a02d3ef77e7634fca456afbf3642824125670a0f4d580c83ed702cc59fedd9fe457cb1cd803767f0d7c1f1f58986465df795b41e17d649735a987a559f0043743ff011414bb89b990c8d7ea1d7c42698d25c23cbe0d6f2b4b5e1258fee8d01b10608d71ec50b7730172d6eeb1157779b538b9b9db1915ae654c1521350064f49ee608ace2bc34cb6e90afd28a06b07fbab416b9a18b097c8c64cc3e839508cb381af297a4af4bbb6aa4be0453b2a0278d812a1f6d9b1c9b868112037270543a2fd83e2a037a500000800000000000908f1af1be63a6ea8ed4fea65807f2a8db9ac2bbc5fd96cb59ac6d9ab7620dcd4ced3e83f", 0x12f, 0x100000000031, 0x0, 0x0) 2017/12/24 06:44:37 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002000-0xa)='/dev/ptmx\x00', 0x1000000000000040, 0x0) tee(r0, r1, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000002, 0x7) r3 = syz_open_dev$tun(&(0x7f0000820000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x11, 0x803, 0x300) mmap(&(0x7f0000000000/0xdeb000)=nil, 0xdeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000304000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000de6000)={0x90000008, 0x0}) fcntl$getownex(r9, 0x10, &(0x7f0000f79000-0x8)={0x0, 0x0}) waitid(0x2, r10, &(0x7f00002ea000)={0x0, 0x0, 0x0, 0x0}, 0xb, &(0x7f0000b59000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000349000-0x5c)={0x8, 0x0, {0x0, 0x3, 0xfffffffffffffc01, 0x3, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_pwait(r9, &(0x7f000003d000-0x6c)=[{0x0, 0x0}], 0x1, 0x8000000008852, &(0x7f00004c7000)={0x0}, 0x8) recvfrom$packet(r8, &(0x7f00005eb000)=""/15, 0xf, 0x1, 0x0, 0x0) close(r7) setsockopt(r6, 0x107, 0x9, &(0x7f00001bf000)="bdbb45d1", 0x4) sendto$inet6(r5, &(0x7f0000f5b000)="", 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000662000)=0x0, &(0x7f0000426000-0x2)=0x4) 2017/12/24 06:44:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f000008a000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000513000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f000059a000-0x50)={{0x4, 0x9}, {0x7, 0xfffffffffffffffe}, 0x700000000000, 0x3, 0x7, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000fbe000-0xd)='net/mcfilter\x00') lseek(r2, 0x0, 0x4) readv(r2, &(0x7f000093d000)=[{&(0x7f000068a000)=""/81, 0x51}, {&(0x7f0000ad5000)=""/212, 0xd4}], 0x2) 2017/12/24 06:44:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f62000-0x4)=0x0, &(0x7f0000002000-0x4)=0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000194000-0xfd)="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", 0xfd) 2017/12/24 06:44:37 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000-0x18)={0xaa, 0x5b, 0x0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) signalfd4(r0, &(0x7f0000002000)={0x4}, 0x8, 0x800) utime(&(0x7f0000005000-0x8)='./file0\x00', &(0x7f0000012000-0xb)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000023d000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000a20000)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000caf000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00007dd000-0x20)={0x0, 0xfffffffffffffc00, 0x4, 0x8, 0x10, 0x4d}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000a83000)={r2, 0x0}) 2017/12/24 06:44:37 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$setlease(r0, 0x400, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093f000-0x118)=[{&(0x7f0000941000-0x10)=@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000043000-0x60)=[], 0x0, &(0x7f0000962000-0x30)=[], 0x0, 0x0}, {&(0x7f000095f000-0x1c)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f000093e000)=[], 0x0, &(0x7f000093f000-0xf0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30, 0x0}], 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00008fe000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f000082f000-0x8)={0x2, [0x0, 0x1]}, 0x8) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x8000000001007, &(0x7f0000939000-0x5d)="77ff38fe868d5c04003d05972821aebfaf221b167a221c29fc842554704e8861bd7642de9f8760cf9a2f5a9f4a46fffffffffffff0014f682ee330898b00611f625e31110d7c86c0280180385cfcbe432d56db668affbf9a84246e25bf") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) socket(0x10, 0x80004, 0x7) connect$inet(r0, &(0x7f0000d0b000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f000053b000)=0x100000, 0x4) shutdown(r0, 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000d55000-0x8)={0x0, 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000003, &(0x7f0000f7c000-0x4)=0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00005be000)=0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00003fe000)={@common='rose0\x00', @ifru_flags=0x2}) preadv(r0, &(0x7f0000498000-0x10)=[{&(0x7f0000ba6000-0x2d)=""/45, 0x2d}], 0x1, 0x0) 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0/file0\x00', r0, &(0x7f0000013000-0x8)='./file0\x00') r1 = creat(&(0x7f000000f000)='./file0/file0/bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f000001f000)="da5847bb74a5b1ed0b412a66a272d2e720cd3ffb7db19ee6ad6d76cacfc84c844253e7d090949242d53b2d026112c3851a5d69919cbf721db5b2541cade15dae517e73a00aa8d6c6f66745bb68825368de0eb02b744930df1b4831ff321cdfa42b5a0da9233b120d66a350913579c200275d51d4e9d8efeea98f1f948fcca699635d2a19c01ed9c1f4bf50d7ec0a31de1210e7c76e36de3fa910a43599692e039dc2d6a1213e9fa5", 0xa8, 0x8000, &(0x7f0000009000-0x10)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f000095d000-0x20)=""/32, 0x20) renameat(r0, &(0x7f0000014000)='./file0/file0\x00', r0, &(0x7f000077b000-0x12)='./file0/file0/bus\x00') 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x13, 0x8000000000000, 0x1) write(r0, &(0x7f00000b2000-0xa)="260000005e00091d0000000002000000800000010000800000000000a34c085b1ee9ff07356a", 0x26) 2017/12/24 06:44:38 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000d4f000)='/dev/hwrng\x00', 0x202401, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000f53000-0xe)='oom_score_adj\x00') exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) [ 77.407231] binder: 14450:14453 ERROR: BC_REGISTER_LOOPER called without request [ 77.440073] binder: 14450:14453 got transaction with invalid offsets ptr [ 77.450115] binder: 14450:14453 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f00003aa000)=[{0x80, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = syz_open_dev$mice(&(0x7f0000984000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000ca8000)={0x0, @in6={{0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffff7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xc907, 0x3ff, 0x3, 0x2, 0x70}, &(0x7f00009ea000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000f80000)={0x0, 0x9}, &(0x7f0000893000)=0x8) fallocate(r0, 0x0, 0x6, 0x5b2a) sendmmsg$inet_sctp(r0, &(0x7f0000fb2000-0x118)=[{&(0x7f000031d000)=@in6={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}, 0x1c, &(0x7f000096a000-0x30)=[{&(0x7f0000abe000)="e2651af0c25ad4c764bf93dcdf1371e992d3b3326d6e67fe8f8440d7c100bbb9d180468203fdcdff51b08832c18100217dc537609055a5b29b366f0827ae8831d7562404292a6046069ef28ae823f3231693e098006f0b8b6fa29f8eab03e6cfce6b4d4f04b7108201e549a10d108412d3639908f26153b96475d32a1a0d2c34e0a698407230a97d7bed28129a4cb8630896d2ecd5c8beda16ea17a79536ae70d0b44a19b3692b909bdf70528a656f42747f6a2792d5e4f286269ca36396a8cdd882a26dfa769a4b6abff05c02c29e", 0xcf}, {&(0x7f0000025000)="d627c409a926005d7a38d614ae72635b1932803ff930e1b02b42f6993c4c86a9c0e255ed997088da23b96c0dc368f276654ba21d804f94a8d74087b36c2fca43781493a4f54a21fb3ac215ef18f2c58e7dd6160d4b90308d88e9f5b9613aef6c75a31c426f62b5090842ed13ad8ef36825bf515000da119b750c59a4", 0x7c}, {&(0x7f0000926000-0x1000)="b92b9df948fad45c75f6f1afbdac197d299dad42e1b3d636855c2d8b4210fe3d10f93be9a3571c882ddec40d511438ef9fcfca83343d20ae5d611304703a2a83476cd780dcffeb98b4a921f4a55645098b7b12f6c3cb7555e7b52110db5d20dfa9d1704b0462c3ba6874206de8c89b07ae1e15f1b8437b478ef0b676fcbeb57a6019eadd9f39b35c2a20f05cb78e276a80b6e39d39f2a7f6dd95012e6e913d1c0df1d117e63a138f3e53de60aa8265e86af2fa2333d9b7dec17c42afe4a6911b11f705cc40f84e078228ea75b8243cdc6fe9be9e17f9ba1cd6483f52d9de836450c693ed4f84e288f0a77552f789285c4e9fb27d5a79c446e914f87e7a0cf9817469d053fd9656e899dc3c09a089b8d703808f5c8c25dae7ce5e88c562ef1987e4272d3182b974d6f23e2daed1c513fb0a0f4beb72d5199d894f5b8945b2a58d94526b00f33d65cf378f396928746355e38e72757366e80f8cd8bfb4d53d57b41416ebb5955276783cb6838d5d2b61d8f02cd25694a56fd33f7a488407f1bbfc5a67838bc5e25e8973c3d05c0e3c30e523de95d805b2d3ff148d29872fa364ef285acccdb4e088dea54d66b5788844a7489d8db18738c479fe80c75dcbd2143bcd5c7921bfd63d4d868e55c55151a107b55c61c4bd9dfb11a50af6a1ac34fb63a07892e49f7473f2f2ebf6b2b634f7b5e590bfc3cfffb0257f89e3c2d9a04a0ab23b392206359d7eb3f6d76071f072442392ea20e7a66d96704c496cd4e402cc6aa876d97e885f9dfdbd777a8bf06cf09ef273bd610f415ecbaba0689d3e3ab6184d7faea17bdd5b8a9dfcea7daed764dee55245118eb37228db15d15fa5a31c818187ba7047c25d057e877d60efba8052c158cc696c88fcd56a41c59e5c6871d22b1675aeb02e9cb203889a983fe05bcc24eab7c8e691bbeb87c8419639c07751fb5e72d7f14a88a83582cedd74adef6b3b5190992a366f93c75d41129967ee78b9e892134af32ded1feeb02666d9c259e34e31643b1ecb3e3c05518306cc0221a03901fd70f926319666ae2fd39f7b1a8416ccd7466b5087f3196544f35005a7b6a7a6fee28eee785dea8e443f89b4fdad5e6cfcbd135efbf6a5bc07020c833c285f2a1936adf0be5ac2029010c072b628468ed338a435e63d1050590e55bdb631dfc2424497320541fe97f1c59b8856cacada2766c2c670831c76f7772f4ccdaf3850dc67774c4e65e4b65b177ca69d10dd14e04b2f90bc8d43ea6d7a779fa87ff3db85dd437b3b0218138ab15772811d16884bc74db8eb0d8dcd4d3dcc75ad3824def52db5c84a24f0f1b5fa8fa405c471d1d9c000d66167ea580b3528c20656f1e7e210a272251654bb6c7471571a4b0f7d38821e33a735a3f5a2e163342add6e1314c2c5928f0f99148eb4ecf0e0b7783fb4d16f0eb35a1d955294c3c7d5e752cbac6025109eeda992ed899b99a235672edec35b8d6f40bab560597a571077ce1e42390b9aed51bbf70ea80ac2df9eed1cc8144753fbb5fb6f368b7361eb490de502462a9720ddf0c68451c43a4d76f5afc1f26917bce903d8383bd04dc38fedd00fc4e476bd47e38d6769bb53dfb8d01ff649fde79998d2b89a5ee3e74e14ea5c9c3fe82d4e3308cedbda6a15911b3d55eac73c0e27db6bb551c56870bf01ccb8042923d855e8f80b7b25a2ab5aff7e366ca89fdea460f64f96581710258d7fe2199c1e0554e8e54b47c5b67b835e225a536b0c78dd67dcf217d5e6438331c0be2d671fd13730d03c34833c2f59149536faa57db01957502f4e4e2b3eeb3e295030fe5918443629fb0aff832e032777ecf5e3cfb8d7fc2fbc2b557713528bc77b79d2f049ac5df0e11b3a1cd43a5ea8325a610549d6f2a23ffedaaa2b63199fea8dc13a79e961632b42d5068de60115e52c6e97b18b3a4234bad5566cf0f51cf39150e1e174a6774817c1efcefb21fcea8e2223e06c6304eb8f74ecf87c3fe3e956a339bc425b9a63c95bd09a1094a2bd944175ce6a5f8362dd3097214671dd809982fa415025725c7aec4dbf3b8adbf31ec7f0935b715fef82ab71705a92505a9de3f4ee448816526613ffb52103a15f2d482dda9398d352c5be655efb773aa83896e6477bf57a67a46f47676199b90c857b1f0bdec4fe1d7a01f8ea687df38a64af6dc8d50a48062addf331025c10021130d5ba802e8e343032c18984f50e5afc9856f5cf2bb79c309cad925f620800fd9805987f505293c27e6e46b2a872bdf41ff395596f0631f3eacb8be3db5853bcfdd0eed407f7b5bf069ddc7538cdc245527e359f35cc30bd556ef9a25824fbb6eddd50212f5bd8a19218ff45c9403f2499bc1031285a13949a36cc966a5babfd9df734713dcad1ef3cbcbce31d7aa504bfd996ab5b2508b3a26ae5973b209f720299b62a54feaa984b3a114f285bebb8033daddb3fffc6583eff51282ab246a39bcb8d861641b1b04afa4dc90b5f3e9f16767b0d9c66ae2c30d3f77938cc247074a50d22e6aacb2d0ddf07692e52be35a95475f3d7d07a421cac53eae6b35f32048e1228cb59df5f42ed18bf813e299e2f3629a3657ad6fae6ae45e8a75062c50910335cac1ecf7116e030c3202036671d693cc84f8c8716ffaec75b47df6c6272d00ceca99f547f1f28b6c90c2c885215151425fd0201b44334a103ec25c2a5140a5632cef1f7853569c18569d39dcda7368aae12107612bd67535eeefb9aa02ae39303d36758ed3fc599e53555e96d3717e096d4690da7f6caa3bdf803a7139c7165d0ee90e0dd0a0e5bdab32fb2ef54e40e5da29c166c881935334b13e90edce3aa10e02b8f3a44377c900b1408eadd580de921790a0c81e50be26bc9f48014e5e1da90fe44dfc3511a6857b865a76ab6f633954325b87bcc1a9145217085253cafe753c65326b48c07e63a40514326f2d29a3f1dc0f35ef70e1b60e06c72cb09cac276b73f955f45a9bc224f88f8ac508b28d614c23fb87e42ca7d2ca6b286294801c76c06880fea16454ed1441cd03aa51735afca3173502b13da0f3db927d09543b431333476cdb9961146215afb0ada82e96a219433c7c8238d69d136d23fb5da01a5d3f5810319fcd1abf0ba93bf3c0309045b43b8caa8753d8911e63d26ebe88e8a291345d23fdc8aba48f992d2109a9d1f4e354c04b0b4feaee69fcda5063db87a3da885885eff738a3883cbec14d26bf3bf297110cde6ecb611a6e212ca4bb4f26947c93dc8285d10ceb359ab913c0099b2e64aa9e85688f72b684121e14a323fdb70f38c1b43ec30da73c3d218efe61a1e922505b5329981e4ed0eb479e8dcf0ce0beeabc01a7b9f8082e84716662825e3706856bfe18947bffd9eba7372d3a141cf1ec0e8701c3b614f06fc1c1fd141ae233562d4fcf9ad0348aae2627171150e0c1f8c0fac5203ad6cef5173fabd8a2c19e2bbb560e6740c2b6b2e6687a0b9db3875638be844c4d1ee9f0e08046688bcd3a3495e60db3d0e628aa0ace6a35e847a6c6f94b5a1c6dc26fb524be9ea903e6d48e6d62c014d605d04e804de8b94a4839f0d891a879c7b8ed65753194d2f8dfb0fd8e64dfa0e2a62675ef0e83ac4e0ffef0af6033bd52349bdc3a99fb5c19a5f126cfbc12b04246a24be7c7fcce176bcf5a5839c853ae6804d4f7e83e748ac638a29c06657d63eb6576ee3f81b755463c9a295c046a26cc2461c9e9a62e7fd4ff0f98e2ce46f209567c922a7646d04a7c282bf169aefef2ab394ed08b5f85abc9c39512d928dc1878cb6e370e5256762af3c490f3d4bf12a3b7c7da18f32086d042ea7708dbe757976b913e9b2fd1f8b5e8b78d8b06f6cb87bf7573c9b63f894b7b72e0814ea765817e710cf716d11cbbdb98fac311f5ade9c30b7e2966e90f8cb97836ec4df7f03f69195ff1a1dc5b43a027de87323a85c67df6aed48ad29d84b6731178458d24ece8c3155bf20240efe28d4b7f8ebc8be22a462faed950799c99880338c4cbc616fa9ab3729ded5df315248867c74feb63c3459199e1b16c3c1a659824a6cdab325548c36fd24f031ebe92833f18f5a09a36b414febda9ec6739689827757484ed51067528dcb2fc78db922ec3db2237940f805234017544e50aad9480ec658304b94df204891694d49b77d3e5d6c01855aa5a6c98a04b78d68656fe2902239ffdeb46559925d3df619c54823100d415dc18c203c0f956e88e21e6d01206f6c0b72ee6a2adedd3316549f284b44763a7d543406e2111f90472e91b6885a346705c1fea229f7a57ab084db43d572724c6f546a8b53894637a770f062645c7f4e138bcd660ba624e59e3cd65075db5547715dd69198dd7bf3c8585d88b0f5064d525fcf8a0658721073095e4d22fa6973b8b3ba9295c8674b1ec5077f4ad3dcd1029f4113e4ae439eb6d14ac1e11fc6fab00b796dda668a1f000ad23623421bf2c16893547b13ccd98dd16a99c4579ba106117eaf1c14272a4134887a4df0611d4738bd78d204b7d449f4d4475e83f446a580c917c668f4f5f476091ed4159c2358f33d9dc13fdf67812ffe26b584fde57f1b7d4fc84190ad2ef0a7f12d9230a3a926e33484a9133d300ba23408f00f991f9f60f61f233899cf50a6cdbbd806fdc73337a4ec077882408477a1f4d44b5ea3823ea0315b00127fde2c4bd194e7ebc22968533d50a9d29633e8c812d3c938c90be20a026f9fb89d566adf656052ad5f596da60205ef46b182e70abacf4fe5e98317b12174e96adb0a8ccc1201796c6a4949b9adb38d1c862043f0f26d7b3839e20a2e5c91d71bea1d0261453af114c83d3cce2cfb8b991e28df8a2f0e0ada1566cb8d41111a66a326519e261114fd10afbcb6d8fbea065c947d0ef7c2ef185a7c91d717ed1b7a95f04e5691ca5da86bf90dff15eb5826e1dd9f3d0f646fa5c6c4348d899bdea5db18b8809e0dcd4bba9083cfdd9470573ae812932edfb5aae3a12c06749cfe628edbe4ea43ce4840e4b47f803eb18d86e287cde42a27da8b576cd9012ff0bf05eaa5f35931170d4b3d57e798338e98f62b44274f5cdfd545ac4e49a463d3bf31b5b4a1eae9823fd4aab8750de8dfa3b50c3d7fb524db9acf0193604fb82295367543396f64ee3755a6e82540a8c6ef99eeb64e623f844de9c1d4d59d43f4ea358d7682a74c72bb8fc3064816d580777658c16d783d9b8163719fced4aca7ef53f17bb18f7f355b5d39e4f1d1e6b3218e70017373988f85ccb1cb42527e404708cc6413c7e2d393f2b89b8f76855a8cd14bdfb12f7557c50eb3e467e766a00a5830b413c27f2b57310e5a18b0a055756c7645b27dd839aed35d383fa0e304bfb28cc3635f8490fdfde3a11aff0b2c7047576222426d3814eec0adcb45e833a781fdeca6a2fac64b337f95099a400e584035e8cba9de2ffc8d67baa7b0d9c33cc7e6d23554e28c827e6b9082ce4e7611ef3c57e9a9dbf91b5f740bae953020797206b20a3a8e2ad9610239384c5730a5d6bbece42d44b04cdad7e489579ba8d86e781a0220f6266f0f122a2813eeecc78068763f957b15aa859ba6104b85743815ccc2a0d2d99049e0bcdf46d1da9beea0d5d8856b5fcf1b45e050951245cf1dfd99fcce857512fcef15fa85ef050b5dcd29105406345d0ccdd4c2c9eb085d7677ef4e41f769676c8d4bf0b393e3f1392981103e43d189056c98d9e85ac1bbbc1992c8e3d98fec37bf8319ef189bce0b1c4609d15a2274a95779757831ed26a60538a5b9b40dcbe07fe8ceade1304159885e9c29b5", 0x1000}], 0x3, &(0x7f00004d3000-0x90)=[@sndrcv={0x30, 0x84, 0x1, {0x80000001, 0x80000001, 0x8000, 0x5, 0x4, 0x0, 0x40, 0x54a723c6, r1}}, @init={0x18, 0x84, 0x0, {0x3, 0x9be, 0x0, 0x80000000}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8004, 0x4800, 0x1f, r2}}], 0x90, 0x800}, {&(0x7f0000b8d000-0x1c)=@in6={0xa, 0x3, 0x7fffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000000}, 0x1c, &(0x7f0000b37000-0x70)=[{&(0x7f000090b000)="89aace0de3492c1b053c7c6814b8e88ac56b6d58e3d6d88059d1b32db56661f209ebfd8b79f8f2e4ead52f0cd2d994644fb514823b9a8a3c725fa8e15d9c7a6c1063c3e8ac8a2a7a0b6b41a3657fd7ef", 0x50}, {&(0x7f0000606000-0x4)="fca73913", 0x4}, {&(0x7f00003b7000-0x19)="073a97a223da943002ed63af648b13faaedf387421ee3fa448", 0x19}, {&(0x7f0000b32000)="34c7d7777b7696576b784757244541de6444da6f568022fc86d6e8f34bea814bd7ace1291d02f79c5ad41eb33c22331b5f60eca6e41aa59b30f85c8607ee88d56284ad69852e98468d50c83c8c9ba772fca6b85e2ce7b1a3e126b608553479d20ee8ecfd86b5aa71a960834133b622768875e4695f14a594a191d82fa00fdccb87bd72eb9ffb2a7319042a9eff8d9372c790e69bf09e2be0e329e98b", 0x9c}, {&(0x7f0000788000-0xce)="e210b47179b5b0ffe8d55f05113a833a24bcf5f35b02f1e74126e23f977860258418e39805bc641b9b7ab53031e7ca3454546b257ea5c51df35de4fa2ddb2502f1de74263b942042b10b6d7a5f9e880f8e7f6b84c8cadfcdd6bba1717a450bfbc95cc169b57a779d4171567dfc68bf93e8e96aae9a2acab059e1b10ecfbff7fb4fce5eb4a19c98ac7f3d4c28e321e76b7043d9936adb97677a164a2a605c342e52ecdaeda2c10196049091e870a4b9a23fbf14a79c6528c13c96de81de9731a5bb2375446186b5568090150722a0", 0xce}, {&(0x7f00002aa000)="33d327a6b3c1ac59efa177b39929de94873feae7ed0a9dde146e2840a5ec70df0fce8e57284d15f896b155a1cd21247425073794cb88f795758a23c9b97ad89861ba9ff4aca076d8f6fe095758fd5c62732fd1294408a5752a62578c4049771e6b49e7094e3a382e5d17261abdff227908c8d1e12330da4d0fe6c3afc75d4bcc09126ca09c82be9b30c5007a187a7df7fec1bcc4b7abebad4354d9704a7e7043a45005b40fa01937db98e32ba44cad535a255444bbc42255744e97e658da3be7b89d44d2bfd7284159783beea607e6fc6eff0c9954dec6aeb67357e30e8b61fbdbe1654a", 0xe4}, {&(0x7f0000ed2000-0x96)="0cd9807ab63b8a3df3d0a00994ba23c2bcfb757f2b7af5665d0d8c3e74dcff886d78431292d57adcd02dfbc466fdcf8c0a00d8a03f0df8392370e34373118b67e9d1aded0e729f78555bde1f64d9b09f09aefb592b4e0b25c9e95e4ad3de2c0f48980cb5b6008d42d2640078edd32dfa6c877f3cc15c700708d0620174a9b452f6e915ff2ce97349de63ec34ed3ac5c2d0dfb70058ef", 0x96}], 0x7, 0x0, 0x0, 0x0}, {&(0x7f0000ff0000-0x10)=@in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000004d000-0x10)=[{&(0x7f00005b5000-0xfc)="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", 0xfc}], 0x1, 0x0, 0x0, 0x40000}, {&(0x7f0000b81000-0x10)=@in={0x2, 0x3, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000030a000-0x40)=[{&(0x7f00009ae000)="9370e008cb18ed078f0f15e47d30baa8004c82bfe612badb67f32e6345bf8a37a388", 0x22}, {&(0x7f0000b71000-0x65)="787cedce37f44918e510990b8ae97a7b789cc8834de05da043ea098a708411848e40a49395cd32b99fb01298677c068e47d5c4d3b8d981440e1739bffb094c5feea51116d87aa010257fc699b8d6d1ca64f2cdf6385c5e80f06ce8943f630d8c86d7be48d2", 0x65}, {&(0x7f0000b32000)="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", 0x1000}, {&(0x7f000049f000)="13f9cba6e39a58c26f4388df0ffe621d5713a744b6181154b2c051bec1843dc779d7905aaeaf56efa65d24ca6fc8dbd32f89ad8fc2a9c337d03607125c22402366243c026964861541", 0x49}], 0x4, &(0x7f000043c000)=[], 0x0, 0x84}, {&(0x7f00002ae000)=@in6={0xa, 0x2, 0x20200000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f000042b000)=[{&(0x7f0000a6e000-0xa5)="eb9cfdcf06a07149dcf2a360c920d36f390e30775cf414fffd34081a0578d1128cb4c74efd9a9bb190b1a64805bfd2f014cf8f87984530a7d0c528c03c2ed54b2e49222cfef27b7f90a04df888c3387a90abfe1855ffa57e3de2fdc89333d2c2597ceadedaf7f1981b7a4afe9af2db09770770624af305f75da9db64a4fd3e68bc49cb9c74979af272ae4f39ff52bb8d23665f859f107562f99aab265a38240a91fbbad513", 0xa5}, {&(0x7f0000726000-0x4e)="d142156d2f5487bf7abbe6bd60c670996b41fff3b6c615c1ec3160d7e786e11b4b52dcd7458aca6d5cee418b9d4b14c2bdf7ee10d536cfd4551ec77d35417dc19cac54307a98c40406de0952b1bc", 0x4e}, {&(0x7f0000a3e000)="113f2ecf39dcb133d4a5a2f8f2ea74e01300b0a1aa67b1be9e9bb54e0f", 0x1d}], 0x3, 0x0, 0x0, 0x8881}], 0x5, 0x12455e59ebdc725b) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c7e000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000f3c000-0x4)=0x0, 0x4) r2 = memfd_create(&(0x7f0000c14000)='selinux\x00', 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00007e9000-0xc)={0x9, 0xfffffffffffff001, 0x1, 0xba, 0x1, 0x3}) write$sndseq(r2, &(0x7f0000eaa000)=[{0x3ff, 0x6, 0x63e8, 0x7fffffff, @time={0x0, 0x1c9c380}, {0x1, 0x2}, {0x80000000, 0x7fffffff}, @time=@time={0x77359400, 0x0}}, {0x7, 0x7, 0x5, 0xffffffff, @tick=0x0, {0x2, 0x0}, {0xfff, 0x84ef}, @result={0x3, 0x40}}, {0x80000000, 0x7, 0x7, 0x7fff, @tick=0x6, {0x8, 0x4f}, {0x62, 0x7}, @time=@time={0x0, 0x0}}, {0xffffffffb3e1a0ff, 0x6, 0x4, 0xcb, @tick=0xfffffffffffffff9, {0x2, 0x80}, {0xffffffff, 0xd43}, @queue={0x7fff, {0x35e8, 0x7}}}], 0xc0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000155000-0x10)={0x0, 0x2710}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r3 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000fa4000)={0x0, 0x8000}, &(0x7f0000af8000-0x2)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00008c1000-0x8c)={r4, @in6={{0xa, 0x1, 0xffffffffffff8001, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000944000-0x4)=0x9d) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)=0x0) fcntl$setsig(r2, 0xa, 0x2000012) poll(&(0x7f0000b2c000)=[{r3, 0x0, 0x0}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000ccb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r2, r3) clone(0x0, &(0x7f0000002000-0x1000)="", &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000000000)="") fcntl$setown(r4, 0x8, r1) tkill(r1, 0x16) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, &(0x7f0000001000)=0x7) close(r0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000008000)='/dev/input/mice\x00', 0x0, 0x410001) connect$llc(r3, &(0x7f0000004000)={0x1a, 0x17, 0x9, 0x2, 0x4, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f000000d000)={{0x6, 0x200}, 'port1\x00', 0xc9, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x0, 0x7, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000d000-0x30)={0x58, 0x0, &(0x7f000000b000-0x58)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x20, 0x30, &(0x7f0000003000-0x20)=[@fda={0x66646185, 0xa, 0x3, 0x4}], &(0x7f000000d000-0x30)=[0x58, 0x48, 0x60, 0x48, 0x0, 0x38]}, 0x3}}], 0x81, 0x0, &(0x7f000000b000)="7d5064d2bd48b13afbfccf206612f4120a323fb712f534621c22a415f919b44848942215d4717dd00518690785b8ac23202f01126b94de46063acf850852a2114b6056caca24cadf2d33f2e3faf95af02655b6f01a63641b02fe8365bd8b809aa6705b378237a00e39218dd1c6914bcbea8b91461fa6140ffe4804dde1e1dc9692"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer\x00', 0x8000, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000007000)=""/154, &(0x7f000000e000)=0x9a) openat$sequencer2(0xffffffffffffff9c, &(0x7f000000b000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000366000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000681000)=0x0) [ 77.460100] binder: unexpected work type, 4, not freed [ 77.465776] binder: undelivered TRANSACTION_COMPLETE [ 77.474876] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.480883] binder: undelivered TRANSACTION_COMPLETE [ 77.488614] binder: 14450:14453 ERROR: BC_REGISTER_LOOPER called without request [ 77.488678] binder_alloc: 14450: binder_alloc_buf, no vma [ 77.488697] binder: 14450:14468 transaction failed 29189/-3, size 0-0 line 3127 [ 77.518216] binder: BINDER_SET_CONTEXT_MGR already set [ 77.518224] binder: 14489:14493 ioctl 40046207 0 returned -16 [ 77.518447] binder: 14489:14493 ERROR: BC_REGISTER_LOOPER called without request [ 77.543146] binder: undelivered transaction 728, process died. [ 77.543658] binder_alloc: 14450: binder_alloc_buf, no vma [ 77.543675] binder: 14489:14499 transaction failed 29189/-3, size 0-0 line 3127 [ 77.565673] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.571734] binder: 14489:14499 ioctl c0306201 2000cfd0 returned -14 2017/12/24 06:44:38 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000fbd000-0x60)={0x0, 0x8, 0x1, @thr={&(0x7f0000f6e000-0x52)="33da1fd0f2d5a2d46d3be7a8cd3360520dd1b1d0b949df6f7eaa74cd5e4fdf694ea3f84668c6d8db628b2f7efcc48d99ac6847167e0d883711d4bda4df0c4551715ba21e26afbac5083b564893cb57a279ad", &(0x7f0000001000-0x7c)="c5dafc0f7cf93014ea441a7e01efc55e50813ca7e911022c0bdb2a409c96b6db69f15e22095c8c3f02b63c0dfc746085ac9e2c196fb434cda122f0c074821a14dd678dfcde50139ca0819d3de7751c80d8d385f0aab4e65191bfb6bd11d9f984eea9d6732ca599d610dbaf347b5acc4b6e05255d879566dd706dccd5"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x0) timer_getoverrun(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f000040f000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000001000-0x2d)=""/45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000ff7000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f000088e000-0x11)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000e9a000)={0x8, {{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0xc51e}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x1000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000748000-0x77)=""/119) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f000083c000-0x28)={@common="67726501000000000000008c6a010100", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000b76000)={@common='gre0\x00', @ifru_addrs={0x2, 0x2, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) fcntl$setflags(r2, 0x2, 0x1) write$eventfd(r5, &(0x7f0000f70000)=0x0, 0x8) 2017/12/24 06:44:38 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00004ab000)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8e, 0x2, 0x5, 0x1, 0x100000000}, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001000)=[{r0, 0x210, 0x0}, {r0, 0x0, 0x0}, {r0, 0x0, 0x0}, {r0, 0x8, 0x0}, {r0, 0x4010, 0x0}, {r0, 0x1000, 0x0}], 0x6, &(0x7f0000001000)={0x77359400, 0x0}, &(0x7f0000001000-0x8)={0x7ff}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000003000-0x10)={0x5, 0x6}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000003000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_ivalue=0x800}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000004000)={0x6, 0x2, 0x7fffffff, 0x3}, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000006000-0xb9)={0x0, 0xb1, "a02bf51b79bc5034179e8955a3fac05fc409478836b6246e8cb1ca7a99dbbc61a6a10614897c4cb7e2218e33d5e02eb80583eedf957b1b1188112f71365608d853878060a7328c311fb4d7af72880384ce9c5823b2da319a8c068ace7b22bb48c8c127424885cf9fe0bc8090d20a33351958c7fade43dc64dd7818900f1af015ecbb7041e80bf2a39dd75ed21e1ad4250148e716044a8ed7614a544a1ebdd2a109dcc12ce48ab7f546a10ec70118791c82"}, &(0x7f0000005000)=0xb9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000005000-0xed)={r1, 0xe5, "60159570974535b92254b797efc087e257faaec1ffc7c95b9693e820878f2d7fee08e05d3e54e59092a434836e0795e4313522407533fbd103d3ee0a4bbeb23a040740587c673f3cf4eea421f074140af9ffa3084b6f7b5adc83dfa9a7776fba6982400eda7c8f2e9171c2de33753d144ce7b762eb7f4301c8fc82b58ef50fbfe599664577d7076ace3b56f0b5b34316cbb32cf419f73f7d74550293b7c7ac1029bcc85f8d6f3df3778aa70d185ab0c419bf37fa388195b57d5bee1cf4fbef7bb48a547811c52358705682c17949722f10b3e027bdcf1d98952390963722236ba94ff6ad75"}, &(0x7f0000001000-0x4)=0xed) getdents(r0, &(0x7f0000006000-0x96)=""/150, 0x96) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netrom(r0, &(0x7f0000006000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000007000-0x4)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000006000-0x8)=@assoc_value={r1, 0x2}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000004000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000004000)={r3, 0xfffffffffffffe00, 0x400, 0xd, 0x2d, 0x10001, 0x4, 0x100, {r2, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x3, 0xf60, 0x10000, 0x0}}, &(0x7f0000002000)=0xb8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) renameat2(r0, &(0x7f0000003000)='./file0\x00', r0, &(0x7f0000001000-0x8)='./file0\x00', 0x6) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000007000)=0x4, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000009000-0x4)=0xe1, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000006000)=0x0, &(0x7f0000008000)=0x4) 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000eb2000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r0, 0x0, 0x0, 0x7e70) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000076d000-0x4)=0xe2, 0x4) 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/user\x00', 0x2, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x26fa90faca39f03c, 0x100, &(0x7f0000000000)={0x12f, 0xf5, 0x0, 0x40, 0x4, 0x7e, 0x80000000, 0x8}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000001000)={0x0, 0x6, 0x2, @thr={&(0x7f0000000000)="d362d8354f13252e008919d7c81678033e9ef6ce55bb1dd29989184b9347fac3f838577e757f0e3dd391bede277ce772abe8030c22e453070be7db7c19692c178e", &(0x7f0000002000-0x7b)="23b90367d7bf4fdd165a91c9a4707e17cc644e46ad6ceddd2528830e589e156ad3c61afd8ea2c35965e137e8c5b1f8d88e33d730eab873add628d3b2187373c218bc3f4624afbabf1a418a6df683911c327e59577a2fe04fbdacf12abc986389bfdf55896897c5c3055ef301f97a3dc4220c335cbf52af2c81ef47"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(r0, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000007000)='/dev/input/event#\x00', 0x20000000000, 0x181000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/69) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000002000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f00000d5000)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) syncfs(r0) r1 = syz_open_procfs(0x0, &(0x7f0000d9e000)='stack\x00') r2 = open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x0, 0x0) dup2(r2, r1) 2017/12/24 06:44:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000fc2000)='/selinux/status\x00', 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) getsockname$llc(0xffffffffffffffff, &(0x7f000074c000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000b65000)=0x10) r1 = syz_open_dev$tun(&(0x7f000050e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000f44000)={@generic=""/16, @ifru_ivalue=0x0}) ioctl$TCSETA(r1, 0x5402, &(0x7f0000b98000)={0x7ff, 0xccc, 0x7fffffff, 0x3bc423b0, 0x3, 0x9, 0x100, 0x17, 0x2700, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000ccc000-0x28)={@generic="0400200700030109008000000000bc22", @ifru_map={0xfa6, 0x0, 0x0, 0x0, 0x7, 0x0}}) getsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f0000b43000)=0x0, &(0x7f0000869000)=0x4) close(r1) symlink(&(0x7f0000004000)='..', &(0x7f0000fc5000)='./file0/bus\x00') 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x7, 0x0, 0x800000000004, 0x101, 0x0}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000ffa000)='/dev/keychord\x00', 0x20002, 0x0) bind$nfc_llcp(r1, &(0x7f00006e8000-0x60)={0x27, 0x3, 0x5, 0x7, 0x6, 0xa96b, "99d67c7621d8b423fad368e3c3d960a2fe16c645409ade9eac44dac071b5c1c3843e00f5d8e6f880e23814c243499849b38044a6c9f4d2964fd4f6c761569d", 0x5e0}, 0x60) llistxattr(&(0x7f0000ffd000)='./file0\x00', &(0x7f00004c1000)=""/144, 0x90) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde)=0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00002da000-0x14)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00001d5000)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000113000)={0x0, 0xcc, &(0x7f00005d1000-0xcc)=[@in6={0xa, 0x2, 0x7ff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6a59b2d7}, @in6={0xa, 0x3, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8000}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0xf6f7, @loopback={0x0, 0x1}, 0x7fffffff}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x6}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x40}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00007c3000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00008ee000-0xb8)={r2, 0x0, 0x5, 0x1, 0x7f, 0x8, 0x3, 0xc9, {r3, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xd476, 0x2, 0x9, 0x7, 0x9}}, &(0x7f00005c0000)=0xb8) [ 77.603511] binder: 14489:14504 ERROR: BC_REGISTER_LOOPER called without request [ 77.613576] binder: 14489:14499 got reply transaction with bad transaction stack, transaction 736 has target 14489:0 [ 77.624571] binder: 14489:14499 transaction failed 29201/-71, size 24-8 line 2935 [ 77.635643] binder: 14489:14504 ioctl c0306201 2000cfd0 returned -14 [ 77.646965] binder: release 14489:14499 transaction 736 out, still active 2017/12/24 06:44:38 executing program 7: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000e74000-0x11)='/selinux/context\x00', 0x2, 0x0) accept4$llc(r0, 0x0, &(0x7f0000a9e000)=0x0, 0x80800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00004af000)='/selinux/access\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00009d2000)={0x0, 0x0, ""/64, 0x0, ""/8, ""/32, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) rt_sigtimedwait(&(0x7f00007ca000)={0x4}, &(0x7f00003c3000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000955000)={0x77359400, 0x0}, 0x8) r3 = syz_open_dev$tun(&(0x7f000079c000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f000051b000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00007cc000)='./file0\x00', 0x800, 0x199) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000907000-0x4)=0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000705000)={@common='gre0\x00', @ifru_flags=0x2002}) futex(&(0x7f0000162000)=0xac50, 0x4, 0x6, &(0x7f000071b000)={0x77359400, 0x0}, &(0x7f0000111000-0x4)=0x0, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f000064d000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00003d2000)={r5, 0x0}) fcntl$setpipe(r3, 0x407, 0x81) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f000071c000-0x44)={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='gre0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000b0b000-0xc)='/dev/rfkill\x00', 0x103002, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8940, &(0x7f00003a6000)=@add_del={0x2, &(0x7f0000351000)=@generic="8ebd05ff354922f269883fc8c1a23f79", 0x4}) [ 77.654633] binder: undelivered TRANSACTION_COMPLETE [ 77.661878] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.663264] binder: 14515:14518 ERROR: BC_REGISTER_LOOPER called without request [ 77.689741] binder: send failed reply for transaction 736, target dead 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000265000-0xf)='vboxnet0cpuset\x00', 0x2) pwrite64(r0, &(0x7f0000002000)="f7c4", 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x7) fallocate(r0, 0x0, 0x0, 0x2b) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000fee000-0x4)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00007cb000)={0x0, r1}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000c7000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000ea000-0x4)=0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f00000fb000-0x2)=0x68) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rename(&(0x7f000003d000-0x8)='./file0\x00', &(0x7f00003c2000)='./file0\x00') syslog(0x0, &(0x7f000024d000)=""/56, 0x38) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00002cc000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r1, &(0x7f0000bae000)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c, &(0x7f000047b000)=[], 0x0, &(0x7f0000497000-0x18)=[{0x10, 0x29, 0x5, ""}], 0x10, 0x0}, 0x0) r2 = gettid() poll(&(0x7f000023e000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x294a59fa) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x800000000000, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(r2, 0x22) tkill(r2, 0x15) fcntl$setown(r0, 0x8, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000009000-0xd)='/dev/usbmon#\x00', 0x80, 0x60001) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(r1, 0x9) fstat(r0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = getpgrp(0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000006000-0xc)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004000-0xc)={0x0, 0x0, 0x0}, 0xc) r9 = gettid() mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008000)={{{@in=@empty=0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000009000-0x4)=0xe8) r11 = getegid() mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000005000-0x38)={&(0x7f0000003000)={0x0, 0x0, 0x9, 0x4}, 0xc, &(0x7f0000006000-0x70)=[{&(0x7f0000002000)=[], 0x0}, {&(0x7f0000009000-0x157)=[{0x65, 0x9, 0x2, 0xfffffffffffffffb, 0x1, "f62a48d70a7d43d134430232d07ce1963ea8946cb02ba41797ff4f197a1409be3982133dbe16546e3408fdfe0a462c5fecd047778d03194b723128f53187832e72362331dcd3aa08b464deebfbb6a4a30e30aeb3d6"}, {0x59, 0x4, 0x8, 0x7, 0x1000, "6678a383d9d8598ee394eb0bf8913f840725a6ef41f4cdb3ad24770eab69b060db5fcae662362a14e77032adeb76a71a24533be3a3b216c66aa4a9696819567256c88a947f814b06c1"}, {0x1c, 0x9, 0x20, 0x3b, 0xfffffffffffffff9, "a4a8c3dc1e07a8d02afe1bd8"}, {0x7d, 0x7, 0x0, 0x2, 0x4, "184850a1a69930e877db27d2b178becd453da9c081072a3b0fe27b0131f3385cef6cd5ae1b98358f2a6f7d7363c5155a2e9e1711cb5d9c58ffd4a3bcc44ee062e55ba259cac6a48cf3f419486e6c940a7c542b7eec56a86dedf954b50a0e21a062ff0fd8d7a21854459b0362c8"}], 0x157}, {&(0x7f0000009000-0x122)=[{0xca, 0x101, 0xb00, 0x800, 0x80, "7bf985fc19720e5c0a2f352a4aa68c5bde49c9cc40a6a9d6be9da32d41913dfda7efdb46d90a725ae06ea3a46efb4b638dbeccf1d91a00122b21ed4a1624e0a9ecb988e1db37f973cd4032c221e59daa9222a91b092481d3a266c48041727e941f56202e40008dc9690e750e38f53dc2fc9adc0831f8a759f2a53ecfc0231df6198e7c108f2b64f37366d02256aec7d7c931e3320cd4b1e7629995b36b11d163650d44d24e911615257c145dc5aefd3d14f7158cf4c95445d845"}, {0x58, 0x4e8, 0x14, 0x5, 0x8000, "3f77d9a798022e7eeadb6416d1411724bf616e4747cd5a97764e59758449b8be0c315a6cf35f315c3557c961391b83c7853bc54652cfa05c70d8b12c9ca778b47c9939d88863cb3e"}], 0x122}, {&(0x7f0000000000)=[], 0x0}, {&(0x7f0000003000-0x10fc)=[{0x1010, 0x8, 0x10, 0x7fffffff, 0xc1a1, "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"}, {0xa9, 0x8, 0x2, 0x8000, 0xa597, "8808a002489414551e9dc6f022ae6b669bb33918b8f927eebf6dfbf2befe2a5f1747af48ac21384fc766daa4df4eda92129116ae75929d68866bfbfd7d8ee6700cc095911f471b4cc27d76b72e20aa4cbfb5805ba8b91722fc133d1d47a938f238d3b887e20fb3749b358393b6ffbc90cfc4c32b75aa13f82cade2bcb8c3b15be064ad11b43e946a48ba3b8ffddb407ad32e9914f61970ebad"}, {0x43, 0x0, 0x400, 0x7ff, 0x5, "17df6ee9659d4daf57b5b41250195af5828446708abe55578c7ae9f37d4dce368bcfd63cafab53910d5311992d7dcc783a5958"}], 0x10fc}, {&(0x7f0000009000-0x396)=[{0x5b, 0xfffffffffffffeff, 0x10, 0x7, 0x20, "6fc33e9132443a5a0473483e50d886c96bf3bc977b5f7826656816bfaa1c5a0804eb3264d64db2a09b5ff85937bce0ec08fb469e519fd4650a0fa525399c3982e5d57ac404261e133ce641"}, {0x58, 0x31b, 0x0, 0x3, 0x98c, "0ad0f9fbc3c0d711d9f4e9bb7e5b353d8cf1ff4e10bfe440a2157d3baccab96c36caa9e71a688daa42d74e4a0b6decdbca4e5d50f6d96920acc97f6d6226caac698ec4ce7071f5be"}, {0xc0, 0x3f, 0x20, 0x71, 0x2c, "d30234d5710a38b92a9d056214bc039d72ad7f997e3eaa00f660fb509a4329cdb6857975045c28edacdb6997031f9d12ed49a1c09a0d4957035df9756d2939971d1276e5379fa2ab6574ce896c98ea9c0adf4b0efb748780e74331dd45b53c8ced46b1ffdb27499a4a5bb2577986c7182054371d8b3f36ea2113ecce5a05f4cebf344e8674f19c80f0b55bc95085039ac6af77a9ec0ddeb83987e9e20b5ae49f02d1bf3e890fc26da44cc1f48c0c8097"}, {0x71, 0x1, 0xc, 0x7ff, 0x312, "db6444a2876f99bb105cbc793016033ce03fd4b5076b6a6ab0be69108b6b8868c81541ebd8def8cd14da8484f1cc9e77ef5b36a0ab82676a49ccc92ad72bcccae578f2df962e67d2bfc4a535ce632fd5b1fd8fc29ebf56365eda7ae2ebbbb535f4"}, {0xcc, 0x9, 0x2, 0xff, 0x6, "7e3d1c47545e78fdfec61ef931ff5d579f6daefd81604ad4ed52021b29e1d985f2e01f8e26bc99bac9de0d612d245a92847318bc1cedaf867bdba89e6d4c85f75240537aad5e30ef5c731bc345e062169a5d97ef6511e643c01fc7653c19599cf4c6d958e1bce34712510178d8c168d4c5d75c9a4c1eb6b0752a8463f7de4f95106bcabeccc3e935495dd1e943bcc396317594928d56257d9fcfadb69a779dc7875de95ec0377bcfb517583a2396c94c38a2b50e6bb6e0d46b441827"}, {0xe6, 0x38, 0x1, 0x40, 