ap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) write(r0, &(0x7f0000776000-0x1f)="1f000000100007010000000000b412fc03000004080001000480000000ff", 0x1e) 2017/11/27 19:23:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) r3 = dup(r2) symlinkat(&(0x7f00006c7000)="2e2f66696c653000", r3, &(0x7f0000ad9000-0x8)="2e2f66696c653000") [ 58.118843] binder: 7033:7043 got reply transaction with no transaction stack [ 58.118853] binder: 7033:7043 transaction failed 29201/-71, size 24-72 line 2670 [ 58.121101] binder: BC_ATTEMPT_ACQUIRE not supported [ 58.121110] binder: 7033:7047 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:17 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$mouse(&(0x7f000078f000)="2f6465762f696e7075742f6d6f7573652300", 0x7a0, 0x202000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000510000-0x10)={&(0x7f0000d0e000/0x1000)=nil, 0x1000}) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000af5000)={0x0, []}) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:17 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 58.143839] binder: release 7034:7055 transaction 233 out, still active [ 58.143847] binder: undelivered TRANSACTION_COMPLETE [ 58.143880] binder: send failed reply for transaction 235 to 7034:7037 [ 58.158083] binder: 7028:7060 got reply transaction with no transaction stack [ 58.158090] binder: 7028:7060 transaction failed 29201/-71, size 32-8 line 2670 [ 58.164321] binder: 7035:7046 got reply transaction with no transaction stack [ 58.164330] binder: 7035:7046 transaction failed 29201/-71, size 32-8 line 2670 [ 58.167172] binder: BC_ATTEMPT_ACQUIRE not supported [ 58.167180] binder: 7065:7070 ioctl c0306201 20008000 returned -22 [ 58.169641] binder: 7035:7046 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.169651] binder: 7046 RLIMIT_NICE not set [ 58.169798] binder_alloc: 7035: binder_alloc_buf, no vma [ 58.169819] binder: 7035:7064 transaction failed 29189/-3, size 0-0 line 2870 [ 58.193141] binder: 7034:7055 got reply transaction with no transaction stack [ 58.193151] binder: 7034:7055 transaction failed 29201/-71, size 32-8 line 2670 [ 58.204632] binder: release 7034:7037 transaction 233 in, still active [ 58.204649] binder: send failed reply for transaction 233, target dead [ 58.204667] binder: undelivered TRANSACTION_COMPLETE [ 58.204678] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.214455] binder: 7028:7045 transaction failed 29189/-22, size 0-0 line 2755 [ 58.214494] binder: 7028:7060 transaction failed 29189/-22, size 0-0 line 2755 [ 58.217594] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.228955] binder: 7034:7037 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.228965] binder: 7037 RLIMIT_NICE not set [ 58.235908] binder: BC_ATTEMPT_ACQUIRE not supported [ 58.235920] binder: 7065:7075 ioctl c0306201 20008000 returned -22 [ 58.245970] binder: 7080:7085 got reply transaction with no transaction stack [ 58.245979] binder: 7080:7085 transaction failed 29201/-71, size 32-8 line 2670 [ 58.254617] binder: 7080:7085 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.254626] binder: 7085 RLIMIT_NICE not set [ 58.259094] binder: release 7034:7055 transaction 244 out, still active [ 58.259099] binder: undelivered TRANSACTION_COMPLETE [ 58.259374] binder: send failed reply for transaction 244, target dead [ 58.280473] binder: 7088:7089 got reply transaction with no transaction stack [ 58.280480] binder: 7088:7089 transaction failed 29201/-71, size 32-8 line 2670 [ 58.281435] binder: 7085 RLIMIT_NICE not set [ 58.290660] binder: release 7080:7085 transaction 250 out, still active [ 58.290667] binder: release 7080:7085 transaction 249 in, still active [ 58.290672] binder: undelivered TRANSACTION_COMPLETE [ 58.290821] binder: 7088:7089 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.290829] binder: 7089 RLIMIT_NICE not set [ 58.293218] binder: BC_ATTEMPT_ACQUIRE not supported [ 58.293229] binder: 7091:7094 ioctl c0306201 20008000 returned -22 [ 58.298827] binder: BINDER_SET_CONTEXT_MGR already set [ 58.298843] binder: 7091:7096 ioctl 40046207 0 returned -16 [ 58.312191] binder: release 7080:7090 transaction 249 out, still active [ 58.312197] binder: undelivered TRANSACTION_COMPLETE [ 58.312211] binder: send failed reply for transaction 250, target dead [ 58.312219] binder: send failed reply for transaction 249, target dead [ 58.317874] binder: 7089 RLIMIT_NICE not set [ 58.337122] binder: 7080:7090 got reply transaction with no transaction stack [ 58.337130] binder: 7080:7090 transaction failed 29201/-71, size 32-8 line 2670 [ 58.339745] binder: BINDER_SET_CONTEXT_MGR already set [ 58.339754] binder: 7080:7090 ioctl 40046207 0 returned -16 [ 58.344544] binder: 7080:7090 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.344553] binder: 7090 RLIMIT_NICE not set [ 58.354864] binder_alloc: 7080: binder_alloc_buf, no vma [ 58.354885] binder: 7080:7099 transaction failed 29189/-3, size 0-0 line 2870 [ 58.357453] binder: release 7088:7097 transaction 252 out, still active [ 58.357458] binder: undelivered TRANSACTION_COMPLETE [ 58.357472] binder: send failed reply for transaction 253 to 7088:7089 [ 58.398455] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.401034] binder: 7088:7097 got reply transaction with no transaction stack [ 58.401042] binder: 7088:7097 transaction failed 29201/-71, size 32-8 line 2670 [ 58.408638] binder: BINDER_SET_CONTEXT_MGR already set [ 58.408646] binder: 7088:7097 ioctl 40046207 0 returned -16 [ 58.410983] binder_alloc: 7088: binder_alloc_buf, no vma [ 58.411005] binder: 7088:7101 transaction failed 29189/-3, size 0-0 line 2870 [ 58.411063] binder: 7088:7097 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.411070] binder: 7097 RLIMIT_NICE not set [ 58.414604] binder: release 7088:7089 transaction 252 in, still active [ 58.414609] binder: send failed reply for transaction 252, target dead [ 58.414616] binder: undelivered TRANSACTION_COMPLETE [ 58.414623] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.426726] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.741342] binder: 7028:7029 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:18 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:18 executing program 6: r0 = memfd_create(&(0x7f000063c000-0x1a)="25246d696d655f74797065656d30406e6f64657647504c245e00", 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000001000)={0x5, 0x1000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000003000-0x58)={0x26, "6861736800000000000000000000", 0x0, 0x0, "74677231323800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001000-0x50)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, 0xff, 0x6, 0x0, 0x400, 0xffffffff, 0x1020000, r1}) keyctl$join(0x1, &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000db6000)="755e650072", &(0x7f00005a2000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000be7000-0x2)="5e00", 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00007e9000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f000002c000-0x18)={0x1, 0x0, [{0x18e, 0x0, 0x0}]}) 2017/11/27 19:23:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000aad000-0xd)="2f6465762f7573626d6f6e2300", 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000cd0000)={{0x642f, 0x3}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x10, 0x0, 0x80, 0x8, 0x6, 0x5, 0x80, 0x0, 0x7, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f00006e3000)={0x0, 0x3, 0x60ef, 0x3, 0x10, 0x9}) 2017/11/27 19:23:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) r3 = dup(r2) symlinkat(&(0x7f00006c7000)="2e2f66696c653000", r3, &(0x7f0000ad9000-0x8)="2e2f66696c653000") 2017/11/27 19:23:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$mouse(&(0x7f000078f000)="2f6465762f696e7075742f6d6f7573652300", 0x7a0, 0x202000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000510000-0x10)={&(0x7f0000d0e000/0x1000)=nil, 0x1000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:18 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:18 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 58.751673] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.757148] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.769459] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000882000)="2f6465762f7663732300", 0xe8, 0x0) r1 = openat(r0, &(0x7f0000d47000-0x8)="2e2f66696c653000", 0xc208, 0x800000000002) connect$inet(r1, &(0x7f0000095000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) 2017/11/27 19:23:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$mouse(&(0x7f000078f000)="2f6465762f696e7075742f6d6f7573652300", 0x7a0, 0x202000) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) [ 58.785319] binder: 7113:7116 got reply transaction with no transaction stack [ 58.785327] binder: 7113:7116 transaction failed 29201/-71, size 32-8 line 2670 [ 58.789208] binder: 7111:7114 got reply transaction with no transaction stack [ 58.789216] binder: 7111:7114 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) r3 = dup(r2) symlinkat(&(0x7f00006c7000)="2e2f66696c653000", r3, &(0x7f0000ad9000-0x8)="2e2f66696c653000") 2017/11/27 19:23:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfba000)=nil, 0xfba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000000f, 0x806, 0x202) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000bf9000-0x18)={0x0, 0x9, 0x30, 0x6, 0xff}, &(0x7f0000f31000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000b0d000-0x14)={r2, 0x10000, 0x80000001, 0x3, 0x7, 0x1000778}, &(0x7f0000133000-0x4)=0x14) r3 = accept4(r1, &(0x7f00008eb000-0x80)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f00001d7000-0x4)=0x80, 