0x7, "e90e586a97dc890f17cee1472125bc990365327ba6df0dc378a60623fc09fdaf7a89a493aed0544c0c677eb462c8bf202a2259579464ba28b4141cffd8c3aadc3f4ef6d9ab7d1ce8b9f8224fda12f808726fe3d3f26b838e17f0087d3e9edc23648e9e28a4fa43bac03f09b2c86884603bf89131214ad77428b61135716b22093f89f53a476b794760d01538b3099caeb8700ed49cb189ef259396eea9b24438ffa62466dd316bc8f99532551d77a461b31e0d9a2746004abf8537bb706416ae31bf01dc58031f1f6b70beb89ec2b765f0aae3180247"}], 0x396}, {&(0x7f0000008000+0x9a0)=[], 0x0}], 0x7, &(0x7f0000008000)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x78, 0x4}, 0x4000) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = accept$packet(0xffffffffffffff9c, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000004000-0x4)=0x14) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r12, 0x8910, &(0x7f0000009000)=@req={0x28, &(0x7f000000b000)={@generic="b0f6806b733e8e733ea1178e893002ee", @ifru_addrs=@hci={0x1f, 0x6, 0x1}}}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000+0xdbe)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, r13, 0x0}], 0x0, 0x0, &(0x7f000000a000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 77.699765] binder: 14515:14518 got transaction with invalid offsets ptr [ 77.699787] binder: 14515:14518 transaction failed 29201/-14, size 0-8 line 3155 [ 77.716846] binder: unexpected work type, 4, not freed [ 77.722948] binder: undelivered TRANSACTION_COMPLETE [ 77.723884] binder: 14515:14529 ERROR: BC_REGISTER_LOOPER called without request [ 77.728466] binder: 14515:14518 got reply transaction with bad transaction stack, transaction 745 has target 14515:0 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f000074e000-0x3f)="b63db85e1e8d000000000000003e15d61dcc436aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000bb7000)=[{&(0x7f0000f94000-0x35)=""/62, 0x3e}], 0x1) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00004e1000)=0x4, &(0x7f00007e5000)=0x4) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f00006d3000-0x4)=0x12e) 2017/12/24 06:44:38 executing program 5: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ef5000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000469000-0xf)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet(r1, &(0x7f0000b1a000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000b6d000-0xa)='net/udp\x00') ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f00001d4000-0x4)=0x0) preadv(r3, &(0x7f0000331000)=[{&(0x7f0000724000-0xe0)=""/127, 0x7f}], 0x1, 0x102) r4 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00007a3000)='/dev/pktcdvd/control\x00', 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000dca000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_ivalue=0xe02}) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00001ef000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000f68000-0xc)=@ethtool_rxfh_indir={0x3, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000708000)={0x4, &(0x7f0000de7000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f000017d000)={r6, 0x1}) [ 77.728473] binder: 14515:14518 transaction failed 29201/-71, size 24-8 line 2935 [ 77.728500] binder: 14515:14529 got transaction to invalid handle [ 77.728506] binder: 14515:14529 transaction failed 29201/-22, size 0-8 line 3004 [ 77.772831] binder: BINDER_SET_CONTEXT_MGR already set [ 77.772838] binder: 14544:14547 ioctl 40046207 0 returned -16 [ 77.773023] binder: 14544:14547 ERROR: BC_REGISTER_LOOPER called without request [ 77.807313] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.813610] binder: undelivered TRANSACTION_COMPLETE [ 77.821451] binder: undelivered transaction 740, process died. [ 77.822222] binder_alloc: 14515: binder_alloc_buf, no vma [ 77.822238] binder: 14544:14556 transaction failed 29189/-3, size 0-0 line 3127 [ 77.845465] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.851028] binder: release 14515:14518 transaction 745 out, still active [ 77.858368] binder: undelivered TRANSACTION_COMPLETE [ 77.863537] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.868111] binder: 14544:14556 ERROR: BC_REGISTER_LOOPER called without request [ 77.875515] binder: 14544:14556 got reply transaction with bad transaction stack, transaction 750 has target 14544:0 [ 77.875522] binder: 14544:14556 transaction failed 29201/-71, size 24-8 line 2935 [ 77.875543] binder: 14544:14561 got transaction to invalid handle 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0x40000)=nil, 0x40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000040000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f000003e000-0x8)='./file0\x00', &(0x7f0000041000-0x19)=@known='system.posix_acl_default\x00', &(0x7f0000028000)='\\%selinux-,\x00', 0xc, 0x2) symlinkat(&(0x7f0000010000-0xe)='./file0\x00', r0, &(0x7f0000020000-0x8)='./file0\x00') mmap(&(0x7f0000042000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f000000c000-0xe)='./file0\x00', r0, &(0x7f0000043000-0xe)='./file0/control\x00') 2017/12/24 06:44:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000542000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0x1b}) ioctl$TUNGETSNDBUF(r0, 0x400454dc, &(0x7f00003e6000)=0x0) 2017/12/24 06:44:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000d70000)='/selinux/access\x00', 0x2, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x37) r1 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r1, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000d15000-0xa0)={0x0, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xca9, 0xffffffff, 0xfe2, 0x2, 0x6}, &(0x7f00004f8000)=0xa0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00002e2000)={r1, @in6={{0xa, 0x0, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000000000/0xd59000)=nil, 0xd59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000d59000)={0x7, [0x4, 0x5, 0xfffffffffffffffb, 0x0, 0x2, 0xc11, 0xcd9]}, &(0x7f0000d5a000-0x4)=0x12) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d4d000-0x158)={0x2, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9, 0x0, 0x0}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000042a000)={0x0, 0x0}) mmap(&(0x7f0000d5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000d5b000)={0x0, 0x33, 0x0, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d5b000)=0x0) timer_settime(r5, 0x0, &(0x7f0000189000-0x20)={{0x77359400, 0x0}, {0x77359400, 0x0}}, &(0x7f00001c8000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000d5b000-0x4)=0x72aea6da, 0x4) mmap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000d5a000-0xf0)=[{0x400, 0xdd4, 0x6, 0x9b, @tick=0x20, {0x3, 0x1}, {0x5, 0x0}, @raw8={"8cc8cb9da608f395350f6f6c"}}, {0x800, 0x9, 0x1000, 0xfffffffffffffffc, @tick=0x2, {0x9, 0x10001}, {0x4, 0x14}, @control={0x0, 0xdbe, 0x0}}, {0x99, 0x8d, 0xffffffffffffff80, 0x9, @tick=0x7ff, {0xfffffffffffffffe, 0x7b8}, {0x6, 0x200}, @note={0x4, 0x3, 0x1ff, 0x20, 0x6}}, {0x6, 0x1, 0xf22, 0x641, @tick=0x8000, {0x8, 0x8}, {0xcf9, 0xae}, @quote={{0x80000000, 0x9}, 0x0, &(0x7f0000d5a000-0x30)={0x5, 0x7, 0x2a, 0x8, @tick=0x2, {0x100000000, 0x401}, {0x100, 0x1a7e}, @addr={0xfffffffffffffffb, 0x20000}}}}, {0x100000000, 0x101, 0x7, 0x40000000, @time={r3, r4+10000000}, {0x7fff, 0x7fff}, {0x1000, 0x0}, @result={0x7, 0x8}}], 0xf0) mmap(&(0x7f0000d5a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000d5b000-0x4)=0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00008de000-0x6)={r1, 0x6}, 0x6) 2017/12/24 06:44:38 executing program 7: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000bd5000-0x12)='/dev/loop-control\x00', 0x100, 0x0) unshare(0x400) userfaultfd(0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000af7000)={0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000010000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xe66000)=nil, 0xe66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0xa, 0x20000) mmap(&(0x7f0000e67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000e67000)=0x5, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000d8c000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000e68000)={0x647, 0x800}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e66000)='/dev/autofs\x00', 0x44000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00007e2000)={0x0, 0xf9f, 0x34d, 0x2, 0x282225c9, 0x9, 0x3, 0x1, {0x0, @in6={{0xa, 0x0, 0xff, @loopback={0x0, 0x1}, 0x200000000200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4311, 0x10000, 0x1, 0xffffffffffff8001, 0x200}}, &(0x7f00004b2000-0x4)=0xb8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00003b7000)=0x0) mmap(&(0x7f0000e66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000e66000)={r3, 0x0}, 0x8) ioctl$sock_SIOCSIFBR(r1, 0x8940, &(0x7f000090e000-0x18)=@generic={0xa, 0x20, 0xffff}) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x3) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000e69000-0x7)="abe53e72631098", 0x7) r4 = socket$inet(0x2, 0x1fffffffe, 0x84) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f000029f000)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f000061f000-0x20)={@common='dummy0\x00', @ifru_addrs={0x2, 0x1, @rand_addr=0x32b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r6 = getpgid(0xffffffffffffffff) setpriority(0x0, r6, 0x1) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000e69000-0x18)={@empty=0x0, @multicast2=0xe0000002, 0x1, 0x2, [@loopback=0x7f000001, @multicast1=0xe0000001]}, 0x18) bind$inet(r4, &(0x7f0000583000)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r4, &(0x7f00000f9000)="", 0x0, 0x0, &(0x7f0000e66000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mq_unlink(&(0x7f00007cf000)="90") pipe(&(0x7f0000222000)={0x0, 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xd3, 0x4) bind$inet(r0, &(0x7f0000f02000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) clone(0x0, &(0x7f0000fc2000)="", &(0x7f000073d000)=0x0, &(0x7f0000e28000)=0x0, &(0x7f0000a0b000-0x1000)="") getuid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000780000)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00004e1000)='hybla\x00', 0x6) geteuid() openat$sequencer2(0xffffffffffffff9c, &(0x7f000026b000)='/dev/sequencer2\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet6(r1, &(0x7f000013f000-0x1)="9c", 0x1, 0x0, &(0x7f000042f000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sendmsg$netlink(r1, &(0x7f0000083000)={&(0x7f00005a2000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00001b9000-0x30)=[{&(0x7f00004f3000)=[{0x358, 0x0, 0x0, 0x0, 0x0, "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"}], 0x358}], 0x1, &(0x7f0000eb0000)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}], 0x40, 0x0}, 0x0) umount2(&(0x7f0000f07000)='./file0\x00', 0x1) sendto$packet(r1, &(0x7f0000681000)="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", 0xdc0, 0x1, &(0x7f0000bc8000)={0x11, 0x0, 0x0, 0x1, 0x104000003ff, 0x6, @random="39a61ba65612", [0x0, 0x0]}, 0x14) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fchdir(r0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f000000a000)=0xe0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00006de000)='stat\x00') r2 = syz_open_procfs(0x0, &(0x7f0000e98000-0xb)='projid_map\x00') readv(r2, &(0x7f0000406000-0x80)=[{&(0x7f00007a0000-0x12)=""/18, 0x12}, {&(0x7f0000bf9000)=""/170, 0xaa}, {&(0x7f0000a16000)=""/143, 0x8f}, {&(0x7f0000d4f000-0x1000)=""/4096, 0x1000}, {&(0x7f0000078000-0x1000)=""/4096, 0x1000}, {&(0x7f000050c000)=""/23, 0x17}, {&(0x7f0000ba7000-0xeb)=""/235, 0xeb}, {&(0x7f0000cb8000-0x1000)=""/4096, 0x1000}], 0x8) tee(r1, r1, 0x9, 0x9) sendfile(r2, r1, &(0x7f0000318000-0x8)=0x4b, 0x400000ff) [ 77.875553] binder: 14544:14561 transaction failed 29201/-22, size 0-8 line 3004 [ 77.909330] binder: send failed reply for transaction 745, target dead [ 77.916060] binder: release 14544:14556 transaction 750 out, still active [ 77.925103] binder: undelivered TRANSACTION_COMPLETE [ 77.937479] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/24 06:44:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000015e000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00003fe000)=@assoc_value={0x0, 0x6}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f00005f5000)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000259000-0x8)=0x0) sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2017/12/24 06:44:38 executing program 7: socketpair$ax25(0x3, 0x7, 0xcd, &(0x7f0000ae4000)={0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000a62000)="", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001000-0x4)=0x0) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00008ce000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETAW(r2, 0x5402, &(0x7f00005b3000-0x14)={0x4, 0x8000, 0x80000000, 0x4, 0x4, 0x1, 0x2, 0x2, 0xf512, 0x6}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000197000)={@common='teql0\x00', @ifru_addrs={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f000000e000-0x8)=@file={0x1, ""}, 0x2) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f00003d4000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000a86000-0x4)=r4) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3d2) fcntl$getown(r1, 0x9) r5 = request_key(&(0x7f000091a000-0x5)='ceph\x00', &(0x7f0000e08000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000040000)='/dev/sg#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000bbb000-0x8)='trusted\x00', &(0x7f0000c34000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00000d6000)="", 0x0, r5) listen(r3, 0x0) add_key(&(0x7f0000eff000-0x6)='logon\x00', &(0x7f0000acd000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000bda000-0x56)="", 0x0, 0xfffffffffffffffe) 2017/12/24 06:44:38 executing program 5: mlock2(&(0x7f000097d000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000da6000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='.bdevbdev\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000002000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$netlink(r0, &(0x7f0000001000)={0x10, 0x0, 0x5, 0xb6c}, 0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r2, &(0x7f0000002000)=0x0, 0x5) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003000)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_RELDISP(r3, 0x5605) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000005000-0x6)='.dead\x00', &(0x7f0000003000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000005000-0x76)="bff3ef8ad21f73188fb985d51fb9de05c477ec4ae8b9de577b1cae88d9ff9578a63bda3d2fe43b213cf86b99701d6a10b7e30d0c6471b1bad88c42d52242c0c9232ef81199e6e49ffe4ad316d814cb1d736fa7953249bcae423f916d46572ca82cf9ee7f40c8886d5f5d2b997a14685467562910629b", 0x76, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x3, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ipx(r0, &(0x7f0000004000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000006000-0x4)=0x10, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000002000)={0x0, 0x0}) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000001000)=0x401) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, r4, &(0x7f0000007000-0x20)=[{&(0x7f0000007000-0xfd)="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", 0xfd}, {&(0x7f0000003000-0xde)="062e1b80ef4fa4470ef8dc3f1a7156a8c38801a661980ee91c6c5fbd9473613a7b222b4be0c92ab03043ba3b2b6b3478aa4e08497bbe47187d61e876988ce25732167fbabcdfb40b7fec3db19a47e45f2c8acf44fcd9df4d52a39c88531b912ea375650bd122e39a931ca3c356afa7ec1601a46a1a76355579f7ea91ac70dbfc9ba880219f78fa0d72ebeea679d722f68849208b7186508632b15764385f003078227bbcd263cebdb906d2107c6507592dcb193193a9ef06887249f204be5bc723650cb0a646cc11c498fe8566564b04c9884968dbc876fa9a2dff082a76", 0xde}], 0x2, r4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000008000-0x10)={0x2, &(0x7f0000007000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000009000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f000000c000-0xc)='/dev/rfkill\x00', 0x10000, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f000000c000-0x18)={0x7ff, 0x1fffc, 0xfffffffffffffffd, 0x1, 0x8, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 77.937487] binder: 14568:14571 ioctl 40046207 0 returned -16 [ 77.937554] binder: 14568:14571 ERROR: BC_REGISTER_LOOPER called without request [ 77.971153] binder_alloc: 14544: binder_alloc_buf, no vma [ 77.971171] binder: 14568:14591 transaction failed 29189/-3, size 0-0 line 3127 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0x7a0000)=nil, 0x7a0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000259000-0x4)=0xfffffffffffffffa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000793000-0x4)=0x7f7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000079b000)=0x80, 0x4) mmap(&(0x7f00007a0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f00007a0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00000cd000-0x4)=0x14, 0x800) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000661000-0x14)={@loopback={0x0, 0x1}, r1}, 0x14) 2017/12/24 06:44:38 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000c09000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x1}, &(0x7f0000959000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00002ad000-0x8)={r1, 0x2}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00005c8000)={0x0, 0x0, 0x3, 0x7, 0x40, 0x9}, &(0x7f00003d8000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000001000)={0x9, 0x4, 0x7fffffff, 0x6078}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x5, 0x5d94, 0x1f, 0x3f, 0x3ff, 0xbeb8, 0x7fffffff, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x100000001, 0x0, 0x5, 0x1}}, &(0x7f00009d5000)=0xb8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000003000-0x78)={0x5, {0x2, 0x1, @rand_addr=0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x100000001, 0x7, 0x2f37, 0xfffffffffffffff9, &(0x7f0000003000-0x10)=@generic="761fecb18e77dfe3550d74e4c27bb713", 0x0, 0x6, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x2, 0x5a, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x20, 0x1000, 0x10000, 0x0}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000b2a000-0xa8)=[{&(0x7f0000001000-0x10)=@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x10)=[{&(0x7f00008bb000)="25e139298339133c0685c6f200de6ff57a52dd410535b574338eba4e439e3546a29bf241b299288924039fe32034b8eebe98accfa258b49392370b0b27de77aa716bc2eab90d429f69aafdfaca2a12b0dded0e427f7ce52197bd4718169f1465e7316f0925a067711969cbb5ec2a6ba2f266cf8231a79331c124fc00fd1a9e852e61a6f765a74538fb3c402a1e1cbc5120e342e799", 0x95}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x6, 0x0, 0x1, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0xfff, 0x4, 0x3ff8000, 0x2, 0x7, 0x3, 0x800, r1}}, @init={0x18, 0x84, 0x0, {0x3, 0x6, 0x4, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x6, 0x4a88fe43f84ef76b, 0x7, 0x0, 0x0, 0x3, 0x7, r2}}], 0xc0, 0x40000}, {&(0x7f0000001000-0x1c)=@in6={0xa, 0x1, 0x1852b654, @loopback={0x0, 0x1}, 0x0}, 0x1c, &(0x7f00007d2000)=[{&(0x7f0000c5d000)="3cfe83d7f5952026da19aa9b72742421d4658641aa492e33becfead21a2e78f28b10e64ecbfdeed221e2485f2dcb1effe5d37ed1574be40ddcda27a0eab39ed4007674605ca3e03156262f9b56be58cabd66aa3d3067981ee58e74819052db6a7dac30a1f6255e7d3d4988763d937c61687373d7bed94fd046317c8b6aa7045a79798e133bf8a8661f9c5d3e39fc96e84fd378d3e2c48d11146b3142533c4956c6d6ce883e647554cd", 0xa9}, {&(0x7f0000842000-0xee)="87d255442200e6afeba092110eee1b921a6d4e7a0f144cef3e34665449d47893e8014f1a7fdb6beb063044791b149c24ae7ee5114ea8364cc1c01641b4c32c9e07e117e946b03237670164ba0400e32000533a6191291155645fc1ccde146537716696d22464111f1959391620306264740290c9e0d81feb4f64e93303798d69721727d1b281400daf88fbaa064bff10eb52b7d391167d27ed3dc16f6d5fabf5da7d4baae8e022465ced74f58fd999518882dc6e44974c73e71504072632c8a8687a7fe3946211ff4bfee4ae62f241f37fa7cd0b66d9a7400bf76478f2a0886ba51ef8ffa8efba325d50ab57989a", 0xee}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000-0x9f)="d3483e2df42890d04cd6fbc67693dfe09059e763e26c5d997fc5d2ac58186ffe1ad08dcef1c49edc7df1920b1a7718f8f5962637522e5903760afc31d8bcb76708f690d5aab7a74b90c2b798e8aa01bbc6308cd9c4613718a842aa3239747266e579aa2521f1cce687b31c19b334ef2dcd19890c78f5a06ebd1479aea0251add0b40c2c329ab112e30be4ce919626851281d899017a67e3ee56a40ad36b56e", 0x9f}, {&(0x7f0000a4f000)="ad8f9f604a4217264f3077f735ad85979fb6ebee5bc4f9998de2d0df9ea27a25e7a57462fd6b333cf55d2ead315e3272e6e3525924a761687bcd544f8307775439eb67dfd63fc0444802c91883869eb19efe0ac02486274d9dbd1b190607d902fe1e4965", 0x64}], 0x5, &(0x7f0000927000)=[@sndinfo={0x20, 0x84, 0x2, {0x8000000000000, 0x1, 0x1, 0x2, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x7, 0x82, 0x40, r4}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffe, 0x200, 0x9, 0x7fffffff, r5}}, @init={0x18, 0x84, 0x0, {0x1, 0x148f, 0x7, 0x20}}, @init={0x18, 0x84, 0x0, {0x292, 0xe5, 0xffff, 0x81}}], 0xf0, 0x20000000}, {&(0x7f0000cdc000-0x10)=@in={0x2, 0x1, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x30)=[{&(0x7f0000001000-0x7d)="86b895a5fa5097aa8e4e9a7076da558c61dd25cc0284b525401a66e7ba9df4435c5220badd088a918aea8c2cea05ec913cc1783b3cfa931383c7f99d16b3bb808dcf497553336d1829aa6e74a038e59472df2e74ba7af7363a657e676cf77eb3b133e91336e257ee187be62f0d9b9ee3bd95fce0e019254b6680420f8c", 0x7d}, {&(0x7f0000000000)="3812ad532c85c5d195f7c519fb4789948a803fb834ca8162e9aec9574065f266df0d196ec0a422439fc8a6dd667780b18b676db469ec82342ea2caa4499a6eb278f96e10893c2967c740db7b4167c545abe57441a2ec5ed673bd7acccf4dbf55021d91c954a1da2470820ece3e11f086ba3c13920c19baaad4c3c126272cc213082ab776e1bd5bac", 0x88}, {&(0x7f00003fb000-0x54)="8399a20cdfe342b86bb0b096279d6e9523bb6273ef2c3c7f3766d6b77c8e3124e9a74fc765806f5344c0522561ab87bb3e906708baaab90818bb7e8d5ee871b07ff50aee57d9ac3972e1b2fb3fe883a42142ea32", 0x54}], 0x3, 0x0, 0x0, 0x48004}], 0x3, 0x24000880) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r0, 0x5428) setsockopt(r6, 0x1, 0x33, &(0x7f0000e65000-0x9)="d7fd09000079890fddd5a45d3f32e504", 0x10) [ 77.998246] binder: BINDER_SET_CONTEXT_MGR already set [ 77.998254] binder: 14568:14599 ioctl 40046207 0 returned -16 [ 77.999572] binder: 14568:14591 ERROR: BC_REGISTER_LOOPER called without request [ 77.999626] binder_alloc: 14544: binder_alloc_buf, no vma [ 77.999642] binder: 14568:14599 transaction failed 29189/-3, size 0-0 line 3127 [ 78.018597] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00007b6000)={0x35, 0x0, 0x0, 0x0, 0x0}, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f8a000-0xf)='/dev/sequencer\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000065e000-0x8)='./file0\x00', 0x40) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00003c5000)='/dev/rtc\x00', 0x40382, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000379000)=0x800000000000, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00007ba000-0x14)={0x0, 0x1, 0x9, 0x123, 0x3f, 0x7fffffff}, &(0x7f0000df4000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000fda000-0x20)={0x100000000, 0x6, 0x8200, 0x9, 0x8, 0x4, 0x6, 0x8, r3}, &(0x7f000014b000)=0x20) getpeername$inet6(r1, &(0x7f0000be5000)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000288000-0x4)=0x1c) getsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000cf3000)=""/152, &(0x7f00000e8000)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000c69000)={0x5}, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b2d000-0x11)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000750000)={0x0, 0x9}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000467000+0x4c)={0x0}, &(0x7f0000bf2000)=0x4) [ 78.018604] binder: 14609:14611 ioctl 40046207 0 returned -16 [ 78.018666] binder: 14609:14611 ERROR: BC_REGISTER_LOOPER called without request [ 78.047819] binder_alloc: 14544: binder_alloc_buf, no vma [ 78.047839] binder: 14609:14619 transaction failed 29189/-3, size 0-0 line 3127 [ 78.081947] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.087710] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.093556] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.099564] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00008c2000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000415000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00009f0000)={{0xa, 0x0, 0xfffffffffffffffc, @loopback={0x0, 0x1}, 0x80000001}, {0xa, 0x0, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80}, 0xffffffff, [0x4, 0x7f, 0x8001, 0x9, 0x2, 0x3, 0x101, 0x9]}, 0x5c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000d05000)={0x3, 0xbf, 0xfffffffffffffffd, 0x7, 0x9, 0xfcd, 0x3, 0x994e, 0x0}, &(0x7f0000ecf000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f000073b000)={r1, 0xa, "3964c542525c07f2fb75"}, &(0x7f000054a000-0x4)=0x12) statfs(&(0x7f00005f6000-0x8)='./file0\x00', &(0x7f0000b44000)=""/163) 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000244000-0xc)='/dev/random\x00', 0x0, 0x0) preadv(r0, &(0x7f00007bd000-0x18)=[{&(0x7f0000af4000-0x1)=""/1, 0x1}], 0x1, 0x0) timer_create(0x0, &(0x7f0000a6d000)={0x0, 0x12, 0x0, @thr={&(0x7f0000140000-0x1a)="", &(0x7f0000e22000-0xf)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000de2000)='/dev/keychord\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000daf000)={&(0x7f0000685000-0x18)=[0x7, 0x4f, 0x800, 0x5, 0x5, 0x3e0000000000000], 0x6, 0x3f, 0x8, 0x0, 0xffffffff, 0x5, {0x9cd, 0x26, 0x698d, 0x6, 0x9, 0x7fff, 0x8, 0xb6, 0x80, 0x1f, 0x5, 0x1, 0x3, 0x6, "cb6bca9eeba5eaea9bc129578e8844a9a076f64108dfcb98023ae85719e6cd92"}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) r2 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002000-0x11)='/selinux/relabel\x00', 0x2, 0x0) ioctl$void(r0, 0xc0045c78) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000726000-0xd)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000c8c000-0x38)={0x0, 0x0, &(0x7f000039b000-0x10)={&(0x7f0000369000)={0x2, 0xe, 0x3, 0x7, 0x3, 0x0, 0x5, 0x2, [@sadb_x_nat_t_port={0x1, 0x16, 0x1, 0x0}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x20004000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00009ec000)={@common='gre0\x00', @ifru_settings={0x42, 0x100, @raw_hdlc=&(0x7f0000d7e000)={0x4, 0x1}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00008a4000)={@common='gre0\x00', @ifru_flags=0x1}) 2017/12/24 06:44:38 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000c09000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x1}, &(0x7f0000959000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00002ad000-0x8)={r1, 0x2}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00005c8000)={0x0, 0x0, 0x3, 0x7, 0x40, 0x9}, &(0x7f00003d8000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000001000)={0x9, 0x4, 0x7fffffff, 0x6078}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x5, 0x5d94, 0x1f, 0x3f, 0x3ff, 0xbeb8, 0x7fffffff, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x100000001, 0x0, 0x5, 0x1}}, &(0x7f00009d5000)=0xb8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000003000-0x78)={0x5, {0x2, 0x1, @rand_addr=0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x100000001, 0x7, 0x2f37, 0xfffffffffffffff9, &(0x7f0000003000-0x10)=@generic="761fecb18e77dfe3550d74e4c27bb713", 0x0, 0x6, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x2, 0x5a, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x20, 0x1000, 0x10000, 0x0}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000b2a000-0xa8)=[{&(0x7f0000001000-0x10)=@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x10)=[{&(0x7f00008bb000)="25e139298339133c0685c6f200de6ff57a52dd410535b574338eba4e439e3546a29bf241b299288924039fe32034b8eebe98accfa258b49392370b0b27de77aa716bc2eab90d429f69aafdfaca2a12b0dded0e427f7ce52197bd4718169f1465e7316f0925a067711969cbb5ec2a6ba2f266cf8231a79331c124fc00fd1a9e852e61a6f765a74538fb3c402a1e1cbc5120e342e799", 0x95}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x6, 0x0, 0x1, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0xfff, 0x4, 0x3ff8000, 0x2, 0x7, 0x3, 0x800, r1}}, @init={0x18, 0x84, 0x0, {0x3, 0x6, 0x4, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x6, 0x4a88fe43f84ef76b, 0x7, 0x0, 0x0, 0x3, 0x7, r2}}], 0xc0, 0x40000}, {&(0x7f0000001000-0x1c)=@in6={0xa, 0x1, 0x1852b654, @loopback={0x0, 0x1}, 0x0}, 0x1c, &(0x7f00007d2000)=[{&(0x7f0000c5d000)="3cfe83d7f5952026da19aa9b72742421d4658641aa492e33becfead21a2e78f28b10e64ecbfdeed221e2485f2dcb1effe5d37ed1574be40ddcda27a0eab39ed4007674605ca3e03156262f9b56be58cabd66aa3d3067981ee58e74819052db6a7dac30a1f6255e7d3d4988763d937c61687373d7bed94fd046317c8b6aa7045a79798e133bf8a8661f9c5d3e39fc96e84fd378d3e2c48d11146b3142533c4956c6d6ce883e647554cd", 0xa9}, {&(0x7f0000842000-0xee)="87d255442200e6afeba092110eee1b921a6d4e7a0f144cef3e34665449d47893e8014f1a7fdb6beb063044791b149c24ae7ee5114ea8364cc1c01641b4c32c9e07e117e946b03237670164ba0400e32000533a6191291155645fc1ccde146537716696d22464111f1959391620306264740290c9e0d81feb4f64e93303798d69721727d1b281400daf88fbaa064bff10eb52b7d391167d27ed3dc16f6d5fabf5da7d4baae8e022465ced74f58fd999518882dc6e44974c73e71504072632c8a8687a7fe3946211ff4bfee4ae62f241f37fa7cd0b66d9a7400bf76478f2a0886ba51ef8ffa8efba325d50ab57989a", 0xee}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000-0x9f)="d3483e2df42890d04cd6fbc67693dfe09059e763e26c5d997fc5d2ac58186ffe1ad08dcef1c49edc7df1920b1a7718f8f5962637522e5903760afc31d8bcb76708f690d5aab7a74b90c2b798e8aa01bbc6308cd9c4613718a842aa3239747266e579aa2521f1cce687b31c19b334ef2dcd19890c78f5a06ebd1479aea0251add0b40c2c329ab112e30be4ce919626851281d899017a67e3ee56a40ad36b56e", 0x9f}, {&(0x7f0000a4f000)="ad8f9f604a4217264f3077f735ad85979fb6ebee5bc4f9998de2d0df9ea27a25e7a57462fd6b333cf55d2ead315e3272e6e3525924a761687bcd544f8307775439eb67dfd63fc0444802c91883869eb19efe0ac02486274d9dbd1b190607d902fe1e4965", 0x64}], 0x5, &(0x7f0000927000)=[@sndinfo={0x20, 0x84, 0x2, {0x8000000000000, 0x1, 0x1, 0x2, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x7, 0x82, 0x40, r4}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffe, 0x200, 0x9, 0x7fffffff, r5}}, @init={0x18, 0x84, 0x0, {0x1, 0x148f, 0x7, 0x20}}, @init={0x18, 0x84, 0x0, {0x292, 0xe5, 0xffff, 0x81}}], 0xf0, 0x20000000}, {&(0x7f0000cdc000-0x10)=@in={0x2, 0x1, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x30)=[{&(0x7f0000001000-0x7d)="86b895a5fa5097aa8e4e9a7076da558c61dd25cc0284b525401a66e7ba9df4435c5220badd088a918aea8c2cea05ec913cc1783b3cfa931383c7f99d16b3bb808dcf497553336d1829aa6e74a038e59472df2e74ba7af7363a657e676cf77eb3b133e91336e257ee187be62f0d9b9ee3bd95fce0e019254b6680420f8c", 0x7d}, {&(0x7f0000000000)="3812ad532c85c5d195f7c519fb4789948a803fb834ca8162e9aec9574065f266df0d196ec0a422439fc8a6dd667780b18b676db469ec82342ea2caa4499a6eb278f96e10893c2967c740db7b4167c545abe57441a2ec5ed673bd7acccf4dbf55021d91c954a1da2470820ece3e11f086ba3c13920c19baaad4c3c126272cc213082ab776e1bd5bac", 0x88}, {&(0x7f00003fb000-0x54)="8399a20cdfe342b86bb0b096279d6e9523bb6273ef2c3c7f3766d6b77c8e3124e9a74fc765806f5344c0522561ab87bb3e906708baaab90818bb7e8d5ee871b07ff50aee57d9ac3972e1b2fb3fe883a42142ea32", 0x54}], 0x3, 0x0, 0x0, 0x48004}], 0x3, 0x24000880) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r0, 0x5428) setsockopt(r6, 0x1, 0x33, &(0x7f0000e65000-0x9)="d7fd09000079890fddd5a45d3f32e504", 0x10) 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0xff9000)=nil, 0xff9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x8020400000000802, 0x0) bind(r0, &(0x7f0000fe8000-0x80)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$inet6(r0, &(0x7f00002c2000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000dc2000-0x4)=0x1c) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00009cf000-0x48)=""/72, &(0x7f0000ffb000-0x4)=0x48) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f00000bc000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000ffc000-0x4)=0x14) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000ffc000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7, r1}) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000007000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 78.105177] binder: send failed reply for transaction 750, target dead [ 78.112216] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.117802] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.124628] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.125067] binder: 14609:14619 ERROR: BC_REGISTER_LOOPER called without request [ 78.130336] binder: 14609:14611 got reply transaction with bad transaction stack, transaction 757 has target 14609:0 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcb000-0x20)=[{&(0x7f0000a05000-0xc0)=""/192, 0xc0}], 0x1) flistxattr(r0, &(0x7f000084f000-0xb4)=""/180, 0xb4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x801) poll(&(0x7f00003be000)=[{r1, 0x0, 0x0}], 0x1, 0x5d) write(r1, &(0x7f00000b5000)='\b\x00', 0x2) 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00009b4000)='/selinux/relabel\x00', 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000684000+0x2f3)=""/130, 0x82, 0x10000, &(0x7f0000eb2000)={0xa, 0x1, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x42d}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000c9d000)={0xffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00001d4000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r1, 0x8000000006) writev(r2, &(0x7f00009ca000-0x70)=[{&(0x7f0000a8c000-0x1000)="54e48d", 0x3}], 0x1) [ 78.130344] binder: 14609:14611 transaction failed 29201/-71, size 24-8 line 2935 [ 78.130374] binder: 14609:14619 got transaction to invalid handle [ 78.130381] binder: 14609:14619 transaction failed 29201/-22, size 0-8 line 3004 [ 78.160671] binder: BINDER_SET_CONTEXT_MGR already set [ 78.160678] binder: 14643:14646 ioctl 40046207 0 returned -16 [ 78.160741] binder: 14643:14646 ERROR: BC_REGISTER_LOOPER called without request [ 78.182272] binder_alloc: 14609: binder_alloc_buf, no vma [ 78.182289] binder: 14643:14654 transaction failed 29189/-3, size 0-0 line 3127 [ 78.210746] binder: BINDER_SET_CONTEXT_MGR already set [ 78.210754] binder: 14643:14654 ioctl 40046207 0 returned -16 [ 78.210779] binder: 14643:14659 ERROR: BC_REGISTER_LOOPER called without request [ 78.212011] binder_alloc: 14609: binder_alloc_buf, no vma [ 78.212028] binder: 14643:14654 transaction failed 29189/-3, size 0-0 line 3127 [ 78.213277] binder: 14643:14659 got transaction to invalid handle [ 78.213284] binder: 14643:14659 transaction failed 29201/-22, size 0-8 line 3004 [ 78.276223] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.281689] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.287208] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.292724] binder: release 14609:14611 transaction 757 out, still active [ 78.299665] binder: undelivered TRANSACTION_COMPLETE [ 78.304743] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.310217] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000e70000-0x28)={@common='lo\x00', &(0x7f0000ff9000-0x4a)=@ethtool_gstrings={0x1b, 0x6, 0x0, ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000ffb000)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000ffb000)=0x10) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000ffc000-0x4)=0x0, &(0x7f0000ff4000)=0x4) 2017/12/24 06:44:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009b7000-0x7)='ns/mnt\x00') r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000058d000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000371000-0x4)=0xe8) stat(&(0x7f0000242000-0x8)='./file0\x00', &(0x7f0000b13000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000156000-0x38)={0x0, 0x0, &(0x7f0000ddd000-0x60)=[{&(0x7f00004f5000-0x80)=[{0x80, 0x3ff, 0x400, 0x0, 0x3f, "2dd70caf349ae29c40a1b220a09e378b76042e6f1396f91c88818bce796b930cb84eeeedecb0d5ad7dcd1b1bb4b1661d0258ffe71e35aec79db7cfd3ce6cc7a66f1032caca6f30a2e0e1a800f8810ee286bf1763a3ce8756d88a7f2a5ea5c4c407fbf62839b260a6ac71780200252c6d"}], 0x80}, {&(0x7f0000efa000-0x45)=[{0x45, 0x8, 0x500, 0x2, 0x2, "ccc4b5915e57fb96b730a305ad132c39832027648e2f3e824183d6a3ab31e602a180afb0394eeabade63a11e852a4f68072fb03971"}], 0x45}, {&(0x7f00005ad000-0x2b)=[{0x2b, 0x7fff, 0x1, 0xc36a, 0x6, "284c5ba4b9de682f8da1974a0b058b358819f2b2fbc5df7e1cb684"}], 0x2b}, {&(0x7f0000a51000)=[{0x88, 0x592, 0xb28, 0xffffffff00000001, 0x0, "05ba633d176619157af9cfc5db8626c8da6c6d6a1914eaf2cfd83c233327b0960baf54017d4445bf30b9f2281edac794320663ade4d85428db16dafd7111bf1ba1bd6b7a845703f81ab6543908bdc4511afbf3c101a1fe8643b7f52e733f211567176110a8e52d4beb5ee7b660b71a41f44162887618d3a9"}, {0xa6, 0xffffffff, 0x20, 0x10001, 0xf3e8, "8b1223da5d89c40ebb0f3c016ca4026f03259a394bc447c9598efb215773ad62bf2527b878c9555eea7831425775826c7b1fa7a4f09f20abdefb150ce84daccbe248f532b555fbd9bc60756629d9b7b0a7053b9c1a319e317691c35afdf2a148ac39015aade99783bdfbf3beafce48db66fc1c8f9a016c805ec8e7560cbc99ffe14830c10dcf9d3dd9f7f43acad95f3f10be13b3e6ee"}, {0x18, 0x59d, 0xc12, 0x7, 0x6, "927fce718f4882ff"}, {0x77, 0x0, 0x0, 0x100000000, 0x3, "d002d94dd3a5ca6d2c94adb6d532a5e2df49ec9ee2823215c10f0230a3eb4606eb0e7eb8f9c31531f53ebf42ba0770b8f021bdd2663c5a85a7f9433cbcf661dfacf0ca2e0915b570c89f2191c004e449ee62135173e80526c065b8d1c6c7666c94a078d2be32f8"}], 0x1bd}, {&(0x7f000078f000)=[{0xb8, 0x3, 0x100, 0x2dd5, 0x7, "293822d1cdf246d7247137967eb05f0ca74d2b7a375f583e8a86d50f02d39516eeaa66f9d1f8e6aa3e726e3e6f076d394edffa9af3fa01845974ee830f83a8c9c5300dd8c24c3dedeaa075fe2bdf7041003f560fe75802700f78c66d94e3948b4459b3754f155e93a07af272b7386a1f4c30b28bd8b20785645d67fcdec19facb5a0ccb3ba2190f57232d15e73cc0e01eef6cbb4b9400fe38116877d8f1155d9098fe0f84e3684af"}, {0x69, 0x65, 0x400, 0x8, 0x800, "9404e1caaf3d5e90d1b7dfdcabf25df211306a9d7042e42afdd6b612c6256548b53358880f777a68d5f8ae0beeb0a330ae7ec623afe16c1420bb6f04d70eb66fbd63f28df6e5219bd447f8dfb59e66548c2c4d1c7fb7b85ce0"}, {0x5f, 0x30f, 0x2, 0x5, 0x3, "ce9e6991cfb76e6257c8b9f6209f2308c7cd28e738b090c362661513a2a675f99599620b98b5b112ddd8ba0b416fa23f9c4fbb8b55d66ad9f606b6ec949f8b4017f8e325a7ef8937fbfc228916b941"}, {0xb6, 0x200000, 0x300, 0x0, 0x7, "a8f6b9723acc940352520341d00f376ac148cbc8560ac57854c3ca708db48e16683ec42d1d6cd86e26b976e443d4f79d242cb5f9c2aa433e2be28952cc66831ea49c3478affab26eddd09cc025efa61879016c77be1589f46a034bbf7dfa97ee9712a175ae5afd9aeababe0e1e548e76b46ad5a267db2f2951b0adc31ac8bedf7654134bc84b5ef65aeff223f15b5cb66bd83ee6aec1ce1151dfc0563ff54a36d7dbc38c9cc3"}, {0x14, 0x5, 0x18, 0x5, 0x90d, "d197af29"}], 0x24a}, {&(0x7f0000d93000-0x1269)=[{0xf0, 0x8, 0x508, 0xffffffff, 0x5, "d9d61a001a98fc2496542d660f2a1e26615019cb783c9699ef30ccf50833552bb0c8817d9deb7a08c9b56c88f359280c0de9d96b046f6e27c64afd18d2f03cf37940fbefa7acc18721d83d62c8e9633c90dd229823a1ad9778a36d813702c7346957fa0d61bc715d67859b5d4ac3903ff04eab2722cb5a3d012b691c43644f036e1e98bcb41a68f7372b775699d8eb19d23d0c0cedc8a1a1816efc90814a44c28d4208eaa1da951d78532637a0235bfa135e735dc3c0400451aa591d15d6369ae481e46c8d20094980cad8bea4c863a6e6bb88ab7d8f60eb3b0705987c338ea9"}, {0x1010, 0x80000000, 0x4, 0x3, 0x0, "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"}, {0x91, 0x1000, 0x9, 0x87, 0x401, "a2ab415ad961bc9c45c809fd5a226f9382d439e3579c531b8c92d68d0799abe6bb5b5da4e737480d57fb59f77cd1a05517c3f3882363798e3033dae1d450d98c45c44cfa39d698c03f4300a2f377d92e2b29c96ccbcdbc745ae0be401b14d4e4ca1e4c619d75531e226611061aa1f1f8b19a98e4f0d958b4cfdf800324cb9d10af"}, {0xd8, 0x1, 0x101, 0x80000001, 0x3, "aee8cfea8b2903f7e376a225d9822b051378dd46d6042cc5ac29e5011675460bce3b71f3f94dc24cea7c4fe7343bad7624861579a4d5f467774c695f4f2316fd591a64ef3fce1cb13c1946947e7cd11224027b0382479343982d5d4153816c79b11a3395dce4b918a0bb4ed30abfb8bf72a483dbcc5f69b17fb579c53fa07b6d062adbcfa729151a0ddcef28c9cca1fef52304db1e12a55a895ed9fb9a3c4f928d696538c6a0428ffe28dec564f88145459a119a8e2d07cf95ee6576a8cb7c58c405089ccc0c4063"}], 0x1269}], 0x6, &(0x7f000006e000)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x48, 0x4000000}, 0x4091) setns(r0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000537000-0x8)={0x0, 0x0}) 2017/12/24 06:44:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000eac000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f000033f000-0x28)={0x5, 