0x800) getsockopt$nfc_llcp(r0, 0x118, 0x6, &(0x7f0000b62000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004f3000-0xf)="2f6465762f73657175656e63657200", 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f000044f000)={0x10001, 0x0, 0x10000, 0x100000001}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000a23000-0x20)={0x1, r5, 0x0, 0x1}) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000003000-0x20)={"0d99c6c849af2fb95b936147e7411ad1", {0x4, 0x7fffffff, 0x8, "da79b1cbca73", 0x4, 0x0}}) setsockopt$inet6_buf(r1, 0x29, 0x18, &(0x7f0000001000)="", 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000124000)="80", 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x7, 0xb, 0xfffffffffffffffe) getsockname$llc(r3, &(0x7f0000917000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00007b6000)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xfffffffffffffff7, 0x0}, 0x2, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x40000000000001, 0x800000000000000, 0xfffffffffffffffe, 0x1, 0x0, 0x3a}}, 0xe8) sendto$inet6(r6, &(0x7f0000001000-0x1000)="", 0x0, 0xfffffffffffffffd, &(0x7f0000001000)={0xa, 0x0, 0x101, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000ba2000-0x4)=0x0) bind$alg(0xffffffffffffffff, &(0x7f00008e6000)={0x26, "726e670000000000000000000000", 0x133, 0x20203, "63726333326300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ae8000)="2f6465762f7667615f6172626974657200", 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f000039c000-0x8e)={{0x98c, 0x1001, 0x8001, 0x3, 0xff, 0x3}, 0x1ff, 0x3ff, 0x7, 0x2, 0x9a9, "a5128290749e4c0275f0d1cc4fbcd0f6017c1168d41d2821fd29c803e2e6bd28dceaaa71e491ce63e3267f83a9fc9810600d77150bddafd88dcbc1ea8f4668139d5d3d24b18d8edb98e3d4aab9a07f6e144d219a1be4cbd57b4ef1edcbe5dde343f697c05df6f7e95a73ee8a7d1c6b42165cd39dad7812cb413a"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 2017/11/27 19:23:18 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 58.790228] binder: 7113:7116 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.790237] binder: 7116 RLIMIT_NICE not set [ 58.796836] binder: 7112:7118 got reply transaction with no transaction stack 2017/11/27 19:23:18 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:18 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) [ 58.796844] binder: 7112:7118 transaction failed 29201/-71, size 32-8 line 2670 [ 58.800440] binder: 7111:7114 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.800474] binder: 7114 RLIMIT_NICE not set [ 58.806986] binder: 7112:7118 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:18 executing program 3: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000580000/0x2000)=nil, 0x2000, 0x3, 0x100032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x100000000) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00009dc000-0x4)=0xfff, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000feb000)={0xa, 0x1, 0x101, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfef3}, 0x1c) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x4000)=nil, 0x4000, 0x1000001, 0x802132, r0, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000091d000/0x400000)=nil, 0x400000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c75000)={0x0, 0x228, "9ce3dc77a5affe3a4c734dfc74e45aad2c946c05fdd90ac5a8d5919a6d4038d2f03b9c44495f93ad7e277cecc4662779104643e8bbc0118f6c7c4ec1095c10cc015ff7f855086fcf98489c0207f51b02124a6646804016a6235b92da51080085168825ee84fd3afbdaab29c2b5cd5d9a0e871e56566d8c802076629a22d1df98ab"}, &(0x7f00002c0000-0x4)=0xc8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x22, &(0x7f0000391000-0xc)={r2, 0x4, "82b72de1"}, &(0x7f0000829000-0x4)=0xc) mmap(&(0x7f0000d15000/0x4000)=nil, 0x4000, 0x3, 0x32, r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000b51000-0xc)={0x0, 0x2, 0x0}, &(0x7f00002ec000-0x4)=0xc) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x5, 0x800000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000fef000)={r2, 0x800000009}, &(0x7f0000387000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00005c2000)={r3, 0x0}, 0x8) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f0000c4e000-0x1002)=@un=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000927000+0xcdf)=0x58, 0x80000) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000b5d000)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000a01000-0xa0)={r4, @in6={{0xa, 0x2, 0xfffffffffffffe01, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffa, 0x1, 0x400, 0xff7fdfffffffffc2, 0x52}, &(0x7f0000feb000-0x4)=0xa0) [ 58.806995] binder: 7118 RLIMIT_NICE not set [ 58.826380] binder: 7116 RLIMIT_NICE not set [ 58.827821] binder: release 7113:7116 transaction 265 out, still active [ 58.827827] binder: release 7113:7116 transaction 264 in, still active [ 58.827831] binder: undelivered TRANSACTION_COMPLETE [ 58.840158] binder: 7114 RLIMIT_NICE not set [ 58.840389] binder: 7118 RLIMIT_NICE not set [ 58.848561] binder: release 7111:7114 transaction 266 in, still active [ 58.848569] binder: send failed reply for transaction 266 to 7111:7127 [ 58.849701] binder: BC_ATTEMPT_ACQUIRE not supported [ 58.849710] binder: 7103:7121 ioctl c0306201 20008000 returned -22 [ 58.852182] binder: release 7113:7123 transaction 264 out, still active [ 58.852188] binder: undelivered TRANSACTION_COMPLETE [ 58.852201] binder: send failed reply for transaction 265, target dead [ 58.852209] binder: send failed reply for transaction 264, target dead [ 58.873674] binder: release 7112:7128 transaction 267 out, still active [ 58.873680] binder: undelivered TRANSACTION_COMPLETE [ 58.874173] binder: undelivered TRANSACTION_COMPLETE [ 58.874186] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.874413] binder: 7113:7123 got reply transaction with no transaction stack [ 58.874421] binder: 7113:7123 transaction failed 29201/-71, size 32-8 line 2670 [ 58.876180] binder: BINDER_SET_CONTEXT_MGR already set [ 58.876188] binder: 7113:7133 ioctl 40046207 0 returned -16 [ 58.881391] binder_alloc: 7113: binder_alloc_buf, no vma [ 58.881412] binder: 7113:7123 transaction failed 29189/-3, size 0-0 line 2870 [ 58.881462] binder_alloc: 7113: binder_alloc_buf, no vma [ 58.881480] binder: 7113:7133 transaction failed 29189/-3, size 0-0 line 2870 [ 58.897841] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.897855] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.904936] binder: 7111:7127 got reply transaction with no transaction stack [ 58.904944] binder: 7111:7127 transaction failed 29201/-71, size 32-8 line 2670 [ 58.907480] binder: 7112:7128 got reply transaction with no transaction stack [ 58.907489] binder: 7112:7128 transaction failed 29201/-71, size 32-8 line 2670 [ 58.908502] binder: BINDER_SET_CONTEXT_MGR already set [ 58.908541] binder: 7111:7127 ioctl 40046207 0 returned -16 [ 58.910281] binder: BINDER_SET_CONTEXT_MGR already set [ 58.910289] binder: 7112:7128 ioctl 40046207 0 returned -16 [ 58.911435] binder: 7111:7127 unknown command 0 [ 58.911444] binder: 7111:7127 ioctl c0306201 2000a000 returned -22 [ 58.911653] binder_alloc: 7111: binder_alloc_buf, no vma [ 58.911676] binder: 7111:7139 transaction failed 29189/-3, size 0-0 line 2870 [ 58.912948] binder: 7112:7128 unknown command 0 [ 58.912957] binder: 7112:7128 ioctl c0306201 2000a000 returned -22 [ 58.913080] binder_alloc: 7112: binder_alloc_buf, no vma [ 58.913102] binder: 7112:7136 transaction failed 29189/-3, size 0-0 line 2870 [ 58.920350] binder: 7140:7141 got reply transaction with no transaction stack [ 58.920358] binder: 7140:7141 transaction failed 29201/-71, size 32-8 line 2670 [ 58.928789] binder: 7140:7141 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 58.928798] binder: 7141 RLIMIT_NICE not set [ 58.933914] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.937295] binder: release 7112:7118 transaction 267 in, still active [ 58.937303] binder: send failed reply for transaction 267, target dead [ 58.952525] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.955454] binder: 7141 RLIMIT_NICE not set [ 58.956829] binder: release 7140:7141 transaction 278 out, still active [ 58.956838] binder: release 7140:7141 transaction 277 in, still active [ 58.956843] binder: undelivered TRANSACTION_COMPLETE [ 58.957821] binder: 7145:7148 got reply transaction with no transaction stack [ 58.957830] binder: 7145:7148 transaction failed 29201/-71, size 32-8 line 2670 [ 58.960155] binder: 7149:7150 got reply transaction with no transaction stack [ 58.960164] binder: 7149:7150 transaction failed 29201/-71, size 32-8 line 2670 [ 58.969362] binder: 7149:7150 got new transaction with bad transaction stack, transaction 284 has target 7149:0 [ 58.969374] binder: 7149:7150 transaction failed 29201/-71, size 0-0 line 2782 [ 58.971801] binder: 7145:7148 got new transaction with bad transaction stack, transaction 283 has target 7145:0 [ 58.971812] binder: 7145:7148 transaction failed 29201/-71, size 0-0 line 2782 [ 58.974122] binder: release 7145:7148 transaction 283 out, still active [ 58.974126] binder: undelivered TRANSACTION_COMPLETE [ 58.974134] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.983256] binder: release 7140:7147 transaction 277 out, still active [ 58.983263] binder: undelivered TRANSACTION_COMPLETE [ 58.983275] binder: send failed reply for transaction 278, target dead [ 58.983284] binder: send failed reply for transaction 277, target dead [ 59.014583] binder: 7140:7147 got reply transaction with no transaction stack [ 59.014593] binder: 7140:7147 transaction failed 29201/-71, size 32-8 line 2670 [ 59.017509] binder: 7149:7158 got reply transaction with no transaction