0x4, 0x9, 0x4, 0x2}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000d4d000-0x1d)="441f080b0100000006ffff00000302781305004da600e211a1bf03025f", 0x1d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000858000-0x9)='/dev/rtc\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00008df000-0x20)={@generic="efd68a5a54fa93b90c1a70cd6a2dc6c6", @ifru_addrs={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5) 2017/12/24 06:44:38 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x0, 0x4) msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = dup2(r0, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003000-0x8)={0x0, 0xfffffffffffffffd}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000002000-0x38)={&(0x7f0000003000-0x1c)=@in6={0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0xf2b}, 0x1c, &(0x7f0000003000-0x50)=[{&(0x7f0000002000)="700194ba9925b56fb68d4639954cabedb0a13110b881b133c785162a5fc575605b297211c36eaf4858575d6f77cd180cce3d3569579850b8b5787d21a12921afa9afd20a5fb42afa61b6606d6feff405393dd37c0a5a871387d835f213bfddca953f7ee0ae60f6128d2849b4ac83560044503799a6d0822d", 0x78}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000002000-0x2)="d132", 0x2}, {&(0x7f0000002000)="77c49102bb09beee858c351380d5e972f0bcf933bcdb3bb085862c", 0x1b}, {&(0x7f0000003000-0xcb)="1f2dc0f845e65d0d5616a9cfa85b45448116bdc5d8441156b6b8d5010ed4b2537118e900895411f6f8f4d4feee47c629aa336d37578cb6393cba09e3b2960929e28a20f1053fd5c8aa883fc1091c0e3d80ece566fb3f4b0b6b3fc45a15d3f72cf41342bbf5dec09cda138e45e904b7dcb9e5384056f6416114505b95f050064670d2f49c68557357322b8b66183da1a4c049ebe03b24da22ad382e03add3477e577342a9b84717bb5a4e925a5441a44f2292c8ecec74dae501bb7c367f2c95e2b4b79b07d374e70cc59671", 0xcb}], 0x5, &(0x7f0000003000-0x60)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0x2, 0x8, r2}}, @init={0x18, 0x84, 0x0, {0x1f, 0x0, 0x8, 0xaf9}}], 0x60, 0x0}, 0x40000) getsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x4) 2017/12/24 06:44:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000e13000-0xd)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = open(&(0x7f0000eb2000-0x8)='./file0\x00', 0x28042, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00009ac000-0x4)=0x3, 0x4) connect$inet(r1, &(0x7f0000bdb000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fallocate(r2, 0x0, 0xfdff, 0x7e70) sendmsg$netlink(r1, &(0x7f0000ef8000-0x38)={0x0, 0x0, &(0x7f00002b1000-0x10)=[{&(0x7f0000556000)=[{0x10, 0x0, 0x0, 0x0, 0x0, ""}], 0x10}], 0x1, &(0x7f0000eb5000+0x132)=[], 0x0, 0x0}, 0x4008080) sendfile(r1, r2, &(0x7f000056b000-0x8)=0x0, 0xfffe) 2017/12/24 06:44:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000965000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00008c6000-0x5c)=""/92) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f000000c000)=""/85, &(0x7f000000c000)=0x55) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00006fd000-0x20)={@generic="b4c7cdf54d0e864e50c5fc1995d3c0ea", @ifru_addrs={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000543000-0x4)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c88000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$netrom(r2, &(0x7f00009ed000)={&(0x7f000071b000)=@ax25={0x3, {"392ee0aff21ee3"}, 0x80000000}, 0x10, &(0x7f00005d4000-0x10)=[{&(0x7f0000ffc000-0xdf)="681fc5ba71c2a4f5d00ad8ced5e53554c65ec65111aec4c506a7ef0c73d943abc194d4a1a12b420df15903ace37e77f35512d6fda015de3206051a46b9d64944c653f83049d93ae8a4f7042231b5fb541e461051b92599b426809f032148595e63e9096b72b159f56c3e33d898e7924780e61fa135ca27af45496a6fcc2846a529552b294b63cb0bcf22d537e9262905679da2acc9d1dbb055735a2ba18f9717f0453abe7f14f5b9fde87097bd6136c34405e1a99fcff7b2ee5a893d7ee2ca2c9b4b18809ca48c6e4744c75ddd994da27e97327e30aa04afe0c6b010a26698", 0xdf}], 0x1, &(0x7f0000cc6000)=[{0x50, 0x105, 0x9, "cf28d3c6052b436742f4794951059ae16c7da2143be988c5c5874bac52ca5a41dc9c0e85bffaba0811902061c0fad771a01af740834ec06d6d5c50dc37a3"}, {0xa8, 0x116, 0x4, "2030113b397102887059db0be6526dea555f9c6058829ca5afe50c0a8792983ed4785204c53227535d8fb32a5cd619fb0bda06cf3ee5a413f2d3f86e664ba6c3878e0c1fa2dda8eb5655993596d09d20238c7e052a86a44bc7209d6e9ddf8f3dbc36a56b6ef6cf78e3036e594579e29eea829bd64b0d5d248bc59c00caf9342fbce79c19900aaa32e838d37b6554236b7deaf5a319080961"}, {0xb0, 0x11f, 0x7fffffff, "2210f51c4c93be9289e71319652787d5033632c92a990b0356fcc790d6c2155aa5e0f39f84d2b4607e34df0cdc26e360e8f5e48c33d08051b8989da415002d54fde2f846547d5d2952ba8e1056761de2244e493f6f398c5f4eed276ae49b666f44f85a8fd66cfa45ef7dbcc701df04591deeff3b133579b53e7afb0235c7bb2613f35e4aa4b516e355687d74293eb1ca1744d51822965a19684af3"}, {0x40, 0x11d, 0x6, "253b7ae31ef5a07dbdca885b9e50dc8974696853d2fd5bd07e86afc49572bf1044391054eb7cc0aff5119829eff948"}, {0x78, 0x1ff, 0x3ff, "8339313f7559977d1ce6d4204cb122144bce43546c2c08516bdccef28c0d82f6a75f48ebe2d1cca20618be2b76ab31556cc194824a288327817b9b145efd531ac7f70344b0eb52732c3d9efc16aa387771fce0849970fa7b1447af9531eb4793985fd22e8dfcf6"}, {0x100, 0x107, 0x2, "f9e3620a9651c6e78ed6352f0a1f44eef1cdae13212d56dc973ead3171361053e59f3b8a6ca1504f1f017a030146ae88921567f0906cd063b0d1ec67f89dd5e939893cb75ecd59a6e51b86d6a6431bef3e86aa98a8b555ed6bb6f4ac50554db51d90f829ee17a59442f0bec6ded306c8ac5499017f6392ba4c270afee5bc8c15191da3140d85c4c285c61343a705fe18236a83ca72e276ef9926db6719aacf230a60e21d96cbf2cd13ed83f544d92f283ed1738e1b8dca77ef4b6b0caec2b2ee649d2fc0cfe54026e780fb5c15f84607a07a1fb90e10c484f27bb0cbd0459a6dabd1a2352ce8becdd98161097a009f"}], 0x360, 0x40000}, 0x4000) 2017/12/24 06:44:38 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000081b000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000a6d000-0x10)={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00009dc000-0x4d)="bf3bbef1359990afff7e6656c907311690143f5954b1733cfdf6fc0521a374a6b7286bfa9fa00eafc53665b705d259006c00000000bcb76aed8192cedef30c730f6e377056b5fa411f80e951", 0x4c) getpid() mq_unlink(&(0x7f0000f7e000-0x18)='/selinux/avc/hash_stats\x00') connect$inet(r1, &(0x7f0000a51000-0x10)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs={0x1, 0x0, 0x0}, 0x8) 2017/12/24 06:44:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000ad7000)="18000000020001000000be8c5eff8c88a20000f1010300ec0000000006000e640002b933d898055bf74852bb6a8807567659dba67e194700550400000067a1e2010067fc2163e000000000000004001f00000000000000c88ebbff0601c4d425470000000021ec1474d722f542000700ec008bc5cfb7ebe7ec1f000000bcf6ba00b300024f02e9e9f55606aa01000000", 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00003ba000)={0x6, {{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) connect$inet6(r0, &(0x7f0000ab3000)={0xa, 0x2, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x60a8}, 0x1c) 2017/12/24 06:44:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001cb000)='/dev/ppp\x00', 0x10040, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00007c8000)='net/igmp\x00') r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000767000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00005f5000+0xb2a)={@common='gre0\x00', @ifru_map={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000f5d000-0xc)=@sack_info={0x0, 0x2b3, 0x101}, &(0x7f00004db000)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000cd9000-0x3)={r4, 0x1}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) readv(r1, &(0x7f000098b000-0x80)=[{&(0x7f0000a35000-0x5f)=""/95, 0x5f}, {&(0x7f0000b6d000-0xe)=""/65, 0x41}, {&(0x7f00004af000)=""/252, 0xfc}], 0x3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000ce7000)=0x33ef) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00001cf000)={0x3, {{0xa, 0x2, 0xffff, @loopback={0x0, 0x1}, 0x3f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) r5 = socket(0x10000000010, 0x2, 0xc) write(r5, &(0x7f00004b1000)="1f0000000104ff00fd3b4514034d00001d0002000800010022ffdcffdf000d", 0x1f) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00008c8000-0x4)=0x0, &(0x7f00007a5000-0x4)=0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000ec1000-0x28)={0xf0, 0x3, 0x9, 0x3, "cc21b7a57108503f5dbb48d0fa7e9b9796831baf43eeb1c2d6a92155bb8a5cf6"}) r6 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000b10000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000882000)="40bc6900f5fa71c2032c32fabcb33c5a24b695b0a83e2f944a8f9d2260c5e06b73ecc880375d1f13d6ce0a781c6ac11926a668a03f8f6a869105830bb83dbb7719a7b31d6cb9d71724cc5b59c3accfb9047de3d6ebe028d907db65c5d10de4a46b437fb87c79b5e25eeb47196ef7c63c7e71afbefec930b1d6a6f71a578dfdaeca8ea50ffb844ed8fd31c6485f56571528ff659f3f7c0ac7cf4621dc95fdf190de81157b5bc8b5ce5d574429e86dcd06d5", 0xb1, 0xfffffffffffffffc) keyctl$invalidate(0x15, r6) 2017/12/24 06:44:38 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KDSETMODE(r2, 0x4b3a, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r1, 0x80000) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x64, &(0x7f000000c000-0x4)=0x10000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000000c000)=0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) timer_delete(0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000bac000)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000779000-0x10)={0x401, 0x8001, 0x20ac, 0x101}, 0x10) r1 = getpgid(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000604000-0x20)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000993000)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000527000-0x8)={r2, 0xf61b}, &(0x7f000038b000+0x903)=0x8) timer_create(0x6, &(0x7f00008fa000)={0x0, 0x40, 0x2, @tid=r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00003b5000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000e43000)={{{@in=@broadcast=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c5a000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000222000-0x14)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, r3}, 0x14) [ 78.315654] binder: send failed reply for transaction 757, target dead 2017/12/24 06:44:38 executing program 7: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00004ec000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ab3000)='/dev/net/tun\x00', 0x0, 0x900c0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000f0000-0x10)='/selinux/access\x00', 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000e30000-0x18)=[{0x0, 0x0}, {0x0, 0x0}], 0x2, 0x0, &(0x7f0000e5e000-0x8)={0x3ff}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) close(r0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f000096f000-0x1000)="55510e042bd2a5723ddac720bfca2f9d420ed0bb60b0e44f286e5192a65a4ba274a8d5068e4b7f55dd2220087f09b160899d59fc1bf3be7aa550cb282435cb0a41ee591128f8f0532ee1079483e04db8bebd9fc91f56fc3acb8785181826d1b8211fa43731f193584e1359733de85eba0243661067352aed341c5d1bb422c379d4f6e50cf8ccff64f302053e7d377a22273c41acfab5f2a6d5781cfd656fc87439964714a944d7aea6baf09edddfb66dd2ac0c6428fb197892962dbfcdf42cbc376fa3532229ec8f03797a6015644a104578f51fb9af36337291aa6b7496b90f1dfb17400b3bfe9754e568771a8e52421213dd8035d3f5378492235f1544f78fc0647a5666334ba54845bcf67ef6c2ec6bd64621967c7f15a0c88e0e0d4e4e8c2f3831dcc054d3444ba44b287e3d734ec62a11e49795de0d77813b729472a477d07dc352f9f22c08b62a4a193a12b5a7b6f11a53ea0b4f2b406ce459a652676a878dd90374ecdcbaf62d4a589f09dba0ef992075b7d2a58e4e877b63c0561f84afcbd60efdce77fe71579bdbe32f0ef223de0f6f612ad9973855b0f2e8d030235771d3b5ea424f4804872a4f9ae58bc805bec37c45bafa042399a27ea62aee9936b3c7779de4335128b6fc9de31a45ef0debbef23918f1b3935cb30ebeda2f44706ba6303680e31eac65f2775ad23f2b84739d06939d517851c7b213eb599a1340285fab538f09417ff08b5692bbe6adf66d0417f5c70afb94eefec6ce74bc026171ea706ee2f676473e5a41a485d322158517ccf234d16cf643091611d7b3df7e6e72c0b8fcdb842716e4d6abe9f02252105c32ced7c7cbe01bb67e0f668c0af9c4f545258f7e8c06088ca323d5efa97858483ab3583c052847c0f0b2eaab4f48c5a0afc0372783b06e90fb6d72b6a92108c7f101bc481d4e3d7fc011ae394fe17cef3767527e07783fea34d23688eee0f63af20ce77d1ad08a9f42756b9dade8a9f5f56ed81249177c0de06704e4f1dc9cc32facc8d1676e86d2b1c0a69319e5f3f8b6bf397de5b6989a304538fc5680b117a0e52827b897c96258e7224679c1cb88464b6b4cf73241668ff2a2c66cbf4d8d87a76c079cd7acaf594abf771d1c99c12640e2570d740f4e132a1985017b5790a31fa4156808f1aacfd75e94f11e2dc52308f0cb26525eba24a4631ac5f35cefa894ae3360174a75fa1aa379b087cc66c3661a7c10109c123474d153f8e13fe68cc2a4a51f5494179af272621fe2aa34098f879d88a974703e2e2639727a5aa938449f449e04ece1246d11ea8727e55ac0e42dc4ff479956bad2c756ef41fbd0d943b67dbf745c99908639a00f7cbafaaedfe8a173471be23e4b510b8d46091eacc8146661d193e0ce36878993bcb2aac1fd23c643bf0962b5e0ce99b7f7f46259e199d0b53a668a8200765b54c8536701e335712b40c118fc3d72eb4c378548cd01466f7091d5c00cbae13bfd2086c42b6cdabe3052d34992748fae8408da8cfa3f3295ea6a271d0dee595df56d2187c62403c3c2cdfa6904a117891865bc3359c159681cee0472a67e3e775bed520742379eefb350a3a108b500516f1e8be45c8b701511fe0f62e1a930d3b569cbb0546eb81bec5dafd5bc1fc69577a4f977273d60f493cbb38a8116e105b8e0ed1b623420246bb4e9c28d0e5e333c9783172997abf9a51bfe1765205ed250b43641f569c14383c70100bd6676e31968c5f4ae071beecabb070c9529f7a05353e7b8dfe3ef9717cf618e4d40ed31aa9c83a4ab7d464115803ec974641a1e7a34e62cc9ab60a148f5259a5db889643c4a024674e8604f42b6df048e67db1fd3f52c7bb7a5148f87ed9fb528119ed2189ae3b671f33e422cb724840a3908a9937801914b33bc174b8304576346ebb0dda784c16def4bbb5a8b2f535027e8904be4ee037fc50d519b5e5493654945ab36a97bdaaeae3e3ac65ffffdecc72c1e6e09dfb2253ee37e8a204d228dfa2e324f0dfa6ed0f9842023de087fad1ab3b7b3a56a1c7f17098646f286d82ee531a6f814d096af1068803bb62ae3dc31870eba08fe477e4414bc09412d338c377457b3909ac2039a0ee09818df9bf22fc895c5c39dce8436a4a3973e2b463abb63691baefc1ffd7f278e9c04b086fb5e2a745890f74488d9424688afd7f89b3bbb095f7504bf6f80291f15a58eb620975999e1f745b1265d8ad4965d991e50df736966dc14d943cb0c75611acd6decb09a328ecb44a5b495ba81013619da65d9d2bfa088da5a73e4047252b20d8758d9a13f78310f86a5a26077fb1ca42c91c21234c7d12dbc04c5347de2701f604d468442cbbd6ea646896d6f8d9aa992717c75b1264895daf157d3cde8b23d5a11e757249f7094c193d3bd46ee1e470c20c4a4cc1d70d9c4ddd98026754a652c566c5c8c944b1c12cd4eff1bd0df583299dd82f72d46ec5ad3ee5925ba18a30fdcbc0b2ac07e40ef31bbb5fa3e47ee9bbbb9c44039bf3bc40be42a386f4bc8ad5c1cc01b4a09c95e541da3934386c63e945992670cdca820dc34d2e76187c73c19fa0e0bbe96b7fa2831c3ace717a54b1c977a7201a6ecf4b8414b55909e692e474780c7bc4d95f4bc33632445c2a81baedae245cf1270f022fbd6cf023f008e3e7ff74df487b4a406d3864c67774d6b40e13ede8a7b77836f05f1a32ddb2032936de2e62af44de4621955bc6a81264872ec199ddcaf73df9984cb9a26b21eb3cb7925092928dae10ead6f1f50ec09a1a0fc9835cc243202b0de8f17d11e7297340954efb10b735889eb2a1c85c9deca759b1893351025cbc10c88c67acfdc44f9c5fbf0000df81198b66de446083b31090bee5a37bbed10e9b5dcd8d846c69bb56f7078e5a4dcbadb156b712af523f6938dc3b92f1a9f786fbc9edf4a6d6aa36f1b684d6f0a242664f0f1db288fba53748e52c19b5859ba9436125bc5c6b2987be52c40369e74702a5de5e293bce4a4eaaab19c75b96d9273e4c2ff28f648a47ad94e3ad6c656f9ca64415f7fd9389cc9fa8957c3f84623242ff39bf1f62e6e02997b1fd5cf2c9de0fada8800c7f9701206d648c33fcd91af6e8eb6d638ee12f80d1fa769215428755306cdd0408c848c9e39c69104834ec6121fc1d25e73627a423b1067dbabd7a411568b33764a035a473d1cc0dfc7781ebe680c8ca42a2b11fadee350a3b66b542e7b166024614dc16f76223996e8e9686c84559684624c1861308ecacc7c80e3a6fccaf71f53e75f593b8de8bf68b9935c3be0bb90227963f01a57044b2c6cc76ed76ebea2a00381f11296935b65f715be16abf4cc9e970f7fb81240db488b754a3150a3b3616d513f2566ff716280555596552d5c6a41c0abc6fba53e18c1b017780586ee34dcfe0c405b177ee6332e9c4ba2e646165197d70547ee7af26f55e7dcdbb397424a057c0b7cc5c2c4e5df2b4f6a276af640b892cd939659348ac41392d3787e539decdb53eebada1276234b23080cd1cecb0384ec2d4d45a889224c5f87391fc9b444b821c68cde5f1add96b5846654a8de713d2d68110ec32991737ad38eb2ec9c182a98bb92c4834ff020c8a2c87fd82dc7e7789f4a1477f696d88cd542a0250349b097fcb2fdce2d5f72bdcee869b788f0b449ed995c17f2a5be78c0a99a5b98157b8450672a17ee795034523e9be799c87de213a38b6dfeae82a25cb42ffda7a3fed9f0ce2dec3140512209976a4e17dcc2b70b0adb2c3e95c0c6c04a5153fdcf8364f51644b7877d4ef6c272f092a3f86659af663ba54b241f787431a1998adfe999a1a0483487a66743a1a16530bd2f31bc411b3a32ee43c50ee3260b0ee0eb692e434c03eca76f8713bbc9c123cd763b1529b410d3dcdb65aba2e2456d97c58cdcaf259469ccb916e8517d678ecc4dbfd7f696b87c3f14b71fb54b5fc4bae54885f1a8de9f73982029500b7dc5e5aa37d202dce7ecf8a3f6ed99e2540364cc00ad09a3ce623d08b6995e33b6029f4684c1fed75dd4723fb5fdf144336d12cf2ed00acc60d535b10dca0565d3c66c93f35fd4f31e956b1df4669477a0e9a8083f9f1ba98b74d66b32d739e1167c1609d38ca4bc4aaecfd73d1c1929eb51ad711850a0ca7395c09bd1a182516dcab6eee9db694143b17ef555bdb56512f313950bfdec0bcc33ba0a3acb6c41d039a80998fcd97de8d3aad1d7b8e65503d381fd5597bcb37eba8743d91a3c3f904dce8cb164d48164c59cbee88c99aafe9e21d9b6962ca79b440279270792e8f896056fcbd3cb2a1803beb495f19be8c0b29348593c9db95a9e5c6b6422462041a07c4db3db1c4adc6964862bf4a2cf5f1ab1c0fd258cdcef5d1044c6fffa6bb02006e9b82dfa4e4c578589673dd37efd6a4758674b4ddd3778b209f4396445ed12de4ffd97e118908a66a92be159b85270de972caef199766e868be6972e134fceb08f81deea2f20810baef7071ad9061ac5c6a0cf3ea18a780e42940b0483e1734262ba06e9fce2653a7e13914b1cac05df327239439358312ace2aa8fc514dacbc90771ea07778cae23cad977f9c3e78dda7e288ca07691914fbf4e14f50a31ab043b460a298dfbc50480a9a658d938e1c52f1a77b1838ec43ebb5abff893ca196883366fd684de66821f29b3934818276ee086c74135ea0a925f7379201187de2c5059b58d7eb48e1227a4748522e228ce57cf628203684d9eb9ae6be64f32c90edd626da9db0cb3975ef68e23fd948e592c667538fb719109b72b8bb3a0dc9b7072f5ee10659778d6929aa85c30aa8f726d5ee3fc0b7042287d37cedd77d371a156a2e8bd9866f117d7980798216b49ab03d8a82b8925d8ac148563bd0dca6614a879ea79c76fdb8c440865038f0f3427032c4d349d11816484919f61fe21999d391472d6129c44e1f34be1f9c3af5b5fb3092c72cec4f351414e67896185581b033864515b539f051170e0a3aa1518cc994542b152d9f5721e98cebd258497d062d5ae8becab6e199a96a10127d5037a1852071c99c07f1a3ec5fdd0a6d2a8c0eeae2ea5ce6087181dddd8c96d59a7a375dc24ed691738cba3db687d99ffdae3d4a50778de5d342c1773390bc021406478303ce75e2b245607d8151dad5deb7b06691926b9275cda68c0da17beda0121043cc173ba4b6e2f18c6fcac66486f5ab02f1391c2a1b8b4d7b764c4cf12ef8173bf70b7a3696b3d77d73eb29a21d9d52de38d8cf1017e7f2ff1bd5393a23fec895d57bde142807acfda4cb3d4ace433f0814dc63d338c1422aa2d1488fc0b0c58183e0a4cfb05034b662d26f6beb8536da1bc2e8adf7fd2d1c2ec07eb1dd1b22807228d08dc47b855d1c91ecade3b346cf7d510d7a681e6bb335a997d8377bf03f70ee41eff5840c41a5bb5dbf3ae0aec02698ea947e449e3a6cfb1c824bd16e97b5e95375fa0465622c2e30b185de2f98ff5a2d92e2bb9654a2441a68bc509fe4c669af7929bff86c77bdcd5d989d3aad816c1b5c4ad337fcb7b6d25d4ccdc01ddaa4f00b3c9bc5de1f0ebaf9cf6618ab9ba4038486d95c39d4c2f9e8f06c72a12b1170a00307253439da3f79821bcf3e1595bb46700ba3405fb3c47188af", 0xf8b) socket$inet6(0xa, 0x3, 0x100000009) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000e8d000-0x6)={0x0, 0x101}, &(0x7f000089b000-0x4)=0x6) 2017/12/24 06:44:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000117000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f00008bf000)='./file0\x00', &(0x7f000008b000-0x8)='./file0\x00', &(0x7f0000f7c000-0x6)='jffs2\x00', 0x100000, &(0x7f000087f000)="") mount(&(0x7f0000006000)='./file0\x00', &(0x7f0000831000)='./file0\x00', &(0x7f0000e0f000-0xd)="616e6f6e5f696e6f6402000000", 0x1000, &(0x7f0000c6d000)="") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1280002, &(0x7f0000ccb000)="") mount(&(0x7f000005b000)='./file0\x00', &(0x7f0000c79000)='./file0\x00', &(0x7f0000401000-0x7)='rootfs\x00', 0x40000, 0x0) 2017/12/24 06:44:39 executing program 4: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x19, 0xb, 0x2, &(0x7f000000a000-0x8)={0x0, 0x0}) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000005000)=0x0, &(0x7f0000018000-0x4)=0x4) r2 = socket$key(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000612000)=0xa250, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000+0x27)={0x0}, 0x8, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008000)={0xa, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x0, [@sadb_x_nat_t_port={0x1, 0x0, 0x0, 0x0}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000a2000-0xe)='/dev/keychord\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00001c9000-0x10)={0x7, &(0x7f0000a33000-0x38)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f00009d9000-0x10)={r4, &(0x7f0000eb1000)=""/139}) [ 78.384493] binder: 14686:14691 ERROR: BC_REGISTER_LOOPER called without request [ 78.397639] device gre0 entered promiscuous mode [ 78.409075] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 78.418943] binder: 14686:14703 ioctl 4b3a 8 returned -22 2017/12/24 06:44:39 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000000b000-0x1)='/dev/rtc\x00', 0x4000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r2, &(0x7f000000a000)=[{0x3ff, 0x7, 0x7, 0x7, @tick=0x20, {0x3f, 0x9}, {0x7b, 0x670000}, @ext={0x4f, &(0x7f000000b000-0x4f)="f044d12aa0d7fc4a6662df71c286e2be46d121745a2d598eae51c64f583b9b142e9e2ce66b1697cafec1fe53ac8ca2c0d48786ebb28dc4109d0f0ab0b7241e2e9b49f7d3f266eda996370b3e116084"}}, {0x8000, 0x1, 0x0, 0x81, @tick=0xbcf, {0x89, 0x1}, {0x80, 0x5c}, @raw8={"8bc0341037100ba15c452123"}}, {0x6e, 0x100000001, 0x401, 0x0, @time={0x77359400, 0x0}, {0x2, 0x0}, {0xfffffffffffffffc, 0x400}, @ext={0x41, &(0x7f0000007000-0x41)="bcbc947a2a646aa45570e7d903eefa52fd2ef81d81a685794d183d2408b07368ad8df226ef07f6735775b56390fd5cf248d5fe1d85b6981775982cf2648ec4c6bd"}}], 0x90) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 78.423000] binder: 14686:14691 got transaction with invalid offsets ptr [ 78.423021] binder: 14686:14691 transaction failed 29201/-14, size 0-8 line 3155 [ 78.428396] binder: BINDER_SET_CONTEXT_MGR already set [ 78.428403] binder: 14686:14691 ioctl 40046207 0 returned -16 [ 78.428425] binder: 14686:14703 ERROR: BC_REGISTER_LOOPER called without request [ 78.431605] binder: 14686:14703 ioctl 4b3a 8 returned -22 [ 78.432778] binder_alloc: 14686: binder_alloc_buf, no vma [ 78.432793] binder: 14686:14691 transaction failed 29189/-3, size 0-0 line 3127 [ 78.435523] binder: 14686:14703 got reply transaction with no transaction stack [ 78.435529] binder: 14686:14703 transaction failed 29201/-71, size 24-8 line 2920 [ 78.443836] binder: unexpected work type, 4, not freed [ 78.443839] binder: undelivered TRANSACTION_COMPLETE [ 78.443845] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.443852] binder: undelivered TRANSACTION_COMPLETE [ 78.443858] binder: undelivered transaction 765, process died. [ 78.447962] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.447969] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.455059] binder: 14713:14714 ERROR: BC_REGISTER_LOOPER called without request [ 78.482162] binder: 14713:14714 got transaction with invalid offsets ptr [ 78.482183] binder: 14713:14714 transaction failed 29201/-14, size 0-8 line 3155 [ 78.482606] binder: unexpected work type, 4, not freed [ 78.482608] binder: undelivered TRANSACTION_COMPLETE [ 78.482614] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.482621] binder: undelivered TRANSACTION_COMPLETE [ 78.482628] binder: undelivered transaction 773, process died. [ 78.495774] binder: 14713:14714 ERROR: BC_REGISTER_LOOPER called without request [ 78.497718] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 78.500533] binder: release 14713:14715 transaction 778 out, still active [ 78.500536] binder: undelivered TRANSACTION_COMPLETE [ 78.500639] binder: send failed reply for transaction 778, target dead 2017/12/24 06:44:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00008da000+0xbf1)="26000000100027109301c1ff0000000000010f0000020000000000002010f951050005001900", 0x26) creat(&(0x7f000006d000-0x8)='./file0\x00', 0x112) 2017/12/24 06:44:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000044c000)='/dev/sequencer\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f000038e000)={0x0, 0x0}) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x3, 0x2, 0x0, 0xfff0000000000003, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2017/12/24 06:44:39 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x101000, 0x0) fcntl$setsig(r0, 0xa, 0x24) mmap(&(0x7f0000edb000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000003000-0x5c)={0x4, 0x2, {0xffffffffffffffff, 0x1, 0x9, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$lock(r1, 0x7, &(0x7f0000001000)={0x3, 0x2, 0x0, 0xcc8e, r2}) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000e29000-0x8)='./file0\x00', 0x5) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00001a9000-0x50)={@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c2, 0x0}) 2017/12/24 06:44:39 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) lseek(r0, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:39 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f000036f000-0x11)='/selinux/context\x00', 0x2, 0x0) mmap(&(0x7f000095c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000051d000)={{&(0x7f00003d5000/0x3000)=nil, 0x3000}, 0x6, 0x0}) mmap(&(0x7f000095d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000095d000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000051f000-0x10)={0x8, 0xf, 0x0, 0xff, 0x0}, &(0x7f0000343000)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00003d5000)={r2, 0xcb, "ac09ca8d33ca9629c33cfe9e17ac40bef0558593439a446d65debc9d2d1d014e9bb699ab2a24fa64f8aad5badddef771aa7fa217352c446f28ffbecf7edf40d2d7a2ccba0b64669ece69defbcaa3152dcb5c54d196f8a95e7f2e63e568e4df2772a218d1317d8ed11b66779ecd4bd830e0d7e64a4a267d72efddafef91d555ba3c40875d49300ccb778b871a8f172c7ca410d679df5198b81fd54b1ff59dc567020683a9b8b2df786298d51c2d34d2c9371a4f21ed3cf255aa3f86fbb89ad684e7228817d7bbd333a03e56"}, &(0x7f0000644000-0x4)=0xd3) syz_open_dev$sg(&(0x7f0000918000-0x9)='/dev/sg#\x00', 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000e56000)={{{@in6=@loopback={0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d68000)=0xe8) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ed4000-0x8)={0x0}, 0x8, 0x80000) fstat(r0, &(0x7f000030b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000cd2000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r1, &(0x7f0000d6a000-0x10)=[{&(0x7f00001a0000-0x1)='2', 0x1}], 0x1) 2017/12/24 06:44:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$ipx(0xffffffffffffffff, &(0x7f0000180000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000cb4000-0x4)=0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f00002c0000)={0xfffffffffffffffa, 0xfffffffffffffffa, 0x2, 0x74dd, 0x5, [{0x7, 0x3, 0x400, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x4, 0x3331, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x1f, 0x800, 0x9d, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0}, {0x7, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0}, {0x4, 0x400, 0x20, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}]}) capset(&(0x7f00000fc000)={0x19980330, 0x0}, &(0x7f0000c83000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000096000)=[{&(0x7f00005ab000-0xbd)="580000001400192300a14380040d78560a0600210000e0780005080000005800000000c77f6464098900050000000000000080000002003c0000faffffffffffff0700000000faff080001003e0000000001000f534e06ce", 0x58}], 0x1) 2017/12/24 06:44:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000087a000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000cd0000)=""/0, 0x0) mlock(&(0x7f0000622000/0x2000)=nil, 0x2000) 2017/12/24 06:44:39 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00004f0000)='/dev/usbmon#\x00', 0x6, 0x0) mmap(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000b37000-0xd)='/dev/usbmon#\x00', 0x5, 0x0) renameat2(r0, &(0x7f0000b36000)='./file0\x00', r1, &(0x7f00001c0000)='./file0\x00', 0x2) remap_file_pages(&(0x7f0000296000/0x1000)=nil, 0x1000, 0x8, 0x0, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000b38000-0xb0)={{0xd310, 0x7f}, 'port1\x00', 0x81, 0x20, 0x1, 0x6, 0x0, 0x2, 0x124b, 0x0, 0x1, 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000499000)=""/141) chmod(&(0x7f00009f7000-0x8)='./file0\x00', 0x40) 2017/12/24 06:44:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000000001, 0x0) r1 = syz_open_dev$tun(&(0x7f0000206000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000705000)={@common='gre0\x00', @ifru_flags=0x2002}) r2 = creat(&(0x7f00002c3000-0x8)='./file0\x00', 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000349000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) getsockname(r3, &(0x7f0000b2f000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f0000144000-0x4)=0x58) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000cfe000-0x20)={0x0, 0x800, 0x7ff, 0x8001, 0x10, 0x1000}) dup3(r1, r3, 0x0) 2017/12/24 06:44:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000035e000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000c4b000)=[@in6={0xa, 0x1, 0x14b, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3f}], 0x1c) listen(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00007d2000+0xe25)=0x0, 0x4) connect$inet(r2, &(0x7f0000ba6000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000000000/0xfb7000)=nil, 0xfb7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000706000-0xc)={0x10, 0x0, 0x0, 0x9d5}, 0xc) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0xffffffffffffff57, &(0x7f0000fb8000-0x4)="287f2250") getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000fb4000-0x1)=""/4, &(0x7f0000bea000)=0x4) 2017/12/24 06:44:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x44042) pipe2(&(0x7f0000439000-0x8)={0x0, 0x0}, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000c30000-0x4)=0x81) splice(r1, 0x0, r0, 0x0, 0x101, 0x2) 2017/12/24 06:44:39 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000000)=""/96) mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00009a1000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000feb000-0x21)=""/33) [ 78.784205] binder: 14722:14725 ERROR: BC_REGISTER_LOOPER called without request [ 78.808940] binder: 14722:14725 got transaction with invalid offsets ptr [ 78.822039] binder: 14722:14725 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000001000)=""/0) r1 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) mq_open(&(0x7f0000013000-0x1)='\x00', 0x83, 0x4, &(0x7f0000013000-0x40)={0x7433, 0x1f, 0x81a, 0x7ff, 0x8, 0x8, 0x100000001, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000013000)={&(0x7f0000000000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000ab0000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@common='ip6_vti0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000131000-0x4)=0x40a5) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000a0e000)=0x5, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) pipe2(&(0x7f00006bb000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x20000050e5, 0x0) [ 78.841288] binder: unexpected work type, 4, not freed [ 78.841569] device gre0 entered promiscuous mode [ 78.858631] binder: undelivered TRANSACTION_COMPLETE [ 78.863902] binder_alloc: 14722: binder_alloc_buf size 536870912 failed, no address space [ 78.863909] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 78.863930] binder: 14722:14740 transaction failed 29201/-28, size 536870912-0 line 3127 [ 78.863978] binder: 14722:14725 ERROR: BC_REGISTER_LOOPER called without request [ 78.900554] device gre0 entered promiscuous mode [ 78.926152] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.931589] binder: undelivered TRANSACTION_COMPLETE [ 78.937019] binder: undelivered transaction 781, process died. [ 78.943090] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:39 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000003000-0x8)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:39 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x145040, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000001000-0x4)=0x834) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000001000-0x1)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000002000-0x10)={0x0, 0x0, 0x80000001}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001000-0x10)={r1, r2, 0xeb}) r3 = syz_open_dev$mice(&(0x7f0000001000-0x10)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x0, 0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000c4b000-0x8)=0x0, &(0x7f000076f000-0x4)=0x8) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_open_dev$tun(&(0x7f0000981000)='/dev/net/tun\x00', 0x0, 0x200) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000b9f000-0xd8)={0x2, 0x3, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x0, 0x0}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/24 06:44:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000647000-0x1c)={0xa, 0x1, 0x79e, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, 0x1c) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000dc0000-0x10)='/selinux/create\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000dd3000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000f56000+0xa3e)=0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000026b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000ad9000)={0x80, 0x0, &(0x7f0000271000-0x80)=[@decrefs={0x40046307, 0x2}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, r3, 0x1}, @increfs={0x40046304, 0x4}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f00007ff000-0x18)=[@flat={0x73622a85, 0x0, r3, 0x1}], &(0x7f00004ca000)=[0x28, 0x0, 0xe54dc962ab853aec, 0x78, 0x0, 0x18, 0x0, 0x40]}, 0x76}}, @increfs={0x40046304, 0x0}], 0x29, 0x0, &(0x7f0000591000-0x29)="0a71240d4aff301ecf7622fa51e4888436d2343a756fcf9e1d6d47fdf27fab8f83a9a079199b403e70"}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000384000-0x10)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) sendto$inet6(r0, &(0x7f00001e7000)="", 0x0, 0x0, &(0x7f0000f5f000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/24 06:44:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000d6a000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000b1a000-0x15)='/dev/pktcdvd/control\x00', 0x101102, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000c3f000-0x10)={0x1ff, 0xfffffffffffffffe, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = fcntl$dupfd(r2, 0x0, r2) read(r4, &(0x7f0000c95000)=""/157, 0x9d) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000860000)={0x0}, &(0x7f000085d000-0x4)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f000052d000)={0x0, 0x0, 0x0}, 0xc) setfsgid(r5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) openat$keychord(0xffffffffffffff9c, &(0x7f000003d000-0xe)='/dev/keychord\x00', 0x2d00, 0x0) write$tun(r4, &(0x7f00003f1000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x0, 0x0, 0x8, 0x0, ""}}}, 0x102d5) syz_open_dev$tun(&(0x7f0000637000-0xd)='/dev/net/tun\x00', 0x0, 0x4080) syz_open_dev$sndseq(&(0x7f0000182000)='/dev/snd/seq\x00', 0x0, 0x10000) 2017/12/24 06:44:39 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000f91000-0xf0)={0x0, 0x0, ""}, &(0x7f00000b9000)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_dev$mice(&(0x7f000099b000-0x10)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f000020f000-0x6c)=""/108) r2 = syz_open_procfs(r0, &(0x7f00000dc000-0x5)='maps\x00') pread64(r2, &(0x7f0000a48000)=""/0, 0x0, 0x2000000) 2017/12/24 06:44:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000071c000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) mmap(&(0x7f0000000000/0xbff000)=nil, 0xbff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) r3 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000bf9000-0xc)={0x4, 0x0}) epoll_wait(r2, &(0x7f0000bfa000-0x60)=[{0x0, 0x0}], 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00002d6000-0x4)=0x5, 0x4) pwritev(r1, &(0x7f0000b73000)=[{&(0x7f0000c3a000)='"', 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f00000de000-0x8)=0x0, 0x100000001) 2017/12/24 06:44:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000c3d000)={0x0}, &(0x7f00006db000)={0x0}, 0x8) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000257000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents(r0, &(0x7f000023b000)=""/48, 0x30) 2017/12/24 06:44:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f000000c000)=""/85, &(0x7f000000c000)=0x55) r1 = accept4(r0, &(0x7f00007b6000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000adf000-0x4)=0x10, 0x80000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f000027a000-0x4)=0x3, 0x4) 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x400) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000-0x4)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000fb4000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x101}, 0x1c) modify_ldt$write2(0x11, &(0x7f0000e99000-0x10)={0x9, 0x20001000, 0x8d7762630dec1d6, 0x2, 0x2, 0x8, 0x0, 0x200, 0x5, 0x4}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) [ 79.091126] binder: 14770:14771 ERROR: BC_REGISTER_LOOPER called without request [ 79.116305] binder: 14770:14771 got transaction with invalid offsets ptr [ 79.124800] device gre0 entered promiscuous mode 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000166000)='./file0\x00', &(0x7f0000aa4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp(0x1, 0x1, &(0x7f0000948000-0x10)={0x1, &(0x7f000005f000-0x10)=[{0x6, 0x0, 0x0, 0x40}]}) 2017/12/24 06:44:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f000093d000-0x10)='/selinux/create\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000cd4000-0x34)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b20000-0x4)=0xe8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000ba8000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x4000000001, 0x0, 0x0, 0x0}, 0x20) 2017/12/24 06:44:39 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00001c7000-0x4)=0x0, &(0x7f0000f7e000)=0x4) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', 0x10040, 0x100) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) read(0xffffffffffffffff, &(0x7f000040a000-0x18)=""/24, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000058000-0x60)=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) mmap(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000b37000-0x8)='./file0\x00', 0x0) mmap(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000b36000)={0x0, 0x0}) mmap(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000b36000)={r3, 0x1}) link(&(0x7f0000c16000-0x8)='./file0\x00', &(0x7f0000e84000)='./file0\x00') 2017/12/24 06:44:39 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000005000-0xe)='/dev/keychord\x00', 0x4000, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000009000-0x1008)={0x0, 