stack [ 59.017517] binder: 7149:7158 transaction failed 29201/-71, size 32-8 line 2670 [ 59.023445] binder: BINDER_SET_CONTEXT_MGR already set [ 59.023454] binder: 7140:7147 ioctl 40046207 0 returned -16 [ 59.027904] binder: BINDER_SET_CONTEXT_MGR already set [ 59.027912] binder: 7149:7158 ioctl 40046207 0 returned -16 [ 59.029087] binder: 7140:7147 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.029096] binder: 7147 RLIMIT_NICE not set [ 59.029146] binder_alloc: 7140: binder_alloc_buf, no vma [ 59.029165] binder: 7140:7160 transaction failed 29189/-3, size 0-0 line 2870 [ 59.034872] binder: 7145:7159 got reply transaction with no transaction stack [ 59.034881] binder: 7145:7159 transaction failed 29201/-71, size 32-8 line 2670 [ 59.038077] binder: BINDER_SET_CONTEXT_MGR already set [ 59.038084] binder: 7145:7159 ioctl 40046207 0 returned -16 [ 59.040919] binder_alloc: 7145: binder_alloc_buf, no vma [ 59.040939] binder: 7145:7159 transaction failed 29189/-3, size 0-0 line 2870 [ 59.040983] binder_alloc: 7145: binder_alloc_buf, no vma [ 59.040998] binder: 7145:7163 transaction failed 29189/-3, size 0-0 line 2870 [ 59.042558] binder_alloc: 7149: binder_alloc_buf, no vma [ 59.042577] binder: 7149:7158 transaction failed 29189/-3, size 0-0 line 2870 [ 59.042628] binder_alloc: 7149: binder_alloc_buf, no vma [ 59.042644] binder: 7149:7162 transaction failed 29189/-3, size 0-0 line 2870 [ 59.054762] binder: release 7149:7150 transaction 284 out, still active [ 59.054771] binder: undelivered TRANSACTION_COMPLETE [ 59.054778] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.054801] binder: send failed reply for transaction 284, target dead 2017/11/27 19:23:19 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000008000)="2e2f66696c653000", 0x10000, 0x4) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000b000-0x9)="2f6465762f72746300", 0x200, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f000000a000-0x14)={0x0, r1, 0x5, 0x1, 0x0}, 0x14) 2017/11/27 19:23:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) r3 = dup(r2) symlinkat(&(0x7f00006c7000)="2e2f66696c653000", r3, &(0x7f0000ad9000-0x8)="2e2f66696c653000") 2017/11/27 19:23:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:19 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:19 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:19 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)="2e2f66696c653000", 0xc480759ebd8ee49e) sched_rr_get_interval(0x0, &(0x7f0000003000-0x10)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000011000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x800, 0xfffffffff, 0x100000001, 0x8, @tick=0x6ae, {0xfffffffffffffff8, 0x0}, {0x6, 0xcc1}, @queue={0x20, {0x20, 0x55fd}}}, {0x81, 0x1, 0x8, 0x6, @time={0x0, 0x0}, {0x1c, 0x536}, {0x8, 0x6}, @time=@tick=0xff}], 0x10238) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000013000)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000004000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xac}, {&(0x7f0000004000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5a}, {&(0x7f0000003000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x90}], 0x3) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000)=0xe8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000004000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd) getuid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00007db000-0x5afd)={@random="891f000020d8", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "f3aa87", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "3a6c82", 0x0, 0x4, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [], "d4369dc7f71ba2b4"}}}}}}}, 0x0) r2 = add_key(&(0x7f0000f04000)="656e6372797074656400", &(0x7f00007e3000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00001da000)="33d9e05e9036cbc0171d4e55b97ce03daa97f16bb05737a501134296db568a61c1d8c487740320f6967b19b27634b36480de3b0e4dec10a4369baafe47dc8a6d9d50733f4ebb88abc95ff345d7d529176a0f2e7e5c912e7d9d1195ca7f270121dfb5f1cf264587f825380674e119a66b639d36b0bc754f13a1fc2ed8e6c80e5622ee8f5244ed8dbcc8bf18a5026538b1f16811c23925", 0x96, 0xfffffffffffffff8) request_key(&(0x7f0000a1b000-0xa)="2e6465616400", &(0x7f0000ace000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000edd000)="16766d0065743000", r2) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000001000-0x28)={&(0x7f0000011000/0x1000)=nil, 0x20000000000003ff, 0x1, 0x0, &(0x7f0000000000/0x4000)=nil, 0x3}) request_key(&(0x7f0000001000-0x6)="6c6f676f6e00", &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000012000)="505d284b6e6f646576706f7369785f61636c5f61636365737300", 0x0) getdents64(r1, &(0x7f0000011000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xde) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000c25000)="0e", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000111000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") read(r1, &(0x7f0000199000)="00000000000000", 0x7) 2017/11/27 19:23:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000580000-0x10)="2f6465762f73657175656e6365723200", 0x40000, 0x0) fcntl$setflags(r0, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000311000-0xa)="2f6465762f70746d7800", 0x80, 0x0) r1 = mq_open(&(0x7f0000208000-0x30)="706f7369785f61636c5f6163636573736d643573756d6c6f2d2d65746831656d31657468302a76626f786e6574302600", 0x0, 0x0, &(0x7f0000820000-0x20)={0x101, 0x9, 0x5, 0x5, 0x19, 0x101, 0x41, 0x7ab7}) r2 = syz_open_dev$mouse(&(0x7f00003f2000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x7fff, 0x200) poll(&(0x7f0000f7b000)=[{r1, 0x28, 0x0}, {r1, 0x4682, 0x0}, {r2, 0x400, 0x0}, {r1, 0x1000, 0x0}, {r1, 0x20, 0x0}], 0x5, 0x4000000000) [ 59.093464] binder: send failed reply for transaction 283, target dead [ 59.095229] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.095308] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.095316] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.095394] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.095403] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.656258] binder: 7103:7107 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:19 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e732f69706300") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000002000-0x70)={[{0x2, 0x10000, 0x2, 0x8, 0x1489, 0x9, 0x5, 0x2, 0x9, 0x1f, 0x7, 0x5, 0x2}, {0x2, 0x10001, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x376, 0x5d2, 0x7}, {0x7, 0x1f, 0x2f8c, 0x7fff, 0x100000000, 0x0, 0x1, 0x232a, 0xfffffffffffffffe, 0x8001, 0x6, 0x2, 0x7}], 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f000054b000)={0x6, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f00009b0000-0x10)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) [ 59.678738] binder: 7166:7175 got reply transaction with no transaction stack [ 59.679819] binder: 7168:7172 got reply transaction with no transaction stack [ 59.679827] binder: 7168:7172 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:19 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000008000-0x4)=0x401, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000b2b000-0x6)=@hci={0x0, 0x0, 0x0}, &(0x7f0000180000)=0x6, 0x800) socketpair(0x7, 0x805, 0x3cd, &(0x7f0000561000)={0x0, 0x0}) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000582000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockname$packet(r0, &(0x7f000065b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f000000f000)=0x14) 2017/11/27 19:23:19 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f000004a000-0x4)=0x6e2a, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 59.686096] binder: 7170:7174 got reply transaction with no transaction stack [ 59.686103] binder: 7170:7174 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:19 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = open(&(0x7f0000007000-0x8)="2e2f66696c653000", 0x40, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f000000b000)={0x8, 0x3, 0xf2, 0xd4f}, 0x10) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f000000d000-0x2)={0x6, 0x5}) connect$bt_l2cap(r1, &(0x7f000000b000-0xe)={0x1f, 0x7cd4, {0x1, 0x85e, 0x1, 0x3ff, 0x1f, 0x200}, 0x8, 0x9}, 0xe) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000007000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000004000)=0xe8) r2 = mmap$binder(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000008000)=[@ptr={0x70742a85, 0x0, &(0x7f000000b000-0x1)=0x0, 0x1, 0x4, 0x26}, @flat={0x77622a85, 0xb, r2, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x30, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:19 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"925c9d9fd1c2f9056c8adb967986afca36dc0720c3b3d7d96810ad5ed3d9708dc63ad4ce4253b95937e4403cd3f739c8e0213e6e7a9110924e629df74e06cf6f3b5779b216427cb484232bebc6850b3a65aa3e93d31cc4f628ba97395b87fcc7d483ac95bfda1b9299a8b75ee8677b7b26c627e3e422b9df38170c18b3dce1671a66d7e66f9944f7020710e226cd3422eab05d5a01b3667ae549bdfebd6cf1cc691fdcd71af1794a35aa66b0375bd110e76b2e4817e92d54ede7728db318b41c672665f25ab47df6a7580f405fc2fcfb81b5a4d74a6872b18d011118a4ac0b327143036df4b4b33a53601b0e5241b39b0f2e4f314e8c85ee7f1e20ae2c48e70e1b23b4a7e03b269a32d61bd59590b0cc2f400b6d52507e647295a288518547fadfc0c0ecf2638b130b29ad1e658e12af14d8c74a594517dd6b55e3b44ecb5cf16e256e71ba2c95a1d480c68ed6027ff03a96b2bb09b561184c530486bafe7d8d1df0fa8de48a33086bbeea22e77d8166c6ae9eabbbc987e34327c038feb7945d4e26d459d1e7914d3c29521c6d630b52fbe1b8111ceac842d9ba05cc7580cbb9389d7201830735fc23c7962339e72ca6d33f91aec5d05683d93c95eeb09c4f5875496bed23266d560b968bd0d46127724f506cf4f79cb0283f3deefac90694f3333ed95f34e15e3530ee746549af11632952ee5ab47c5289574131442d7cca395b7d2e3bece4fd1060b53a44a0cc7c5ed7f951d4144f87ae1aa0f94a659f0b594aaee1a2ef8447daa6cb682fbb72dad0143c01209cecf920881ef06fdf9b7e608b4f8c4f5b10fc1beac17010b442fa7d53eb88e7e76fbc6218a6ca69e9ed98124dd735847d03bacda227ea7e0c6ac8b3692511be40bb649b19181cbefc580a47a09b7ce1fe7523bfc7846494303880757e8c944feae27ae0b0da20a1223cd247a97593ce53999f4d6505a5cc5180ba31637631451e47fd5eb7bb00f2aa35af012980d55088e163f02b919a7e552c17751e9d2c4f0fdc06a66e17ae3eadb5c942d82737dc8e3b94b230502014c7fe287ea49098da139a5b447feded31d23b7b7b820629094b2ec68833bdf1689fff8db2a589c546251a39ebf8d343ee5d54e9e3853cebac8892452e072ae0590c629b8d0eef852b0b6236d5dbb7e30ddbc6a54b1318aaf6d54f274d80a42d43b092368d8fda81dbdce1fe7c3a0b709d589c5115a1089369220e09ee39337c60f999b9c753584587d4fc672c6344b03b035465a87329120422ccce70c4c637824d0e081f1f67e5d62616538f15aa38b2608c29ee9aedfe4f7b80834e617669f6a3a22d0ddd5c309d83b5b1eca06a8b60cace0dd7215e0315d05150691ca1dde86f2c9b76afc72b911a0fc4a718ecca9836ea89659bf3f6fe37a12943cfc1341ca2b907c524913853c7577d6d6c351c969493b760"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) dup(r2) 2017/11/27 19:23:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={0xffffffffffffffff, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000d7d000)="2f6465762f6b766d00", 0x2, 0x0) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r0 = socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000c16000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00005d2000)={r1, 0x0}) signalfd4(r0, &(0x7f0000229000)={0x80000001}, 0x8, 0x80800) r2 = open$dir(&(0x7f0000b7c000)="2e2f66696c653000", 0x400000, 0x14) pread64(r2, &(0x7f00004be000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x93, 0x80000002) [ 59.686314] binder: 7168:7172 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.686323] binder: 7172 RLIMIT_NICE not set [ 59.690801] binder: 7170:7174 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.690810] binder: 7174 RLIMIT_NICE not set 2017/11/27 19:23:19 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:19 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f000000b000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 59.712849] binder: 7172 RLIMIT_NICE not set [ 59.713632] binder: 7174 RLIMIT_NICE not set [ 59.722226] binder: BC_ATTEMPT_ACQUIRE not supported [ 59.722236] binder: 7176:7180 ioctl c0306201 20008000 returned -22 [ 59.722749] binder: 7170:7174 ioctl c0306201 2000afd0 returned -14 [ 59.725699] binder: BC_ATTEMPT_ACQUIRE not supported [ 59.725710] binder: 7176:7187 ioctl c0306201 20008000 returned -22 [ 59.728185] binder: release 7168:7172 transaction 302 out, still active [ 59.728193] binder: release 7168:7172 transaction 300 in, still active [ 59.728198] binder: undelivered TRANSACTION_COMPLETE [ 59.728465] binder: release 7170:7174 transaction 301 in, still active [ 59.728474] binder: send failed reply for transaction 301 to 7170:7189 [ 59.751579] binder: undelivered TRANSACTION_COMPLETE [ 59.751585] binder: 7166:7184 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.751593] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.751595] binder: 7184 RLIMIT_NICE not set [ 59.751755] binder: release 7168:7186 transaction 300 out, still active [ 59.751761] binder: undelivered TRANSACTION_COMPLETE [ 59.751771] binder: send failed reply for transaction 302, target dead [ 59.751780] binder: send failed reply for transaction 300, target dead [ 59.776732] binder: 7170:7189 got reply transaction with no transaction stack [ 59.776742] binder: 7170:7189 transaction failed 29201/-71, size 32-8 line 2670 [ 59.776791] binder: BINDER_SET_CONTEXT_MGR already set [ 59.776799] binder: 7170:7199 ioctl 40046207 0 returned -16 [ 59.779538] binder: BC_ATTEMPT_ACQUIRE not supported [ 59.779547] binder: 7196:7202 ioctl c0306201 20008000 returned -22 [ 59.780260] binder: 7184 RLIMIT_NICE not set [ 59.781091] binder_alloc: 7170: binder_alloc_buf, no vma [ 59.781115] binder: 7170:7189 transaction failed 29189/-3, size 0-0 line 2870 [ 59.781229] binder: 7170:7199 ioctl c0306201 2000afd0 returned -14 [ 59.798763] binder_alloc: binder_alloc_mmap_handler: 7168 20000000-20002000 already mapped failed -16 [ 59.800061] binder: 7168:7186 got reply transaction with no transaction stack [ 59.800070] binder: 7168:7186 transaction failed 29201/-71, size 32-8 line 2670 [ 59.801402] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.805271] binder: release 7166:7203 transaction 305 out, still active [ 59.805276] binder: undelivered TRANSACTION_COMPLETE [ 59.805291] binder: send failed reply for transaction 307 to 7166:7184 [ 59.805634] binder: 7209:7212 unknown command 8 [ 59.805646] binder: 7209:7212 ioctl c0306201 20008000 returned -22 [ 59.808800] binder: BINDER_SET_CONTEXT_MGR already set [ 59.808808] binder: 7168:7186 ioctl 40046207 0 returned -16 [ 59.814069] binder: 7168:7186 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.814079] binder: 7186 RLIMIT_NICE not set [ 59.836951] binder: 7168:7198 transaction failed 29189/-22, size 0-0 line 2755 [ 59.837046] binder: 7168:7172 transaction failed 29189/-22, size 0-0 line 2755 [ 59.837090] binder: 7209:7214 unknown command 8 [ 59.837099] binder: 7209:7214 ioctl c0306201 20008000 returned -22 [ 59.840350] binder: 7166:7203 got reply transaction with no transaction stack [ 59.840358] binder: 7166:7203 transaction failed 29201/-71, size 32-8 line 2670 [ 59.841387] binder: 7213:7218 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 59.841396] binder: 7218 RLIMIT_NICE not set [ 59.844744] binder: BINDER_SET_CONTEXT_MGR already set [ 59.844753] binder: 7166:7203 ioctl 40046207 0 returned -16 [ 59.853479] binder_alloc: 7166: binder_alloc_buf, no vma [ 59.853502] binder: 7166:7219 transaction failed 29189/-3, size 0-0 line 2870 [ 59.853566] binder_alloc: 7166: binder_alloc_buf, no vma [ 59.853585] binder: 7166:7203 transaction failed 29189/-3, size 0-0 line 2870 [ 59.854449] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.854465] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.880071] binder: 7229:7233 got reply transaction with no transaction stack [ 59.880080] binder: 7229:7233 transaction failed 29201/-71, size 32-8 line 2670 [ 59.881365] binder: BC_ATTEMPT_ACQUIRE not supported [ 59.881374] binder: 7230:7234 ioctl c0306201 20008000 returned -22 [ 59.888954] binder: 7218 RLIMIT_NICE not set [ 59.889570] binder: 7229:7233 ioctl c0306201 2000a000 returned -14 [ 59.889940] binder: release 7213:7218 transaction 319 out, still active [ 59.889944] binder: 7229:7233 ioctl c0306201 2000afd0 returned -14 [ 59.889948] binder: release 7213:7218 transaction 317 in, still active [ 59.889953] binder: undelivered TRANSACTION_COMPLETE [ 59.889995] binder: release 7229:7233 transaction 318 out, still active [ 59.889999] binder: undelivered TRANSACTION_COMPLETE [ 59.903670] binder: BC_ATTEMPT_ACQUIRE not supported [ 59.903680] binder: 7230:7235 ioctl c0306201 20008000 returned -22 [ 59.914059] binder: release 7213:7231 transaction 317 out, still active [ 59.914064] binder: undelivered TRANSACTION_COMPLETE [ 59.914075] binder: send failed reply for transaction 319, target dead [ 59.914082] binder: send failed reply for transaction 317, target dead [ 59.934278] binder: 7229:7237 got reply transaction with no transaction stack [ 59.934286] binder: 7229:7237 transaction failed 29201/-71, size 32-8 line 2670 [ 59.934921] binder: BINDER_SET_CONTEXT_MGR already set [ 59.934928] binder: 7213:7239 ioctl 40046207 0 returned -16 [ 59.936873] binder: BINDER_SET_CONTEXT_MGR already set [ 59.936879] binder: 7229:7237 ioctl 40046207 0 returned -16 [ 59.938312] binder: 7229:7237 ioctl c0306201 2000a000 returned -14 [ 59.938395] binder_alloc: 7229: binder_alloc_buf, no vma [ 59.938414] binder: 7229:7238 transaction failed 29189/-3, size 0-0 line 2870 [ 59.938656] binder_alloc: 7213: binder_alloc_buf, no vma [ 59.938671] binder: 7213:7231 transaction failed 29189/-3, size 0-0 line 2870 [ 59.938768] binder_alloc: 7213: binder_alloc_buf, no vma [ 59.938800] binder: 7213:7239 transaction failed 29189/-3, size 0-0 line 2870 [ 59.939703] binder: 7229:7237 ioctl c0306201 2000afd0 returned -14 [ 59.959023] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.959034] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.966362] binder: send failed reply for transaction 318, target dead 2017/11/27 19:23:20 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:20 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f000004a000-0x4)=0x6e2a, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000d15000)="2f6465762f6c6f6f702300", 0x3, 0x44801) poll(&(0x7f0000b3e000)=[{r0, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) r1 = creat(&(0x7f0000cf2000)="2e2f66696c653000", 0x2) sendmsg$unix(r1, &(0x7f00006ef000-0x1c)={&(0x7f0000374000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000446000-0x8)=[{&(0x7f0000443000)="c07824d1d8740956b79ca6f974bb3a9aca4b4c519ac8ac07e62c5427be1c0680712e40ef1cfd9dabc5e7565aa6c78d290bea2fcc2d0512e47d104d8a07e0e79b70425b523923e81b71825fc2f08cb8b399d64debd2e2b338", 0x58}], 0x1, 0x0, 0x0, 0x4}, 0x800) 2017/11/27 19:23:20 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) fstat(r0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 59.973133] binder: undelivered TRANSACTION_ERROR: 29189 [ 60.452276] binder: 7166:7175 transaction failed 29201/-71, size 32-8 line 2670 [ 60.459861] binder: release 7166:7184 transaction 305 in, still active [ 60.466562] binder: send failed reply for transaction 305, target dead [ 60.478083] binder: undelivered TRANSACTION_COMPLETE 2017/11/27 