0x1000, "a86695819fe4d8a9570897b8016a41bb44212bed235398514dd345dd03602518e2a61523eb96cfb58361a7e8020c1389bea36c01ccfc523fcca39f6f59f8c142c1afbd4d5aa9a6723c05ce901cb185357bd7946a0d91d8c2967dbe4b99f835c6f5196564fd7351c0c0cb7878d41e4563276f31d4ac9b7a41187fda420c6349a192ab04146c447542ddd9df50b9969adfe15745816e60d4d7a831e5ae2585849beba21d4ca8a7820403d6834c75fb6b70c252b46cae860fecf23e059383204910182b3dc0a40bc54279fce62678e8f1b4daadb96a83a6ff6bad2bbf05cbab0d642e34be38063b866e1a76311c129527a8fdddf8e1c1aa0c793f16ebaf3bffc9be27b341321a4e3ad491f2eb4ec6fc85468da5b1fce47f559a2f3ac7de8a22de9be89dafda3feaa3f08ce8e7737c3047912e797113e5eae97c4126227b6f88f8c51783b30a11d7ad0a63ebd13bb950ccb4a8ae59548465e8b7d3c12a207b512e7a5df1c56e94329b0170b2dd481c692559fe7dc3418a8c876e3800545c52771efb2e212e2dea50ed83f40f354b1e50b4032b70b98fd4a155ad53e97b3b96dab98470e5eaa96fd1d1cab79f189979ac1544fe3c0a86f45f0b988b0e8b2ff2fd3099e51e362042cb4500fa524bd1e2dadd9952d4e7d13ace702fe7ce6cceff7cd7eb07d8dcb188054c84e4fb44fd2ad45c80ccdcc2b05ef6437de171ece680a293849b46b3f7ff4760a490b5ae18a2a08e8d84e4d24940d87f60fa24662f04ad10c0783fbe5fa795e04575131ce1e3f6613e06bd6b495be490bc6e8d2c7ecfb8eece76ef57c8d554156fe843571b700633aa2e2b8ebd59324b77a6c26dfc965f06741a3e30f9395c0e3fc06a792c8bbc0d739b89dee9c22c84e8d5b690e1a9418108ff14a1afd75a410acfdfe856696501dd9f9b23fa2a3d8fba26947e8f43e09276b3e9be13387a1491b2227a98ed1b10355b0550f83b4893684875eab291af730a5e63a007fa461fcb630387604d3761580817f2e2bbbc0d5e7fd49558342b7b6f4456e85416b0114e09c61f26649a5bb8424c594b125cdcf5b6caa96a83ae6f4823ea286b58e1fb465364bd62e2ec1355d750b2617d0f3352e296493138ebb1a6b9c1a57655051bf85ce14bdf17f561eb6d31aa4205a6018e703518e88cf15b9073c4f57285e252ab339faa3f13f661ebab6ed01972e1ce5485d4f3931b3ac45b5e6f5ea90b9306dd69911034f91ca6941acc3b14798ff73d7a8749034e6a58f5104b631ed3661d11d0bd2a0d11f0d2b08170288699c1d78230f25b57df622b186052a534d2d747f3a5f8d038e010943b240d3d42782031e752dd42f5e91c966e272174e42bd749041b25be061bb708728822a52b9381b458ccb760d9d76c338f7a3644dd32a93f026db51fb3a8e92fa6e0fee5bcf66c5d64378401b5001e1ecc9e2df6c91ce4279494cf63231698f36e842d711dca63798654df94b05f1385f8740d70f42dc30f2da52e672b0c1685037ba193df45c63502c7c8af4b5ceee068c349e33347522be589b53243bce872286d36745368c85f341c20862be2a67bfd315e66cf60d3865e0a34ec9534a9c8493f30b99e818bf30002d0c014e20adc1fd4d82be3a95ad46d5096682dfab0a85eb27c94bf0264228b9efd3bf9c6ffbe489fd939fddaae31c0c6880dcc5e130c5944ee10fe661d4eedb512f46698e684af7a5506769f8760f152cc09ceb2f68f32f8050a3611afbf1fbaac0767479cbf088629d17d85d58c8437b50dca3fd849d22a9d316e1ac2636597ec4563933b5fe38f9e121e370afe0f86b11ceed111547ad1ef253211b04c6f097e81f4d38aa352d124356b64ea2fdd89dc3fe2e8c06b8e1067f02bb03b218f023a869c568785ca5a63f5aa8f56143ec8e6ee14e5b8a723b51d94f58f2447e2b0321fb5f22b30951295a1cc35640fb399da826817f6fc524de4c0e4df932569f553652581e550810be4a60fa49d844fe14dafd80a43f549507f1a3189abe845a2697ef41e55411c22a8ee19a2550f562a493d4ff028eb6ab770f2abdfa803b794b91b2806236e6ac9a2981c926cfbb77fc547ee833f7b9e7bb569800597c4da799cd058380aec9f7d5c24dd9c2ec090dce4b918581a4c4179aeb06b3e5c57bc76930ced2c6af1a925d0d1044661b5085e67242573277784f0cde18b3f69f151edc9a7060a677f7b9b45d450095bb46895c7859cacdbfc2b74774fc9ec1942fc94eab5174e1c50e5c5544423d5f03d8f4521ee2e85862e65c84020eb17edbb4bc3ca9bef3304844650ace7b1d9b6b8dcb11356364ee59ab4c383b36b30afea64922e8ae17c9def7160bdd8eea8eec1cb975c7e713c06e9cb229ec4ebd5d99f4c1891980cc7eaacb99333b26284b59172fad4ad3add917eae5296fc57e1028a2c76b07420f56b251cc91e40527e65070deb814f4fd2ce6cae9b82411aa8866cfd873fda29f95f5e5077a79913dada041571e1c9ca09e0689f1b121b2642bfba5f8e17de80171662ec1ab2ac8a19701c1d45845f6b0038c4359836cf3722944f6b1b53cebd0cf8d6f1d9f74481129f5b441ef69859fd99997781a57ce6ffc97a6f149c2fcd396be4825445f4d59e799d7ab1a2b4f4f097ef7b83f7c35ee63856d57b8a85816ae569be04da5e58f615fd42fddfb96c00877f563575dff9612625c25b320829c0f1386cd9f8ef1756608c7440d21073a2e82bffd850e98929ca7ec3061df9d5f9c1d0432f17495442e917673206a57ec46e0e62d728294186cc9741a41a8a9f660d269044f36331bbf0b52306f8198c16f2bd720189021fe6a4cefc6151a7d035224f77934292e5b72cd64e4a3718e46deea8aecf91d922bec21fa67fefd6e8204afc8b470a2cbe7c5216e4a9cb66cea803811a5c0d5e8b331c27b1d760ac658e6ea38dd7315261a31d4cce31624151fc879752a742774a18d77ad4e0ee4fd063e93917d3a5831914c0595653cdb487e786ad5e3104b13332f535140dbe8fe05fe141154b54fb09c09b41b43da0aff9a9e269598be6669dc1e767ea0ca4e6c4d47f021a9c0ac5e855158eba8ae0cfb405bd1cace328c1dc31985d205ef5e95e8ff3cdf1531d74be796759c3e5f44c7e5c282798834f036041fd35da31cef6d88349b55e0fbed903f83ea94854fa51d88500c2e914f75f94e0a655485291da952905641d30da77ab0da86f6659dfc3e3d61eee7216572d67bf5678eedfe343dfcf19a83ce281f35ed84f351a7b2c2ab3799ef84f2143620dc0067e8c951dec5c39cd204a389c60dcf13b2a123326b07e34fa1c3e10194bfae8101bd30e0b8c3ab05bd70efa405652241dedebb6aab858b1cc885529efccc6d9ce20e86e324dcc9e4972c810dd8fcaa34f137a986d2990192416da4b1a8b1d9e10065d070b5dbcf180d34351d067783d1c2b85e1a4fde35e6ef784c019f0c5b2cf84a356b9ad0820e93f71f2d7fd5f55cf120ec312eadaf67e6f50e8177c5af6d03cd44e6b75b764c5e62c73e2a8f9763e4033baeb3bf65f029febd3eeb73b2a1d00047b5d2412cabd6c9be1040fb5f56d1a951b62057d7d55043c6e1963a0758c6c768353b5bda4a6621d8960ab7051d7beabf58461074ddd7c7f650cc37a2a6f90d93506cb91c1a02f3c4285751dfe752a8585aea9024ef74021d43bbb4781c0388b63daf6e5a08372af81a2fe0227be5f650a26f0f9295909a7a0d363141444c46cdb8c92d9a2ae57d05f55ad4818efb3c9b3d400f6cf1f63cfd56e69c3e7ca00eadb44d3b7febcb1ee0b9d7c2f3beade38c0495d594389d27b86c81a804fb7f10c73307461cc9786ca29443305860b26d8710b41948ecd477176a30a2f558be320cc53f249bb3793baa5e4213df638847974fe641f99ce1e7212d98069e1dd294cd7a1af1076621d3cf599d70d50b9d88be54a1229cfe7694fc4a3e0404d528d788a04c194714b46585ae3d7dd07ce50526ad0d111e5cc3fe66d8dc1ed6e87b2f07aec5de550033b8c3e3f0fbbb8d4b8e5d487df5191848a4434a11956c353be7c175f44d308b21570fb4be6c9f0f126926b27bdcd038ff68907af0abd59a0ad3e494d05c012d296ec2894323b64495f409805400c789bfd7914c1636d4f967c48e6a03039c3ef6a9c6b364b5aff12dd33108bc307b21bfbc2075698644056beed434c830eb41b98cdbcdc1a3f9e3da3a7b62c89252d55ecafbaf60b0cd3a6f4940abfd8dfde0196584f066ead7e68067b8df6e30b6dd211dfd53102bf4dfd958b85d1ba569f6c1170437a52bd860d620af0d5840d7e6de6dd55e55f8adcd55c2f44925232120f595c27c202360f6060518a74dfb713e09c2f70d63dcead44a29ebee08736d7ccf8b3c81586372caeba6cdbb5e2bde7f0ee0f7af67a39d9b9d83343f89aa90efe206b4843560fc3dee9d9de1cddc1280cef83895eec5b565c67aae521e4627466ac7fe9b31f5b94184ba2c3ab55539d8f51fcf8ec0e5daaf5239546649602aca7d73ffe8adf62e3791b02f790a27f3103103ed7277dcc1b379d410d0771648b25cb7c650659bf239fbcc8133445ad68bec338a11ff02f8362a97e3449052cd385264c05673f23fc876fa7690bb5a7ff42d06bc6b9ca55787f53e1c060aee1c81fc11c7d52603daa2c3555d4e22bfde072e897385dfaa2757719d63b643751a40438102288eae59603aecd3a8627e1005a81cfff31f258c1f3802da47dbe9aefa79b41139114330731bd179c22ff2004f63f0b8d497e681555fa920e8ac5591f042ce3a95203cbf2b144bd7e55216a90774ee40f2884a461515673dea0b14e0d6e654a66613cf42aa6afd17ab733c92fb44c190daaa08de24608c68e2190a556d91b903b08a7c73163daf81c26b5288636eb0be018e0a3b6a1f633623b63aa3246740c89bdf16dbd41c90968cbd475f381aed22b6fc4b360d0de061619f4587fffabeccdd35b5579e2a2428474557dc7d0fe3b0d69d58eba79cf56479945799769de3ca21213c96755b3636d846860fdc4e2c97315b7a194681979a158f1e019783fa473539c98df181ecf02c58a65a791b4f3072d95be8b8a98b98c126505e296b2d0d66ddf70c0c76f0e2387892c6c00867173155161319dbd42e956799f8d15668285e00605757860ea68929844c706e281c809dce0a14ee08950d1883479e9d475a6125f9404c1a2e1e8bd57c42ea99dd520a430ea38cd446db201ed0a952868152f94e1cc3c9db3e47c71de779544e99686b641818009971ef1b6cfc427a6a2334f3727a3819f7ad54f3ffc8cb721c9fd6b761947ca25ebaf2a4c2d48db9f0197854bcb58cbab73a2b16c6d92e7d1fba4d8db30064a9d78e9a71b7602259f10fcc5edccb808d67bc6e6ea18767ca8a7b56320df2f000596c16bdee8f386c84147cfcdd5da4151312dade706599fdcb0e1c4648320fb8896521808f15deacdddba5a46519245fa3201c442ba6447b2027989a0c357f014a9306fd168514c2e1d03c3d453fc8e66f292251454591175ac9ee080827b7c8e4e9c4f9fe43c480017050ab3ee72e4501c1b0f77b2888efbb9d3a7986a208785ee465ea657466cc9ebb16734d8371cf6e4e190b121f100d533f55eaefcf722362fc16f42cbfd7cc22893e889823432c5c715731321603c768ab25cd4db88f4d7135875008e0afa1d6b305fa76a44ed79f665665d155cfd28b90e4126d9ad9fd37202c34111c46c036136ac80a261692596940f5c44fd3810abf015a5908359fe09dd024a954abcf1b431"}, &(0x7f0000009000-0x4)=0x1008) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000005000-0x8)={r2, 0x9}, &(0x7f0000008000)=0x8) close(r0) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 79.135869] binder: 14770:14771 transaction failed 29201/-14, size 0-8 line 3155 [ 79.154960] binder: unexpected work type, 4, not freed [ 79.161238] binder: undelivered TRANSACTION_COMPLETE [ 79.174694] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00002a3000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002000-0x4)=0xe) writev(r0, &(0x7f0000001000-0x2)=[{&(0x7f000000e000)="b9", 0x1}], 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00005c7000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00006a9000)={0x6, &(0x7f000072f000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r4 = add_key(&(0x7f0000904000)='rxrpc_s\x00', &(0x7f0000c5e000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000943000)="15b2c2baff25396c04b80232fbc2f39315cca6b55fa3ac4f3403dd8dc43f6d04ba6484a0e8c14370cccb32c53bcba86aa7ceb87944554d", 0x37, 0xfffffffffffffffe) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000540000-0x10)={r3, &(0x7f0000cb2000)=""/207}) keyctl$clear(0x7, r4) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000c68000-0x8)={r2, 0x2}) 2017/12/24 06:44:39 executing program 5: mmap(&(0x7f0000000000/0xdc1000)=nil, 0xdc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f0000dc1000)=[]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dc3000-0x16)='/selinux/checkreqprot\x00', 0x80, 0x0) mmap(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000dc2000)=""/181) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000565000)=0x2, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000)=0x0, &(0x7f00004d4000-0x4)=0x4) mmap(&(0x7f0000dc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40d, &(0x7f0000dc2000-0x8)=0x4) 2017/12/24 06:44:39 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80002300, &(0x7f0000001000-0x10)="7c912a9d9f84a071ea3a119e3b410153", &(0x7f0000000000)=0x0, &(0x7f0000174000-0x4)=0x0, &(0x7f0000aac000-0x29)="b577e6b1ea2e980d3e909726d259b1513dc18c7655abf700000800e4dac28fb10e872f3319203ef8d9") ftruncate(0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001000)={@empty=0x0, @loopback=0x7f000001, 0x1, 0x2, [@broadcast=0xffffffff, @multicast1=0xe0000001]}, 0x18) [ 79.183430] binder: 14770:14771 ERROR: BC_REGISTER_LOOPER called without request [ 79.197753] binder: undelivered TRANSACTION_COMPLETE [ 79.206454] binder: BINDER_SET_CONTEXT_MGR already set [ 79.206461] binder: 14812:14815 ioctl 40046207 0 returned -16 [ 79.206526] binder: 14812:14815 ERROR: BC_REGISTER_LOOPER called without request [ 79.235704] binder: undelivered transaction 789, process died. [ 79.242757] binder: release 14770:14789 transaction 794 out, still active [ 79.246217] binder_alloc: 14770: binder_alloc_buf, no vma [ 79.246234] binder: 14812:14824 transaction failed 29189/-3, size 0-0 line 3127 [ 79.264768] binder: undelivered TRANSACTION_COMPLETE [ 79.274939] binder: send failed reply for transaction 794, target dead [ 79.306637] binder_alloc: binder_alloc_mmap_handler: 14812 20000000-20002000 already mapped failed -16 [ 79.319114] binder: 14812:14831 ERROR: BC_REGISTER_LOOPER called without request [ 79.328487] binder_alloc: 14812: binder_alloc_buf, no vma [ 79.334116] binder: 14812:14824 transaction failed 29189/-3, size 0-0 line 3127 [ 79.343347] binder: 14812:14831 got transaction to invalid handle 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0x791000)=nil, 0x791000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000791000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000791000)='/dev/urandom\x00', 0x0, 0x4000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000671000)=0xfffffffffffffffe) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000070b000)='/selinux/user\x00', 0x2, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000350000)="c740b3dbc9a027c4a4", 0x9) r2 = socket(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f00002bd000)='-\x00', 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000577000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00001ef000-0xb9)=""/185) write(r2, &(0x7f0000790000-0x24)="2400000058001f0014f9f407002304000afff51108000100febfffff0800000000000000", 0x24) 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000000c000-0x10)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f00008d6000-0x10)=[{&(0x7f0000cae000-0x5e)="39000000110009045a00000080000000180000000000000000060107000000061900550000010000000002ffffffffffe900011c00621e0500", 0x39}], 0x1) bind(r0, &(0x7f00004be000)=@hci={0x1f, 0xbb, 0x0}, 0x6) r1 = gettid() waitid(0x2, r1, &(0x7f000092d000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x80000000, 0x0) 2017/12/24 06:44:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pause() setsockopt$inet6_buf(r0, 0x29, 0x40000000000036, &(0x7f0000ec9000)="dc13b51a5b31306e78dd580871ab2144ece470d734cf0195f75d34c82d9d233f08008875c4ccd64ade0e8ce0442fbc50974e8e1195c604f8000000040002663d75dd0500000000000500048a5d070838a46611f937f96f7d4ff812a8f9fc3f0726e60000000000000000d359bdeb62e18a769c862f856d59f8b9f3aee345e59eee7026fe40be9cda06a2f125e2c3525ad0ffffffffffffffff3d328501902d973e668fa3f9b8974fec92b836614657ade60393c9a6556ddfaeda0896440f396f4b9b3e5a2db8352780dff40bb45a7883", 0xd0) getsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000271000-0x14)=""/20, &(0x7f0000b25000)=0x14) 2017/12/24 06:44:40 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7fff, 0x4) mmap(&(0x7f0000000000/0xd29000)=nil, 0xd29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) alarm(0xcf8) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fcntl$getownex(r1, 0x10, &(0x7f0000d2a000-0x8)={0x0, 0x0}) 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x1ff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000cea000-0x30)=[{0x2, 0x2}, {0xb, 0x2}, {0x8, 0x20}, {0x3, 0x8001}, {0x4, 0xfffffffffffffbff}, {0x6, 0x37}], 0x6) r1 = dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000337000)='veno\x00', 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000abf000-0x4)=0x7e, 0x4) bind$inet(r1, &(0x7f0000952000-0x10)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r1, &(0x7f00000f3000-0x10)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = dup2(r0, r1) sendto$inet(r2, &(0x7f000090b000)="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", 0x23b, 0x0, 0x0, 0x0) 2017/12/24 06:44:40 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000033c000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={@common='dummy0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000ddc000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5, r1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000001000)='./file0\x00', 0x111) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(r2, &(0x7f0000d4b000)='./file0\x00', 0x20) fallocate(r0, 0x2, 0x84b, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f000000c000+0xa4)={&(0x7f000000d000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00006a7000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) getsockopt$sock_int(r4, 0x1, 0x4, &(0x7f000000f000-0x4)=0x0, &(0x7f000000f000-0x4)=0x4) r6 = dup2(r5, r2) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00009a2000)={@generic="a3e686eac553bb1e63ebff39025e7148", @ifru_addrs={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) dup2(r0, r6) 2017/12/24 06:44:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000071c000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) mmap(&(0x7f0000000000/0xbff000)=nil, 0xbff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) r3 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000bf9000-0xc)={0x4, 0x0}) epoll_wait(r2, &(0x7f0000bfa000-0x60)=[{0x0, 0x0}], 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00002d6000-0x4)=0x5, 0x4) pwritev(r1, &(0x7f0000b73000)=[{&(0x7f0000c3a000)='"', 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f00000de000-0x8)=0x0, 0x100000001) [ 79.349963] binder: 14812:14831 transaction failed 29201/-22, size 0-8 line 3004 [ 79.371817] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.377838] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.383367] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:40 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000dd000)='/dev/input/mice\x00', 0x0, 0x10000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001000-0xeb)=""/235) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00002a6000-0x4)=0x0, &(0x7f0000ecf000)=0x4) 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00001dd000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000d6c000-0x4)=0x1c, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000052d000-0xe8)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000375000)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000063f000)={@common="627071000000010fecffffffffffffff", r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000452000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0xf6c000)=nil, 0xf6c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80809, 0x1) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000f69000-0x1)=0x0, &(0x7f0000f68000)=0x4) [ 79.431415] binder: 14839:14840 ERROR: BC_REGISTER_LOOPER called without request [ 79.458816] binder: 14839:14840 got transaction with invalid offsets ptr [ 79.465783] binder: 14839:14840 transaction failed 29201/-14, size 0-8 line 3155 [ 79.475331] binder: unexpected work type, 4, not freed [ 79.480805] binder: undelivered TRANSACTION_COMPLETE [ 79.489846] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.493130] binder: 14839:14870 ERROR: BC_REGISTER_LOOPER called without request [ 79.498016] binder: 14839:14840 got reply transaction with no transaction stack [ 79.498024] binder: 14839:14840 transaction failed 29201/-71, size 24-8 line 2920 [ 79.498047] binder: 14839:14859 got transaction to invalid handle 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000430000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000692000-0xc)={0x0, 0x0, 0x0}, &(0x7f00008e2000)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000ad9000)='net/if_inet6\x00') sendfile(r5, r5, &(0x7f00006c7000)=0x0, 0x2a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x1, 0x0, &(0x7f0000cee000-0x1)='*'}) fsync(r5) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000af3000)=""/30) socket(0x1, 0x6, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f000001f000-0xb0)={{0x28, 0x9}, 'port1\x00', 0xd0, 0x2, 0x101, 0x7, 0x1, 0x5, 0x2, 0x0, 0x1, 0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000817000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000289000-0x30)={0xa8, 0x0, &(0x7f0000c95000-0xa8)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x10, &(0x7f000083e000-0x50)=[@fda={0x66646185, 0x8, 0x0, 0x1b}, @flat={0x736a2a85, 0x0, r6, 0x3}, @fd={0x66642a85, 0x0, r3, 0x0, 0x1}], &(0x7f00008eb000-0x10)=[0x28, 0x78]}, 0x0}}, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000238000)=[], &(0x7f00004f4000-0x13)=[0x30, 0x78, 0x0, 0x0]}, 0xfffffffffffffffb}}, @decrefs={0x40046307, 0x0}], 0x96, 0x0, &(0x7f00002ed000-0x96)="466af1ef0fe05764224e8a75e70d45d2079fd35ef47d28d20c7ecc19f5bc208fe4b434924fe87a3004676a508a829adc9e51faa2095fdead9891ab3fd95fb8c3cecac8fe386e722771716c2e366434466678091c15c34e883a19dce733ffd2e42e33b9336ed85280db80905aa59ff514b2ebbac448db31e0e90c6176128e8864d6ad72dddab5992f0ce810f8c57f4ab3aa14d83e6e1e"}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000d3000)='/selinux/relabel\x00', 0x2, 0x0) 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r1, &(0x7f0000e4e000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000bba000)=0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006eb000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000c94000)=0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f0000b2c000)={0x0, 0x0, 0xfffffffffffffff7, 0x0}) 2017/12/24 06:44:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000989000)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000d5000)={0x0, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00002d1000)=0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r2 = socket(0x11, 0x80803, 0xfffffffffffffffd) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000836000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000001000)={0xb, 0x0, 0x0, 0x0}) setsockopt(r2, 0x107, 0x1, &(0x7f0000001000)="", 0x200) close(r0) r3 = add_key$user(&(0x7f0000750000)='user\x00', &(0x7f0000bac000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000df7000)="4ab454b56a88670ee0bcad558d74ee1e92fc4243eafb47c8906c0b5cad4606501d116e5ef21f8b0fbd31f22da716ddcda5c3328d027647ae17d8380646bff5cb98227287c12f848f2138df8e6e7af3a750b4503dcd2cd8fa0622b9936dda0feb43c11f12d0", 0x65, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000a18000-0x5)='ceph\x00', &(0x7f0000b68000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00002b6000-0x2)='#\x00', 0x0) keyctl$reject(0x13, r3, 0xb84, 0xffffffff, r4) setgid(0x0) request_key(&(0x7f00006fe000)='ceph\x00', &(0x7f00002ad000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000293000-0xfa)="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", r4) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000c43000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000665000)=0x8) 2017/12/24 06:44:40 executing program 1: mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000804, 0x6) write(r0, &(0x7f000096c000)="24000000190025f7060d1ffbfffffc0e0a8000fbffffffffff5cffeb080002000021c1ff", 0x24) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000001a000)='net/tcp6\x00') readv(r0, &(0x7f0000015000)=[{&(0x7f0000003000-0x1000)=""/4096, 0x1000}], 0x1) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f000002b000)={0x0, 0x42, 0x30, 0x9, 0x5}, &(0x7f0000028000-0x4)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000008000-0x8c)={r1, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000002b000-0x4)=@int=0x0, &(0x7f000002c000)=0x4) 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000008000+0x426)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb400000000000000, 0x4}, &(0x7f0000002000-0x4)=0x98) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000009000-0x10)={0x2, 0x7, 0x1, 0x80, r2}, &(0x7f0000009000-0x4)=0x10) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000000a000)=0x7, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) r4 = gettid() ptrace$setsig(0x4203, r4, 0x8, &(0x7f0000006000)={0xb, 0x101, 0x2, 0x2}) 2017/12/24 06:44:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000f86000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000004c000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f000079d000)={{0x4, 0x6}, 'port0\x00', 0x24, 0x40000, 0x4, 0xfffffffffffffffd, 0x1b23, 0x9, 0xfe0, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = userfaultfd(0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8)={0x0}, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00003b6000-0x10)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000220000)=0x0) r1 = socket(0x10, 0x805, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000087f000-0xc)={0x2, 0x0}) sendto(r1, &(0x7f00008ec000-0x16)="14000000000ae7ff01f8001a000000ff011f0012", 0x14, 0x0, 0x0, 0x0) [ 79.498053] binder: 14839:14859 transaction failed 29201/-22, size 0-8 line 3004 [ 79.539762] binder: undelivered TRANSACTION_COMPLETE [ 79.544860] binder: undelivered transaction 801, process died. [ 79.550918] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.556454] binder: release 14839:14859 transaction 806 out, still active [ 79.565867] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r1, &(0x7f0000508000-0x1a)=@known='com.apple.system.Security\x00') clone(0x0, &(0x7f0000d0a000)="", &(0x7f0000553000)=0x0, &(0x7f0000f31000-0x4)=0x0, &(0x7f0000f6a000-0xf9)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000c42000-0x28)={@generic="72f951d716f18ab9c7c9cba52b82e718", @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1)="", 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000930000)=0x4, 0x4) writev(r0, &(0x7f0000d9c000)=[{&(0x7f00005e8000)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274c05f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a16c06219546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beb8b75faa90e5a58d542e7d6e75ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de1828222c5ec147accdb5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d3444625388d6437ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5840e44dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48292c19fae293f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd45ff92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bada56c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c1}], 0x1) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x0, 0x47, @cisco=&(0x7f000000a000)={0x0, 0x0}}}) r0 = syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f000000f000)=[{&(0x7f000000e000)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000011000)=0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000d000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000011000)=0xe8) r4 = getgid() r5 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000012000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000011000)=0xe8) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000012000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000012000-0x4)=0xc) r8 = gettid() mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000012000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000012000-0x4)=0xc) stat(&(0x7f000000c000)='./file0\x00', &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpid() mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000011000)={{{@in=@empty=0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000011000)=0xe8) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000011000)='./file0\x00', &(0x7f0000011000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000008000-0x38)={&(0x7f0000011000)={0x0, 0x0, 0xffffffff, 0x1}, 0xc, &(0x7f0000011000)=[{&(0x7f000000d000-0x3b4)=[{0x2c, 0x401, 0x210, 0x3, 0x1ff, "20db1f8664f52a119897c123b9824b2db0cbb0eafa3d44b183dcba9e"}, {0xa4, 0x5, 0x900, 0x3, 0x1, "a816e80fb65e40f83d34126566140c224babf1c57cc0a06630afef19be763c3a74794cdea06bf858bc9effd55ad865c5a144509ad22fa36ce39754260e5004051dc038750fe094df1f575cb38ec249b5726f613296dd92e1a63d80cf253bace7a58a0fdce89ac0ad4c35bd11b378015321f57c6120b5fd1041c8d73ffde1bea3c4b5061b51330f0b4179844bce7f17e38694b30e"}, {0x79, 0x6bebabe8, 0x700, 0x3, 0x3ff, "b910531aeab32c0b0b6f1a75f6da4fc0db9479299ea50a298747c4cdec892aba71a23172397c164f08641bab29bcb114b29758ec7ad921ba225cfd1d6ab39aa33c60998336b9669a39fbdc219f1d8cd23020f35f0655ad6f5843801607263c6ce8b77dd05d8f282592"}, {0xd1, 0x9, 0x204, 0x200, 0x7f, "f299badda36b4a75bf997079c876819c0995cc4090fb20fbc76f39ab78df9809a44619238121045a599cea7b76cd640fa78a200a86a201a864e9c86d2412a2dac02005212e3d9b90eeaaa9e05037c54fcad1c9a3942c45e373a1d109a2b1cabba7e7bf7e8182644d77b01b135b558b90d721a4545be540b02179a73b4c679cebfd5b84a8b68155049acba33f834cbd3b8aef92cb82367340d3e682debe2f832e20d9e8aecd417e93fbe00240c738d901097c5840f4e5d0c2a56400c1878e959c1e"}, {0x65, 0x4, 0x10, 0x3, 0x0, "df4183387776589091af9a9c3f6c7d63fd4dbfe224cd675461371df8497281eb53fb6f868d3314e2b418cdda02faac20e1cc1e035ec334626367eea3656ac89ea88e2742762b184991fee0b20360423c27de8ce3a2"}, {0x9a, 0x2, 0x20, 0x8001, 0x1, "da875a537ce587464368d813d8e12c9a4fdd4e3a6ce4c29a35f44d8ca97f3a289c8bf10e226475c3d0b2c60bf5f718f3b5d0d96820358e6116446cce0ccea11e9f41034682d6eb397722565ff9776087138490876b619050420351d089b5f2fc4e105d806cf3eb383483829cbdc2db9fed26f2d5df04ff005189d475644d0f4650bd879e306679245e04"}, {0x43, 0x2f, 0x0, 0x80, 0x7, "f665b81dd852696006c5fab77912c63634240ad93941499504abc11bab6b4e88d8f792a9567460c28a506ea798423e48c67a0d"}, {0x58, 0x9, 0x600, 0xa71, 0x800, "69845de707b0d09b7fa7f59309dfff54b796fd0e4a564e6d1b4cd0f445cc84343c93ad357938d22953af2edb2581c2485b417708180f500c0ff48dbd0672f5bcc4a520be4eb25f96"}], 0x3b4}, {&(0x7f000000e000-0x143)=[{0x60, 0x8fc, 0x200, 0x6, 0x800, "0879ece1db0b1ecd1e8a0361d4a496a99a9e2be130adfab1d9ecb84b19e12624001f301ba82453a66073a65b950eb1546187644ec83af088bfa39ad727de2cf38c4cb9d4807de96f430a61347e061210"}, {0xe3, 0x0, 0x201, 0x7, 0x1, "4799e03958d0f5ba6245e3c1e70e8b1498a6a11dec338762d9000f02976846924df5d3a75ac9cdde6399d6605aa3b0b591699f7652f44dcc74b09c27795622e4431dbc273cb9938ef803219d538413cde93e8a19617033608bd48e4781cc41a1688bd35e2859af394c0a6eb0302559b3f572b38c9e5ae325af4ae4dc73e0aef89b363704e91ebb86baa558231e91ef87754b7bc493236df0deae14451a6681b99054fe8ea62c0d778d88994709d74fbc54baefe400f9b9d9e0b00e117b6c34d4202ebd5779ec0288433d27048b9ac4efe3e2b4"}], 0x143}, {&(0x7f0000012000-0xd5)=[{0xd5, 0x1000, 0x200, 0xffff, 0x98, "c3db2adf7760cfcb1de5c5067274a07992fa595a22a2a4f8bf008f7013a38f0dd457c9359efc3470e3e0541ac3c6e70fdc9e6c1b056bfb79d720619f4068108da4968e2aca4a1f124d88f101492efca79f82dbdb189a85ebb2849189ee90da5de7dffa97cfee73edb899d13d62e7e989bf8e04eaf668ea492af3352b03a8435692100f24169c71202a47515222d4e5f4d792dffb6a8406caa5239a6f41a978e2487d4cfd9807e667250b178c60d3ef2c6e2f6adf84a393782487dcbc5e9b68d49d06614843"}], 0xd5}, {&(0x7f0000011000)=[{0x7f, 0x10000, 0xf01, 0xfffffffffffffff7, 0x2, "a8c62e64fb76b7ea30838704e26b88226f50838e2689d03e757f0e8812e2c95c300c89a7ffbe697bcba79fe749ad95ead22cf18a5caf0c12cc5ac3a7540bfb8f5d44d8e2b69414c3c0297c7b1ddbff70dacb79ef066f254d4b5ea5d85da4c50f9650fefe8e93ccb4ca612514789a0e"}, {0xff, 0x7, 0x716, 0x200, 0x200, "a0e42e50fe7d93247172fe21653022d729ef4c232b0337c26ceed6a487e3b77fdf695084c31db1adc5849b864032564d5ed1d33f56bfc1e898cb5d25663a733a519b755f292cb5e0e4e7bc15adb98440f5d7f403f916233e2add0a3c28d9bf719d0a65ad5479ebef38d98ff6141e0f346e49e9f15f00352c06cfc4147a00b2d5e386f5626c86871a08a672a5ce02c8758ef6134dfe98d341f052f806d30c17b90fd7d3be9422ee0896b83820628ecb49a64ec4b3dc009cd71c40e7ec8981ffcdf7fd18a08200e7412ed8b3a30b3095699953995200771eed52e8ebf4193c1f1dcea351722c6c5f90719278a68c058b"}, {0xf5, 0x8, 0x400, 0x3906, 0x1f09, "bcd104056eb65e302411c80fa51940590b814f9d8e81358dd3a3c76c84cb43a0d2f9936d32b2ae019ef2b7d975c467e0a96c231e621c4af0d34a8457d0dfad52c3f5b33c20fd0a62ae3f540f31668f9cca6ea64b1a98b0ec2a3f01e739241acb82816f1a4c4def5be3be34acfea79cc0d42db021d60f88943b39ef0c8bce41dea5e81741607798b9bb4bac017af8e65b093514a10fad876b09061b9b29bbf66eaac4effe671c4f73e47021defa53356ee4975ba3a3f8a3310de763df0b9526bda39583b09a7546c93d9fc446057d779e2c5f5b3ba7ed9c1e8c08a31de02700ef2cc868f97c"}, {0x4c, 0x9, 0x2, 0xfffffffffffffffa, 0xfffffffffffff800, "0664f169820d8a7f46d5955d8e39fb8f52a25a63a754a87cfa81808c915da1fedd41feab8866a757dff476eb26fa9c6af3c66b135e10559c5bb881ab"}, {0x10b, 0x6, 0x4, 0xffffffff, 0x7, "49692684120c7183719934fc55edaa46dc8f528cc48b010ec88f0c7b3c6fd9dc77622deb71e686ba5825f7fe04cccfc53342f8cab054614470b4f1542d5de7660e7845cb4db7d9aa030e7d7cd4b1ea5531abd52e2fd9cb43c64bc15a93ee7d43fd0a14b24dfa214cb40118d8268eec7d491e7557e6426e47738e6fc2b22c117bf6d8c2df40c22d8c67a9feb14c4a2950330131cd8d977f449e04293e6f632b149f56a2b5b368f14124ce3c0594e52ec04dbe44fd0833c282445d9ca6591f586e88f0e3658d419e4d716ccf57942b85371330d4a341a4d52c5c2005b216f52bb03a51ddb81c99da4e924bf8319509f49deedd2032caa3d0a2ce43e7"}], 0x3ca}, {&(0x7f0000011000)=[{0x26, 0x3, 0x102, 0x1f, 0x4, "38c4f7c942887608eb5a8611bb0eeb356bcc1e96825e"}, {0xd5, 0x8, 0x0, 0x1, 0x0, "58a9ac066bc27c0cb7bd3190fdce688f160d9e1e3032ea66492579a07ace5e3f2f7b86366029aa40dc3cbecba33ae911655a0a8018bc45e54438cc197ca2bccf4e65c88271abb2f61d1cf3a6179bf895657e4a47684b6a026491211e6716a3a90a7549060674fc347c29b4e8a1b4593f14d7c6db6c322f3b805eac2212b6302335595507ca9fe22bb8973376185adde800944a8b2c40d268fb798b4ae433d12206459d5e6825fc5a35511ae0d0358897c7f24e34813354583104b90bc6a2b78cc825517e83"}, {0xe7, 0x5c1, 0x200, 0x3f, 0x8, "777a070c471f835cb0926abf681a7ae019a0463d09f7947cb82710994fe9e1f432c5ed6252dc0ab4ab67ad70694ffa573f6756db054703f5695d8afb007530930aef9aebb4c841b7fd19799b10ea5b32eb23ec68923c8469307c3cb9fccca0c7bfda6cc9f68da2c9e45c901f72d0b51f53d4d5c7b3cd52319847a4edabc0cd7155ea8750e9e992dc32ad76c3b0ceb249fac96a252125df27345c3820d262ab03802c67ff1b9aa8c5431f693d43edce58cd6ec7b748fc5ce7428514bd57839ed9a2be8ce84caab3c05b06221995483c3bb9d74bddcfd353"}], 0x1e2}], 0x5, &(0x7f0000004000-0xe0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x38, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r0, r0, r1]}], 0xe0, 0x40040}, 0x4000) 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004000-0x4)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000002000-0x8)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet6(r2, &(0x7f0000005000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000005000-0x4)=0x1c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004000)={@generic="c31a2bc6936eb206ccf78a4058e6fd08", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fstat(r0, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@multicast1=0xe0000001, 0x2, 0x9, 0x2, 0x8, 0x10, 0x20, 0xa0, 0x218a, r3, r4}, {0x1, 0x92, 0x1, 0x1, 0x2f, 0x1, 0x1, 0x7fff}, {0x5, 0x0, 0xffffffffffffc7be, 0x3}, 0x9, 0x6, 0x5, 0x1, 0x40, 0x0}, {{@in=@broadcast=0xffffffff, 0x0, 0x4}, 0x1c, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000000, 0x0, 0x3, 0x4e01, 0xfff, 0x5, 0x3719}}, 0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005000)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$unix(r5, &(0x7f0000003000)=@file={0x0, ""/4096}, &(0x7f0000006000-0x4)=0x1002) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000004000-0x4)=0x0) tgkill(r1, r6, 0x27) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/196, &(0x7f0000000000)=0xc4) [ 79.572754] binder: BINDER_SET_CONTEXT_MGR already set [ 79.572762] binder: 14884:14889 ioctl 40046207 0 returned -16 [ 79.572899] binder: 14884:14889 ERROR: BC_REGISTER_LOOPER called without request [ 79.572911] binder: 14884:14889 ioctl c0306201 20008fd0 returned -11 [ 79.573013] binder_alloc: 14839: binder_alloc_buf, no vma [ 79.573028] binder: 14884:14889 transaction failed 29189/-3, size 0-0 line 3127 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer\x00', 0x0, 0x0) dup2(r1, r1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000000b000)='/dev/vga_arbiter\x00', 0x4000, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f000000c000-0xf2)=""/242, &(0x7f0000002000-0x4)=0xf2) 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00005c8000-0xb)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f000050c000)={0x7, {{0xa, 0x1, 0x8001, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000b69000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "399f23631d000000000200000100000000000000eaf7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b8152df6a48251f7d51933223e1cab867dbd761faf", [0x0, 0x0], 0x0}) 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mq_open(&(0x7f0000a04000)='-$\x00', 0x0, 0x0, &(0x7f0000514000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000ae0000)={0x0, 0x0}) mq_timedsend(r1, &(0x7f000066c000)="", 0x0, 0x0, &(0x7f000066d000-0x10)={0x0, 0x0}) fsync(r0) [ 79.579020] binder_alloc: 14881: binder_alloc_buf, no vma [ 79.579037] binder: 14881:14886 transaction failed 29189/-3, size 0-0 line 3127 [ 79.590261] binder: BINDER_SET_CONTEXT_MGR already set [ 79.590269] binder: 14881:14898 ioctl 40046207 0 returned -16 [ 79.629502] binder: BINDER_SET_CONTEXT_MGR already set [ 79.629510] binder: 14884:14889 ioctl 40046207 0 returned -16 [ 79.629540] binder: 14884:14894 ERROR: BC_REGISTER_LOOPER called without request [ 79.637453] binder_alloc: 14839: binder_alloc_buf, no vma [ 79.637471] binder: 14884:14889 transaction failed 29189/-3, size 0-0 line 3127 [ 79.638905] binder_alloc: 14881: binder_alloc_buf, no vma [ 79.638920] binder: 14881:14886 transaction failed 29189/-3, size 0-0 line 3127 [ 79.639058] binder: 14884:14894 got transaction to invalid handle [ 79.639064] binder: 14884:14894 transaction failed 29201/-22, size 0-8 line 3004 [ 79.667554] binder: BINDER_SET_CONTEXT_MGR already set [ 79.667561] binder: 14917:14919 ioctl 40046207 0 returned -16 [ 79.667652] binder: 14917:14919 ERROR: BC_REGISTER_LOOPER called without request [ 79.667740] binder_alloc: 14839: binder_alloc_buf, no vma [ 79.667756] binder: 14917:14919 transaction failed 29189/-3, size 0-0 line 3127 [ 79.667934] binder: 14917:14919 got transaction to invalid handle [ 79.667941] binder: 14917:14919 transaction failed 29201/-22, size 0-8 line 3004 [ 79.683293] binder: BINDER_SET_CONTEXT_MGR already set [ 79.683302] binder: 14917:14927 ioctl 40046207 0 returned -16 [ 79.691087] binder: 14917:14919 ERROR: BC_REGISTER_LOOPER called without request [ 79.691139] binder_alloc: 14839: binder_alloc_buf, no vma [ 79.691155] binder: 14917:14924 transaction failed 29189/-3, size 0-0 line 3127 [ 79.704578] binder: 14917:14919 got transaction to invalid handle [ 79.704585] binder: 14917:14919 transaction failed 29201/-22, size 0-8 line 3004 [ 79.824448] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.829928] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000e85000)=""/42, &(0x7f0000085000)=0x2a) r1 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r1, &(0x7f00000e6000)="", 0x0, 0x0, &(0x7f0000e0b000)={0x0, 0x0}) 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000176000-0x10)='/selinux/access\x00', 0x2, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f000066b000-0xc)={0x2, 0xe75, 0x1, 0xffffffffffffffc8, 0xc2a, 0x1}) r1 = add_key$keyring(&(0x7f0000bc6000-0x8)='keyring\x00', &(0x7f0000baa000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) add_key(&(0x7f0000b7c000-0x8)='keyring\x00', &(0x7f00007b5000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00001e3000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000d4f000-0xf)='attr/keycreate\x00') sendfile(r3, r3, &(0x7f0000dc0000)=0x0, 0x8) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00004d8000-0x61)="c8f26b47bd85940703000000c2c7ba3fccf436e0c2e98d03b0c924362ae06d7972948a229400000fff43aa8a7d651f3cf020e0bb0f65045344abe97ae265a208daff9306f41b89e6434099f79b72f79c92e8926b1c413c99db31af7d35ee285c27", 0x61) r4 = syz_open_dev$urandom(&(0x7f0000d05000-0xd)='/dev/urandom\x00', 0x0, 0x80) read(r2, &(0x7f0000bb9000)=""/212, 0xd4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000088f000)={0x0, 0xcaa}, &(0x7f00004e9000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000cda000)={r5, 0x9, 0x9, 0x6}, &(0x7f0000ff5000)=0x10) mmap(&(0x7f0000b35000/0x3000)=nil, 0x3000, 0x3, 0x15810, r4, 0x0) 2017/12/24 06:44:40 executing program 0: mmap(&(0x7f0000000000/0x6b000)=nil, 0x6b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000006c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) mlock(&(0x7f000004a000/0x2000)=nil, 0x2000) ftruncate(r2, 0x40001) recvmmsg(r0, &(0x7f000000e000-0x100)=[{{&(0x7f000000b000-0x10)=@ax25={0x0, {""/7}, 0x0}, 0x10, &(0x7f0000010000-0xa0)=[], 0x0, &(0x7f0000010000-0x3)=""/3, 0x3, 0x0}, 0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f000006c000)=0x2a, 0x9) mmap(&(0x7f000006d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f000006d000)='/dev/usbmon#\x00', 0x5, 0x8080) close(r1) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000aa3000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) creat(&(0x7f000016b000)='./file0\x00', 0x40) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000bb6000-0x8c)={0x8, 0xffff, 0x100, 'queue1\x00', 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f00000e3000+0xde7)=0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) flock(r1, 0x8) 2017/12/24 06:44:40 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f0000f5f000-0x10)={0x0, 0x0}, &(0x7f000063f000-0x10)={0x0, 0x0}) r0 = dup(0xffffffffffffffff) getsockopt$inet_opts(r0, 0x0, 0xffffffffffffffea, &(0x7f00002b1000-0xb7)=""/183, &(0x7f000096b000)=0xb7) mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fe6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)='6') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)="") mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)="") mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)="") umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2017/12/24 06:44:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000267000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000158000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r0, 0x2, 0x30, 0xffffffffffffffff, &(0x7f0000ce3000-0x3)='./file0\x00') 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000dea000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f15000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_ivalue=0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004a8000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f000070c000)={{{{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x7ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x9, 0x3, 0x3ff, "afabed53e95f7be27dd9bbe8c07c905cc53a97d7463c43f9a81c5adb32cc6df59df8e8433afe22b398f96fc964e94f26f703b8da87048a70ed1c2f95d96fce400c3a1eb7cf877f47a8c6f7db69644d29"}, 0x160) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000376000-0x8)={0x0, 0x0}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000d18000)=0x0) socket$unix(0x1, 0x7, 0x0) [ 79.835370] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.840839] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.846390] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.851824] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.857298] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.862773] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.868231] binder: send failed reply for transaction 806, target dead 2017/12/24 06:44:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000ae000)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f000031e000)={0x7fff, {{0xa, 0x2, 0xffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x97}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000a34000)="01000000030006000007000000c4ffcc", 0x10) setsockopt(r1, 0x107, 0x20, &(0x7f00007f4000-0x10)="010000ee030000000000000000c4ffcc", 0x10) 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0, 0x0, 0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x400203, 0x0) 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000da9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000f76000-0x4)=0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d3b000-0xf)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000aea000-0x4)=0x0) [ 79.901664] binder: 14940:14947 ERROR: BC_REGISTER_LOOPER called without request [ 79.928945] binder: 14940:14947 got transaction with invalid offsets ptr [ 79.938992] binder: 14940:14947 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000268000-0x10)='/selinux/access\x00', 0x2, 0x0) accept$inet6(r1, 0x0, &(0x7f0000158000)=0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000706000-0x4)={0x0, 0x7, 0x0}, 0x4) mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x30000000107, 0x16, &(0x7f00007bd000-0x4)='I"-U', 0x4) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00008ef000)='/dev/pktcdvd/control\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000f0f000-0x8)={0x2, [0x5, 0xfffffffffffffffa]}, 0x8) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000759000-0x4)=0x0) r1 = socket(0x10, 0x8000000000002, 0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000d0b000-0x10)={0x0, 0xffffffffffffffc1, 0x5, 0x6}, &(0x7f0000892000)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000481000)={r2, @in6={{0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x17a}, &(0x7f0000eac000-0x4)=0x98) write(r1, &(0x7f00007cd000-0x115)="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", 0x115) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000e95000-0x8)=0x0) 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000000000/0xff8000)=nil, 0xff8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$ipx(0xffffffffffffffff, &(0x7f0000ff9000-0x10)={0x4, 0x0, 0xcee3bc94, "d9c534024e8b", 0xfe4, 0x0}, 0x10) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00001d9000)='/dev/pktcdvd/control\x00', 0x80000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00004b6000/0x1000)=nil, 0x1000, 0x4, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008b1000)=0xe8) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) writev(0xffffffffffffffff, &(0x7f0000eb5000-0x10)=[], 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000ffa000-0x10)={0x2, &(0x7f0000ff9000)=[{0x0, 0x40}, {0xb503, 0x9}]}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ffe000-0x4)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000ef6000-0x4)=0x100, 0x4) bind$inet(r3, &(0x7f0000f02000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a9f000)={0x1, &(0x7f0000331000)=[{0xff, 0xffff, 0x1, 0x7}]}, 0x10) connect$inet(r4, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000005000-0x1c)=[@clear_death={0x400c630f, 0x2, 0x1}, @decrefs={0x40046307, 0x1}, @exit_looper={0x630d}], 0xde, 0x0, &(0x7f0000009000-0xde)="85759d14eb2bee775a5337ee59abb74d658431b8752e7eceebe8d9c54721ba553104def93f922602e3363920f264f6fe3219b52470c76b5ee28c636324b405373959e12f00be1e70363843cf921c634da48a384e73a02e5e8f9a84d79604e393ca2edcf06439dd17a26d133186a04a5ac1adc7ae99f514765a88466980b85a9c969f1a144b7a1527303e9f356a31e982716f2233e93216b79b6c3f5de22e8da1cf03c53ee8362b4958ab09d16ad8b64ec712d189d1b8c1e1976017855735840d4791308c1f5320854ac678a22ab78a9b21fc468f28301097cf7a3ca9bc04"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000009000)={0x0, 0x0}, 0x80800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000008000)={0x9, 0xd4, 0xfffffffffffffc01, 'queue0\x00', 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) keyctl$session_to_parent(0x12) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 79.949402] binder: unexpected work type, 4, not freed [ 79.957232] binder: undelivered TRANSACTION_COMPLETE [ 79.962972] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.972914] binder: undelivered TRANSACTION_COMPLETE [ 79.978383] binder: 14940:14961 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000018000)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00005f4000-0x9)='/dev/rtc\x00', 0x80000, 0x0) linkat(r0, &(0x7f0000ab2000)='./file0\x00', r1, &(0x7f00001b9000)='./file0\x00', 0x1000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000001000)='./file0\x00', &(0x7f000087d000-0x10)={0x0, 0x2fbfb32c}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f000087d000-0x87)={{{{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x0, 0x0, "d8588341a3332e435893f760928f541b42c41db0f53229e10458031e411acc918b07deaa85a71569b72317b9229c05a260f51652df313acceba60958f71aa88ae177e2e4fe748f1a5407000000bde9e6"}, 0x160) close(r2) 2017/12/24 06:44:40 executing program 2: r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f00002a3000)=0x0) timer_create(0x0, &(0x7f0000398000)={0x0, 0xd, 0x1, @tid=r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000096a000)=0x0) [ 79.980855] binder: 14940:14947 got reply transaction with bad transaction stack, transaction 826 has target 14940:0 [ 79.980863] binder: 14940:14947 transaction failed 29201/-71, size 24-8 line 2935 [ 79.980890] binder: 14940:14961 got transaction to invalid handle [ 79.980897] binder: 14940:14961 transaction failed 29201/-22, size 0-8 line 3004 [ 80.015368] binder: 14978:14984 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 80.015378] binder: 14978:14984 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 80.017238] binder: BINDER_SET_CONTEXT_MGR already set [ 80.017245] binder: 14978:14984 ioctl 40046207 0 returned -16 [ 80.017303] binder: 14978:14984 ERROR: BC_REGISTER_LOOPER called without request [ 80.039037] binder_alloc: 14940: binder_alloc_buf, no vma [ 80.039055] binder: 14978:14990 transaction failed 29189/-3, size 0-0 line 3127 [ 80.061476] binder: 14978:14990 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 80.061485] binder: 14978:14990 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 80.065200] binder_alloc: binder_alloc_mmap_handler: 14978 20000000-20002000 already mapped failed -16 [ 80.067562] binder: BINDER_SET_CONTEXT_MGR already set [ 80.067568] binder: 14978:14990 ioctl 40046207 0 returned -16 [ 80.067590] binder: 14978:14991 ERROR: BC_REGISTER_LOOPER called without request [ 80.068758] binder_alloc: 14940: binder_alloc_buf, no vma [ 80.068774] binder: 14978:14990 transaction failed 29189/-3, size 0-0 line 3127 [ 80.139331] binder: undelivered transaction 821, process died. [ 80.145340] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.150978] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.156498] binder: release 14940:14947 transaction 826 out, still active [ 80.163388] binder: undelivered TRANSACTION_COMPLETE [ 80.168490] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.173940] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.179410] binder: send failed reply for transaction 826, target dead 2017/12/24 06:44:40 executing program 6: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000009000-0xc)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000015000-0x10)={0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000014000)={{r1, r2+30000000}, {0x0, 0x0}}, &(0x7f0000009000)={{0x0, 0x0}, {0x0, 0x0}}) open(&(0x7f0000001000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001000-0x11)="617474722f736f636b63ff65617465fd4b") 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000ea9000-0x16)='net/rt_cache\x00') 2017/12/24 06:44:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) fchmodat(r1, &(0x7f0000012000-0x8)='./file0\x00', 0x28059a3c5178d01d) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000001000-0x30)=[{&(0x7f0000001000)=""/33, 0x21}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f0000012000)='./file0\x00', 0x0) 2017/12/24 06:44:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f000058c000)='/dev/input/event#\x00', 0x7fffffff, 0x200) close(r0) r1 = socket(0x4, 0x807, 0x88) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r1, &(0x7f00007b1000)="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", 0x1000, 0x20000004, &(0x7f0000001000-0x10)={0x3, {"248a3fb87f80cd"}, 0x3}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x0, &(0x7f0000002000-0x4)=0x4) msync(&(0x7f00005df000/0x3000)=nil, 0x3000, 0x3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept$ax25(r1, &(0x7f0000003000-0x10)={0x0, {""/7}, 0x0}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$llc(r1, &(0x7f0000004000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x10) r3 = memfd_create(&(0x7f0000002000)='-Usecurity-userem0em0/em1systemvmnet0\x00', 0x2) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000004000-0x5f)=""/95) fcntl$setsig(r1, 0xa, 0xc) close(r1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000001000-0x20)={@generic="d3af78810784dd8f7e64015dd13cf15d", @ifru_addrs={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000005000-0x8)={0x2, [0x2, 0x3]}, 0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000006000-0xd)='/dev/usbmon#\x00', 0x3f, 0x10000) syz_open_dev$sg(&(0x7f0000004000-0x9)='/dev/sg#\x00', 0x326acabe, 0x200) fsync(r2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000007000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40d, &(0x7f0000008000-0x8)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000008000+0xe5d)={0x0, 0x0, 0x0}, 0xc) fcntl$lock(r0, 0x7, &(0x7f0000002000+0xe2b)={0x1, 0x1, 0x100000000, 0xfff, r5}) 2017/12/24 06:44:40 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) fcntl$setsig(r0, 0xa, 0x2e) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x412a00, 0x0) 2017/12/24 06:44:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0xa202, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000078a000-0x30)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x4, 0x0}, {0x0, 0x0}, @raw8={"7a88d654f95067fe68d2359f"}}], 0x30) ioctl$TCSETA(r1, 0x5402, &(0x7f000032d000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x401}) close(r1) write$sndseq(r0, &(0x7f00006c3000)=[{0x40081, 0x4, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x30) 2017/12/24 06:44:40 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000a31000-0x6e)=@file={0x0, ""/108}, &(0x7f0000000000)=0x6e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r1, &(0x7f0000433000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cd5000-0x4)=0xddd, 0x4) r2 = creat(&(0x7f0000fdb000)='./file0\x00', 0x80) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000757000-0x4)=0x8, 0x4) sendto$inet(r1, &(0x7f0000583000-0x1)="", 0x0, 0x20000801, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000766000)="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", 0x3c8, 0x0, &(0x7f0000944000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:40 executing program 2: mmap(&(0x7f0000000000/0x8da000)=nil, 0x8da000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00008da000-0x90)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00008da000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000704000-0x8c)={0xfffffffffffffffd, 0x40000000, 0x10001, 'queue0\x00', 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00008db000-0x4)=0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00003e4000)={0x0, 0x0, 0x0}, &(0x7f00008dc000-0x4)=0xc) mmap(&(0x7f00008dc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00008dc000+0xe59)={{0x4, 0xfff}, 'port1\x00', 0x1, 0x4, 0x2, 0xfff, 0x6da2, 0x8, 0x8001, 0x0, 0x7, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00008dc000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f000058c000)='./file0\x00', &(0x7f00008dc000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000080000)={&(0x7f00008dc000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000609000)=[{&(0x7f00008dc000-0x8a)="7009817e68cddd3b8a785ec160755063bc50e0f7f295b9200a45804964018cd7611609e2b74db29713d9830c5ccabb1069a27aeb3bcbdd85d7e37ba89c7d744f8078a42b8b9e86c2877fe5109c7fca48c63dff8fec20e28032f31bb7799d8032c489495b923baa5771b66a10ec4019f313df1c3db146ccd76da932cc160c4ef8ffd5c9ace182c615935e", 0x8a}, {&(0x7f00008dc000-0xbc)="eda92606612da49104277b8ec167a40db0d65547ba535d02896f9d47195b398ee943e1006ff9e460069e223fa070b9c6bf8cf5643317149bf972ba4e79a79a006e9ca1d4117c2e2e7e4277552d098af204bf61d3c57e6c688b5192b4a7c096455044cf9a4e9be49c412f351950df149becb721c160154d5b77586c57e4ac7b18bdd549b708f3b0e6a3468eac88aa4952c9e4c6537d2b16f9faa92812b305902290587d4be10bd8d31979e18a86ce10f9cc37fc713a4b9bf05def3e6f", 0xbc}, {&(0x7f00008bd000-0x1000)="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", 0x1000}, {&(0x7f00008dc000-0x75)="5f38cb05520f3f62328100c9c8e0a808a92c8df65f95336c2a0e625d53b4aea74ac7faa839bad29dd1e2e5d8dcf6e566532b61e8b428995490fe70e2f78617b1316d5765135c6cce3abe868bc504053abcf1b91cc3c715ab5d3668d5e2d8dad3cabf2580c8c946a3dfcacc3ac067b839f7044f3026", 0x75}, {&(0x7f00005b3000-0xea)="8cb2f801e406fa086425afd9e32ee02fea39a4095c18baa8ef2c772eab43053da7ef2e1c4ccfeb277e0421c0a90b3a102778df41ed16f6d497fae21cb24f601969b24cb543b7f2520c1155265c6e4b10b129520734db026fcaff15be5fda0c74d14deb7f60229ef14c7ca53b62f500351c432356b8bbd3c1deae1841b22a1d4fb7695a0516f7da3dcd73c5ed9d041298b7f3b6f38f9eff9b3c5abd53487c3c9e98eb300a48efcd97d8dd621cb270bef08935b0b97b21355aa2d4f3fbd1123c3e1f47abfce22412d5570d185d77cbbe7d92c7896fd0e4c0f5f2cf1ebdbbe61fc37882a24a3db878e81bcc", 0xea}, {&(0x7f00008db000)="50734d0489a1bbd4d93cbd02171ca67096b5073454264012f2f8d4054e8ff1a978bb933102cf0874a3eb15d84624b07c55c09abbe073369334fb14a1305bbfb438a1b8a0f0d80b61cd7194cde9169d554a2c244453bffe34bd7d6a1b4f3cd6c8cb53708d6fb0173fe0eee8c58bfc3e98f5b8e62b291795058d963f75b31b9a2dd91ff593b31fea1d090c1adfb25452ed9a726c475e2836a21d742d01b3df46158ec41577", 0xa4}, {&(0x7f0000244000-0x5)="fb762c1963", 0x5}, {&(0x7f00008db000)="83fb7b98e6e0d7de0fb89b9b68f20d3d914999e7c92b3cbee607fbb59e11a8cf00274e3edb5be5fbf075bc4b8d757574fea12b278348b321a8ba4405d08004b16ae52f1c8bfa45de5e20ed68208c41634b53e7e505df7a61a834a4483202a328fcabd469b67d13f690a0e8fe8c4872abed9ba852a1faa7216d5adf8d618b6f42abe2343d60dab64782a680e237071bc49ff59d65efb0f8c3294d8e92288a1a7a93", 0xa1}, {&(0x7f00008dc000-0x30)="e2953bda71c8e16a900b93dc7e4bc44d65e494bb461327627ac35455936ab87b6590c7ccf46c2b28d29ac14244e3c085", 0x30}, {&(0x7f000046d000-0xb8)="b958411c073b41629e4669222bcdc4eaed657a657ab45a5e55fcce9cff91df5113f8afc7da7a592e4c622716509d8887ae77fd38b091d65efdeb62e6f6953ee9c50f6cb5dd8d9db4e88a3346d07721db0730d2e135ff87bcfa0f1c8a7427ad1b930c02f7cf7a8af57b69f5f60ea1bfacccdcbcc337f84008e4cb58e5b79926da5c8b000cbd4cab3a217ebde241961419f294d267b25da41de12e0b8a700fc7a2dc271dd3f46f8d11ae7eaaaf13049839185c1f2815df138f", 0xb8}], 0xa, &(0x7f00005ac000-0x20)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x20004080}, 0x40) 2017/12/24 06:44:40 executing program 5: mmap(&(0x7f0000000000/0xa70000)=nil, 0xa70000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000a71000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000190000-0x82)={0x0, 0x7a, "df1b6231a01450b4a6f55dd3f699b03f943f72c7036db7b6efdded67ab45566d6d5d003ab0a29281a6227056fd13f540f678db5739cd50680a10d57884f33de99b8ba1c7aa91e82d9e8295df8708074331dfc86708731a3e1458660a7fb70e00dda5ca2583480cebd8bccd845a8e8d25b4022e82eac6b5018058"}, &(0x7f0000636000+0x4e9)=0x82) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000988000-0x14)={r1, 0x9a, 0xffffffff, 0x2, 0x8001, 0xfffffffffffffff7}, &(0x7f00007e7000)=0x14) r2 = inotify_init() ppoll(&(0x7f0000a6f000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r2, 0x0, 0x0}], 0x3, &(0x7f0000a6f000)={0x0, 0x0}, &(0x7f0000a6f000)={0x0}, 0x8) clock_gettime(0x7, &(0x7f00005ea000)={0x0, 0x0}) 2017/12/24 06:44:40 executing program 6: mlockall(0x80000000006) r0 = accept(0xffffffffffffff9c, &(0x7f0000887000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, &(0x7f0000fc8000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001000-0x44)={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, {0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) msync(&(0x7f000038d000/0x1000)=nil, 0x1000, 0x1) 2017/12/24 06:44:40 executing program 6: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d9d000-0xe)='/selinux/status\x00', 0x0, 0x0) sync_file_range(r0, 0x3, 0x8, 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4008700c, &(0x7f0000002000-0x4)=0x0) [ 80.368469] binder: 14997:15001 ERROR: BC_REGISTER_LOOPER called without request [ 80.395078] binder: unexpected work type, 4, not freed [ 80.400769] binder: undelivered TRANSACTION_COMPLETE [ 80.408129] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000452000-0x4c)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f0000a03000)=[@ptr={0x70742a85, 0x0, &(0x7f00006a6000)=0x0, 0x1, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000f2b000)=0x0, 0x1, 0x0, 0x0}], &(0x7f0000788000-0x20)=[0x0, 0x28]}, 0x1000}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2017/12/24 06:44:41 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x100000) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000a77000-0x55)=""/85, &(0x7f0000781000)=0x55) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) close(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00001fc000-0x28)={@common='eql\x00', &(0x7f0000fb9000)=@ethtool_regs={0x4, 0x0, 0x0, ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$usbmon(&(0x7f0000832000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000953000)={@multicast2=0x0, @remote={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000f3f000)=0xc) connect$packet(r1, &(0x7f0000956000)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f000098f000-0xc)={0x0, 0x0, 0x0}, 0xc) rt_sigqueueinfo(r2, 0x0, &(0x7f0000c3c000)={0x4000c, 0x7a8, 0x9, 0x2}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000db7000-0xc)={0x0, @loopback=0x0, @remote={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000952000)=0xc) socket$inet6(0xa, 0x0, 0x0) 2017/12/24 06:44:41 executing program 7: r0 = socket(0x18, 0x4, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000035e000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000078e000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000001000-0xf6)="c7342ff77c82d12ff6c86efb8f339ba82973b72469bea0b52e8be63964b3ffa9333fcb9501041bece94d09e53c3be53ad6e4769f2f0f79a9f7d14bce83c14e77bfda70181a51f9f6890271928759b5581b1af63f168625c3461087e4f2ef51356b47bdd5b8d1d4ff91cf72d3a8655057db8103f697a3652c8f230974e7c5ef45db432113e24a713f46a4c02831d8f92210ff39dc178d832d0a2a5cfb07fc694357c5f349c88de12c81dea4a25e88c3fd9983ad150b1924cc8e201ccf7d16e319117a8a9d60e944993bc2e49622f2feb338f4d391d7b301183d5ae28ab05bea61eb5179440f68c6bd4485a7e2aaf1b50b4215952dc67b", 0xf6, 0x4000000, &(0x7f00005aa000)=@generic={0x1, "3e8b2c5250ae811de264d22ccdb52ca765cc5b45b130e21169d052f7c17a5fe7e41205473e1be2166aadc8aab55e82ad8158b7cb7c346f7842af273f260e476d2907003d49de400094cba6fd52575018a6e6dd1fe411a26a5b9b680e13ba4fdc08e0e6c7c24d1fa6e41f7bf7c08f0baa8053e06ca81bfb314b58357c677e"}, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001000-0x24)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x5, [@multicast2=0xe0000002, @empty=0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}]}, 0x24) set_robust_list(&(0x7f0000001000-0x18)={&(0x7f0000000000/0x1000)=nil, 0xfffffffffffffff7, &(0x7f00002ff000/0x4000)=nil}, 0x18) r1 = getpid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000001000-0x1000)="5aeac7c4ebbcbb743dcb2e46d7ebc5da4ff9dc1b2d68149066964242f8283e208472d39a65b00571c4c60d04ea7fef64e49a0c60e9746e0c9f8048c62bcff222e18a4d26d6ac72b130371c451d0c190f374495e3e7f1eba114f9035f4450c329038975b589ba5a8920282dc3dc8d37264a30bae4921d02b4508bbb5d0d61227f8a5445cfd30e6d6ddea579e933f4eb4b3eb12cbec35b8272d88ba83be220487a597707276c3201b82d864f4993433e9b31a06fcd552cb9503f836eac13a8f3818bd88588c26e31824fcc9a7816d4e7530c329ef6449281cadfb89aa9961552a9878459e4c9af378c240cae9b3fcab9b201386c31920c60de1d13cf5cc9f70d9a2ec465e7592827c90204a210ca807ccf3fe2437d1d07d7b1b35352540a1dfb4cbf41e82d5099afd2651e67174289f8b0f42dd724f2413209685c6a723079a2f9d9cb60fba6c5b78f1f81cbb9057173b24b12624648e7abab8e47c4a0732837750b3f41fe263eb6dfebdd87e48cc62f67cb611138b3233d079e2c42528f6bae54f5c8479dfda3978c52b17500f748230715ac4643820b0241feb5587b01714ecdd6ee0c1720aeacfbb6e8f36ff927a6f05d0368bd32ae4797e5f3021a2dc46c7e1ac58da4aa11826cb97d0f9bff6456759e6d3d57b48f245d2ab499f5bdc805c9647603f0ee050ce1b2c4cba0f1d53035bff131218f7e0eba39a5656567bcff282b43e79470b91ba84b471acf9a12d64e9ac3900be4ac7f78e1a9eb7f2fae911f399a7dac8c30c2268ebc33381bcc6b1af2a46164251128ba7ce5714883eba4f3e240850da05abf16c84b7c6aae7fd9e39d72aec948ffafa2e03654c234631ecd9c12d74e03045be877bd8e9b8b3802866ee75a6e673bcf1d752e1f7f0dcae7b3d99ffc76e9b89401ceac302cd17fd092ee022930126cb0360d9a77a0cfe96a059163d21ceff5bd33781afb75881a8186116bd2f4080b50c1f5ba4738c0bc50a979d2b9f2778d3867c013b7dea865ebb7afd4aa1fc1adc6d3f775db1cfc22e3e1c9e33d106522fc0203a49dcde9a813437a9134c64b7078e56c5b00aec0394f8aacc7199d5391363b4088eef8a9a55830c89b113cc02a095a2bb9f42e778e946226204b527a162ece457b22015417019e51d791c23f0dfba1de2865ca4d6e76f29e4c882b135d9d4cc72b81b1133d9da52b4f7118190138dc2a97a84662bb1907a8025908f270c8b2a683471f42b1325eafe090f456dbb60f3bc91198b98685c2c75715ab07160d343bdd456108057bdce1b1c4eeb71cc2fc5d391e61a67478a95e4ffecff5cafcd0b7d8547d12439bb618f4aa1b049ba04b7a3dbb6e9dbf908cc6526af833bfeb3c9e7c9ed3fef0241c0b8a0a6c15b495d7930265474a56b9e080f672a8c3593919856d76d2642029f98d0f27c01b6764fbb75b1f9f3e3876ea3287a85574f76c2fcd5fcbf9d5662aac8e15854c4c9a281c2f42a31cbd162472f6563fbb4e4396c3d83a54f392ce0332d0637700e19e735883df70dfca59e1661454c87fc84ceeae66aac8579f7ea335e4cf6d18a92117d7f12c90e86e1265c8e812e3e2d135a9832445664358390ab4ca380e3eb471e9a95b920377cdd4d06cf82d8d1c25180144cb6f012d6524a0786629bb3bbc2fd1891aad25c94cadf85d1c66be644877328a48daa4cce07f58161c0d1946cea46cdd070c9a89e1301038c9ef43ae1f5f83180809d846a7a045ff7420c1d13402dd606abefbab9ee6a4febc0701f425aab66383c42e37c61ae9a8e3a9278414738f46b3fc0d46bbcf26bb5c602c17b5d99bdd16b3d1a7babfbf8855047cb161c5b961e915988bb5260fa37e4707fcd98502e82fe7214b81a8cdd346a176016914168e39b357511676afcc160d74dd22dea077fd21ac5a88de9c5cf7491b13f040315b0966588991ee084ffdfd6dc0a9e05d585fe0253a8ec6432e63f94ea40cdb8fd43d1873ded1ed9b30d4168b8954e3402e247e94578fcf7222448af0cc2a21bae06d31394f9bdb173fc4ee54ce98597b99b49b5f3806ea5223ad8e7fd86680535d22f0200688fa87001875150bb7965713604f2cdd3a148fc01959e39989d56ebfe11aa291cc2c630d5689cbc8e84137183daf2004b01ac285af80f5b910e7a6149da125d4ab3fc448f7e1781d4e1043471f087a208957863eb0077b30b25624161ad1216f664a4c85dbbffdaf704c0158de87e9977cd9421a2e89b41db16e5c95eb952e6ca23b894dcab949395aa22e9bfbaf86bc72406f3ddc3ecd8f4487d958d21cc0eb93fec8cfe49f9e900b5c6ffebbd45f2defbb9b9765824aba5bd2fd8d9b03fde350b3383a85a3b59ce7a39f680f910b06add4206b944c166c27c83cc30d955d5eb0713686770c0ab81819cf208a3588d9cd3f11fb0f3107fef0b0306dc64584cd4a6cb23b359070510d0f0478a28933793f92af523827b4ca7da03fb2a563c7fab20b8188eea67609b28b1a3a2ee24808b66da5c93611c588f8baca51c663786db1a878dfec6de53e304372efee416d06540455e055112747c1bbed4b54ba915c519a904f2ef3b59b90366e2d1ff317c910ac49c0a69c9131b14dad6c16da32877d20d7ff22307ed9c767d2df5919ccf5868ce36cf7f23d5eade9e9e19809f5428b98fbcc9e09558369e064ef0ba4c47aab52861dd36050ff55c4bd591453601454ff5f19de6c7f233f5dbb2c74bd4e7f8c1e877fdbfba41eb1fe32d81b66e3227d5da136790829394ac73f39e4baf0e63c4dcd2dd09220faf94974d987e3bf19c7d68f0ff97cf2b1de4d08904eeb7f12948e9a163584347d2c9de4419016670566dbc38468c3b008adbdcf643139ba56c9242dc512de72a02a6c6b876b6831e3e3cdac69b88be05ee174537fed259b7f5703cc256d6b454bbe84a094e00e47f600db046e566b1cdfdd18ce4e9a8097cc70e05aa9a9128c3f71fff54f48c185e4f573b99f4a72647973e866eb1c36dee3a240a6877f18ea8ec16e7c6f807fee78354ad4db4d700f8c6ff13109ea132a7e9912d6abd4193a08d98df67fc02d132bc4f7d861ddd10fc14b571c9ce0fdeadcee961a8ea3938a31929bf3a6c2a329f1ba166c51382435fec1e0992d88a1225562ec9a7e7446986ec024201156a5a583e5041cb2cc6e222c5669482faee610aed5636df49243374e83dbdaa4934ccfd0c5ccc820b9ea211c20cc05f4d29c1c15da864657d07f30d8d0e981ddf98e976bc7ffaba5d21c978bb9fa8df5bdf441ff23f5c9bc9bbf89d00e12e219c471f3e6eb0a3f01b6debd525bc3fc421d14888789af2d3c960a3599801dcb73b1617a49d7f168494f1f1b3eca8b39243290c93b519a3cf0b10ffa5d333d3a2c4e94a38f8b1a1f92f464561bd1345d6ab0ee85427c8a2b2aec75b7d1475d3c85c37c6f7b192a61059f89b5cb3e47bb1572d7f623d70eb87efe6e03c10ff9c33376138568fdc6953cbe216d5199647b4cc08f99af7d9d8264437683e2e7abc232377ee4aeed5db93888caca014e25132bb51a1f50d66b22f0121d6e78f114c25c820ffb64ad347c4c60126776ab3f084f61e2cb5cef4c4ba31b5d09d31a53a5215bb5be99727bbdbf60fab87ba00f236697ea75d4b9952d7b37f31691d42ed314d87c0e09d6b205c3398e70681e17a230054483877485207486eb5ceaf040048d598519ee634c3496004712e2574f82fdac6cb8446e05b77b28c2c045ab3512a58c6374ad09fe04f47b926ddcd187bd2752e914fa93573f8dfe3ab0159f72c83d79f8e5861d80f98195095595ea15abd6065b48df5c74d30b172bc926ca349704d7f7bbeb9790ae02f062e876a976e4df6954f627a9a34d1554a9af2ebf15d4fcccae07cefa5179d0d45203f2d319b4ac4661fd7ec0c4098d52c3d2a38f44a4d458c945e448aecd00c222dfbacf0eb0a3596deceafbc7c21fdfeb43fa129ee5cbf28ad386725c9e84c8505bcbb3b4812dc37d0b20860cfa3106f968799fc021790b3d6d5ad9d647faea5a1f6dfa1d5d81fbe92ae36c44a6970770dcf444f8bb367cd51549543da6d95fa7077db6f534d729769af375a9a40415311fe2ccd82d7c8b44d87f441aab8998bf4d7a3f392bcf99ce6397a3d3ba9fb405637ceeb3a0829845d0ff05d359f66cbb8d0cd89cb4e65201806e364bbd8f8ccba3d5b3b6895d3880a420d1c4bd232b326a93b10358c995a1330d86d3806012eac01bb4e4a232740de48241c836427aabc481621d7f85eb51f08459267c65468c244a4f109e7728b5dd16a822c9a917088e11eb4b5a17ab4eec1df2002dcb6ec5e3eeb3924126b6ded6e9b0910481404c3cdc5e8deba55a8c3a5024f5c0e2fa4b33437675e7b8aba72cf87e3f4582fcd0fab79eb3ebd6932a8d44c6fbc75a1758d21081bd79e091f64ed818e99007a96fe687334d471c1848310596a0e0c137697a22d05b168f8ce8100c6f336905fecdadbff2ef3fc566011891157196e27daf5122a8134e044ba8d73949a896f32d246e819391e4a6c71ccd45852547dfe1c8a57d4cdc2a0d6b6bf0e3ba6ae1bed69faefa2535b336c9f0c513268840e5e6eb7816c9c4a9e52d094f3d0c8ac8fcf280c691a3710bf51c880878da8156347d2ac164f32b5bf97dd0d80e0552a8116e9b210e60fae7a4d27195398a7c2de0d4e02e5845824f310f673a84ada0031d2e563b8d649772ab7aac067f8dfea6582af07bfcf13389b754615a35a29dc59435fe3e075c2b212d1aa925edbd88cc9846ce748afb438743a0d90fd6f293fb897cf612a11e3160d34e7de04aa0da0870f2ec69f82618183aa7eccea3613424a91293342dd65189d90d98089619696470fe67474d7f13684a02d35bf2675d6b803d9c1c4b3f069549ee768b447df0409e640918b2794fc7607bdc6621822bffa787e9455b7280b45384065f668d5f6ef7f0f5827ad353b13f7aa170092ed112d8a53366b74ff59342b390a1f210c62a7c0155fcb54544f4a43bec870d4b3377c2ef0a369a01a811adfafe3f0e5ac3e134dd1271d5c4ea571f25779167fe479f58123f74e05c9d4be4d24375c0572d011508ee72f07107cae6b85f2e4748c3412004ee71de1971b8740945e6b35b1e020c2159498d17fba24ae3f8bfcd108631e3a0d4df5fd5565b33928cf601d6205f6a4e60e5c534605717b2246791dca45b49bc2fc9c88611be72c6e13cf29921161ff545d6aba3bd0a3580399087d65fec6041f91ee5006aeafc75901721ee2eb883d90fad9d09b8e6263f3d4fa42d0ef7e90d4a914c00c16ce0a8ade2fcc163ec3610010b16b78910403c9413ce99f7646dc59db4746a121818409333857bc4b48f87f6550fcb9df9dfeb8acaeb9ba7ba58a16fd7904629eabbc108320c339313588a948783772bb67d19ebe2fa783c81b7d38b0c970a7720210fea8bb8ef3f2d85448b553da4058278ee2280814b202af395cf8015627cfde66ec1d709c89ef7be4bc6536509756a3645e153eb05033071a84267aa88fe9f75bb7932494a3d6706c4cf2d24e225876a9bcc11a4a2d93e8dc18aed4a5da60bd2c4b8a4f48f82fd8639382bbbfb0fc912d42117de8f5eb64c1d334d33d6c4ea24dea6274e0fa3f7322fb5841a2987ae8ad684660ab5eab83579ebb1cccf698c34a32087ef7e357eead67743b86518fc14cc76514331e50cffc9452fe16740621dd9442a2c38fe6762d50cea3487d35d1aeb9b859ae3e645f22ca342951560e7e75677ce48dbdb451e61ba2250e00e8966982829b437323a9a") waitid(0x0, r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}, 0x80000000, 0x0) 2017/12/24 06:44:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f7000-0x7)='mounts\x00') r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b59000-0xc)={0x0, 0x0}) modify_ldt$read_default(0x2, &(0x7f0000060000-0x34)=""/52, 0x34) mkdir(&(0x7f0000b09000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)="") 2017/12/24 06:44:41 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000001000-0x10)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000008000)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000003000)=0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000008000)={r2, 0x8}, &(0x7f0000008000)=0x8) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x200, 0x0) sync_file_range(r0, 0x890, 0xffffffffffffffff, 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) ioctl$TIOCSCTTY(r0, 0x540e, 0xff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000002000-0x4)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$setpipe(r0, 0x407, 0x0) getgid() r2 = syz_open_dev$tun(&(0x7f0000002000-0xd)='/dev/net/tun\x00', 0x0, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x5, 0x8e4, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000002000)={0x0, {{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40d, &(0x7f0000004000-0x8)=0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000005000-0x4)=0x0, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000005000)='/dev/net/tun\x00', 0x83, 0x42, &(0x7f0000006000-0x40)={0x80, 0x1, 0x6b19, 0x7, 0x5, 0x9, 0x1000, 0x3ff}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000007000-0x8)={0x0, 0x3f}, &(0x7f0000007000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={r3, 0x22, "97c6ee85116f7541667620fb3898b409abafb39cf614ebd73b19f1a704b1a2c502b1"}, &(0x7f0000003000-0x4)=0x2a) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000002000-0x10)={0x73, &(0x7f0000004000)=""/115}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000007000)='./file0\x00', &(0x7f0000008000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000c92000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000b36000-0x4)=0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000ce4000-0xc)='/dev/autofs\x00', 0x4400, 0x0) wait4(r1, &(0x7f0000a82000)=0x0, 0x8000000b, &(0x7f0000cde000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000163000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 80.413638] binder: undelivered transaction 833, process died. [ 80.420224] binder: 14997:15021 ERROR: BC_REGISTER_LOOPER called without request [ 80.426425] binder: 14997:15021 got reply transaction with no transaction stack [ 80.426432] binder: 14997:15021 transaction failed 29201/-71, size 24-8 line 2920 [ 80.428159] binder_alloc: 14997: binder_alloc_buf, no vma [ 80.428177] binder: 14997:15001 transaction failed 29189/-3, size 0-0 line 3127 [ 80.456938] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.462361] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = request_key(&(0x7f0000398000)='cifs.spnego\x00', &(0x7f0000195000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000031a000-0xa)='mime_type\x00', 0xfffffffffffffffd) r2 = add_key(&(0x7f000086f000)='encrypted\x00', &(0x7f0000fe5000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000917000)=0x0) keyctl$assume_authority(0x10, r2) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000ac000-0x28)={@common='tunl0\x00', @ifru_map={0x0, 0x200000000000000, 0x0, 0x7fff, 0x4000, 0x7}}) 2017/12/24 06:44:41 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x4, &(0x7f0000003000-0xc2)="45a532384836098f149048759d2b499284c55a562138d3f6ce223c4060e7c88260540d1b22653484f0aeaee7380d8319172b94e01ec5ed4ce03091c22d0a5aad108d68d2a3ef467c337b5f52278cc431f3ffecb8d1a30175ab16452cb484d357bad572fd926bd7a566c1642e790ece1d9d7437d4408798070e15597084bb4117cd863d2a145407955fb1e52c26813e580bb16393da7f3b19a03fc9c9238ac3f50869ea6448050245a0f1d29f7175e35769cb018b245fa85cf3f2eb9f71d0d2aa03bd", &(0x7f0000578000-0x4)=0x0, &(0x7f00007ca000)=0x0, &(0x7f000041f000)="") getresuid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000420000)=0x0, &(0x7f0000000000)=0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x0) ioprio_set$uid(0x2, 0x0, 0x0) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000d5e000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000953000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x2, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000cce000)="", 0x0, 0x20000042, &(0x7f0000ef0000-0x10)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00004bb000-0x4)=0x0) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xef1000)=nil, 0xef1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000)="", 0x0, 0x0, &(0x7f0000eea000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000ef0000)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000eed000)=0x6, 0x4) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3e, &(0x7f0000ef1000)="b98569599327f6ab352de0c0972e4755728219370f3a9d56f450d9bf830b59", 0x1f) recvmsg(r0, &(0x7f000057a000-0x38)={0x0, 0x0, &(0x7f0000ef0000-0x30)=[], 0x0, &(0x7f00009fe000-0x51)=""/81, 0x51, 0x0}, 0x10040002106) [ 80.498830] binder: BINDER_SET_CONTEXT_MGR already set [ 80.510393] binder: 15037:15040 ioctl 40046207 0 returned -16 [ 80.522640] binder: 15037:15059 ERROR: BC_REGISTER_LOOPER called without request [ 80.534056] binder: 15037:15040 got reply transaction with bad transaction stack, transaction 840 has target 15037:0 [ 80.552714] binder: 15037:15040 transaction failed 29201/-71, size 24-8 line 2935 [ 80.562562] binder: release 15037:15040 transaction 840 out, still active [ 80.569723] binder: undelivered TRANSACTION_COMPLETE [ 80.574924] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.580467] binder: send failed reply for transaction 840, target dead [ 80.585621] binder: BINDER_SET_CONTEXT_MGR already set [ 80.585628] binder: 15037:15059 ioctl 40046207 0 returned -16 2017/12/24 06:44:41 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000048e000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff7000-0x9)='ns\x00') exit(0x6) fstat(r1, &(0x7f0000da1000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x418403, 0x0) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) setrlimit(0x0, &(0x7f0000013000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000052d000-0x10)={0x3, &(0x7f0000326000)=[{0x35, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000b77000)='/selinux/load\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000511000-0x10)={0x2, &(0x7f0000d68000)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000c3b000-0x20)={@common='dummy0\x00', @ifru_flags=0x102}) 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000001000/0xe9f000)=nil, 0xe9f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000ea1000-0x1)='\x00', 0x2) mmap(&(0x7f0000ea0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000ea0000)=0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@generic="a0e4218c35316871ec412fe59e0fac2a", @ifru_flags=0xac00}) write(r0, &(0x7f000002a000-0x28)="24000000190025f0f21c1f1efffffc0e02000500000b000000000605080015005f180000", 0x24) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0x33, &(0x7f0000b8f000-0x20)={0x8, {0x3}, 0xc0000001, 0x1}, 0x0, 0x8, &(0x7f0000215000)={0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x20000000002, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000012000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0}, 0x20) r1 = gettid() socket$unix(0x1, 0x5, 0x0) ptrace$peekuser(0x3, r1, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000fbf000-0x4)=0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000db2000)={0x0, @in6={{0xa, 0x3, 0x7ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xbf7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x2, 0x7, 0xff, 0xa78a, 0x2, 0x2, 0x2, 0xffb, 0x5, 0x81, 0x7, 0xfffffffffffffffc, 0x0, 0x3]}, &(0x7f0000db3000)=0x108) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f000050c000)={r3, @in={{0x2, 0x0, @rand_addr=0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000cb3000)=0x8c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000420000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 2017/12/24 06:44:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000d6e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000361000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00008ce000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000a9a000-0x4)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000c66000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00003bc000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/12/24 06:44:41 executing program 6: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000041c000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000542000-0x5)='maps\x00') readv(r1, &(0x7f000041e000-0x20)=[{&(0x7f0000538000)=""/2480, 0x9b0}, {&(0x7f00006f9000-0x64)=""/100, 0x64}], 0x2) 2017/12/24 06:44:41 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x0, 0x0, &(0x7f000000a000-0x7c)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 80.586781] binder: 15037:15040 ERROR: BC_REGISTER_LOOPER called without request [ 80.586829] binder_alloc: 15037: binder_alloc_buf, no vma [ 80.586844] binder: 15037:15059 transaction failed 29189/-3, size 0-0 line 3127 [ 80.619541] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000c5000-0xe)="", 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000716000)='/selinux/access\x00', 0x2, 0x0) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000550000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) r1 = syz_open_dev$tun(&(0x7f000091e000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000f85000)='/selinux/access\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000980000)=0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f000053d000)={@common='ip6_vti0\x00', @ifru_map={0xd6c, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80006, 0xffffffffffff7ffe) r1 = dup2(r0, r0) recvfrom$inet6(r0, &(0x7f0000930000)=""/91, 0x5b, 0x1, &(0x7f0000662000)={0xa, 0x1, 0xfff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x40200000000001, &(0x7f0000f68000)=0x0, 0x4) 2017/12/24 06:44:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000592000-0x9)='/dev/ppp\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000145000-0x4c)={0x7ff, 0x4, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f000044e000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/55) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f000000c000-0x4)=0x10000, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f000000a000)={@rand_addr=0x0, @empty=0x0, 0x0}, &(0x7f000000b000-0x4)=0xc) recvfrom$packet(r0, &(0x7f000000b000-0x84)=""/132, 0x84, 0x10020, &(0x7f0000007000-0x14)={0x11, 0xf7, r4, 0x1, 0x2, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000006000-0x10)='/dev/sequencer2\x00', 0xd06d0707e2b1bb73, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004000-0x11)='/selinux/enforce\x00', 0x480, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1) [ 