19:23:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000d5c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x93) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00004f9000)={0x0, 0x0}) ioctl$fiemap(r0, 0xc020660b, &(0x7f000094a000-0x100)={0x1, 0x7fff, 0x4, 0x7fff, 0x4, [{0x7, 0x7f, 0x100000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {0xc2, 0x10000, 0x1fd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}, {0xffffffff, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, {0xc6a1, 0x0, 0x1, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0}]}) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) 2017/11/27 19:23:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c42000-0x10)="2f6465762f73657175656e6365723200", 0x18000, 0x0) mmap$binder(&(0x7f0000eba000/0x2000)=nil, 0x2000, 0x1000000, 0x20011, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x0, 0x3f, &(0x7f0000009000)={0x0, 0x0}) ioctl$TCSETAF(r2, 0x5404, &(0x7f0000004000)={0x7ff, 0x101, 0x6, 0x3, 0x1, 0xc8, 0x100, 0x2, 0x1, 0x2}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r2, &(0x7f000000a000)={0xea, 0x4f, 0x18, 0x7, 0x107, 0x7, 0xfffffffffffffff8, 0x6}, &(0x7f000000c000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = gettid() ptrace$getregs(0xffffffffffffffff, r4, 0xfffffffffffffffa, &(0x7f0000006000-0x8d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000006000)=0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 60.492533] binder: 7245:7250 got reply transaction with no transaction stack [ 60.492541] binder: 7245:7250 transaction failed 29201/-71, size 32-8 line 2670 [ 60.494063] binder: 7245:7250 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x0, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00002fe000-0xb)="2f6465762f766373612300", 0x5b, 0x0) read$eventfd(r0, &(0x7f00004b8000-0x8)=0x0, 0x8) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) [ 60.494071] binder: 7250 RLIMIT_NICE not set [ 60.501633] binder: 7247:7252 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.501640] binder: 7252 RLIMIT_NICE not set [ 60.506630] binder: 7249:7254 got reply transaction with no transaction stack [ 60.506637] binder: 7249:7254 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:20 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x1, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {0xffffffffffffffff, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{0xffffffffffffffff, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {0xffffffffffffffff, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f000004a000-0x4)=0x6e2a, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 60.508434] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.508443] binder: 7248:7255 ioctl c0306201 20008000 returned -22 [ 60.521365] binder: 7249:7254 ioctl c0306201 2000a000 returned -14 2017/11/27 19:23:20 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x1, &(0x7f00001ac000-0x18)=[@generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000004000)="2f6465762f73657175656e63657200", 0x5e1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000004000)={0x7fff, 0x0, 0x6, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2aab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 60.521741] binder: 7249:7254 ioctl c0306201 2000afd0 returned -14 [ 60.526692] binder: 7250 RLIMIT_NICE not set [ 60.527432] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.527454] binder: 7247:7263 transaction failed 29189/-3, size 0-0 line 2870 [ 60.528674] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:20 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f000000b000-0xc)={0x7, r0, 0x1}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000002000-0x8c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0], 0x0}) 2017/11/27 19:23:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:20 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f7667615f6172626974657200", 0x28c800, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000003000-0x10)={&(0x7f0000002000/0x3000)=nil, 0x3000}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000000a000)={0x7, r0, 0x1}) munlock(&(0x7f0000002000/0x4000)=nil, 0x4000) bind$netlink(r2, &(0x7f0000005000-0xc)={0x0, 0x0, 0x400, 0x1}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:20 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 60.528685] binder: 7248:7257 ioctl c0306201 20008000 returned -22 [ 60.528972] binder: release 7245:7250 transaction 332 out, still active [ 60.528979] binder: release 7245:7250 transaction 330 in, still active [ 60.528984] binder: undelivered TRANSACTION_COMPLETE [ 60.529870] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x0, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:20 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f000004a000-0x4)=0x6e2a, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:20 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:20 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)="73656c667b24776c616e306e6f646576267070703100", 0x42, 0x9, &(0x7f0000000000)={0x234800000000000, 0x558, 0x800, 0x7, 0x100000001, 0x1, 0x8000, 0x2}) fallocate(r0, 0x0, 0x80000001, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 60.558467] binder: release 7245:7260 transaction 330 out, still active [ 60.558474] binder: undelivered TRANSACTION_COMPLETE [ 60.558486] binder: send failed reply for transaction 332, target dead [ 60.558495] binder: send failed reply for transaction 330, target dead 2017/11/27 19:23:20 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 60.593536] binder: 7249:7267 got reply transaction with no transaction stack [ 60.593546] binder: 7249:7267 transaction failed 29201/-71, size 32-8 line 2670 [ 60.595591] binder: 7245:7260 got reply transaction with no transaction stack [ 60.595606] binder: 7245:7260 transaction failed 29201/-71, size 32-8 line 2670 [ 60.595994] binder: BINDER_SET_CONTEXT_MGR already set [ 60.596005] binder: 7249:7267 ioctl 40046207 0 returned -16 [ 60.596666] binder: BINDER_SET_CONTEXT_MGR already set [ 60.596674] binder: 7247:7271 ioctl 40046207 0 returned -16 [ 60.597522] binder: 7249:7267 ioctl c0306201 2000a000 returned -14 [ 60.597545] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.597568] binder: 7249:7275 transaction failed 29189/-3, size 0-0 line 2870 [ 60.598329] binder: BINDER_SET_CONTEXT_MGR already set [ 60.598337] binder: 7245:7260 ioctl 40046207 0 returned -16 [ 60.600398] binder: 7249:7267 ioctl c0306201 2000afd0 returned -14 [ 60.600592] binder: 7247:7271 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.600608] binder: 7271 RLIMIT_NICE not set [ 60.600648] binder: 7245:7260 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.600655] binder: 7260 RLIMIT_NICE not set [ 60.602290] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.602312] binder: 7245:7281 transaction failed 29189/-3, size 0-0 line 2870 [ 60.604359] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.604383] binder: 7247:7277 transaction failed 29189/-3, size 0-0 line 2870 [ 60.605617] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.605638] binder: 7247:7271 transaction failed 29189/-3, size 0-0 line 2870 [ 60.605876] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.605885] binder: 7268:7282 ioctl c0306201 20008000 returned -22 [ 60.647807] binder: 7294:7296 got reply transaction with no transaction stack [ 60.647816] binder: 7294:7296 transaction failed 29201/-71, size 32-8 line 2670 [ 60.648302] binder: BINDER_SET_CONTEXT_MGR already set [ 60.648310] binder: 7294:7296 ioctl 40046207 0 returned -16 [ 60.648412] binder: 7294:7296 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.648419] binder: 7296 RLIMIT_NICE not set [ 60.667961] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.667971] binder: 7305:7308 ioctl c0306201 20008000 returned -22 [ 60.671743] binder: 7304:7309 got reply transaction with no transaction stack [ 60.671751] binder: 7304:7309 transaction failed 29201/-71, size 32-8 line 2670 [ 60.680007] binder: 7304:7309 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.680052] binder: 7309 RLIMIT_NICE not set [ 60.680456] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.680480] binder: 7294:7312 transaction failed 29189/-3, size 0-0 line 2870 [ 60.694407] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.694417] binder: 7305:7308 ioctl c0306201 20008000 returned -22 [ 60.705582] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.705614] binder: 7304:7315 transaction failed 29189/-3, size 0-0 line 2870 [ 60.713494] binder: undelivered TRANSACTION_ERROR: 29189 [ 60.721177] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.721187] binder: 7316:7318 ioctl c0306201 20008000 returned -22 [ 60.721302] binder: 7316:7318 ioctl c00caee0 2000aff4 returned -22 [ 60.724357] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.724366] binder: 7316:7318 ioctl c0306201 20008000 returned -22 [ 60.725415] binder: 7316:7318 ioctl c00caee0 2000aff4 returned -22 [ 60.744697] binder: 7294:7322 got reply transaction with no transaction stack [ 60.744706] binder: 7294:7322 transaction failed 29201/-71, size 32-8 line 2670 [ 60.757794] binder: BINDER_SET_CONTEXT_MGR already set [ 60.757803] binder: 7294:7321 ioctl 40046207 0 returned -16 [ 60.757957] binder: 7294:7321 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.757965] binder: 7321 RLIMIT_NICE not set [ 60.758050] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.758070] binder: 7294:7322 transaction failed 29189/-3, size 0-0 line 2870 [ 60.759258] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.759278] binder: 7294:7321 transaction failed 29189/-3, size 0-0 line 2870 [ 