80.645162] binder: 15079:15082 ERROR: BC_REGISTER_LOOPER called without request [ 80.668981] FAULT_FLAG_ALLOW_RETRY missing 30 [ 80.673358] binder: 15079:15082 got transaction to invalid handle [ 80.673367] binder: 15079:15082 transaction failed 29201/-22, size 0-8 line 3004 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000000000)=""/164, 0xa4, &(0x7f0000000000)={&(0x7f0000003000-0x1)={'sha384-avx2'}, &(0x7f0000000000)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000a65000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000002000-0xc)={@multicast2=0x0, @loopback=0x0, @broadcast=0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000001000-0x8)={0x22ee00000000, 0xc8}) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000d2000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000ac9000-0x4)=0x0) readahead(r0, 0x0, 0x0) [ 80.673705] binder: release 15079:15082 transaction 845 in, still active [ 80.673711] binder: send failed reply for transaction 845 to 15079:15095 [ 80.673721] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.673729] binder: undelivered TRANSACTION_COMPLETE [ 80.673734] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.677621] binder: 15079:15095 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000072f000)={0xa, 0x0, 0x12, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000001}, 0x1c) connect$inet(r0, &(0x7f00009a0000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000f78000-0x11)='/selinux/enforce\x00', 0x880, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000784000-0x8)={0x0, 0x1}, &(0x7f00008c8000-0x4)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000c63000)=@assoc_id=r3, 0x4) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00005be000-0x40)={0x81, 0x4, 0xfffffffffffffff7, 0xb2, &(0x7f0000e58000)=""/178, 0x73, &(0x7f00009a0000)=""/115, 0xee, &(0x7f00006e8000)=""/238}) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000dc6000-0x16)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="e99c5c08a84f"]}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000758000-0x20)={@common='irlan0\x00', @ifru_addrs={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r2, &(0x7f0000b94000)="28733b68f89317d87b0ad64c7f6043f6648098dfd7eb951cf4495b0057774a64549208804aeb90bea5e486efe79ba060e02e00a423a065429f8a8ce4f70ac78aef20f1bbfebaeb583197eed09da243325a1058a3451d0463c964e22bdd72c63876c053f4ef6f04e7e8d7e8aaad6030d91f530ef3340d8dfead36b02e4619d5ddc4a756eddd589d11e4220aaf0654a0f82b701a163d3fbae6897270551dc98fc6270b831cee9ad7a12be3911ed5da009bb9cae335e0cc71a666891255c900000000000080005bea4cd46a091ca5d8346337d2c9cd40d0f5c722929868f4c733cb69b8f66553a977d267574388ffc9d02e28dae459c7", 0xf5, 0x20000040, &(0x7f00006de000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000c7b000)=0xfff0000000000, 0x4) 2017/12/24 06:44:41 executing program 0: mmap(&(0x7f0000000000/0x58000)=nil, 0x58000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f000004e000-0x50)={0x5, 0x0, 0x5, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(r0, &(0x7f0000001000-0x2)="", 0x0, 0x0, 0x0) mmap(&(0x7f0000058000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x99) dup(r0) flistxattr(r0, &(0x7f0000058000)=""/228, 0xe4) [ 80.681381] binder: 15079:15095 got transaction to invalid handle [ 80.681388] binder: 15079:15095 transaction failed 29201/-22, size 0-8 line 3004 [ 80.693182] binder: release 15079:15082 transaction 848 out, still active [ 80.693185] binder: undelivered TRANSACTION_COMPLETE [ 80.693218] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.693232] binder: send failed reply for transaction 848, target dead [ 80.704002] binder: 15103:15106 ERROR: BC_REGISTER_LOOPER called without request [ 80.745934] binder: unexpected work type, 4, not freed [ 80.745937] binder: undelivered TRANSACTION_COMPLETE [ 80.745952] binder: undelivered TRANSACTION_COMPLETE [ 80.745958] binder: undelivered transaction 852, process died. [ 80.754918] binder: 15103:15113 ERROR: BC_REGISTER_LOOPER called without request [ 80.771099] binder: 15103:15106 got reply transaction with bad transaction stack, transaction 856 has target 15103:0 [ 80.771108] binder: 15103:15106 transaction failed 29201/-71, size 24-8 line 2935 [ 80.775358] binder: release 15103:15106 transaction 856 out, still active [ 80.775362] binder: undelivered TRANSACTION_COMPLETE [ 80.775368] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.775407] binder: send failed reply for transaction 856, target dead [ 80.885611] CPU: 0 PID: 15084 Comm: syz-executor2 Not tainted 4.9.71-g2506378 #113 [ 80.893283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.902603] ffff8801d64779a0 ffffffff81d922b9 ffff8801d6477c80 0000000000000000 [ 80.910550] ffff8801c6f32b90 ffff8801d6477b70 ffff8801c6f32a80 ffff8801d6477b98 [ 80.918507] ffffffff8165fb7a 0000000000005b31 ffff8801d56138f0 ffff8801d56138a0 [ 80.926458] Call Trace: [ 80.929013] [] dump_stack+0xc1/0x128 [ 80.934342] [] handle_userfault+0xa3a/0x1310 [ 80.940368] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 80.947349] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 80.953723] [] ? handle_mm_fault+0x117b/0x2530 [ 80.959921] [] ? handle_mm_fault+0x1fc3/0x2530 [ 80.966120] [] handle_mm_fault+0x1fd1/0x2530 [ 80.972143] [] ? perf_event_comm+0x1a0/0x1a0 [ 80.978171] [] ? __pmd_alloc+0x410/0x410 [ 80.983854] [] __do_page_fault+0x5c2/0xd40 [ 80.989703] [] ? mm_fault_error+0x2c0/0x2c0 [ 80.995639] [] ? do_vfs_ioctl+0x458/0x1140 [ 81.001501] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.008130] [] do_page_fault+0x27/0x30 [ 81.013633] [] page_fault+0x28/0x30 [ 81.018874] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 81.025677] [] ? SyS_setrlimit+0x91/0x100 [ 81.031447] [] ? SyS_prlimit64+0x8d0/0x8d0 [ 81.037295] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 81.043837] [] entry_SYSCALL_64_fastpath+0x23/0xc6 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x2) pwrite64(r0, &(0x7f000062a000-0xde)="2a9e9063e6806d8f7306fcc9ed82246420488172aefba527e70732de006efe8cefcf5caad10fb789f7caa9c0a9f34acfc6165f716b76a94cd0c50ddb977e7337d3902a5770efc9f9ec676f544f95f5802d5579757cb6f33766caff7b793ddf88583eb1a39a9bb5ae81814b29c7ea3c6707ea8ce3468ac499c401b675b930e0e8e79f1fbff81e7b959fe0c1af20afe6038b4533dc94b1c17fa6ad68cf98b4ed97701c446a427cdeb4909a8f7b0fe7c66f1a90c49ff6d7c94ee16f8c9d6a14f5944433e6ff74205810325f48cea31548151b822a5d3f90a2cb616766ade6d3", 0xde, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000065a000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000594000-0x50)={{0x9, 0x7}, {0x9, 0x2}, 0x3, 0x1, 0x1f, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00005e0000-0x18)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000034d000-0x4)=0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000fc5000-0xc)={0x40000020000201, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000d82000)='/dev/vga_arbiter\x00', 0x40102, 0x0) getdents64(r2, &(0x7f0000b2b000)=""/202, 0xca) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f000001b000-0xc)={0x0, 0x0}) 2017/12/24 06:44:41 executing program 0: mmap(&(0x7f0000000000/0xd1c000)=nil, 0xd1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000b52000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00000ec000-0x1)='\x00', 0xffffffffffffffff) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00003b8000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000222000-0x88)={0x3, {{0xa, 0x1, 0x64, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) openat$keychord(0xffffffffffffff9c, &(0x7f0000581000-0xe)='/dev/keychord\x00', 0x80, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000d1e000-0xb)='/dev/hwrng\x00', 0x105000, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000012000)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000ba0000)={0x0, 0x6, 0x101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$tun(&(0x7f0000d1c000)='/dev/net/tun\x00', 0x0, 0x4040) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000077b000)={{0xff, 0x1}, {0x0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) readahead(r0, 0x80000000, 0x401) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000001000-0x21)=""/33) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000002000-0x4)=0x0) flock(r0, 0x8) r1 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000001000)=0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x17, 0x6, @tid=r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) setfsuid(r2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="791b7e7a2d39b1d4b9515b20fbf0c4910f265d945f14f7c3be1b65d865873c108b4deef568a70821623409820fa0ec817693fc8bf2d977c308e497870769747d007cf4afad3b4c125f262f4a679395fe6bb0", 0x52) ptrace$setsig(0x4203, r1, 0x9, &(0x7f0000001000-0x10)={0x3d, 0x10001, 0x101, 0x1e}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000003000)={{0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xf6d2}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, 0x4, [0x1, 0x8, 0x9, 0x1, 0x9, 0x100, 0x5, 0x7]}, 0x5c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000004000)=0x0, &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000006000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000006000-0x4)=0xc) tgkill(r1, r1, 0x2b) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000006000)={{0x1ff, 0x0}, 'port1\x00', 0x16, 0x20, 0x8001, 0x100000000, 0x9, 0x1, 0xfffffffffffff801, 0x0, 0x4b19e90d50d5c244, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x3, r1, &(0x7f0000004000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x1, &(0x7f0000008000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000004000-0x6)={r3, 0xa}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2017/12/24 06:44:41 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000004000-0x15)='/proc/self/net/pfkey\x00', 0x10100, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f000000b000-0x20)={@generic="9837bb9e8e51612a8039274849b2b9d5", @ifru_addrs={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) ftruncate(r2, 0x8000) 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000c7c000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = getpid() getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000418000)={0x0, 0x0, 0x0}, 0xc) stat(&(0x7f00007cd000-0x8)='./file0\x00', &(0x7f0000afc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f000025d000)=0x0, &(0x7f0000cef000-0x4)=0x0, &(0x7f0000505000)=0x0) getresgid(&(0x7f000044f000-0x4)=0x0, &(0x7f00007f7000-0x4)=0x0, &(0x7f0000b42000)=0x0) r8 = socket$inet(0x2, 0x0, 0x7) r9 = fcntl$getown(r0, 0x9) stat(&(0x7f0000e30000-0x8)='./file0\x00', &(0x7f00009d5000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000e1f000)='./file0\x00', &(0x7f000054c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f00005d9000)={0x0, 0x0, 0x0}, 0xc) r13 = getuid() getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000166000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000700000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00007f2000-0xe8)={{{@in=@broadcast=0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000300000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000729000)={0x0, 0x0, 0x0}, &(0x7f0000dc2000-0x4)=0xc) sendmsg$netlink(r1, &(0x7f00007d0000-0x38)={0x0, 0x0, &(0x7f0000d33000-0x10)=[{&(0x7f000049f000)=[{0xcf, 0x1, 0x400, 0x0, 0x8, "2347b96e186026fdbd48a73bd4ba6bc013a1f535af420890ca6ac7dd423973bf49a9713db377520eeeccb756d33f4a66c6e25ea5d4f6a33b96b13f1924e30d43736b80005c02418f2df696ec53ad9c4f155b83592736bc766cbce08efd6efa01ce9c8bc2985ad3ac189c6705dd999af10bae5e1fac2c971cf9154c6665ba80bd824b3fe4b31752b93b8d7a30fbdb098665fab811b930e0cca71f5c88bc81776c6fb0d1e8d34c09c58158d3190f9ee763291966c4f42266ffbbf3a319d13a6d"}, {0xc3, 0x6, 0x210, 0x80, 0x1, "f32339c9f834da62b72f8079f4bcdbfd4c8cc21cbf9e65281f28045b7bf9a860b6f541d5ad06cf1ae0e82c0063d2cf8a9a6bae6ff8fafbc89c00a731951df3410c8a745df18e19c45a9af42ad664101d5021b0944f3b201255865be395999188d24920c785c8ede68edd788bdd456c333a5e6595745181144b6d537430da863c0935892f68c42996ca2f573276f889cfdd8aeaf00ba961ae3ff88ee64a4ddaf56144a28e57979673c353ce56d6b401fd5894bc"}], 0x192}], 0x1, &(0x7f0000d6d000)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r8]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0xd8, 0x8000}, 0x8000) r18 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000046c000)='/selinux/member\x00', 0x2, 0x0) syz_open_pts(r18, 0x40) ioctl$EVIOCSKEYCODE_V2(r18, 0x40284504, &(0x7f0000e4d000)={0x20, 0x19, 0x368, 0xfffffffffffffffa, "efb255da7a3bc372e01e8cde86639663394e404327a8b3ef3908fa3378925001"}) signalfd4(0xffffffffffffffff, &(0x7f000085a000)={0x0}, 0x8, 0x0) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000f0000-0x28)={@common="6c6f00000000000000450000ef5a00", @ifru_data=&(0x7f0000eaa000)="0a0000008000fa0400000004bd000000ff00010000000009690007ffff2400"}) kexec_load(0x2, 0x1, &(0x7f000044d000-0x20)=[{&(0x7f0000a21000)="82910519fe171d0b2a13ee960a755e9e0598caf31cf61f773e98bc6765cb078f5c46542e9371156c60f84d95d8b20cf876076771a1a6d144860676f6b7c247fa50cec21e8b70e710295fbcf3838a1b0d3e7f0e7273ef459fc3e7373af9bfd97fa5c4bbf3bb5db798b3f99e17e831e7bc73441d97634c", 0x76, 0x1e, 0x67}], 0x1e0002) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000499000-0x4)=0x0) r1 = syz_open_dev$tun(&(0x7f000095b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000741000-0x4)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000c68000)=0x5, 0x4) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) sendto$inet(r0, &(0x7f00009e9000)="", 0x0, 0x20000040, &(0x7f0000532000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) pipe(&(0x7f0000b7a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syz_fuseblk_mount(&(0x7f00007f0000-0x8)='./file0\x00', &(0x7f00006c1000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00002ff000-0xc)={0x1, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000e9f000-0xc)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00007ad000-0xa)={0x3, [0x400, 0x4000000000, 0xffff]}, &(0x7f0000b39000-0x4)=0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f000078d000)={0x7fffffff, 0x5}) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000742000)='./file0\x00', 0x0) mount(&(0x7f00004bc000)='./file0/file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000051000)='ramfs\x00', 0x1, &(0x7f00005dd000)="") pipe(&(0x7f0000d4e000-0x8)={0x0, 0x0}) sendto$ax25(r0, &(0x7f00002c7000)="5eef74497ab5922db187b267d6d12e959b02af63b9c59c264dae82d20fb7bc3dcfc9619d4c77220b8340698982b734136afc2369fbb097f02a88c40d99b0e3a8667caeb397341f296d3ceabcaf7d32d6855c19179a15a2fa7a24b3579d6f42aae399f40541e116e2e0b8c3ff235a8a4fe40301c3363d670d3f4703b3eeca4914a7dd2b70bcac3e4e98ca323175fa09ac33c791290ef320fdd70e0e5b3609ba6f25cddda4a184639692299c37319a0be6c157d76f611b3009ff73f3c0debf2bb76eb3", 0xc2, 0x0, &(0x7f0000753000-0x10)={0x3, {"6168f34112d010"}, 0xb21}, 0x10) unshare(0x400) r1 = openat(0xffffffffffffff9c, &(0x7f000095f000)='./file0\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f000094a000-0x1d)=@random={'os2.\x00', 'vboxnet0^$nodev)trusted\x00'}, &(0x7f000095b000-0x5)="1326292600", 0x5, 0x0) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000738000)='attr\x00') [ 81.116441] binder: 15136:15141 ERROR: BC_REGISTER_LOOPER called without request [ 81.146549] binder: 15136:15141 got transaction with invalid offsets ptr [ 81.157333] binder: 15136:15141 transaction failed 29201/-14, size 0-8 line 3155 2017/12/24 06:44:41 executing program 5: sysfs$2(0x2, 0x4, &(0x7f000095c000)=""/175) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000379000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x10) pread64(r0, &(0x7f00009a1000-0x73)=""/115, 0x73, 0x38) 2017/12/24 06:44:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008ad000)='mounts\x00') mkdirat(r0, &(0x7f0000a2f000)='./file0\x00', 0x140) mkdir(&(0x7f00009b4000-0x8)='./file0\x00', 0x0) readv(r0, &(0x7f0000f3e000-0x50)=[{&(0x7f000047d000)=""/105, 0x69}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000ad1000)={0x7}, 0x1) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000b12000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f00007ee000-0x1)="") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000226000-0x98)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x9}, &(0x7f00008ec000-0x4)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000e2c000)={r1, 0x1000, 0x10}, &(0x7f0000661000-0x4)=0xc) readv(r0, &(0x7f0000dd2000)=[{&(0x7f0000512000)=""/238, 0xee}], 0x1) [ 81.192449] binder: unexpected work type, 4, not freed [ 81.198503] binder: undelivered TRANSACTION_COMPLETE [ 81.213372] binder: 15136:15141 ERROR: BC_REGISTER_LOOPER called without request 2017/12/24 06:44:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ea6000)='./file0\x00', 0x0) r0 = creat(&(0x7f000041a000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f000002c000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x12, r1, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000908000)='user\x00', &(0x7f000001b000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000c13000)="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", 0x1000, 0x0) accept4$unix(r0, &(0x7f0000bb0000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000cea000-0x4)=0x8, 0x80800) r3 = request_key(&(0x7f000043f000)='asymmetric\x00', &(0x7f0000250000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00003d8000-0x2)='#\x00', 0xfffffffffffffff8) r4 = add_key$user(&(0x7f00005da000-0x5)='user\x00', &(0x7f0000d5c000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000351000-0xa0)="15baf07020710ec9f2ded4cc412f0e61a40fc9ddb951180f9f7d8371f8a7496a2009df7c23c0997fabcf9e9b1332f84a5eab65719cf5ba8b8efa25d0d489d146143342d4d7a1af2d226c26c138f36d23b2f9e3e8a611d8afc61405f5628e39bae03035d1ea68c981c21aa9e3da9d3c1d6e9055203175a53e2acf2e9f157978b4224d878d7e689910a68451b505f7d92b72e67b35e35c5208abd5b4484d54935c", 0xa0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f000058e000-0xc)={r2, r3, r4}, &(0x7f0000d8a000)=""/103, 0x67, &(0x7f000006d000)={&(0x7f000021d000)={'sha3-256'}, &(0x7f0000a6d000)="027b0fe9638e58a260679635c40d541f729474372f981937766c1debb1094703e42403820bfd9ba17e949b7d3587dcb99aad95bfaded8313879e69266045fe8d5fd24a85c2fc10faa860f267ee00c3e1e3a8be5d6abb3ec048c16c6894e69f287e541355f87fa96a298daccd87b32407ea677956656b2a1f11f43d36d24b15c008ff091c17a85400ea5b4564983a3e302df72ee925dcd66e07ad28e6ba4c11e370567a820250c0be019140ab79852588cad1eae153c586b7b218ef9a3bb7ca66ce5bc23b1374654919a93a64879707990e", 0xd1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r1 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) ppoll(&(0x7f0000726000-0x20)=[{r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f0000880000-0x10)={0x77359400, 0x0}, &(0x7f0000fb0000-0x8)={0x0}, 0x8) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f000071e000-0x4)=0x0) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000734000-0x12)='net/ip6_flowlabel\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00001b7000)='/dev/vga_arbiter\x00', 0x20101, 0x0) [ 81.214497] binder: 15136:15161 got reply transaction with bad transaction stack, transaction 865 has target 15136:0 [ 81.214505] binder: 15136:15161 transaction failed 29201/-71, size 24-8 line 2935 [ 81.215720] binder: 15136:15141 got transaction to invalid handle [ 81.215727] binder: 15136:15141 transaction failed 29201/-22, size 0-8 line 3004 [ 81.319527] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00004d2000)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f00000a8000-0x8)='./file0\x00', 0xa0) connect$netrom(r1, &(0x7f00001eb000-0x48)=@full={{0x3, {"5b714246187ca7"}, 0xf428}, [{"f7af15ca6879c5"}, {"0d7fb5d965f294"}, {"3a747acdcce106"}, {"8cba8220cc1606"}, {"235aade0e65660"}, {"c7d91d5d97a8b7"}, {"ca523fc9da9098"}, {"02575a59a6a6f0"}]}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000084b000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0xffffffff00000001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x420000008923, &(0x7f000040b000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x1}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000207000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f000064e000)=0x0, &(0x7f000043f000-0x4)=0x4) lookup_dcookie(0xd5, &(0x7f0000984000-0xb)=""/11, 0xb) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000b59000)={@generic="0c77b92f7f114ab7dc81acec63aa5b1a", @ifru_names=@generic="d7d6311e8b92dbe06660899b7dbc81c0"}) 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xc, 0xfffffffffffffffe, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000496000-0x4)=""/4, &(0x7f0000021000)=0x4) write(r0, &(0x7f0000004000-0x25)="24000000100005e64d06000800e80103033901001000020000000000000000f1e2005609", 0x24) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000013c000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) geteuid() 2017/12/24 06:44:41 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000008000)='/dev/urandom\x00', 0x0, 0x800) ioctl$void(r0, 0xc0045c7f) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ipx_IPX_TYPE(r3, 0x100, 0x1, &(0x7f0000002000)=0x0, 0x4) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='comm\x00') ftruncate(r1, 0x3) ftruncate(r1, 0x2e5d) rt_sigqueueinfo(r0, 0x1e, &(0x7f00003e9000)={0x24, 0x4, 0xd9c, 0x1}) sched_getparam(r0, &(0x7f0000c41000)=0x0) 2017/12/24 06:44:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000841000-0x1c)=@req3={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000774000)='/selinux/load\x00', 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000e7e000-0x4)=0x0, &(0x7f0000d7a000)=0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000802000)={0x401, 0x80000000, 0x26c3b3cd, 0x4, 0xffffffffffffffff, 0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:41 executing program 7: clock_gettime(0x0, &(0x7f0000fa2000-0x10)={0x0, 0x0}) nanosleep(&(0x7f0000e52000-0x10)={r0, r1+10000000}, &(0x7f0000c18000)={0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000cb0000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x0}, 0x800, {0x80, 0x1}, 0x400, 0x1, 0x5a53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mknod(&(0x7f0000001000-0x8)='./file0\x00', 0x5, 0x19) r3 = accept4(r2, &(0x7f0000000000)=@hci={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x6, 0x80800) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001000-0x8)={0x2, [0x4, 0x1]}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r2, 0x0, &(0x7f0000001000)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5402, &(0x7f0000003000-0x14)={0x7f, 0x7, 0x9, 0x9, 0x5, 0x2, 0xd3b9, 0x8, 0x8f4, 0x3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003000-0x4)=0x0) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000001000)='./file0\x00', &(0x7f0000001000-0x7)='sockfs\x00', 0x12000, 0x0) readlinkat(r2, &(0x7f0000002000-0x6)='./file0\x00', &(0x7f0000000000)=""/114, 0x72) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ax25(r2, 0x0, &(0x7f0000004000)=0x0, 0x80000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000005000+0x73)={&(0x7f0000004000/0x1000)=nil, 0x0, 0x1, 0x25, &(0x7f0000003000/0x2000)=nil, 0x7ff}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000001000-0x56)=""/86, &(0x7f0000001000-0x4)=0x56) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$llc(r2, &(0x7f0000007000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000006000)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000005000-0x98)={0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000001, 0xed}, &(0x7f0000008000-0x4)=0x98) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000008000-0x20)={0x1, 0x7, 0x3, 0x10000, 0x1200000000, 0x80000000, 0x1ff, 0x100000000, r4}, &(0x7f0000007000)=0x20) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004c5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000530000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20000000000039, &(0x7f0000ff7000)="ff0204000000def31d001100000000d8144e000000000205", 0x18) 2017/12/24 06:44:41 executing program 2: r0 = creat(&(0x7f0000250000-0x8)='./file0\x00', 0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000-0x5)='yeah\x00', 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000e63000-0x4)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000f0000-0x7)='nz/uts\x00') ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f000060f000-0x4)=0x0) setns(r2, 0x0) 2017/12/24 06:44:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000016000-0xc)='./file0\x00', 0x10) fallocate(r0, 0x1, 0x10001, 0x76) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000035000)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) truncate(&(0x7f0000034000)='./file0/bus\x00', 0x8002) lseek(r2, 0x0, 0x4) 2017/12/24 06:44:41 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000b80000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x8, 0x800) syncfs(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000e9c000)='./file0\x00', 0x200000110) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00005ea000)=""/237) r2 = add_key(&(0x7f00002f0000-0xa)='encrypted\x00', &(0x7f0000672000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000b45000)="9b", 0x1, 0xfffffffffffffff8) request_key(&(0x7f000071d000)='syzkaller\x00', &(0x7f0000a62000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000cd0000)="47504c2540ee6e6f64657673656c662b656d315a2e3a776c616e3100", 0xfffffffffffffffa) r3 = syz_open_dev$sndtimer(&(0x7f00005fd000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00001fc000-0xa0)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x7, 0x1, 0x8, 0x60}, &(0x7f00003a4000)=0xa0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000410000-0x14)={r4, 0x1a, 0x9, 0x3, 0x8, 0x1f}, &(0x7f0000345000)=0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000aeb000-0x1b)=""/0) keyctl$negate(0xd, r2, 0x800000000040000b, r2) r5 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, []}) getpeername$ipx(r5, &(0x7f000013f000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000f83000-0x4)=0x10) prctl$intptr(0x17, 0x80000000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00004bf000-0x78)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000082d000)=@generic="7c5dfe4663093c1fe4beecdc7e4b4a71", 0x0, 0x0, 0x0}) [ 81.324971] binder: undelivered TRANSACTION_COMPLETE [ 81.330216] binder: undelivered transaction 860, process died. [ 81.339619] binder: release 15136:15161 transaction 865 out, still active [ 81.352360] binder: BINDER_SET_CONTEXT_MGR already set [ 81.353757] binder: undelivered TRANSACTION_COMPLETE [ 81.353765] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.371662] binder: 15199:15203 ioctl 40046207 0 returned -16 [ 81.371936] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.371991] binder: send failed reply for transaction 865, target dead [ 81.384863] binder: 15199:15219 ERROR: BC_REGISTER_LOOPER called without request [ 81.392534] binder: 15199:15219 transaction failed 29189/-22, size 0-0 line 3004 [ 81.410180] : renamed from syz0 [ 81.415190] binder: 15199:15203 got transaction to invalid handle [ 81.421695] binder: 15199:15203 transaction failed 29201/-22, size 0-8 line 3004 [ 81.439253] binder: 15199:15219 got transaction to invalid handle [ 81.445555] binder: 15199:15219 transaction failed 29201/-22, size 0-8 line 3004 [ 81.465276] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.471347] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.477077] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x8000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x3, 0x0, 0x80, 0x0}, 0x20) 2017/12/24 06:44:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0x200000004, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000109000-0x1e)=""/30, &(0x7f0000707000-0x4)=0x1e) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000040f000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f00006c9000-0x4)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f000032e000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) 2017/12/24 06:44:42 executing program 7: r0 = inotify_init1(0x0) r1 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000001000-0x8)='./file0\x00', 0xe000, 0x20) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002000-0x8)=@assoc_value={0x0, 0x400}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000+0x77b)={r3, 0x9, 0x965, 0xb5d, 0x4, 0x4, 0x5, 0x1000, {0x0, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x0, 0x5, 0x7, 0xce}}, &(0x7f000005a000)=0xb8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001000)=0x0, &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001000-0xbb)={r4, 0xb3, "34756aa48a3c4d0d0ffb75f0408b590c19b313aec9334d89eb42fe4171a4f3cf61f96d47bc941de9c7c49f6d59b0294d9ca6b0acf7a253de35455403010f4c0897f213c2a1a836956ca710a977fb504fb03ad03cc4836e5801d851de3c0d5d447142f3d1bbc2534ea53215def19c38005ece74f643b753d366898b93837a0c05f086efc242b4425817e372e4d4554c56d9773a320358a951f40009053aa69715e001e9837a94ef6cda118fe43622777d4fd7f2"}, &(0x7f0000001000-0x4)=0xbb) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000001000)=""/241) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000002000-0x10)={0x101, 0xffffffff, 0x1000, 0x0, 0x1, 0x2, 0x3ff, 0x1, 0x401, 0x7bf}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000fc2000)={0x0, 0x0}) 2017/12/24 06:44:42 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mq_unlink(&(0x7f0000014000-0xf)="5d2f7d656d31285e5c2f2c1f3cf5a1") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000ae3000)={&(0x7f0000ea5000/0x1000)=nil, 0x1000}) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/24 06:44:42 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getparam(r0, &(0x7f00002e6000-0x4)=0x0) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000cc0000-0x38)={0x0, 0x0, &(0x7f0000ac3000)=[], 0x0, &(0x7f0000378000)=[], 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00003d2000-0x4)=0x3, 0x4) 2017/12/24 06:44:42 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000b90000-0xb8)={0x0, 0x8, 0xc160000000000000, 0x7, 0xffff, 0x2, 0x7, 0x2, {0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001, 0x1, 0xfffffffffffffff9, 0x0, 0x93}}, &(0x7f0000cca000)=0xb8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000a62000)={r1, 0x1000, "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"}, &(0x7f0000f2c000-0x4)=0x1008) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00000fc000)={0x19980330, 0x0}, &(0x7f0000244000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000c77000-0xe8)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) 2017/12/24 06:44:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16, 0x0, 0x0, 0x0}]}) faccessat(0xffffffffffffffff, &(0x7f00006e5000-0x8)='./file0\x00', 0x114, 0x0) socketpair$inet(0x2, 0x800, 0x10000, &(0x7f00000aa000)={0x0, 0x0}) ioctl$int_out(r0, 0x5462, &(0x7f0000c18000)=0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000597000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f000007a000)={{{{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xa3e}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x4, 0x3c71, 0x7ff, "25179a3c95f0cfb277aadb27ae1dea4a5f753d15b8e3dac6b174bce21d47767424b48d1ebda75c11590ed6911088bc28ac1e9d4206f2fd1af45ff9163c9dd4d45a0d271f8bfc61bd9f1fff2deee2dcee"}, 0x160) 2017/12/24 06:44:42 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f000000a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:42 executing program 6: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000015000)='./file0\x00', 0x600281, 0x88) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f000001b000)={0x2, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x52, 0x614, 0x7, 0x1, &(0x7f000001b000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x7, 0x5, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f000000b000-0x28)={@common='tunl0\x00', &(0x7f000000a000)=@ethtool_eee={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:42 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$inet6(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000001000)=0x1c) setns(r0, 0x40000000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002000)={0x0, 0x0}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000003000)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000003000-0xc)={r2, 0x0, r0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000004000)={0x8, 0x8}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000006000-0x3e)=""/62) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x2, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000007000-0x98)={0x0, @in6={{0xa, 0x2, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x8001}, &(0x7f0000003000)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002000-0x2)={r5, 0x2}, &(0x7f0000005000)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000008000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000008000)={0x100, 0x100000000, 0x79, 0x7, 0x0, 0x8}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8, 0xa, 0x7, &(0x7f0000009000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000008000)=""/33) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f000000a000)={r5, @in6={{0xa, 0x3, 0x7, @loopback={0x0, 0x1}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x1, 0x8, 0xfffffffffffff061, 0xa0}, 0xa0) [ 81.550174] binder: 15226:15227 ERROR: BC_REGISTER_LOOPER called without request [ 81.574052] binder: 15226:15227 got transaction with invalid offsets ptr [ 81.582957] binder: 15226:15227 transaction failed 29201/-14, size 0-8 line 3155 [ 81.593120] binder: unexpected work type, 4, not freed [ 81.599430] binder: undelivered TRANSACTION_COMPLETE [ 81.601484] binder: 15226:15252 ERROR: BC_REGISTER_LOOPER called without request [ 81.603896] binder: 15226:15252 got transaction to invalid handle [ 81.603903] binder: 15226:15252 transaction failed 29201/-22, size 0-8 line 3004 [ 81.603933] binder: 15226:15227 got reply transaction with bad transaction stack, transaction 879 has target 15226:0 [ 81.603941] binder: 15226:15227 transaction failed 29201/-71, size 24-8 line 2935 [ 81.644957] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000e8c000)='/selinux/access\x00', 0x2, 0x0) r1 = accept4$ipx(r0, 0x0, &(0x7f0000079000-0x4)=0x0, 0x7fc) setsockopt(r1, 0x0, 0x6, &(0x7f00006c2000-0xa2)="a6eae57330f25961893170b70c80f7056c50668c3a4c84122e65a83f820dcb1d483661c2cbe620a87efb2ec310844134a89ff84a71ee87730f5bea84a9c3d5990b5daa49ff5329b403e3ea2499dc1ec66542b093948b91fe491f8cb3f32e0bac1267b1c01ab306d0e4842045ca922494a5b614bc8850a1d213660d41188e42c3d0c0d5827860a9689350cdab9124da55abe68fa646dc8669b759f2894112bec80a55", 0xa2) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000f71000-0x26)="26000000420047f1938d000000000000000050f16b8dbdea03fffff7454a6803e517c76e328a", 0x26) 2017/12/24 06:44:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00008b9000)={{{@in=@broadcast=0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000259000-0x4)=0xe8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2017/12/24 06:44:42 executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00003cc000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffd, 0x0, &(0x7f0000c0d000)={0x77359400, 0x0}, &(0x7f000082d000)={0x0, 0x0}) 2017/12/24 06:44:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x7, 0x4, 0x689) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00009e5000)={0x0, {0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:42 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006000-0x11)='/selinux/enforce\x00', 0x101100, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f000000c000-0x1000)=""/4096) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000008000)={0xffffffff, 0x2, 0x9, 0x2, 0x0}, &(0x7f000000a000)=0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f000000c000-0x11)='/selinux/context\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000006000-0x10)={0x618, 0x200, 0x7d900000000, 0x3, r4}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) 2017/12/24 06:44:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000002000-0x10)={0x2, 0x2, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet(0x2, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000ef000-0x8)={0x0, 0x0}, &(0x7f0000089000)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000ab7000)={r2, 0x7, 0xdb, 0x8, 0x3f, 0x9}, 0x14) connect$inet(r1, &(0x7f0000394000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00008c9000-0x4)=0x0, 0x4) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000faa000)="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", 0xfd) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r1, &(0x7f0000afc000-0x10)={0x2, 0x2, @rand_addr=0x8001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000367000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000079a000)=0x0) getsockopt$inet_buf(r3, 0x0, 0x483, &(0x7f00008e6000)=""/0, &(0x7f0000000000)=0x0) 2017/12/24 06:44:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x8b) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000043a000-0x9)='/dev/ppp\x00', 0x543000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000627000)=0x0, &(0x7f00001e1000-0x4)=0x4) r2 = socket$key(0xf, 0x3, 0x2) dup3(r2, r1, 0x80000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000303000)={{{@in=@empty=0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0xe0000001, 0x0, 0x0}, 0x0, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xac) 2017/12/24 06:44:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00005eb000)='/dev/hwrng\x00', 0x4000, 0x0) fcntl$getown(r0, 0x9) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00007ac000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x80287010, &(0x7f0000325000)={0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2017/12/24 06:44:42 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0x33)="776c61000000074b6d65ffff79542d747275732085647d26776c61ee4a766dcb0c00002e74010000830000f0c37b49620000", 0xfffffffffffffffa) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x8, 0x8000008, r0, &(0x7f0000003000-0x8)='./file0\x00') 2017/12/24 06:44:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) fallocate(r0, 0x3, 0x5, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000800000-0xb0)={{0xb9fa, 0x1}, 'port0\x00', 0x40, 0x0, 0x100000001, 0x2400, 0x768df969, 0xfffffffffffffff7, 0x7c9, 0x0, 0x3, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$loop(&(0x7f0000571000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000afb000)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11, 0x4, "23b25b04afa6ab76f8f4a02cfe6a08368c8084fa56255ac88282403e8ab501f005708d3dad4f4b1b6b028fcfaf01a7eb3aef6d684f1e95fe4d04bc9a2eab6125", "5d05e2498e92d37f2e955b776ae2c21aeaef0c3388145d128d79a259b6b902f7", [0x40000, 0x2], 0x0}) ioctl(r1, 0x4000000000001277, &(0x7f0000b25000)="a7a90000000000000048f550df6b328b1c22552c963ae146f02fa1f8d4290200000000000007b651587cde194de9017f2f270700000077c98a30577c24e0fddca8f78c65b9d3d58157ebf773ac09e65fc6af8eb42b5c2f41b1e06bb39252f635ffe3ac000000091239b7675efe14d4266b943e3fe6a4013b9b878d08919faf79378562c3c06b765a58b328a7def456e37d69ce") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000ffe000-0xa0)={0x0, @in6={{0xa, 0x2, 0xffff, @loopback={0x0, 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x100, 0x563, 0x4, 0x3}, &(0x7f0000073000-0x4)=0xa0) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000aab000-0x6)={r2, 0x8}, 0x6) 2017/12/24 06:44:42 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000006000-0x4)=0x1, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000008000)="43a662c17f5f121957ed1b93b2c18a59325b937c2bfcfcfed684dcda0cbe7b7f67f01ced6d572beedbd4ad6a1302bc320d71fa8a66b71db5c60e2e4aba13654b40c53fd0ec86e159bb4a8b25420d1d7cb79f0fd4ba26e8711b60e3c0c78834cfe04810690bc07675952e8cbcd90f1c", 