60.760531] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.760540] binder: 7327:7331 ioctl c0306201 20008000 returned -22 [ 60.761830] binder: BINDER_SET_CONTEXT_MGR already set [ 60.761837] binder: 7329:7330 ioctl 40046207 0 returned -16 [ 60.766913] binder: 7304:7332 got reply transaction with no transaction stack [ 60.766922] binder: 7304:7332 transaction failed 29201/-71, size 32-8 line 2670 [ 60.767694] binder: 7329:7330 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.767704] binder: 7330 RLIMIT_NICE not set [ 60.767835] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.767853] binder: 7329:7330 transaction failed 29189/-3, size 0-0 line 2870 [ 60.780167] binder: 7304:7332 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.780176] binder: 7332 RLIMIT_NICE not set [ 60.783922] binder: BC_ATTEMPT_ACQUIRE not supported [ 60.783932] binder: 7327:7333 ioctl c0306201 20008000 returned -22 [ 60.802432] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.802457] binder: 7304:7325 transaction failed 29189/-3, size 0-0 line 2870 [ 60.802563] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.802587] binder: 7304:7336 transaction failed 29189/-3, size 0-0 line 2870 [ 60.804644] binder: 7339:7342 got reply transaction with no transaction stack [ 60.804651] binder: 7339:7342 transaction failed 29201/-71, size 32-8 line 2670 [ 60.812884] binder_alloc: binder_alloc_mmap_handler: 7329 20000000-20002000 already mapped failed -16 [ 60.813091] binder: 7339:7342 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.813100] binder: 7342 RLIMIT_NICE not set [ 60.820844] binder: BINDER_SET_CONTEXT_MGR already set [ 60.820854] binder: 7329:7340 ioctl 40046207 0 returned -16 [ 60.836502] binder: 7329:7340 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.836512] binder: 7340 RLIMIT_NICE not set [ 60.836594] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.836616] binder: 7329:7344 transaction failed 29189/-3, size 0-0 line 2870 [ 60.843969] binder_alloc: 7247: binder_alloc_buf, no vma [ 60.843989] binder: 7329:7340 transaction failed 29189/-3, size 0-0 line 2870 [ 60.845539] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.845555] binder: 7339:7348 transaction failed 29189/-3, size 0-0 line 2870 [ 60.849254] binder: 7349:7351 got reply transaction with no transaction stack [ 60.849261] binder: 7349:7351 transaction failed 29201/-71, size 32-8 line 2670 [ 60.849712] binder: BINDER_SET_CONTEXT_MGR already set [ 60.849719] binder: 7349:7351 ioctl 40046207 0 returned -16 [ 60.849848] binder: 7349:7351 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.849858] binder: 7351 RLIMIT_NICE not set [ 60.874708] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.874743] binder: 7349:7353 transaction failed 29189/-3, size 0-0 line 2870 [ 60.878046] binder: undelivered TRANSACTION_ERROR: 29189 [ 60.892580] binder: 7339:7354 got reply transaction with no transaction stack [ 60.892587] binder: 7339:7354 transaction failed 29201/-71, size 32-8 line 2670 [ 60.896410] binder: 7339:7354 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 60.896417] binder: 7354 RLIMIT_NICE not set [ 60.896543] binder_alloc: 7249: binder_alloc_buf, no vma [ 60.896560] binder: 7339:7356 transaction failed 29189/-3, size 0-0 line 2870 [ 60.918156] binder: 7349:7358 got reply transaction with no transaction stack [ 60.918167] binder: 7349:7358 transaction failed 29201/-71, size 32-8 line 2670 [ 60.923315] binder: BINDER_SET_CONTEXT_MGR already set [ 60.923323] binder: 7349:7359 ioctl 40046207 0 returned -16 [ 60.925762] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.925781] binder: 7349:7358 transaction failed 29189/-3, size 0-0 line 2870 [ 60.925823] binder_alloc: 7245: binder_alloc_buf, no vma [ 60.925839] binder: 7349:7359 transaction failed 29189/-3, size 0-0 line 2870 [ 61.539776] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.545364] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.545736] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.545980] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.545990] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.546182] binder: release 7249:7254 transaction 329 out, still active [ 61.546186] binder: undelivered TRANSACTION_COMPLETE [ 61.546204] binder: send failed reply for transaction 329, target dead [ 61.550544] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550554] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550645] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550686] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550737] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550746] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550803] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550816] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550881] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550890] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.550967] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.551077] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.551465] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00007f5000-0xb)="2f6465762f766373612300", 0x81, 0x0) r1 = creat(&(0x7f0000384000)="2e2f66696c653000", 0x20) getsockname$ax25(r1, &(0x7f0000fa7000-0x8)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000976000)=0x10) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000c5c000-0x5c)={{0xa, 0x1, 0xffffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x355e}, {0xa, 0x1, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x1, [0x7c00000000, 0xcd, 0x20, 0x1000, 0x9, 0x5, 0x7, 0x0]}, 0x5c) r2 = add_key$keyring(&(0x7f0000acb000-0x8)="6b657972696e6700", &(0x7f0000588000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000b08000)="7573657200", &(0x7f0000208000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a2c000-0xce)="4cbfbfd73c9dfc60ef0df0843cacc04043ec51de0983f23efe25f00fe622c8da23d1df4a9631efa19c6fe1e76c228157ef65b39b831c06df8bd829ce760c682fc06846c91235cc858a4413dbc8a2233b9469822e9efbc21e8b09a55cb2bc1d45859b3a650470ae8755193a9177db941fdcc0a1f167725ca0ed44e0d71591c806e5a32d3f07b7e69a6adf138f0da2e80ed424730974e226d7a1e9b9fdf08ca56d7b9a7ff4db67c6d3ae102066f695895c1363605c827586e2d74efa3a90ce790699786f24312779639d812b584b9b", 0xce, r2) getsockopt$inet6_dccp_int(r0, 0x21, 0x1f, &(0x7f00000db000-0x4)=0x0, &(0x7f0000917000-0x4)=0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000b5e000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x3, 0x0, 0x9, 0x6, 0x401, 0x9}, &(0x7f0000c25000-0x4)=0x20) poll(&(0x7f0000b27000-0x10)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x1, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:21 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) bind$netlink(r0, &(0x7f0000005000-0xc)={0x10, 0x0, 0x5, 0x4}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000000b000-0x8)="2e2f66696c653000", 0x40) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:21 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x8080, 0x0}, {r0, 0x1, 0x0}, {r0, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r0, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r0, 0x200, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r0, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 3: mmap(&(0x7f0000000000/0x4a000)=nil, 0x4a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f000004a000-0x4)=0x6e2a, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:21 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 61.551474] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000b73000)="2e2f66696c653000", &(0x7f0000b25000-0x15)=@known="636f6d2e6170706c652e46696e646572496e666f00", &(0x7f00001ab000)="2873656c6697266370757365747d73656c6600", 0x13, 0x3) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000093c000-0xa)="2f6465762f6375736500", 0x40000, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f000011e000)=0x4) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0x0, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) [ 61.686553] binder: BC_ATTEMPT_ACQUIRE not supported [ 61.700130] binder: 7369:7375 got reply transaction with no transaction stack [ 61.700142] binder: 7369:7375 transaction failed 29201/-71, size 32-8 line 2670 [ 61.700196] binder: 7367:7374 got reply transaction with no transaction stack 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0x2, 0x10000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x400}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000c5b000)=@rc={0x1f, {0x1, 0x8, 0x2, 0x80000000, 0x20, 0x7ff}, 0x6}, 0x9, &(0x7f0000000000)=[], 0x0, &(0x7f00005b2000)=[{0x48, 0x113, 0x7, "7e35b173e5ec817e8509132dccc1af9c2bafaf80b092d27f104e5bb34c1d5e72d04c054288445a50cdec4502b3d0b8b0203e7e2ce151f5b3b20d2fe8"}, {0xa8, 0x3a, 0x8, "d95552a610580e869eef0ab1b7766f58f166e143626abe8d28b4f40e6db4227fb126644730186b15e7cc480e90c0e309fd4093e8de0e2badf0dc7622d224034e88591c90e9c4383384457fc4d400c588a753813343d21c328c55023bf5052dd661c5cc0f09bd04ae45a14f0ef7fbd9b38aa239755637cb487f3b76b28bdde2367126fd32eec935b81c15314024542544d4b476aac9a2a2f937"}, {0xcc, 0x117, 0x9, "08132fded9e933ceb8dc8e184dce2b1a646180abe2f3e81e7590d4e0f12753c9b848e8d8876075cc4daeb70d5e5ba5b0ad8377cb4eec07e8c75cbaa556af0e08010c6e913231aa608d2e20d23c74f8d5229524730ad853d15adb1407953b2f7386be823e7841655ef40dea68b364ea141bd9ffb36236d197a8322d61a1481a11343af730d42ca99874da9f2d36fb4d7d107e4407798c582dd19f9626749d2a700fe6adc31dfd01b07e4987eb9679730e780d8417599fe35665e0316c92ae"}, {0x24, 0x111, 0x2, "f71d32c9025c9f71f33d2180e0e66d0f4716dd283afc"}, {0x24, 0x84, 0x1000, "5eea0088b77ef4bb8b9675516969dcc9d7ec9331fcf4c27c"}, {0xe4, 0x1ff, 