0x6f, 0x20000810, &(0x7f0000008000)={0xa, 0x3, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3}, 0x1c) [ 81.650959] binder: undelivered TRANSACTION_COMPLETE [ 81.656071] binder: undelivered transaction 874, process died. [ 81.664363] binder: release 15226:15227 transaction 879 out, still active [ 81.671805] binder: BINDER_SET_CONTEXT_MGR already set [ 81.675874] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000070b000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000494000-0x4)=0xcc8, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@common='bcsh0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x21ff}) recvmmsg(0xffffffffffffffff, &(0x7f000094f000)=[{{&(0x7f0000e19000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f00006ca000)=[{&(0x7f0000703000)=""/24, 0x18}], 0x1, &(0x7f0000560000)=""/129, 0x81, 0x0}, 0x0}], 0x1, 0x0, 0x0) 2017/12/24 06:44:42 executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x4) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000934000)="", 0x0) 2017/12/24 06:44:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000f2c000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000d00000-0xe)='/dev/keychord\x00', 0x0, 0x0) [ 81.675882] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.730240] binder: 15264:15272 ioctl 40046207 0 returned -16 [ 81.730286] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.730309] binder: send failed reply for transaction 879, target dead [ 81.744373] device gre0 entered promiscuous mode [ 81.756036] binder: 15264:15288 ERROR: BC_REGISTER_LOOPER called without request [ 81.757209] binder: 15264:15288 transaction failed 29189/-22, size -4294967293-0 line 3004 [ 81.782368] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:42 executing program 7: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000002000-0x58)={0x4c96, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000005000)='/dev/snd/seq\x00', 0x0, 0x404000) 2017/12/24 06:44:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x484, &(0x7f0000002000-0x18)=""/24, &(0x7f0000000000)=0x18) listen(r0, 0x200000021000002) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002000-0x7)='fdinfo\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001000-0x4)=0xc73c, 0x4) 2017/12/24 06:44:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000bb8000)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000482000)=[{&(0x7f0000af9000)=""/127, 0x7f}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x6) 2017/12/24 06:44:42 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000312000)='/dev/loop#\x00', 0x0, 0x101086) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000034b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x17, 0x0, "773fa771e28221035e121ccf083d91966a46d85091c673a445ce0a771894e0358c649956a2bd2ec9e04f383eb7025ee6bf9ace053aa10160f89250cb6cb5d119", "12e10cb378b0d75a16895b67b957fca8e1f8f7b5a0cda2742381af29c6e3e91ee942e2a666de58e031a77f68bf6dd3523dbf3d3769d0fa649cc1fbc501014d22", "f52a96f116939d51dd528f3a1e8041bba6781da128f92a8cc6d21e9e29bce7fd", [0x0, 0x0]}) 2017/12/24 06:44:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000)={0x1, &(0x7f0000012000)=[{0x6, 0x0, 0x0, 0xffffffffffffffff}]}) r0 = userfaultfd(0x0) r1 = epoll_create(0xd) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000860000)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000814000-0xa1)={0x0, 0x99, "1cfed1995578899a154db29948aebbbdfec8792ad208926a830e0ea9d2180ceb178a06c7ea13e41879ff55680b081a8a5784096c8c461fe59297112e733329eb02221b44583747bb1d500ed4b5a52e35b7a995f95a44d868a0f8eb9f2c890dd75bfa95e1f46dd1fd31ae6c2b65cf3caf3d562d08ff2188177efd3540a753c4b2141bdfe23ff347c58887e5ecec477a099e7bc035f10cd6916c"}, &(0x7f0000c86000)=0xa1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000dd0000)={r3, @in6={{0xa, 0x1, 0x60, @loopback={0x0, 0x1}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7ff, 0x4, 0x9, 0x6, 0x82e8, 0x3, 0xbf, 0x7, 0x1d3a, 0x20, 0xcaa0000000000000, 0x7, 0x5, 0x0, 0x62]}, &(0x7f000002f000-0x4)=0x108) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ff7000-0xc)={0x0, 0x0}) epoll_pwait(r1, &(0x7f00005f2000)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000ffb000-0x8)={0x0}, 0x8) 2017/12/24 06:44:42 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000c000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f000000c000-0x4)=0x6dd2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000012000)={0x1d14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f0000f39000)="", &(0x7f00008a3000)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") r0 = syz_open_dev$mice(&(0x7f000046a000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000826000)={0x0, 0xba, "200bbd2cf203d0c358c97f9662957b96fb883252616417e8b8ca51e8eb08aa1c289d2776a78f80f48be04dd26af088347b4bd9c0a30c569849a50fe9f6c6a7e495370a2cff0fdb597860328de88a286c9958fe91d56016f47589dc4c35b2c0f2851f55eae2a5ce8b204f2b9e4ec79fc7632b711d57e7b73b23db6291c87c0b9e18ca97bc90a73614d1c1e8904a16003aad6fce052f1a5cd620957fdfeed948eb3e97a046a9077ce7ff711017072a3d5de9d6ac8ce29c0d020de6"}, &(0x7f00003ab000)=0xc2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000314000)={r1, @in6={{0xa, 0x0, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000c1000-0x4)=0x8c) 2017/12/24 06:44:42 executing program 0: mmap(&(0x7f0000000000/0xf0f000)=nil, 0xf0f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000003000-0x37)={0x0, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003000-0x10)=@common='ip6_vti0\x00', 0x0, 0x0, 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) [ 81.805743] binder: 15264:15288 ERROR: BC_REGISTER_LOOPER called without request [ 81.815401] binder_alloc: 15264: binder_alloc_buf, no vma [ 81.821279] binder: 15264:15272 transaction failed 29189/-3, size -4294967293-0 line 3127 [ 81.833241] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000ada000-0x4)=0x0, 0x4) ioctl$sock_ifreq(r0, 0xdee73066e4641a58, &(0x7f000094e000-0x28)={@common='irlan0\x00', @ifru_map={0xfffffffffffff800, 0x2, 0x7, 0x1000, 0x1000, 0x5}}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000b39000)='/selinux/policy\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x80000001, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000ab3000-0x4)={0x0}, &(0x7f0000b4a000-0x4)=0x4) open(&(0x7f0000736000-0x8)='./file0\x00', 0x2, 0x10) execveat(r1, &(0x7f0000da2000)='./file0\x00', &(0x7f000029e000-0x10)=[&(0x7f00006c5000-0x9)='usereth0\x00', &(0x7f0000970000-0xf)='}[trusted{proc\x00'], &(0x7f0000608000-0x20)=[&(0x7f00008be000-0x2)='$\x00', &(0x7f0000ea0000-0x8)=',system\x00', &(0x7f0000951000-0x1)='\x00', &(0x7f0000cc8000)='@ppp1\x00'], 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d04000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2017/12/24 06:44:42 executing program 6: mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x8000e, 0x3, &(0x7f0000fde000)={0x0, 0x0}) fcntl$lock(r1, 0x25, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, r0}) 2017/12/24 06:44:42 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a27000/0x4000)=nil, 0x4000, &(0x7f0000001000-0x3e)=""/62) r0 = syz_open_dev$evdev(&(0x7f0000001000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000002000)=""/130) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001000-0xc)={0x1, 0x0}) [ 81.884709] [ 81.886376] ===================================== [ 81.891202] [ BUG: bad unlock balance detected! ] [ 81.896032] 4.9.71-g2506378 #113 Not tainted [ 81.900421] ------------------------------------- [ 81.905238] syz-executor4/15327 is trying to release lock ([ 81.909351] binder: 15319:15324 ERROR: BC_REGISTER_LOOPER called without request [ 81.918257] mrt_lock) at: [] ipmr_mfc_seq_stop+0xe4/0x140 [ 81.925712] but there are no more locks to release! [ 81.930703] [ 81.930703] other info that might help us debug this: [ 81.936037] binder: 15319:15324 got transaction with invalid offsets ptr [ 81.936054] binder: 15319:15324 transaction failed 29201/-14, size 0-8 line 3155 [ 81.936302] binder: unexpected work type, 4, not freed [ 81.936304] binder: undelivered TRANSACTION_COMPLETE [ 81.936309] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.936314] binder: undelivered TRANSACTION_COMPLETE [ 81.936319] binder: undelivered transaction 887, process died. [ 81.978343] 2 locks held by syz-executor4/15327: [ 81.983059] #0: (sb_writers#7){.+.+.+}, at: [] do_sendfile+0x9ff/0xd30 [ 81.992011] #1: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 [ 82.000229] [ 82.000229] stack backtrace: [ 82.004694] CPU: 0 PID: 15327 Comm: syz-executor4 Not tainted 4.9.71-g2506378 #113 [ 82.012365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.021687] ffff8801d1ba72a8 ffffffff81d922b9 ffffffff849afcf8 ffff8801d1fe4800 [ 82.029638] ffffffff834e4b84 ffffffff849afcf8 ffff8801d1fe5088 ffff8801d1ba72d8 [ 82.037589] ffffffff81235fa4 dffffc0000000000 ffffffff849afcf8 00000000ffffffff [ 82.045544] Call Trace: [ 82.048097] [] dump_stack+0xc1/0x128 [ 82.053428] [] ? ipmr_mfc_seq_stop+0xe4/0x140 [ 82.059539] [] print_unlock_imbalance_bug+0x174/0x1a0 [ 82.066343] [] lock_release+0x6f8/0xb80 [ 82.071935] [] ? traverse+0x3cf/0x900 [ 82.077350] [] ? memcpy+0x45/0x50 [ 82.082418] [] ? ipmr_mfc_seq_stop+0xe4/0x140 [ 82.088530] [] _raw_read_unlock+0x1a/0x50 [ 82.094293] [] ipmr_mfc_seq_stop+0xe4/0x140 [ 82.100237] [] seq_read+0xa83/0x1290 [ 82.105568] [] ? seq_escape+0x200/0x200 [ 82.111164] [] ? __fsnotify_parent+0xbc/0x340 [ 82.117274] [] ? fsnotify+0x86/0xf30 [ 82.122601] [] ? fsnotify+0xf30/0xf30 [ 82.128018] [] ? seq_escape+0x200/0x200 [ 82.133607] [] proc_reg_read+0xef/0x170 [ 82.139198] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 82.146176] [] ? security_file_permission+0x89/0x1e0 [ 82.152892] [] ? proc_reg_write+0x170/0x170 [ 82.158829] [] ? proc_reg_write+0x170/0x170 [ 82.164767] [] do_readv_writev+0x520/0x750 [ 82.170615] [] ? vfs_write+0x530/0x530 [ 82.176120] [] ? kasan_unpoison_shadow+0x35/0x50 [ 82.182492] [] ? push_pipe+0x372/0x770 [ 82.187994] [] ? sanity+0x1ff/0x610 [ 82.193237] [] ? iov_iter_get_pages_alloc+0x2c7/0xf10 [ 82.200042] [] ? __unwind_start+0x1e3/0x3c0 [ 82.205977] [] vfs_readv+0x84/0xc0 [ 82.211134] [] default_file_splice_read+0x43f/0x7a0 [ 82.217767] [] ? depot_save_stack+0x122/0x4a0 [ 82.223877] [] ? do_splice_direct+0x270/0x270 [ 82.229994] [] ? save_stack+0x43/0xd0 [ 82.235419] [] ? kasan_kmalloc+0xad/0xe0 [ 82.241095] [] ? __kmalloc+0x11d/0x310 [ 82.246598] [] ? alloc_pipe_info+0x135/0x350 [ 82.252620] [] ? splice_direct_to_actor+0x64a/0x800 [ 82.259250] [] ? do_splice_direct+0x1a7/0x270 [ 82.265362] [] ? do_sendfile+0x54b/0xd30 [ 82.271041] [] ? entry_SYSCALL_64_fastpath+0x23/0xc6 [ 82.277763] [] ? __fsnotify_parent+0xbc/0x340 [ 82.283870] [] ? fsnotify+0x86/0xf30 [ 82.289201] [] ? fsnotify+0xf30/0xf30 [ 82.294618] [] ? avc_policy_seqno+0x9/0x20 [ 82.300468] [] ? selinux_file_permission+0x82/0x460 [ 82.307098] [] ? security_file_permission+0x89/0x1e0 [ 82.313816] [] ? rw_verify_area+0xe5/0x2b0 [ 82.319665] [] ? do_splice_direct+0x270/0x270 [ 82.325775] [] do_splice_to+0x10a/0x160 [ 82.331368] [] splice_direct_to_actor+0x24d/0x800 [ 82.337825] [] ? generic_pipe_buf_nosteal+0x10/0x10 [ 82.344457] [] ? do_splice_to+0x160/0x160 [ 82.350232] [] ? security_file_permission+0x89/0x1e0 [ 82.356955] [] ? rw_verify_area+0xe5/0x2b0 [ 82.362804] [] do_splice_direct+0x1a7/0x270 [ 82.368740] [] ? splice_direct_to_actor+0x800/0x800 [ 82.375371] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 82.381914] [] ? __sb_start_write+0x14a/0x310 [ 82.388026] [] do_sendfile+0x54b/0xd30 [ 82.393528] [] ? do_compat_pwritev64+0x100/0x100 [ 82.399898] [] ? retint_kernel+0x2d/0x2d [ 82.405574] [] SyS_sendfile64+0xd1/0x160 [ 82.411251] [] ? SyS_sendfile+0x160/0x160 [ 82.417015] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 82.423820] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 82.430364] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 82.445910] binder: 15319:15350 ERROR: BC_REGISTER_LOOPER called without request [ 82.460256] binder: 15319:15324 got reply transaction with bad transaction stack, transaction 892 has target 15319:0 [ 82.471935] binder: 15319:15324 transaction failed 29201/-71, size 24-8 line 2935 [ 82.480709] binder: 15319:15324 got transaction to invalid handle [ 82.488034] binder: 15319:15324 transaction failed 29201/-22, size 0-8 line 3004 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000c6000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000b66000)={0x10, 0x0, 'client0\x00', 0x0, "834c69b67c101ace", "c3340e018be73f652b8473cabf47b59a67ff135bad83dc9302c49558c80048c2", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$netlink(0x10, 0x3, 0x13) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00004a2000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00005fe000)='/selinux/checkreqprot\x00', 0x400000, 0x0) tee(r0, r1, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000b12000-0x9)='/dev/sg#\x00', 0x8001, 0x2000) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f000044e000-0x4)=0xd0, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000970000-0x8)={0x0, 0x0}) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000000)=0x0, 0x4) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000e9c000)='./file0\x00', 0x200000110) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00005ea000)=""/237) r1 = request_key(&(0x7f0000f73000-0x8)='rxrpc_s\x00', &(0x7f0000afe000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000143000)='/@bdev/,\x00', 0xfffffffffffffffa) r2 = add_key(&(0x7f00002f0000-0xa)='keyring\x00', &(0x7f0000235000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000722000)="9ba1598c6f0529670df223b3d720cb9e5f1b7a973798d7ec979c194af44239c665940c0f67e72d082cb09759c58134ca785c0600d90e9bead1c13399fd23065b1fc4ed5f28a71e2742cb874453762d", 0x4f, r1) r3 = request_key(&(0x7f000071d000)='syzkaller\x00', &(0x7f0000a62000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000cd0000)="47504c2540ee6e6f64657673656c662b656d315a2e3a776c616e3100", 0xfffffffffffffffa) r4 = syz_open_dev$sndtimer(&(0x7f00005fd000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00004b9000-0x4)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000056c000)=0x0) rt_tgsigqueueinfo(r5, r6, 0x12, &(0x7f000029d000-0x2)={0x2c, 0x4, 0x240, 0x9}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000aeb000-0x1b)=""/0) keyctl$negate(0xd, r2, 0x7, r3) r7 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, []}) getpeername$ipx(r7, &(0x7f0000960000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000f83000-0x4)=0x10) prctl$intptr(0x17, 0x80000000) ioctl(r7, 0x8916, &(0x7f0000000000)="") ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00004bf000-0x78)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000082d000)=@generic="7c5dfe4663093c1fe4beecdc7e4b4a71", 0x0, 0x0, 0x0}) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000eb2000-0x8)='./file0\x00', 0x28042, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00009ac000-0x4)=0x3, 0x4) connect$inet(r0, &(0x7f0000bdb000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) pwritev(r0, &(0x7f0000ec2000)=[{&(0x7f0000391000-0x9f)="a1bac98633ab83ac3f4c9a916ad2463896ce8573b81cccff9d5f63292ee3831a7fd57552b67d5e1ace83069d864e5578a9564c0d001de186a5eb93ca063442d5194270c87645fcd6f8d9d2a08cb7a7fd1a8d6e7da713e824b6ec3173d649cdea152c927087497a628589a2e4c4735c58c4e48d267f702a3974a79f98371d400dad24f6f2783a06c012a8b27fd7fdbbfde9aceb04677c1611e03d60e30817e0", 0x9f}, {&(0x7f0000a57000)="db8c1466fec8baf6ea06e01310de189e16f7f957a57f7cf31f1c8bea9a9aab22699e1e8808954b7b869370f0c5ff2d6a94e56c18df1858c4dbb01cfca1daf6b3742edca23b2ab01fa36f2e1c8d2eec1994259b187e4de80d9f15f9158e85a9598796cd31eb08b958bf18aff1257d9254a34e4b8fcafc51b8b288c1e1d334bbd41c131bfba97b74fc793c857590adc143e07c0e39d51ab33fce0c82f08035c89db3cdbf878efb6e8cbb0e3800321c6b22d4e8a2c0dd4d0293e618302e8b447afe9f1955751d796cc05a5cfb4fbe6b147e5267c398e7", 0xd5}], 0x2, 0x0) fallocate(r1, 0x0, 0xfdff, 0x7e70) sendmsg$netlink(r0, &(0x7f0000ef8000-0x38)={0x0, 0x0, &(0x7f00002b1000-0x10)=[{&(0x7f0000556000)=[{0x10, 0x0, 0x0, 0x0, 0x0, ""}], 0x10}], 0x1, &(0x7f0000eb5000+0x132)=[], 0x0, 0x0}, 0x4008080) sendfile(r0, r1, &(0x7f000056b000-0x8)=0x0, 0xfffe) getpeername$inet(r1, &(0x7f0000c81000)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d8f000-0x4)=0x10) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) socket$inet_sctp(0x2, 0x5, 0x84) getgroups(0x0, &(0x7f0000b7d000)=[]) gettid() 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000008000)=0x0, &(0x7f0000008000)=0x0, &(0x7f0000009000-0x4)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009000-0xc)={0x0, 0x0, 0x0}, 0xc) setregid(r2, r3) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000004000-0x18)=[], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x1}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f000000b000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x1, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, 0x0, [0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffff9, 0x0]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x20, 0x0, 0x0}, 0x14) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000030e000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000f84000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f84000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000f85000-0x20)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f84000)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000dda000)=0xffffffffb739fc47) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000b9c000)={r1, 0x6a98}, 0x8) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001000+0xfde)=0x0, 0x4) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000fd7000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000080000003, 0x1}) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000441000)={@loopback=0x0, @rand_addr=0x0, @broadcast=0x0}, &(0x7f0000286000)=0xc) 2017/12/24 06:44:43 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000af6000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00007ce000-0xbc)={0x4, 0x3, 'client0\x00', 0x1, "bfe36efdbaea6433", "c3aa9db06c6208cd94f22ff1f8dcb239652d6fde5d8a0dab24ef26c1be719052", 0x80, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setpriority(0x2, 0x0, 0x0) [ 82.496759] binder: release 15319:15324 transaction 892 out, still active [ 82.503663] binder: undelivered TRANSACTION_COMPLETE [ 82.508755] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.514187] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.519639] binder: send failed reply for transaction 892, target dead 2017/12/24 06:44:43 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000be6000-0xc)='/dev/autofs\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5c, 0x0, &(0x7f00006ab000-0x5c)=[@dead_binder_done={0x40086310, 0x3}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f0000001000-0x20)=[@fda={0x66646185, 0x8, 0x2, 0x40}], &(0x7f0000000000)=[0x48, 0x0, 0x78]}}, @exit_looper={0x630d}], 0xef, 0x0, &(0x7f0000001000-0xef)="674e7ad371024ca6d57a391ec1da333fe3232ba90453e8d50f6fad2b5deb25ad66de6615930928f23bb7c6aeaabcdb489a6beef6c2667a8c88ff6aa38504c386509ac84a51b0f733c59b2ea889ca43729ba7695ae6d58311bf7719c1896618e22f3f26b1076500cd5c38b5375fd558214be2730ac374f09271b79722166d1c67d27d0bbe2d4e2bfb6c312b5f8e43d0006ca9ca1704fb6a1bfc114e02c01f464b52b3436b4c87ef0c54c765489c1a3ab2d9c8269be5c29cdcd853f8166b875303fe3eb9f5bd1fd5d27364551e1f536ed5a7f76e8cba23d3622ec8b3cb8ec66c8e9b65009442e82e3cb8df3b1920327d"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000bb1000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r1, &(0x7f000001a000-0x60)=[{&(0x7f0000005000-0x1000)='>', 0x1}], 0x1, 0x0) sync() msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000f9c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x1) mmap(&(0x7f00006a3000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f000071e000-0x40)=""/64, 0x40}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept$netrom(0xffffffffffffff9c, &(0x7f0000002000-0x48)=@full={{0x0, {""/7}, 0x0}, [{""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}]}, &(0x7f0000002000-0x4)=0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000f9c000)={0x0, 0x0, 0x0}, &(0x7f0000f9c000)=0xc) mmap(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000f9d000-0x11)='/dev/vga_arbiter\x00', 0x1094c1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000000)={r5, 0x2}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000002000-0x20)={0x0, 0x80, 0x1ff, 0x100000001, 0x2, 0x2}) r6 = inotify_add_watch(r0, &(0x7f0000001000-0x8)='./file0\x00', 0xa80) inotify_rm_watch(r0, r6) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000fb7000)='/dev/hwrng\x00', 0x400, 0x0) r0 = syz_open_dev$mice(&(0x7f0000ce3000-0x10)='/dev/input/mice\x00', 0x0, 0x0) unshare(0x400) timerfd_settime(r0, 0x0, &(0x7f0000cc5000-0x20)={{0x0, 0x0}, {0x0, 0x0}}, &(0x7f0000079000)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffff1, &(0x7f0000ee9000)={0x0, 0xb, 0x0, @thr={&(0x7f0000371000)="", &(0x7f0000363000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000234000)=0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000da1000-0xe)='/dev/keychord\x00', 0x4200, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00008f1000)={0x0}, 0x4) socket$inet(0x2, 0x3, 0x80000001) r1 = gettid() rt_sigqueueinfo(r1, 0x1f, &(0x7f00007a8000)={0x9, 0x3, 0x80, 0x7}) 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000262000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000e15000)={{0x4, 0x0}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000684000-0x9)='/dev/rtc\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000fe3000-0x38)=[@in6={0xa, 0x1, 0x3ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xe0}, @in6={0xa, 0x1, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5fbc}], 0x38) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053e000-0xc)={0x0, 0x0}) ioctl$TCXONC(r0, 0x540a, 0xffffffffffffffff) write(r0, &(0x7f0000caf000)="9c", 0x1) clone(0x0, &(0x7f0000da1000-0x53)="", &(0x7f0000b4a000)=0x0, &(0x7f00008f2000)=0x0, &(0x7f0000ba9000)="") ioctl$TCXONC(r0, 0x540a, 0x1) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xf1f000)=nil, 0xf1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000f1f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000f20000-0x8)='./file0\x00', 0x468c03, 0x48) ioctl$TUNSETPERSIST(r1, 0x400454cb, &(0x7f0000627000-0x4)=0x6) mmap(&(0x7f0000f1f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000f1f000)={&(0x7f0000218000)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f000079a000-0x40)=[], 0x0, &(0x7f0000f13000)=[], 0x0, 0x0}, 0x0) accept4$inet(r1, &(0x7f00002e6000-0x10)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000087d000)=0x10, 0x800) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000811000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r0, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) ftruncate(r0, 0x5) [ 82.596865] binder: 15367:15392 got reply transaction with bad transaction stack, transaction 896 has target 15367:0 [ 82.611923] binder: 15367:15392 transaction failed 29201/-71, size 24-8 line 2935 [ 82.620924] binder: 15367:15417 got transaction to invalid handle [ 82.620934] binder: 15367:15417 transaction failed 29201/-22, size 0-8 line 3004 [ 82.638662] binder: release 15367:15392 transaction 896 out, still active 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000977000-0xb)='/dev/hwrng\x00', 0x100, 0x0) lstat(&(0x7f0000b29000-0x8)='./file0\x00', &(0x7f0000470000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000029000)={0x0, 0x0, 0x0}, &(0x7f0000c4a000-0x4)=0xc) fchownat(r0, &(0x7f0000ad6000)='./file0\x00', r1, r2, 0x900) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) prctl$setfpexc(0xc, 0x80000) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)="") r3 = syz_open_dev$evdev(&(0x7f0000f75000)='/dev/input/event#\x00', 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000d47000-0x4)=0x0, &(0x7f0000ea1000-0x4)=0x4) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000e11000)=0x10000) r4 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) lseek(r4, 0x0, 0x4) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca)="", &(0x7f0000744000)=0x0, &(0x7f00008c8000)=0x0, &(0x7f00001a3000)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) syz_open_procfs(0x0, &(0x7f000083a000-0x48)='smaps\x00') execveat(0xffffffffffffffff, &(0x7f0000d14000-0x8)='./file0\x00', &(0x7f0000815000)=[], &(0x7f000058d000)=[], 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0xf52000)=nil, 0xf52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000f53000-0x8)='./file0\x00', &(0x7f0000294000-0x19)=@known='system.posix_acl_default\x00', &(0x7f0000f53000-0x5c)=""/92, 0x5c) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) gettid() socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000f53000-0x8)={0x0, 0x0}) ioctl$TIOCNOTTY(r1, 0x5422) sendmsg$key(r0, &(0x7f000057f000)={0x0, 0x0, &(0x7f0000837000-0x10)={&(0x7f00000a6000-0x20)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x66, 0x0, 0x0}]}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000f53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000f53000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f54000-0x4)=0xe8) ioprio_set$uid(0x3, r2, 0x1) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000302000)='/dev/rtc\x00', 0x204002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000881000)=0xfffffffffffffffd, 0x4) r1 = socket(0xd, 0x800, 0xffffffffffff8000) write(r1, &(0x7f000056f000-0x30)="220000001a00070adeffdd00ef001201014b81000500000207000000000000000500", 0x22) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000bcb000)=0x400, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000241000)={0x0, @rand_addr=0x0, @rand_addr=0x0}, &(0x7f0000859000)=0xc) 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000067000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x58, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00003db000)='bic\x00', 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000fb3000-0x8)={@multicast1=0xe0000001, @multicast1=0xe0000001}, 0x8) r4 = dup2(r0, r0) pipe(&(0x7f00000b9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xfffffdff, 0x0) writev(r2, &(0x7f0000231000)=[], 0x0) writev(r4, &(0x7f0000051000)=[{&(0x7f0000058000-0xe9d)="ad", 0x1}], 0x1) 2017/12/24 06:44:43 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000ebb000)='ns/user\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000001000)='limits\x00') 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000009000-0x4)=0x0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000000a000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f0000006000)={"08840249c6cf3ee9f967675664a13542", {0x4, 0xd93, 0x2, "a60d21a07fe2", 0x4095, 0x0}}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TTUNGETFILTER(r3, 0x801054db, &(0x7f0000009000-0x4a)=""/74) r4 = open(&(0x7f000000a000)='./file0\x00', 0x40000, 0x81) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f000000c000-0xad)={0x0, 0xa5, "9fac67da4d39561fb512f371898597ec179d9f6863e69b7482eaa1515c2af0cd61238f73778aca1810139a3edbee0f5686636313d7468bbbaec42cb7f31b21483f19337bb9b673853716cc6c67ba526deaa0617b134932aabd092a0b396494eb5599918ae81bd2abb8313c1565ecf9fd49c109a9ad8241d7bd9ba808ae901840cec41819b83f9fa7b9e8a075cb73551c3cc33ef2e103448d718eee95fb19a6835341f59377"}, &(0x7f000000a000)=0xad) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f000000b000-0x6)={r5, 0x9}, 0x6) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f000000d000-0x4)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000002000)='/dev/keychord\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f000000b000)=[], &(0x7f000000c000-0x20)=[0x38, 0x30, 0x38, 0x38]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xf54000)=nil, 0xf54000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f54000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f54000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f55000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f54000)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) mmap(&(0x7f0000f55000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f55000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000f56000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000f56000-0x4)=0x14) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fcf000)={0x0, 0x78, 0x24, 0x3, 0x0, 0xd94, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x6e, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003b3000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000021f000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fd2000)=0xc) sched_setaffinity(r0, 0x8, &(0x7f0000fd3000)=0x1) unlink(&(0x7f0000fd4000-0x8)='./file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$setfpexc(0xc, 0x180000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fd5000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f0000fd6000-0xb)='/dev/loop#\x00', 0x3, 0x42) r4 = memfd_create(&(0x7f0000fd3000)="fff8e1", 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000fd6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000fd6000)='/dev/ppp\x00', 0x80000, 0x0) sendfile(r2, r3, &(0x7f000024a000)=0x0, 0x2) [ 82.647524] binder: undelivered TRANSACTION_COMPLETE [ 82.652236] binder_alloc: 15367: binder_alloc_buf, no vma [ 82.652248] binder: 15367:15392 transaction failed 29189/-3, size 0-0 line 3127 [ 82.654728] binder: 15367:15371 got reply transaction with no transaction stack [ 82.654734] binder: 15367:15371 transaction failed 29201/-71, size 24-8 line 2920 [ 82.654747] binder: 15367:15392 got transaction to invalid handle 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00002b8000-0xb)='asymmetric\x00', &(0x7f00009ea000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000ab9000-0xf)='{GPLwlan1{user\x00', 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00004d9000)='[\x00') capset(&(0x7f0000401000)={0x20080522, 0x0}, &(0x7f00000da000)={0x0, 0x0, 0x0, 0x791c, 0x0, 0x0}) 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000a000)=[@acquire={0x40046305, 0x4}], 0x47, 0x0, &(0x7f0000008000)="d8fc1d016de371f1ffff000000000000bbb067d9de7b55e9eb000286c19fe0b08ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 82.654753] binder: 15367:15392 transaction failed 29201/-22, size 0-8 line 3004 [ 82.686974] binder: BINDER_SET_CONTEXT_MGR already set [ 82.686982] binder: 15423:15431 ioctl 40046207 0 returned -16 [ 82.689699] binder: 15423:15431 got transaction to invalid handle [ 82.689707] binder: 15423:15431 transaction failed 29201/-22, size 0-32 line 3004 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000000c000-0xb)='/dev/loop#\x00', 0x0, 0x800000004302) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000f4e000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) symlinkat(&(0x7f0000d7a000)='./file0\x00', r1, &(0x7f0000b7e000-0x8)='./file0\x00') writev(r0, &(0x7f0000ffc000)=[{&(0x7f0000800000)="e5", 0x1}, {&(0x7f00003bb000-0x23)="cea1d262bf6e813b5020c1dbd58a8bf7c617a43bcaa335c7dd915f280a9d582c847367", 0x23}], 0x2) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) lgetxattr(&(0x7f0000327000)='./file0\x00', &(0x7f00007c5000-0x18)=@known='system.posix_acl_access\x00', &(0x7f00000f3000)=""/30, 0x1e) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000ab000)=@req3={0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) 2017/12/24 06:44:43 executing program 7: clone(0x0, &(0x7f0000001000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f0000002000-0x4)=0x0, &(0x7f0000002000)="") readlinkat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', &(0x7f0000002000)=""/1, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000dd7000)='/dev/rtc\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000001000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000001000)=0x10) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000bcf000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d92000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000e3e000-0x20)={0x1, 0x5, 0x8000, 0x3, 0x2371, 0xd8c5, 0x7, 0x4, 0x0}, &(0x7f0000969000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000d05000-0xe0)={r2, 0xd8, "2ca2f65cf6b0bdbca25e74f8337754309d6fa54bfa3eca92a0c491de0728fe1f35b3b2329704ac90bb904436bdae896b08924c6b92bf2d6fe5c5690509b9e7041af10d190022378aae656e00e1bbc5d61c3780b143e59813f8db753c24e8a95302319108b7c5473b12ee20b03ac9f05feea93c2eb0431c8f81c91c45c93e6ad2f902593badce8f1755e8738b6421f95492fafa4109917bba62fb19d1fff7dfc06f053de064062a1bd850118b846039ddace9f0ed3e5892707ed6f65601a0f8f301091fe8e33a7e0a564ca87a79a85bfbe82bfdc1a1c5c116"}, &(0x7f0000b0c000)=0xe0) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000c4d000-0xe)='/dev/keychord\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000021000)={0x9, 0xff, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x4c7e, r3}, 0x20) bind$inet6(r1, &(0x7f0000bcf000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000300000)={r2, 0x5, 0x40, 0x5}, &(0x7f00006ce000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000113000-0x4)=0x0) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000b35000-0x10)={0x2, 0x1, @rand_addr=0x7a57, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TCSBRK(r1, 0x5409, 0xff) fcntl$setsig(r1, 0xa, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00003a2000)={0x0, 0x0}) [ 82.706743] binder_alloc: binder_alloc_mmap_handler: 15423 20000000-20002000 already mapped failed -16 [ 82.711713] binder: BINDER_SET_CONTEXT_MGR already set [ 82.711720] binder: 15423:15431 ioctl 40046207 0 returned -16 [ 82.711737] binder: 15423:15436 ERROR: BC_REGISTER_LOOPER called without request [ 82.721360] binder_alloc: 15367: binder_alloc_buf, no vma [ 82.721374] binder: 15423:15431 transaction failed 29189/-3, size 0--1639644763780905976 line 3127 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x0, &(0x7f00001ce000+0xfb6)="7bdb0c2dc1ffaca1e1536d0c319e434f89aa52a2cbf00bc58714c86aba4024964928c7291c18cb01736c73f0a7cdb8f3a811499785561abaac25e344afd2f48431fc28fb544ed6e85630e7e0df15a7bf7badebe0ff1871fe578f3d5a79832693728a09c41575f39a8f8419e5c55910dc6f18de25ba2bdb70ff602549412c40b884b132b1a2e30eb79a986af8bee8ab497ed0ae8497be136af3bebc81b03ce0359934b65b1208b5b2a07504a149c8c97fe58a4aad30b28f1087a7a5b0999befe23d0995bfcaab1de43e96de5fd8f6cc4907ae8e1a75464a8a0a8bd12118054f1f42470110893c0a61d9f3b896267d32de628b7ebb573d20e9e1b9610fd95f77") r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) openat$autofs(0xffffffffffffff9c, &(0x7f00005d4000-0xc)='/dev/autofs\x00', 0x10e00, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000bfc000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18, 0x4, "ccd34f450e21cac43eaeeefa4630a63d6eb8674897c1dc6eb3a5fae054f4237a9fc54e9c3db6c9e378b6770560ddb27773fb623b907ff0b9df3aef30f1dee221", "67997cd72fca7987c8dc3fdcc5a46aff832771d77084dfbc8bbdea9a646df8319c1de3b15130b48e73b81043ca121842cbfc6e88609bbe554f2309b6b0f186ce", "dd71e70f58c7e9163d54a1c5f9075646bdb306fc161fb72aaa848a6f8a0cfa3c", [0x7fff, 0x3]}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 82.723741] binder: 15423:15436 got transaction to invalid handle [ 82.723747] binder: 15423:15436 transaction failed 29201/-22, size 0-32 line 3004 [ 82.752211] binder: BINDER_SET_CONTEXT_MGR already set [ 82.752219] binder: 15455:15456 ioctl 40046207 0 returned -16 [ 82.752371] binder: 15455:15456 Acquire 1 refcount change on invalid ref 4 ret -22 [ 82.779669] binder_alloc: 15367: binder_alloc_buf, no vma [ 82.779683] binder: 15455:15464 transaction failed 29189/-3, size 0-0 line 3127 [ 82.817397] binder: BINDER_SET_CONTEXT_MGR already set [ 82.817404] binder: 15455:15478 ioctl 40046207 0 returned -16 [ 82.819676] binder: 15455:15478 unknown command 0 [ 82.819683] binder: 15455:15478 ioctl c0306201 20008fd0 returned -22 [ 82.820813] binder_alloc: 15367: binder_alloc_buf, no vma [ 82.820826] binder: 15455:15464 transaction failed 29189/-3, size 0-0 line 3127 [ 82.823728] binder: 15455:15478 got transaction to invalid handle [ 82.823735] binder: 15455:15478 transaction failed 29201/-22, size 0-8 line 3004 [ 82.907961] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.913378] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.918827] binder: send failed reply for transaction 896, target dead [ 82.925514] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.930952] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.936424] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.941879] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.947320] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.952752] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.958244] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.963671] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.969125] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xf1d000)=nil, 0xf1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x400000000000001, 0x0) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f1e000-0x6)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000f0f000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xce9000)=nil, 0xce9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000cea000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000c8b000)={&(0x7f0000ce5000)=@file={0x0, './file1\x00'}, 0xa, &(0x7f0000008000)=[], 0x0, &(0x7f00000f8000-0x18)=[], 0x0, 0x0}, 0x0) r2 = dup(r1) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00006d0000-0x4)=0x7, 0x4) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000c13000)={0x0, 0x4}, &(0x7f0000cea000-0x4)=0x8) mmap(&(0x7f0000ce9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000cea000-0x20)={0x5, 0x3, 0x2, 0xae, 0x4, 0x2, 0x9, 0x6, r3}, 0x20) recvmsg(r2, &(0x7f0000012000)={&(0x7f000000c000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000c000-0x10)=[], 0x0, &(0x7f000000d000-0x10)=""/20, 0x14, 0x0}, 0x0) close(r1) 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000886000-0xc)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f000031b000-0xc)={@broadcast=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f00004d1000-0x4)=0xc) recvfrom$unix(r0, &(0x7f00003f4000)=""/0, 0x0, 0xfffffffffffffffd, &(0x7f0000d72000)=@file={0xfffffffffffffffd, './file0\x00'}, 0xa) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCNXCL(0xffffffffffffff9c, 0x540d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00002a3000-0xb)='cifs.idmap\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f00004ff000)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000000000)="ab142178dc5b6b09b38799dd2c04022f39fc08e4ef087869b8754466f91d1d37803d81565d3aec8784d475bd45ffc9771873e669cfe801", 0x37, r0) mmap(&(0x7f0000000000/0xd1d000)=nil, 0xd1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000c3a000-0x5)='user\x00', &(0x7f0000d1c000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000d1c000)='/%mime_type\x00', 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000081b000-0x16)='/selinux/checkreqprot\x00', 0x329200, 0x0) sendto(r1, &(0x7f00001d2000-0xd5)="dfa804e593c8603ec2331de0e5f303ab04a983c58df0ffebd761a9c0de5870a6862ef9aa7e4c6b306adcc3f0b160a949e6f3a90e8924d1e280bd2a49ad3df17ca2b36a981937e3c3ca6083302e1ca75c16371503ffdbe0bafd59903d051610fcfec0ebbe9a7dac12e40425a93ad0542cf4c4e1c24484940aac02bfe87f5175a9d24dba37556c5fc7540fe108fbc443cbd09bdb8d6d37cc497476af35e74f7dde496fb2052251724b9b5780717735ea43759f00c49f9350f397acb58114f8e3eac1f365a91caddce03d2991c40519ad7d72b91734c3", 0xd5, 