0x4, "bd8aa7870ea42b4f2bd134251263e5cbf5ecbeb4b45e57c780901ca431e0cf4259ecbca3c05e83201c32b3f300ebabdf3e44016e61b93bdc98cc7560ff55de6ec0afa0d6fb5f3efc9fc7105de0812ae16f0a7c7193821f67f8f632b85b492769dbfedc7ef17887f8e778b4c09a0f67f3d7e931eaf42849a5c062ff61804729e3bf342158696ce887158e47fdf69eb763e38886c839c3133114bf2aad96abfe80e81c285037a0f75899a543ed95335be36140e82084668794230664519bccd43922d374f1795b4f6f1693966d83ac40b17a29c1e6a20ca836"}, {0x9c, 0x0, 0x100, "c42d662b15a8a14e57be3c623988e1d30fde7fc4cafa96e82eb0c99d743b847e28054e5da5773923e57d77542f398357b790cba8da95cc20421c0d3c99559725330aec29a047bc06cf2f0ec205b47feaee9189933c3c3164f3175510efb3f3bbab38045c3514cd5cab77e0d0caa439c15fde0f8f1cd589fade15bc10432e3d3596d5f502cb49ebde502dec1d075b0351"}, {0x8c, 0x115, 0x9, "0d49c77551328fe297789f14f3ad6ae729dd02ce396f422a5a76db79b94738a88a24bf8aa058805cebcee7863ced13fb0771c00515244c9bd6f52236d0db0aa2e1a21dc396c52bfd3b5d663af659d7fcfacefa36da6aee8526b4527f44423d2ee25e4b6de775763ef72150b0b0f4045c4d3f9e215bc4a501d41413ee32a5a3ff"}, {0x10, 0x5de6eb4e0a4936c1, 0x0, "db239a7a"}], 0x420, 0x20000000}, 0xd3}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x8, 0xfffffffffffffffa, 0x4, 0x75f, 0x400, 0x6}, 0xf24, 0x0}, 0xe, &(0x7f0000000000)=[{&(0x7f0000000000)="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", 0x1000}], 0x1, &(0x7f0000fbc000-0x3300)=[{0x100c, 0x110, 0x5, "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"}, {0x100c, 0x102, 0x5, "06a329a7a6a5b49702e93b42b61ea722a41786dfce63fdc5bfb04bb2911fa04495a85ae831daf7d3671028277d1646da06ace38aa24522ba836ba104e757c3fa16351aae66a30fa6a6841c0ab7120ffcdf320552d942006c689ce4ac1ba38c08503bea478cdc3fd1b753f3901885f177e3ec2a56ad37338da79e1e15a0da82b4242c21a3eb326ee8ebceab09fe4a94a495435f6f1a866875295acdba4ddeaa60c7cbf8702072b136d54f73ba97ef50ee3fab1487d2cc130ece8f3b24e2175d737d902672ab520e2e28cf2df40102488d02277ea151be76da51659a6a458c98baf6eb16257f9e6c745a3208705c534e93ef72b5125610b5994662c1f34e6ef6d11bde5a1a697770f07fa62b81ed794da23ea7bffcdf936370d57e711c57c09dc0f16dfef61824c7ef083417ae9de3eff69398943efd95a124aee966247b56d6951ce986e27e4be0083fffe7ba5da7dc5706bf029be770ce48f7179072357bf2c50dcd7df6d43aa3cf8aad3299f8043090b1fc4ca61507b72b29a27ddd570b65c38c922d3b18f9e9e43d37df3186c5ef85700e7e4e6812a5ffdffd5fcda8975f5a1df59d3a1fd7cf60099e906eacb62080279f83c32703bdf7c93c7e3673aa81f7c44b0227726eb9ba8676a79f8bb03a461d07ec84abd974ab9e7898bf51cd07ad1b2bbb5624eed6f6a55266d2be6c9b335824367f8fb7b9ff92d69af5aa704ee37467b5d18c45b70dcc8a84f48fb72af7cb2b8b42cfb019268a50b69745ab0f829ab57c4a133d7c738edcd42c8107385f8992755201a6c55c0542c051fcdc1945609627cc7157ba730e735a499cacd49d6fda2c1c793c711672e6dfb5b3ec76e3fb3066a9409c08d03232594790dd9d97dd93ad4c59d2ff637fd55fc3b99849c6390ce47d810cda1f3b52cafbf49de66c706f1dd0803bb36d50df3bc7894abf05bb8abce4f277b94b83fc0817dfb8943e8d2247767c1f4338fcee4aac1239be71bc11e70f9f66d5744bbdcc96bb652165e3efa2b05ea5fb6059a58c477a0e655e733fabd7b619c160794982960ae6719df17b9ad5dd8c630051730db3b169cc62fe519456f241ee8f4e069131e4fb5e8e8e88ee889d9f54869c08af670cec2ba887f29e3695dedf42f5b844b7998e3912a91856cd098a17cdd8294719b91ac12f4b9fb7f4f16e1a208e0db31da54b6f08b715a97edc26f101d5cf66a9b7937df07ccaf59593ea2df0bd9e68cc2f018fb48abb2c463ca40cdd4fa44fb1072e9d8f05db8ac57020c108979783fda7a88fdc5ece4ae11222318808a2774551ca330355f6529b1b6044f36d389a996e66a1c6c4be26a355c0c0b063146e3d93d27ea20c0a181cb020efcde52f8743b143ca706d09b7fc165792fe16c89a24a22128adf7112abba9488a399838d7120d6994d56cf18d13ea5c18a15ed9172b2e6a418f928fb5baacaded6d9ee1e2b969d1eaf4028214bb59af38b7cbcc3c04db66f223da91af61f65659dbfc44a83a17463348af74764a0f098a7dba8d789684a13c553d656f7bbbe081bd203efb0685544d1a53811f47acab6dacf729025e8df42ee36f6de635c39434bd8c5ac4f561e18a491c070dc445ad11b7417335ae783f83296a06054083b9179bba23d1d1b9408d27217a2e8b6c357dc64b57e980d9c0eeef73869bbb39cd963ffb63eb14f12668a2de8213ccd88d77b6da4cee4e86e4499df62b6766405d91f3e3bc5bff1a30695b35b95672eeb0836fa344f241dbfa09037d51863808f176ce51e0c48fc1898d991d14e1aaf65db6da19d4ff615ccd6e4f6029d6808aa3a89c9d66f1f6e3c2a9ceb2da0532daf0e5ea5be98ef5f22842a605ea92b4222f2483759863f86afdcbd6127d410e06f2b7b281898c22497ca5a6875a4c2c63d16903c73d24837df63e2ed0d83a4c081fe1d2312df1ad6f52b74b6ce7d812889a3abcb2885ae759ec82bd6c5ef584d5181ad0c63bc1d0e18c8a123bba3ea2a224ef066f862bcf3cb2522d41c0d40fca9a87f0c4013c8aeb7a6fd9c6d96f20fa87560cd3ff748fcb48c9a6051d0477e22acf6c0e620da2a76f16e46dd317a6b6057e345543191d4f1599d4582371a40b4c3ae097336e632db8c06f36c07fc692b0b91a06264199e96ad768d2c733995b39797f70c826165af58ce38f70b0fc0b3a502313b36d6ec7fe93330e86cd2b404b540bb10ba484c96164b5d9caf6b652c9becb19e32c3f38bc99afafbde6a90bb42e3a4c0fbc051993abc3e73c38ea57912b50eb589b998cdd521297156d36897c72c7ddde6852edbf86d1bd8593e7faf68d7fb413e75b7e5946bacd80a332c2c1520689ef8d364e4c0f5c4e1bbfebda2ff317156e76d81615d53986b2054dac2ca2aa94e71daf7079079092b13c90ef4b58a72fc008c2df3895c35ae6201bcb68334d35d65d0183fa2c3913eb53c80c16e85bc6d2586e8432b933ec7a975d54c7bdbfa88af2925dd23f04db5e64f55d23e7f504680427a4badfe1e9654cebfc10770572f0a61b5ad85a4bee6d836c67f27875e25cdd183cc2986a65a23c898a83f12b700101f453119b8a5f75ed0d88d23e38c70c0abeb532bc9a6e2f3de566d63861100c24083a42c0160136f6ee9a81827f1b119f7e8ea72cc8d8c8e72f470e6c4424eab9f766fb2db33c6d95f8da31190f2eced54b15968e38abc3b86dd8dfe0e8694209d983c0004ca45f35c661e645c79eece7f7341a2221d98f2ac6dd92e174a0a191bf55bcbb5d94d3df681f16306ae7b96a9ba6afa7d769cdfd44b0d11e89d5206d7814968402ab33f9a9b50624e6d690bdb6ed06b79897086f28e026e7af9687a33afb0e44f5ee2a1d3a8243ce2d46d35a2e44afff81c4af6d2e8fe413acf640f2efa21494a6bb58854672531c4b04e6807263237e5f68f2e56697365e87d8efff848753a7053e7d49f38f08b7466e8a1e5009ede5f3aed019f85ac3b2d56b3670377775a1f35aedf6cf9520f13f8852a60e7211aa93de34cf52281400f3484127f9731b8abb3989c5f36a98327ff8925981f6f92e3b390999d6432f3cca1bd2529eac7a4b6703a2790b3696abfacb958241961c70af098a08407a8f2192d75bf1018adfdd0a5e1279825708e2cdcc3c3a1d9da8ce5372010968e591de0e484f0b585a2c80645dfcb4f73a3d50d29dbc7cecd25a5151824e65bb6b070cadd663c70c03fd6206b457f34a57d33efd1e0c60ba4fd048cba7f378c96725ed63156483caa74c3f9132013f5d7ae78b426dff02d12838d7ef8ddc7451aea6a0522161e8036c8f5d914bbcbaf17d8091245a305d84b641869480d6db9dba4cc860d1601d7b2249f1c05112c5771b42b8b63d6f5d14f257578b58a7d9f2e00d25632f2e6d00e6cd5d980061a13744a18ae350255964bc0b86f05e75124f765cc3a380f986ac9291848db1261722a8816704d6269107d16915ba964087e0e16ef8bb06f09dbc83573371e60079a3c2fd0e3ca376d980a8b6a8b6d24641c190c34d07b78634a019ca5b0ac108f9e499fea10cdc1e9b21efe8642b2715698cd71b25ba15a69500add2a6f5b1b815c6a1b0cfab99bd5bfb26251f3c95de1ed0dd3947de9eb0ccb5760a2ddc9e875c97df988fd51c80ff297a4f23a85f3045ef2e98716063da771768ac3a822286852a57d38d77e3df18d60a2428f499bbe49b18652f28acfd6a5893fb3674be9d105de1897a0e332b8f622b22cab670be40555b2eeeaff7305fff2987fe12e4deed4c45fc582a4aafa1d024642cc58be6c8386da22862d24fa9e1b76311c46ea868a1582ea3312e9e4a90997884325ecb1e71e65b57d23a475d097d735c70a88d101d00d2ad800dadff10ce2eea11a6b652a2b7c2f1577eca6f4d9b3372e13f9839ab59c242469911082a9a470695145adf3d13d6c8bddf2fbc489b3a5068cda1209f238315f15097e82c1d1d82b080baf89055c342a6068bbee5da03307d4e0f6176d9c006141bd9cd695e445da0dea8ef4129bda6d82527d85a55fab380a41327802d7f6b0e1ddfc74971b9febdd18741f032648163daaaeb1bd36d2adc4c8c063c6e56624e350cb7b929dbc6de6736677882cfec8f73b6f637ae6ab4fcb7af1cbb3de7715baffa01883701768bee592f9cf3e64f798c33b30d6081f5778246d745b9ffc7829230d360223ef7919a494523ee208e74924b1a6dd98b39d54424423ab49f129542985c5060d4feb417817ff02a2636ddaf7aade5dd2bc7eb7347ed974342a6417cd82e2b582223d05751e7b0071c65c33f1fbd9bbb1ed5b7bb2b7c88bf7bda9fe370378db1b0f5e6a85581020e1b3e1ce2ee536b83508f68b0f95eba8d64ffe51ce00b679c83ba03c38fd1f13927c7be9a4f7ae634b94f1ea8d88d8940caca83f6c049c843ba26db960ea0ff9b523980b5b3df741c18aeaf75e64ee3a1010f1a2135a61141f2a9c0bb6b5de376b53501fe01c22ec356b86565c3cd471012a4081072e07186d213132cfc9f4a53af48d43626116a34718398127483866f805d3259a509bd3289768f3266e1f0aae9287380fc89665b59b2b62faba726ad682fc2a022ae458fa341a99484799e68a24e0ac5a29785d75ee7e39204cec5ed8251808d504bd24a0af152d13b805b3a6ba4789026b9e68f69e69279c0f33fdfab4e936289af57133f503383da9d63e3174d14e64079b4010d219d73b87282d4bb9c4cc9e1ff22996e61351e039c167d7ebb7eb08c2da79a0e64f99bfd3b2ab47c6d61cfa379152e3a4e63798815a05f0887a9b2b209e5039322f47cb6aec383b1448a179ddffc919ec82f6a6d76a4a6e3a716a6e01b80157270f7cf1ce137a47dc950dacc6a207321f7960d5505f705b7eac930e9cd356b3a53b726547dccc9bebd65b4fe708323332f55205465b5ebf0e438dd44c1dd2b5c65c31c39a350460c375d8038b6b24222371aec972429f599f8a27897595db0449ff859b040b786d9fefe04c72acf864dead63cc1a1c1ac3cfcddb3405eac5440817399a981395b01ee37a96487dc2487fb81dbbee3e1606e20e1df7cf789e24d159457c6145202f6ac90ac4291da8900c1381ef3a89da80b994cc677c7dc4d6059d57d0b9bdf5823c03856deb786c9bedfbc4b83ae43471a40ad818d3e343303f20a8ff510d51b3aa86b1aea40ba96f87acb49feb9bcdfc1cd27786b09634d21067929c8280408a6c9c3f6b148b704cf753487a10e1b5e6c3c649f55b39edac23f9f6e9adf45c2cf3ae08a79b110f09116e9c6c654181f033f731993728c9bd2e3a43c6e3806b7fa0b066e835603d0d41d212e7a1c19057b0e355e42667a09fa879ddebade353c9aa208145808e030c357ccf5f9fa9366cfae352516325f410ae6fd4bbf4810410a6f5583bdfe9035cbcfb4da7b992c2283756f3432cbe235d73d2a2c82e5914a8f30c0038ec2862c23f7a919d1647df45000723244c8683871e3543cedb99620fa8b269c124911e73fb32b10fd67d54bfc9c505f10c447f0af50587c3ec38dee95aea23731e45274843775e52c58f4ec694f8fab939f41c7b795ed83bc808e787b0d9608778da2d1af57257dc5dea583c4257a4f2458e2c669c91031c3cbc298cccd0c07186ae1d92925b928843b3f4e4979ed93945fb4a3138693a0748ad7c9648d5610f890042b64014d11b312dfea5e10b1e789046b7540cced3d10b1c197cfcce801c963d99b009095f2e4b1e4ec2664d2f2e28e741a837b7e2072c6c452243562339599559370600751b075330126424c9a449a29ed9b8eec"}, {0x14, 