0x40000, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x5) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000215000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000c79000)=0xb) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000002000-0x2)={0x7, 0x8000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b1b000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000982000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000985000-0xc)={0x0, 0x0}) epoll_wait(r3, &(0x7f00004e8000-0x24)=[{0x0, 0x0}], 0x1, 0x800) fdatasync(r1) epoll_wait(r3, &(0x7f0000a53000-0xc)=[{0x0, 0x0}], 0x1, 0xfffffffffffffffc) fadvise64(r1, 0x0, 0x8, 0x3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000aaf000)={0x20000004, 0x0}) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000ae0000-0x10)='/dev/input/mice\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00005b6000)={0x0, 0x0}) accept$packet(r0, &(0x7f00000a3000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000f8c000-0x4)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000feb000-0xc)={r2, @local={0xac, 0x14, 0x0, 0xaa}, @empty=0x0}, 0xc) r3 = dup3(r0, r1, 0x80000) eventfd2(0x9, 0x0) write(r0, &(0x7f0000863000)="714237e72893fa82d6632ed20bb7defafd792552b92e5290793f271688d2a428afc9c032ea08f146a598af11aa6ce27f6fa2c64efa5bf02278733d1f390b9c1d7c1984", 0x43) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000ad2000-0x5c)={{0xa, 0x3, 0xa80, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, {0xa, 0x1, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, 0x0, [0xffffffffffffff36, 0x3, 0x0, 0x80000001, 0x2, 0x1, 0x1, 0x8]}, 0x5c) 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f000018f000-0x4)=0x0, 0x4) getpeername$netlink(r0, &(0x7f0000924000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000af6000-0x4)=0xc) bind$inet(r0, &(0x7f0000ded000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000b20000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000396000-0x3e)=""/62) sendto$inet(r0, &(0x7f00001cb000)="", 0x0, 0x0, &(0x7f0000a60000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f000051b000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000776000-0x9)='net/raw6\x00') ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) recvfrom(r0, &(0x7f0000c92000)=""/127, 0x7f, 0x0, &(0x7f00000b7000-0x58)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "af74d9d979b2f4704e407e83ca4e55aac16aea3c2a32a402340e39e0b7d3839f0ea199c1e332b7af150e5f3dab686dcc0d696e369a8734c2fb04a48dc8ac56", 0x0}, 0x60) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000056000-0x8)={0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f000053f000-0x78)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x400000106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001000-0x8)='./file0\x00', 0x12) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000011000-0x8)='./file0\x00', 0x0) mount(&(0x7f00006e0000)='./file0\x00', &(0x7f0000f19000)='./file0\x00', &(0x7f0000deb000)='cpuset\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000ece000-0x1c)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000001f000)=0x1c) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xe69000)=nil, 0xe69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000bdc000)={0x0, 0x0}) sendto$inet(r0, &(0x7f0000abc000)="d5198fad893a067246522323769ee08d368306a7bab0ca5a36eab45db3cc8ac83a8a5c7db4aa95163e78e819dca110e5ad709fc8d07136af7684a8488998b80cf3188e862207ab2005d6123f4a8d3b8008dc64b31a106601b72eee01858d9058366f0e6499b4ac2ce845f8c21c943dc578a2b0bb1c28cdaf984e1bc69144a06c0142b78ad97ecd7b485930638d9415319814c422c6ec5b2c55316674486aaec40be944d17e8299f10a8f0436dec34aff01a536c709222ea79bba1cf00b75c3af92caa4f7bdf81b374f8e9e105d9ef29815077d61f1f9fd04f05e33762b8e8f18325410347d792b09e1eae4", 0xeb, 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x2000000088) mmap(&(0x7f0000e76000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000e6c000-0x38)={&(0x7f0000b50000)=@in6={0xa, 0x3, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, 0x1c, &(0x7f0000e6b000-0x10)=[], 0x0, &(0x7f0000e6a000)=[{0xd0, 0x10d, 0xed, "7856e03551d5f9160c1f94f58c29e688a8aea7e07d75f53376a352311e27332007472b21ed4e39399237c0bd37b14f6c2f36b69ac1336420a90a21478520537b7673775de8d8051b503a7c1445a7be8d43e5eda9af9afa95c1f5494a421bef9d03ecf100000000000000042c3139d808ab8895868815b6967c00b8cb2356a104dbbd4cf005164ece95c122622f26122a459bc3a5381e40704c41412521eeef0b52e6c29b4ff682ea9d1146587499a04ee9e49f2676430c79b3a39e7fae"}, {0x18, 0x13f, 0x10000000002, "bacb95e1ef"}], 0xe8, 0x83}, 0x20000000) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e6d000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x80000000009) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = getpid() ptrace$getsig(0x4202, r4, 0x5, &(0x7f00005ab000-0x10)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00007da000-0x38)={&(0x7f0000e6b000)=@alg={0x26, 'rng\x00', 0x0, 0xfffffffffffffffe, 'drbg_nopr_hmac_sha512\x00'}, 0x58, &(0x7f0000e6c000-0x60)=[], 0x0, &(0x7f0000e6c000-0x1210)=[], 0x0, 0x20000080}, 0x4083) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000a06000)={0x0, @loopback=0x0, @multicast1=0x0}, &(0x7f0000e6a000-0x4)=0xc) mmap(&(0x7f0000e69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000e69000)={@empty=0x0, @broadcast=0xffffffff, r5}, 0xc) accept$packet(r2, 0x0, &(0x7f0000193000)=0x0) sendto$inet(r2, &(0x7f0000713000-0x5c0)="", 0x0, 0x8084, &(0x7f00004d4000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000e75000)='\x00', 0x1, 0x0, &(0x7f0000e76000)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000d22000-0x10)=@req={0x8000, 0xd9f5, 0x0, 0x0}, 0x10) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f000000f000)={0x0, 0x0, &(0x7f00000b7000)=[{&(0x7f0000f41000)=[], 0x0}, {&(0x7f0000211000)=[{0xe6, 0x2, 0x800, 0x3, 0xaf2, "2cecc556df6475723d98fb8b4f51c8be741e7959443f47e08e8700fc77a3b0d16e8b8ef1b712809f5cd0a5509f4145533bdde73efc4d9d047a1676435bfb9992baf8d934eabbe53d3c771bbc2f667483106586f272e32ff3b8788c0a5ac9561d6310e1ce38933740f1badbb42d7e5b907fe551834444d3bc944bc7af2ee98170ff410d7b3f59ae510312fd0da32d69ee889389bc8027c074ba57b59f068193e44d33882e01aeada5909c44e216ed5409b916333d672a02c4336170f7ebf51eb9b72ae7f75bfd3d749ada897a7e2902fe1cad65aa5464"}, {0x64, 0x2, 0x30, 0x8, 0x272, "d0183c414a18286cc90b3f34da026e79070f2234c566b8e403746a7de19d1a07888e9e0c2e4ac7b59dd41fb6db35492a460c95706c0bcbbee6e180655824e4030dd937847bc80e98b4ce1e83f31be185dde05349"}], 0x14a}], 0x2, 0x0, 0x0, 0x20048081}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005ff000)='/dev/sequencer\x00', 0x200, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00006da000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000498000-0xa0)={0x0, @in6={{0xa, 0x2, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xa85c, 0x7fffffff, 0x2, 0x4, 0x0}, &(0x7f0000300000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f000056a000-0x98)={0x0, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x52a6c367, 0x40}, &(0x7f0000852000)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00009ce000-0xb8)={r2, 0xa06, 0x4, 0x2, 0xff, 0x3, 0x10000, 0x9, {r3, @in6={{0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x23, 0x6, 0x3, 0x3ff}}, &(0x7f0000d2e000)=0xb8) mknod(&(0x7f0000ab0000-0x8)='./file0\x00', 0x51, 0x229) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) [ 83.076354] binder: 15491:15501 ERROR: BC_REGISTER_LOOPER called without request [ 83.106535] binder: 15491:15501 got transaction with invalid offsets ptr [ 83.114005] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pig=15528 comm=syz-executor5 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00008b2000)='/selinux/load\x00', 0x2, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00006ee000-0x4)=0x4, 0x4) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000114000-0xf1)=""/241, &(0x7f0000fc9000)=0xf1) recvfrom$llc(r0, &(0x7f000094b000-0x2a)=""/42, 0x2a, 0x40010000, &(0x7f0000f3b000)={0x1a, 0x7, 0x20, 0x50cd, 0x100000001, 0xffffffff, @random="76aee8d1c97e", [0x0, 0x0]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00005c8000)={0x10000, 0x7, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) fanotify_mark(r0, 0x21, 0x8000008, r0, &(0x7f000010e000-0x8)='./file0\x00') 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008c3000-0xa)='/dev/ptmx\x00', 0x400, 0x0) r1 = creat(&(0x7f0000058000-0x8)='./file0\x00', 0x20) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000003000-0x20)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x2, 0x0, 0xd, 0xffffffff, 0x800, 0x100000000}, &(0x7f0000fb4000)=0x20) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f000078e000)=0x7) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f00008fa000-0x7)=0x0) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='ns\x00') mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000006000)=""/0, 0x0) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000e63000-0x38)={&(0x7f0000b53000+0xb98)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00009f4000)=[{&(0x7f0000e95000)=[{0xc0, 0x1b, 0x525, 0x0, 0x0, "11bbbe6406c8a77741ce0cc02e19b3bf640feebcd0e81747f9e6148ac08783ebcc66495bd44241463d5d1ec63181ffffff9612b7c8b2778e950b5965a8991141c4591d2b7807df3e61ed5fe794561aacca101300429618830fb500000000000000e209ef5e98de4223bcf6d46d05d3c03b5bdc9b6a27ecd2dec834cee9588bf6352e45b41c0e272302ba281a5f437ebae5e46bfa2d7bf2602a7e9d80000000000900002215760fc093b4368c9633ce0b"}], 0xc0}], 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0xb, 0x80001, 0x3) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00004cf000)=0x0, &(0x7f00002d7000)=0x4) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCSETAF(r2, 0x5404, &(0x7f0000dd2000)={0x6, 0x9, 0xb03, 0x81, 0xca, 0x9, 0x6, 0x5, 0xe895, 0x7dd7}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000b55000-0x6)={0x8435, 0x101, 0x10001}) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000535000-0x20)={@generic="a07b1decb41bde4de711b748467434ae", @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) socket(0xb, 0xa, 0x0) [ 83.128202] binder: 15491:15501 transaction failed 29201/-14, size 0-8 line 3155 [ 83.138582] binder: unexpected work type, 4, not freed [ 83.144081] binder: undelivered TRANSACTION_COMPLETE [ 83.147371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pig=15528 comm=syz-executor5 [ 83.163440] binder: 15491:15519 ERROR: BC_REGISTER_LOOPER called without request [ 83.171230] binder_alloc: 15491: binder_alloc_buf size 536870912 failed, no address space [ 83.171237] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 83.171254] binder: 15491:15501 transaction failed 29201/-28, size 536870912-0 line 3127 [ 83.180027] binder: 15491:15519 got transaction to invalid handle [ 83.180035] binder: 15491:15519 transaction failed 29201/-22, size 0-8 line 3004 [ 83.215244] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.220701] binder: undelivered TRANSACTION_COMPLETE 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) r1 = open(&(0x7f0000d48000-0x8)='./file0\x00', 0x8100, 0x0) recvfrom$inet(r1, &(0x7f000067f000)=""/83, 0x53, 0x12020, 0x0, 0x0) listxattr(&(0x7f00009aa000)='./file0\x00', &(0x7f000031a000-0x8)=""/8, 0x8) sendmsg$netlink(r0, &(0x7f0000eea000-0x38)={0x0, 0x0, &(0x7f0000010000-0x10)=[{&(0x7f0000ee9000-0x4c)=[{0x4c, 0x400000013, 0xa01, 0x0, 0x0, "10f9fa5204007d20ec000000007f200000e0000fa900000009853de52ecf1545ec9a0000c48ddd7163e6f4b939ae7c3d17befa45cf00260157b61a1a"}], 0x4c}], 0x1, &(0x7f0000007000)=[], 0x0, 0x0}, 0x0) 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000e5f000)={0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000804000-0x11)='/dev/vga_arbiter\x00', 0x800, 0x0) accept4(r2, &(0x7f0000794000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f00003a8000)=0x60, 0x80001) clock_gettime(0x0, &(0x7f00007f0000-0x10)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000e0000-0x20)={{r0, r1+30000000}, {r3, r4+30000000}}, &(0x7f00005ff000)={{0x0, 0x0}, {0x0, 0x0}}) futex(&(0x7f0000004000-0x4)=0x0, 0x9, 0x77b, &(0x7f00004c1000-0x10)={0x0, r5}, &(0x7f0000e8b000)=0x0, 0x0) socketpair$inet(0x2, 0x80a, 0x1, &(0x7f000026a000)={0x0, 0x0}) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000067000-0x4)=0x8) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000cd5000-0xd)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffc) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00008ae000)={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x48, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='gre0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8938, &(0x7f000082b000)={@generic="37618c58b75d0b38fc87a0a2c05143fc", @ifru_flags=0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000333000-0x9)='net/arp\x00') sendfile(r3, r4, &(0x7f00004db000)=0x440, 0x63) 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000007000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000008000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004000)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001000-0x8)={r3, 0x80000000}, 0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f000000b000-0x4)=0x1, &(0x7f000000b000-0x4)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000abf000-0x4)=0xbf, 0x4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000d8f000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000fc2000)={0x7f, 0x1, 0x5, 0x80, 0x0}, &(0x7f0000648000)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000c46000+0x760)=r2, 0x4) sendmmsg$unix(r1, &(0x7f0000902000)=[{&(0x7f0000fc7000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003a6000)=[{&(0x7f00005e5000-0x1000)="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", 0x4e6}], 0x1, &(0x7f00003c9000-0x10)=[], 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000ddf000-0x14)={0xff, 0x608, 0x3, 0x10001, 0xffffffffffff4e7a}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000118000)=0x0, 0x4) sendto$packet(r1, &(0x7f00007e3000)="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", 0xbe4, 0x400408f, &(0x7f0000087000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000cb3000-0x10)={&(0x7f0000a1e000/0x4000)=nil, 0x4000}) ioctl$VT_DISALLOCATE(r1, 0x5608) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000013000)='./file0\x00', &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000687000)='/selinux/member\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000135000-0x64)={&(0x7f0000d04000-0x20)=[0x6, 0xfffffffffffffff9, 0x5, 0x7, 0x0, 0x353, 0x4, 0x8], 0x8, 0x0, 0x1, 0x54e, 0x5, 0x400, {0xffff, 0x1000000000000, 0x800, 0x5, 0x8, 0x5, 0x2, 0x6, 0xffff, 0x3f, 0x5, 0x40, 0x5, 0x8, "a0a66c97663f6a39d6cfd3f642eab966c0962a38e7c16aa3233e05b7ba097259"}}) 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000017f000-0x4)=0x0, 0x0, 0x0, &(0x7f00005a1000-0x10)={0x13000000000, 0x0}, &(0x7f0000005000-0x4)=0x0, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0, 0x0, 0x0}, &(0x7f000003c000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000499000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f000004c000)={0x0, 0x0, 0xfffffffffffffffc, 0x0}) ptrace$getregset(0x4204, r2, 0x202, &(0x7f000036d000)={&(0x7f000043a000-0xf0)=""/120, 0x78}) clock_gettime(0x0, &(0x7f00002e4000)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000e21000)={0x0}, &(0x7f00002f5000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000941000-0x10)={r3, r4+10000000}, 0x8) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000be5000-0x1f)="1f000000520007f2c2000000000000000200030000ddff1ab4a300ffffb92b", 0x1f) recvmsg(r0, &(0x7f0000a7b000-0x38)={&(0x7f0000596000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000638000-0x30)=[], 0x0, &(0x7f0000f64000-0x49)=""/73, 0x49, 0x0}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000012000)=""/22, &(0x7f00006be000-0x4)=0x16) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000688000)={@common='lo\x00', &(0x7f0000a3e000-0x2c)=@ethtool_cmd={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000cc0000)=[{&(0x7f0000637000)=""/191, 0xbf}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000ad2000)={0x0, 0x0, &(0x7f0000ef8000-0x10)=[{&(0x7f000045d000)=[{0x14, 0x101, 0xd09, 0x0, 0x0, "02000700"}], 0x14}], 0x1, &(0x7f0000fa1000)=[], 0x0, 0x0}, 0x0) recvfrom(r0, &(0x7f0000760000)=""/99, 0x63, 0x0, &(0x7f00008a4000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32)\x00'}, 0x58) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001000-0x6)={0x36aa6ef580000000, 0xbd65, 0x800}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000aa5000-0x8)='./file0\x00', 0x108) mq_timedsend(r1, &(0x7f000061f000-0x1000)="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", 0x1000, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000fbd000-0x10)=[{0x1c, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) sendto(r2, &(0x7f0000e8a000)="", 0x0, 0x0, 0x0, 0x0) [ 83.225786] binder: undelivered transaction 911, process died. [ 83.231989] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.240388] binder: BINDER_SET_CONTEXT_MGR already set [ 83.240396] binder: 15568:15573 ioctl 40046207 0 returned -16 [ 83.240448] binder: 15568:15573 ERROR: BC_REGISTER_LOOPER called without request [ 83.262113] binder_alloc: 15491: binder_alloc_buf, no vma 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) kexec_load(0x9, 0x3, &(0x7f0000530000)=[{&(0x7f0000c92000)="", 0x0, 0x176000000000, 0x4}, {&(0x7f0000d98000)="7345f5a62f03bed0692ebdcb31320d86b4d669580988ab92e60fcf0ce25480bd31dc2bd04e44c6628aeea7", 0x2b, 0x5d81, 0x7}, {&(0x7f00007b3000-0x15)="6fecdf2117499bcb1364cdbe99547819c035bf35df", 0x15, 0x3, 0x1}], 0x30000) r0 = syz_open_dev$sg(&(0x7f0000df1000)='/dev/sg#\x00', 0x6, 0x2) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @multicast1=0xe0000001, {[]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}, 0x32) write$tun(r0, &(0x7f0000018000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@random="36598fe754a2", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x0, @ipv6={0x0, 0x6, "cfcd9c", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}}}, 0x54) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ecf000)='/dev/sequencer\x00', 0x8480, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000878000-0x4)=0x0) r1 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) utime(&(0x7f0000750000-0x8)='./file0\x00', &(0x7f0000892000-0x10)={0x80000001, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000004000-0xc)={0x4, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f000017f000-0xc)={0x0, 0x0}) ppoll(&(0x7f00005d7000)=[{r2, 0x0, 0x0}], 0x1, &(0x7f0000376000)={0x0, 0x0}, &(0x7f0000378000)={0x0}, 0x8) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000937000-0x4)=0x0) [ 83.262128] binder: 15568:15586 transaction failed 29189/-3, size 0-0 line 3127 [ 83.285250] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.295017] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:43 executing program 1: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f000000b000-0x14)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x8848, @llc={0x3, @llc={0x0, 0x0, "03", ""}}}}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000d0c000)='/dev/usbmon#\x00', 0xe661, 0x400000) mmap(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000fe5000-0x1)=0x0) 2017/12/24 06:44:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00008d2000)='/dev/net/tun\x00', 0x0, 0x8020a) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f0000f1e000-0x1023)=@hdr={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @eth={@random="1c2d3e2b6d7c", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x0, @llc={0xfb0, @snap={0x0, 0x0, "1f", "83b0d7", 0x0, "3af1eb71ce8fdbeb110fc6e48da3ac6b2d440f7ce48c3aab3cb2611df110587edd376b59cab5eab494c7468c91fc8f15cf8b5aa4b2efe4e5df8a1943c6746a801afbd68d819488ab6c9ddf9a7b46b00bae3433c6377c9ef7efa9b8ed0a75db9bf8d04f745411f29047c34fe02cb0f23c333e13d06976fa344dddf312add354642950d5cf49999d712af7efd76cc7f31c23f255545254c90a48c1e669755fb307e6192813ef20c293c3465b66ec5b38615c050dee321953fc7b52a08d517ec27c6e50dcbfb06f60b0bce4a05bcac54cc95d06b78d0ca0c5faa6f8f51d59ffd33f0f3c58203b9f6dee907c96c460e37ae4f29abeec9885f9bd2f0fe82b1ef5ed5eb72ad1e10a39f997fb7098083a9054d27649a5efe2f4e67011de49ad89840ca947750435a6a861283a625f5903a3cb947b1af54483da8ce83d998d62eb5e1b489a46ef01393c44a3dfc01f7be102d6104e9defb7284ce5db3a97d4de1dfaa5935ad109d6546c5f7136204e045232e0573adea0e52d287059b4e4af87ee29aa14547f87060dd9c0bb41ad03587f1f7fbbf310cd443563c29aee9c2e1761e8f2985ee4790ea2c846e3433f61bdc35067f9e7bc76813a3a1ecfd32d281fb051e343226b84a74e5fab24eddd71b703f69efe114db969e4645eaddf59b6021258447475e358d65a59d9e43fc035f869bef34a9ed949bd31e7f02f48e2d4a6ae37c6bdf4d652a5c76ea16c8ed3218c9ee71c44e2f666948abbe3c3223fb646561e6e4cda943173c34249399e1067893e98310f2311149285618195e4c3527b8742ce39119487a33b246ee61479c036e2416aacc3c365160d3df6c854b76eec6935ae1002390fbe460437f7ea017b6281ca65d2d76a4dee638f179b23983d4015aab1be8ea5386b9b18dd0421fa7141837d3f7a9fae2339f6f2be9f465af1c9cce9a099b6c99e4ed8bd0e2f37cd36a95e12f3a1cd92abb08b40bf368dfb2d6b329fec60ca3631ca922dca6693220d54d0a28d1782353bed1d4894f802e1ef1e8a575bc84ee71d030381d589a5ce3022c905746767cb38aa2a246421a52629aa581dc6d963c7ed38def37ab476a349c001e69923c301c485bf1a6a1cbf2f61720b61638a95beb61703eb6b9fa7c29b810ba3e8cb5292223e14883def31942ec18912d8404c7b325032f35011117b87b25f0126c1d4d0811f2934e29ef5fca4de2ccf9f21d794a5705006d5f139edbfa97dbd08245aa729f1b22d7449d634af05e68e73ad47dc9ff496c4b752fe83f241e4e13f2dd884eabb4627011b9daf5c5da09ec6d9c18faf5d763b959e5f65d5d2cca3faef37a681c79abe9949c60cac53a403a64e72d768ff1cebb2f656db007f9e13f6263f6b1c5ff302877f4a42aafc7d7bb6e196093c49c7dd04d5a6053a6f3e09124ed81b2b5366c51cc425d3e6920abc9ed34ce0d9da737007a86007e3edfac016ad96da482872fcc34ee19ec3f911e52abb8e47a913e56b3e58f931e76569a95f75d84e289a7b62984af85ec5aeda50175dafaa687c98ed6d7cb0668c987f7d5c761a95396337222398f4e52135e925bf1a982676488ecaa17072168943c5491482183e292f2c33caf731ef3315c7eb09e3b98b1bec33fc66135a3dbeee9e189d97bf5c6e255618599c1550fe7984b31a51c15f2825e0b40e15945ee53e9e0a4b899d27a5bd9a6c03e955ce523f087ab4fd284665c8ccd2b6844a426e2e1d09d57db8c0c5cb8e3487d68f941b15294fd184cc77d6b777d107a979bb832e79bcf6568fba43323b867d4a2f97cf0759dfa3c917776a041174f454925b7c44a4fe5d6b65f790651b33a794a38d73158ce620e1e4c8a5db553d625670eff2939c9ffcacf1ca35c65b79634039e95071bcc471ae5cf6512b1c51eb3d1929818fb34fb87e28e75592a0fc0e13a2da10e5b64556bf3e07cd1757b2d7993c3ea6231c8248821c5cac3662f8e661a0d38994a528d4aa41ce552d1a97d272bacc713fb8afb75b75dbca2f7571ec98a789fe47007659e913f1aca018a62a6b189d025e7aaa74ee21427e515ac2530312393c120e3e2c221e4297f5c36f5e3cd61578d0fc109f0ea5523717f5401b8cb8fa4754bc91b71d5a57b45c904687865981d600f6697ca908b6331cdf78eca558d61823cc4096b7e53f17ba6dd124ddaf056a9baa54ceda70993e04c2aabeba603eaf21474a4cd042cef6ad51cd2afe70a40c1129820d5f4c002798dedcbcad981bec700e538093b62d13fca45f4e0a4673588e7bcf124aca8749b8f039161010ffbc8c4c5122045f02c1c803a8a46e1a86c70ba5cdf3ed9a862f40141a00b938ff37b809473ed7cac57091a1a150e0928738f23e059dacf86969d18fb2e2cbd0807b4b8fd00d6605dd58621ce3ed9dff34227ec45cec737f4c54e4c33b3f1f513ad3ec843ac50c14988a0c1bfc33c61a9b7d015b23c044614771c3288d678f2c0a2a3fbc05f3589ac03f6b145c5476ca76e8e56c5928767ac87c0a74e9e39cd758fa5ab310bb3e0931dc14d1ed8d81033e15b72e18c933de8afdb12771bb7aac024473165e51f720d5610ad6792e08fcce6ccd2b1dc80490089a85e2d9a4b9928cb93661fb07d9d723b89e69e68536691c49662d04a9104df95f4f8322aa7ea2167ab16e1e992ac1358b5a2de58da86c8d43608aaabd88fbef68ddfcaa3c48fc8e9b54f2c5aed7b53f62857d777071a92b93d45705f32fa1ff8ccb0a04e28ac9e2f9f5b6afb4f9a24a9486237af0fcf4510f2e9a484f364e5b70f85f2af690770f1ad8c41b1c2b7b4d64ab979bd57b5df85eef6fcdbce269c1ceed05025dd399a330222a2fcd0113b6748c5bfbff225c9e49e3ef7461693464efb5dc00f5fcffc9bde85cc5433c67276995b19f55fc3adab7750527fedd81878237d625f19fba405024f55a3be7767680c02186ae918f24d24184b56df74a57ed574bf205e6034423285fe23a225c45642acc695ffe3a698cb0a0dea50f900b409717568bde0c814016a6c3bc8e5064b4cd21a7ff59840cb225053cf809c3ff394e05eba0ede61cae8babd77a0057f29dbaaa26a8aded099fc5d6ff25fbd8dcd740613a24098d959ba227d899a95cb5fc312b590f29fd227174c5c9fa7f81ec0385bf398b00fcb0dd5b80bd4cae39102374a0049910163f1bbfa5b708b6b1ab8d78c598540e7b95b06737ada486a8d9526f8e56e2f05bd2966e28c8dcc66a7d88043f3ec6d0a2d7ead9b4fddb67478cc60c98ca9df431214782444939c388bb0b2dd1f0bea6360dc63bafcb3413750b949e330aeb0b3b3741ac47b59f9c2fe83aa94e8915db9bba648e46780e07b789c201b49f69cf5deb2a90828858b4ebd850d913af06365735c43fc05b1cae406c1f1185a5d78f1c22386f2e6ff79b194d16dc3fdc22ac5bc980c884573418de250910c734f49dbb53ead9a874dc0b08f1787f934fdf3b39a64001c0ddd9fd1e917b4126e6708d25d6fbc8a7d1e8e6a3bc057f53d5d8b13f78d4df935ef3bbb40c47306a4ce2f88e401168053e46489ea1ed1f1fdd4d969fb2930e85538fbef513300bef360afe390f69086d2add458634a55d7471e0acd254c74d1edcc27e11ff03ab7e2f3abb22b2068421033329c2b88526378e5a15044bfa0b9e6174b510ed67a3c8a66c1c9e94fd35086cad9dd443f99aa091dd85af6b5a6cdb15b6b353a47495a44eab7279e59e5402a7e1436ca73f9f02aa9c69991bd38656c6c4c0dc556d027868ab40100eabc967bf399d36c3a3f537764592cf6d462dc969576d11990d3762ed6eb2d02e0a047ef14e7e70cb7d5503cc1af7e1df7b49bce39738516c1b44e8f24d1aa5c656e0df65ed69085e289397b2c57d0f66eda28c6360384b58892627532f5cbef19eda1b8b68b7bbee5a4c1b0a39c9143dcbbd3f803e9d3b3b5c9745c88b3a9f3e776a0dab4f679acd549245143f9793d4b191e006d339fb8366d1b6839adece44c98c16185b436b1484c2e50a30376cff0e87426db26c39e52c262ad09f7155200a9fc3a71725619d652d3c1db4e8b14ffb34e3acf3557727b388f08381395746d98234b7db2131dba8b3d46b1e4e4964be5251dd0e29d032b3d769a09fcd8ae09d18cf90894d7ce8823ef2370fe24dd7495b949bd3aea9ca61d700228280ca111a8ee3690687564b435cc177c9096d34bc507d8df9060733cd32f46c9c78e20c6ffed115988311a1452ff3ee29a4506905173cfc132ed62770ad386f42e1a048d51c1283fe7a856134c8024aff8b253eba22314fa447dcc5ff22800fa7f51cfe1773321c8b468fb3bbefe72504c5e0df403847e7a86ef8160e7a79b6a1656e8f9d5963c9ed77f60003b9a68e34da57a2235ceb09d41050b244ee0fc702be777e6813c588b6500e26054c0477663e23e92e90f352650d3991a85563461beef71b57685ec0f2798a1c8427f9d02f548e1e93f85ff636ed20348626e20f2740004fe9df568507d0e15559ea66c4b6a31984ec3c794345993ae38b4be55f53ad774a0d52c74139a8f2a2650268dda731ec247df5a4991d592bcae1e7aa6ce943ef0b88bff85fd065ad46d2cfdc91d53593b692c5c495d574d87fa3be989f2e3ab3fc326cd6759a4af17a1da7247d01124fe6769f866af11014939996b671fccfb92f43381380ce15125a1a02ee9b0689d59748d356c955ddb3aaf7a3e23540a98b37bf209e3450b0cc21a9a62d3e34b1cb5c3229bcc40138cf80272b0cd6eaf2cbf57c3fe853c08ffeaaff60f9499016fc423ca8940426f18c6abe4b1590b2067d9b533c3b42b900da8e24ee6aa3deafc2a9ad386f31faeefdf0ed3baa94affe9857aba910bb39a202a4f76c30134693400ed62b4d09f240b60e7c83bb06350bc42424afe49169a636a011c7689a4704fd727ef0feba97b0cfa52b5585ea17ff77c6a7b2ad7fbb4e34d37eb653c9bb33a7ad5eda9d0788a098611e3c6f7b5f601631cf62554de2515c5abe96f5a7827c11fc58c708aa24431453511dcaa6fecb23697559088cf1475c57f05b0e7f7b69047680c0c50c86d548e08c0f6f8b13e99544951ae8ee4d667ff9d9eb920bd99112904efc1cb26326d73dcfe1166f1fd4f9a17844acbb3e879a03482a750c6110318617ae8f8d9a9d55fdcc7f6fa03fac1513b66ec4204bb5a5475aa571195592e5bed49b23e3b0b216e9089da50b084d3f5f0211015ca8f0ee00aa94c9df6e06a0bcb496b3e4cb89544793073333d1bd12a9229cb403590166bb5a81fb224559f5f2b41701499ea338dff6740e84883e2055dbdcb1f13422cc53cd2526b53fa51d0bbe06a8e46ddb83bbfa61c57a0abb83908cb55fa4d869f6f14c8500251f78e5026d49a69be71d35e7a6a4f54855f9c61e4e1f09415217e67a55bafb72d7ebf0a15f19f325e51c113d3f9ac7f8c26a758d35781f9671341c1baf68a045c1a69f280a5aafbe6325e623b7728bc1458d8e45fd2572b6fc54a0f5e5f35f17816fbb6f40feae9dcb521b3499ff9b72dc1b3f74bf2b2e5da2adf77000bb1b762a14445ee70c3819fdfe609ceb3cdab2c2e0caa5de72d073937dd4c08f35dbd9bcd3a97188bed503947870162cb76ab4d13afb1dfb9dea7374c93453a78c50c44ace004e51b6a0dbf5e66b25067011ad28c3"}}}}}}, 0xfca) 2017/12/24 06:44:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00005c2000-0x8)='trusted\x00', &(0x7f00003e7000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00002ee000)='cgroup\'GPLppp1\x00', 0xfffffffffffffff9) r1 = accept4(0xffffffffffffff9c, &(0x7f0000050000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000172000-0x4)=0x60, 0x80800) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000bbd000-0x7c)="bc96c913c116391342054c1b0615bcab9eba2cdf73f461ebd59ab06aef0ca1234b733a928352914e7b9087159862390d997f98ec2bbf1f495f4aaedb0d5ece70ab8feedbe6f135fdc9b6d36733a830a151e2db42acc1d0c5b989c0f5f28ea43d8b87066588f2e6c71d4f8713160548c77ce1f1cee0b35b7c45fa74c9", 0x7c) r2 = add_key$user(&(0x7f0000945000-0x5)='user\x00', &(0x7f0000f9e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000054e000-0xbd)="85", 0x1, r0) keyctl$unlink(0x9, r2, r0) keyctl$read(0xb, r2, &(0x7f0000efd000)=""/134, 0x86) 2017/12/24 06:44:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000002a) write(r0, &(0x7f00006ec000)="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", 0x13e) vmsplice(r0, &(0x7f0000f5e000)=[{&(0x7f0000596000)="", 0x0}], 0x1, 0x2) 2017/12/24 06:44:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00008fd000)='/selinux/mls\x00', 0x0, 0x0) r1 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00009b7000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000530000)=0xe8) writev(r1, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x480, &(0x7f00008e6000)=""/0, &(0x7f0000000000)=0x0) bind(r3, &(0x7f0000a14000)=@nl={0x10, 0x0, 0x1, 0x3ff}, 0xc) 2017/12/24 06:44:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00001d1000-0x8c)=""/140, &(0x7f0000560000-0x4)=0x8c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$selinux_create(0xffffffffffffff9c, &(0x7f000040c000)='/selinux/create\x00', 0x2, 0x0) 2017/12/24 06:44:43 executing program 2: prctl$intptr(0x21, 0x8000) getpid() 2017/12/24 06:44:43 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000000a000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) socketpair(0x1, 0x6, 0x5396, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x44, 0x0, &(0x7f000000b000-0x108)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000000b000)=[], &(0x7f000000e000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000000000)=""}) [ 83.327853] binder: 15568:15573 ERROR: BC_REGISTER_LOOPER called without request [ 83.335461] binder_alloc: 15568: binder_alloc_buf, no vma [ 83.342333] binder: 15568:15586 transaction failed 29189/-3, size 0-0 line 3127 [ 83.353280] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/24 06:44:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000121000-0x8)='./file0\x00', 0x0) mount(&(0x7f00004a4000-0x8)='./file0\x00', &(0x7f00006e8000-0x8)='./file0\x00', &(0x7f0000034000)='ramfs\x00', 0x0, &(0x7f0000691000-0x1)="") syz_fuse_mount(&(0x7f000055a000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0xc2000) open(&(0x7f0000d5a000-0x8)='./file0\x00', 0x2, 0x180) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ad1000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f00001d5000)=0x6ae) 2017/12/24 06:44:44 executing program 7: mmap(&(0x7f0000000000/0xc33000)=nil, 0xc33000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) mmap(&(0x7f0000c33000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000c34000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000c33000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000c33000)=0xa0) mmap(&(0x7f0000c34000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000a5f000)={0x0, 0x0, 0x0}, &(0x7f0000c34000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) mmap(&(0x7f0000c35000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c35000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000c35000)=@known='system.posix_acl_access\x00', &(0x7f0000c36000-0x5b)=""/91, 0x5b) ptrace(0x4207, r4) r5 = syz_open_procfs(r2, &(0x7f00006e1000-0x8)='net/raw\x00') setreuid(r3, r3) mmap(&(0x7f0000c33000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r5, &(0x7f0000c34000-0x88)="80bddf7f050758581412dc048b63565a4808219f7673ee7679307ba979f9207a8dfc477deed7a13add3d629dbfbc12eb51feb5a9bacc1db16f9feae086895b1d9c2d5e6c2d361010fe87f8f75449d64b29e4c1dac50bebba966d50a013c387c0ebb3581c0e4f31250c79cffb84ef6490ced9d11b7dd7c914c985045e2509e8e39654ee8f10a9d385", 0x88, 0x0, &(0x7f0000518000)={0x3, {"e625d4c67bd82d"}, 0x10de}, 0x10) ptrace(0x1004208, r4) 2017/12/24 06:44:44 executing program 1: mmap(&(0x7f0000000000/0xd27000)=nil, 0xd27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000250000-0x7)='{:proc^', 0x1) mmap(&(0x7f0000d27000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000d27000)=0x800, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x400000049, &(0x7f0000d24000-0x1e)=""/30, &(0x7f00007ed000-0x4)=0x1e) 2017/12/24 06:44:44 executing program 5: mmap(&(0x7f0000000000/0xf54000)=nil, 0xf54000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f54000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f55000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f56000-0xb)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000934000-0x4)=0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f000057f000)={0x0, 0x0, &(0x7f0000093000-0x10)={&(0x7f00006e0000-0x80)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x4, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000f54000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00008c4000-0x8)='./file0\x00', 0x40) mmap(&(0x7f0000f55000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$ipx(r2, &(0x7f000079d000-0x31)=""/49, 0x31, 0x40000022, &(0x7f0000f55000)={0x4, 0xc, 0x4, "bbe06714bd51", 0x18000000, 0x0}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000f54000)='/selinux/relabel\x00', 0x2, 0x0) 2017/12/24 06:44:44 executing program 4: mmap(&(0x7f0000000000/0xff0000)=nil, 0xff0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ff0000)='./file0\x00', 0x200000, 0x4) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000ff1000-0x4)=0x0, 0x4) r1 = socket(0x20000000000000a, 0x2, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000ff1000-0x15)='/dev/pktcdvd/control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000db6000)={0x1, 0xa6dc, 0x3f, 0x3, 0x0, 0x4}) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000fee000-0x4)=0x0, &(0x7f0000fee000-0x4)=0x4) 2017/12/24 06:44:44 executing program 6: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000fc1000)={0x28, 0x0, &(0x7f000091b000-0x28)=[@acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x2, 0x0}, @clear_death={0x400c630f, 0x2, 0x1}], 0x44, 0x0, &(0x7f0000fc2000-0x44)="5ce313dc664a19d24809c0adf7971093a380df5cad9b937a9bc1e68a2ee7200bbb7511d01ad9e5fb6fd38a3d340cac9522a855df511f527e7e89451b8e7207c82d4c8b0f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f000000a000)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000006000-0x54)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x48, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000006000-0x18)=[@flat={0x73682a85, 0x0, 0x0, 0x0}], &(0x7f000000c000)=[]}}, @register_looper={0x630b}], 0x1, 0x0, &(0x7f000000d000-0xa5)='6'}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000ef6000)='./file0\x00', 0x24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000fc2000-0x30)={0x0, 0x0, &(0x7f0000860000)=[], 0x10, 0x0, &(0x7f0000fc2000-0x27)="fe0480e91bf327d3058602e45b9cd2b3"}) [ 83.395428] binder: 15619:15626 ERROR: BC_REGISTER_LOOPER called without request [ 83.424355] binder: 15619:15626 got transaction with invalid offsets ptr [ 83.428916] binder: 15645:15647 Acquire 1 refcount change on invalid ref 1 ret -22 2017/12/24 06:44:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000005000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f000091c000-0x10)=[{&(0x7f00006b6000)="70ef74befde816311621378656db1383f9984bad2dd66deab5b8ad37a7a67073eb2d119d7efca18482403efed009b4062d661e812d833d858fabedffa42b52056e8db65b2cc236c073decf93b1040738cef2f2c2ab22d88ba343051c6d31375ca1f6e6825052b1ddf7256aca6baa8e870ae057618fdfc4c9dc35c5d970974f080eaeb1415c2b3929eeec56409c51e7b3c414d7ca5a17227e6fa852683591e0f2b0522e6634f53f0ca0d11fc9f26ed8e9f48ef5dd6f9b597489d88784fc8e880ca66632156f918cd05c9975ce", 0xcc}], 0x1) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40001) sendfile(r1, r1, &(0x7f0000cd5000-0x8)=0x0, 0x400000800ff0) accept4(r0, &(0x7f00000c1000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000da9000-0x4)=0x14, 0x800) recvmmsg(r0, &(0x7f000000e000-0x100)=[{{&(0x7f000000e000)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000005000-0x40)=[{&(0x7f000000e000-0xda)=""/218, 0xda}], 0x1, &(0x7f000000f000-0x3f)=""/63, 0x3f, 0x0}, 0x0}, {{&(0x7f000000b000-0x10)=@ax25={0x0, {""/7}, 0x0}, 0x10, &(0x7f0000010000-0xa0)=[], 0x0, &(0x7f0000011000)=""/3, 0x3, 0x0}, 0x0}], 0x2, 0x0, 0x0) 2017/12/24 06:44:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c55000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x2000000011, 0x8000000080003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000bc5000-0x4)="6b64b22e", 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f00001a4000-0xc)={0x0, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x20301}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00005e9000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r3, &(0x7f0000c85000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000a33000)={@local={0x0, 0x0, 0x0, 0x0}, @multicast1=0x0}, &(0x7f0000dc2000)=0x8) dup2(r3, r2) write$tun(r2, &(0x7f0000875000-0xa4)=@hdr={0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @igmp={0x0, 0x0, 0x0, @empty=0x0, ""}}}, 0x26) 2017/12/24 06:44:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00006c6000-0x6)='rxrpc\x00', &(0x7f0000d6b000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00003ea000-0x2f)="c29a2fd1587abcc2c4c5d3927f0f2adee2d7810a9296cc5b5b0b90bb351f6a14605c8068075b55e74ecc216c7f2193", 0x2f, 0xfffffffffffffffd) request_key(&(0x7f0000314000-0x5)='ceph\x00', &(0x7f000007f000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000440000)='system\'[vmnet0-(vboxnet1%\x00', r0) r1 = add_key$user(&(0x7f000048c000-0x5)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00008b4000-0x2c)='f', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) r2 = dup(0xffffffffffffff9c) r3 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000ee6000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a39000)=0xe8) recvfrom(r2, &(0x7f00002f0000-0xc)=""/12, 0xc, 0x2020, &(0x7f000016f000)=@in6={0xa, 0x0, 0x9, @loopback={0x0, 0x1}, 0xffffffffffffffc1}, 0x1c) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000372000)={0x9, 0x8000, r3, 0x7, r4, 0x4, 0x9, 0x7}) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000ebd000-0x20)={"bd814432b2ef36bb7169dbe64692bfe0", {0x4, 0x3, 0x4, "2286d7010119", 0x200, 0x0}}) [ 83.428925] binder: 15645:15647 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 83.428932] binder: 15645:15647 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 83.457251] binder: 15645:15654 unknown command 0 [ 83.457259] binder: 15645:15654 ioctl c0306201 2000a000 returned -22 [ 83.462559] binder: 15645:15654 ERROR: BC_REGISTER_LOOPER called without request [ 83.471859] binder: undelivered transaction 929, copy_to_user failed 2017/12/24 06:44:44 executing program 0: clone(0x0, &(0x7f0000484000)="", &(0x7f00004d0000-0x4)=0x0, &(0x7f0000b60000-0x4)=0x0, &(0x7f000091b000-0x1)="") llistxattr(&(0x7f0000b65000-0x8)='./file0\x00', &(0x7f0000758000)=""/0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)=0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r1, 0x4c01) 2017/12/24 06:44:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x40100000802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000f66000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000522000)="", 0x0, 0x20000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000a73000)={0x0, 0x853b, 0x10001, 0x0, 0x0}, 0x14) writev(r0, &(0x7f0000b1f000)=[{&(0x7f00009d8000)="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