0x119, 0x5, "6df12ac250"}, {0x100c, 0x104, 0x8, "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"}, {0xf8, 0x119, 0x7, "b28982e7b96233be4a4f9201f7efea860367adb3cedf086e25464b315d377770a8624e0c05f9be2ffa5911ff1979287dd60fd623a7f61d46142ddc3c0e60c15871f7a9b1e007eaa8d6f09d57ebd9a40d2c89fc66792277958d13994952bfccccd50eba87a828848a07638bf3c4fcd7a07a121294a3a8c660016d2b5d1b31f6ca6a2de301f290ff0e160c8651354da3eb38e0b91ff12ee82bef7698b674f6f1a10ffe452492154e9e5d8355c47d9621722b5baeffa7f7d7b585354ea87e954ecc615628e9f582673108b914f6d418960c82e934486d95093eb7f5ab2300f49e16513b986c89ea65442808ff"}, {0x7c, 0x0, 0x10000, "8e309a78f43c58ac7e4d03327a88ce3f64077588901d1cf4e8552dce88c005f9d730c9e7ef402fd8e027e6b65ae03cb7a375468a28ae8ac209acb32beb3f6f634d9ad9da39428fb015b0f3e89eefc8212ba61ed6869d8a246118ef68427eb77c4301e582428e2b5b7b705309c2"}, {0x38, 0x102, 0x5, "56d4a2c0f8380fa4ea53b626198450c28ff3dcca0f6bf875ecd0d278c6e420fcb255c8e1573f8b5d320ab3"}, {0x44, 0x84, 0x8, "bd667e6f73c1233c013fb245e55029c52587f50e822ba59ed6411dc710e62446a5f8902dcf70044a58a60493f1ebc9e50da49e6d45f75b75"}, {0xd8, 0x11f, 0x2, "81911a81b1ec979404290429d34cb2ffab3c1c1346af8ad54caf64f2ce545d85b2580868557092922131407780348c457389e5e5eef72de28429c1e6a7a2563e830e5881844cd149e455e3def87f53ab83db123588a3650c0a37156bb4d73a6fff03db303ca77121309b0187498e62f37df922a2a30f13a1714ffce0eb3a8d507783397e16e27ed700bd9030bfe984851d620b62ce454b234744159ea882b07f2a84693bb870b2dae68ea06b0a16e6a6a2202e5c73ae3ad901f06b651db28ae8ab91ed243fb33cc2ba"}], 0x3300, 0x40}, 0x40}], 0x2, 0x4000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000249000)=[@in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x4) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) [ 61.700203] binder: 7367:7374 transaction failed 29201/-71, size 32-8 line 2670 [ 61.701243] binder: 7369:7375 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 61.701252] binder: 7375 RLIMIT_NICE not set [ 61.705841] binder: 7367:7374 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 61.705849] binder: 7374 RLIMIT_NICE not set [ 61.740082] binder: 7374 RLIMIT_NICE not set 2017/11/27 19:23:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x0, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) signalfd4(r0, &(0x7f0000e97000)={0x7}, 0x8, 0x32c93b7c15cbb913) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) 2017/11/27 19:23:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 61.740234] binder: 7375 RLIMIT_NICE not set [ 61.748375] binder: release 7369:7375 transaction 368 out, still active [ 61.748382] binder: release 7369:7375 transaction 366 in, still active [ 61.748387] binder: undelivered TRANSACTION_COMPLETE [ 61.771418] binder: release 7369:7383 transaction 366 out, still active [ 61.771427] binder: undelivered TRANSACTION_COMPLETE [ 61.771442] binder: send failed reply for transaction 368, target dead [ 61.771452] binder: send failed reply for transaction 366, target dead [ 61.771510] binder: release 7367:7381 transaction 365 out, still active [ 61.771515] binder: undelivered TRANSACTION_COMPLETE [ 61.771529] binder: send failed reply for transaction 367 to 7367:7374 [ 61.812482] binder: 7369:7383 got reply transaction with no transaction stack [ 61.812497] binder: 7369:7383 transaction failed 29201/-71, size 32-8 line 2670 [ 61.812708] binder: 7367:7381 got reply transaction with no transaction stack [ 61.812716] binder: 7367:7381 transaction failed 29201/-71, size 32-8 line 2670 [ 61.816264] binder: BINDER_SET_CONTEXT_MGR already set [ 61.816273] binder: 7367:7399 ioctl 40046207 0 returned -16 [ 61.816452] binder: BINDER_SET_CONTEXT_MGR already set [ 61.816459] binder: 7369:7401 ioctl 40046207 0 returned -16 [ 61.817842] binder: 7369:7401 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 61.817852] binder: 7401 RLIMIT_NICE not set [ 61.819618] binder_alloc: 7367: binder_alloc_buf, no vma [ 61.819640] binder: 7367:7399 transaction failed 29189/-3, size 0-0 line 2870 [ 61.819713] binder: 7367:7381 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 61.819721] binder: 7381 RLIMIT_NICE not set [ 61.819841] binder_alloc: 7369: binder_alloc_buf, no vma [ 61.819860] binder: 7369:7401 transaction failed 29189/-3, size 0-0 line 2870 [ 61.819955] binder_alloc: 7369: binder_alloc_buf, no vma [ 61.819973] binder: 7369:7383 transaction failed 29189/-3, size 0-0 line 2870 [ 61.836166] binder: release 7367:7374 transaction 365 in, still active [ 61.836173] binder: send failed reply for transaction 365, target dead [ 61.836181] binder: undelivered TRANSACTION_COMPLETE [ 61.836188] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.837304] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.837315] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.846982] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000cc0000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a4c000-0x4)=0xe8) pipe(&(0x7f0000b59000)={0x0, 0x0}) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000c60000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) r2 = getegid() syz_fuse_mount(&(0x7f0000488000)="2e2f66696c653000", 0x0, r0, r2, 0x0, 0x400) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) 2017/11/27 19:23:21 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) socket$bt_bnep(0x1f, 0x3, 0x4) keyctl$session_to_parent(0x12) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f000000a000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f000000a000)=0x10, 0x80000) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f000000b000-0x6)={0x0, 0x100000001}, &(0x7f0000006000)=0x6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000005000-0xc)=@sack_info={r2, 0xcc, 0x4}, &(0x7f0000007000-0x4)=0xc) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f000000c000-0xc)=@nl={0x0, 0x0, 0x0, 0x1}, 0xc) 2017/11/27 19:23:21 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"925c9d9fd1c2f9056c8adb967986afca36dc0720c3b3d7d96810ad5ed3d9708dc63ad4ce4253b95937e4403cd3f739c8e0213e6e7a9110924e629df74e06cf6f3b5779b216427cb484232bebc6850b3a65aa3e93d31cc4f628ba97395b87fcc7d483ac95bfda1b9299a8b75ee8677b7b26c627e3e422b9df38170c18b3dce1671a66d7e66f9944f7020710e226cd3422eab05d5a01b3667ae549bdfebd6cf1cc691fdcd71af1794a35aa66b0375bd110e76b2e4817e92d54ede7728db318b41c672665f25ab47df6a7580f405fc2fcfb81b5a4d74a6872b18d011118a4ac0b327143036df4b4b33a53601b0e5241b39b0f2e4f314e8c85ee7f1e20ae2c48e70e1b23b4a7e03b269a32d61bd59590b0cc2f400b6d52507e647295a288518547fadfc0c0ecf2638b130b29ad1e658e12af14d8c74a594517dd6b55e3b44ecb5cf16e256e71ba2c95a1d480c68ed6027ff03a96b2bb09b561184c530486bafe7d8d1df0fa8de48a33086bbeea22e77d8166c6ae9eabbbc987e34327c038feb7945d4e26d459d1e7914d3c29521c6d630b52fbe1b8111ceac842d9ba05cc7580cbb9389d7201830735fc23c7962339e72ca6d33f91aec5d05683d93c95eeb09c4f5875496bed23266d560b968bd0d46127724f506cf4f79cb0283f3deefac90694f3333ed95f34e15e3530ee746549af11632952ee5ab47c5289574131442d7cca395b7d2e3bece4fd1060b53a44a0cc7c5ed7f951d4144f87ae1aa0f94a659f0b594aaee1a2ef8447daa6cb682fbb72dad0143c01209cecf920881ef06fdf9b7e608b4f8c4f5b10fc1beac17010b442fa7d53eb88e7e76fbc6218a6ca69e9ed98124dd735847d03bacda227ea7e0c6ac8b3692511be40bb649b19181cbefc580a47a09b7ce1fe7523bfc7846494303880757e8c944feae27ae0b0da20a1223cd247a97593ce53999f4d6505a5cc5180ba31637631451e47fd5eb7bb00f2aa35af012980d55088e163f02b919a7e552c17751e9d2c4f0fdc06a66e17ae3eadb5c942d82737dc8e3b94b230502014c7fe287ea49098da139a5b447feded31d23b7b7b820629094b2ec68833bdf1689fff8db2a589c546251a39ebf8d343ee5d54e9e3853cebac8892452e072ae0590c629b8d0eef852b0b6236d5dbb7e30ddbc6a54b1318aaf6d54f274d80a42d43b092368d8fda81dbdce1fe7c3a0b709d589c5115a1089369220e09ee39337c60f999b9c753584587d4fc672c6344b03b035465a87329120422ccce70c4c637824d0e081f1f67e5d62616538f15aa38b2608c29ee9aedfe4f7b80834e617669f6a3a22d0ddd5c309d83b5b1eca06a8b60cace0dd7215e0315d05150691ca1dde86f2c9b76afc72b911a0fc4a718ecca9836ea89659bf3f6fe37a12943cfc1341ca2b907c524913853c7577d6d6c351c969493b760"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x0, &(0x7f000000a000)="", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:21 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) rt_sigsuspend(&(0x7f0000043000-0x8)={0xe88}, 0x20043000) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 62.037298] binder: 7366:7370 ioctl c0306201 20008000 returned -22 [ 62.052649] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.062078] binder: 7426:7427 ioctl c0306201 20008000 returned -22 [ 62.065870] binder: 7430:7436 got reply transaction with no transaction stack [ 62.065906] binder: 7430:7436 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x40, &(0x7f000000a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00009ee000-0xf)="2f6465762f73657175656e63657200", 0x2c4040, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000a37000-0x4)=0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000078000)=0x0, 0x4) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"925c9d9fd1c2f9056c8adb967986afca36dc0720c3b3d7d96810ad5ed3d9708dc63ad4ce4253b95937e4403cd3f739c8e0213e6e7a9110924e629df74e06cf6f3b5779b216427cb484232bebc6850b3a65aa3e93d31cc4f628ba97395b87fcc7d483ac95bfda1b9299a8b75ee8677b7b26c627e3e422b9df38170c18b3dce1671a66d7e66f9944f7020710e226cd3422eab05d5a01b3667ae549bdfebd6cf1cc691fdcd71af1794a35aa66b0375bd110e76b2e4817e92d54ede7728db318b41c672665f25ab47df6a7580f405fc2fcfb81b5a4d74a6872b18d011118a4ac0b327143036df4b4b33a53601b0e5241b39b0f2e4f314e8c85ee7f1e20ae2c48e70e1b23b4a7e03b269a32d61bd59590b0cc2f400b6d52507e647295a288518547fadfc0c0ecf2638b130b29ad1e658e12af14d8c74a594517dd6b55e3b44ecb5cf16e256e71ba2c95a1d480c68ed6027ff03a96b2bb09b561184c530486bafe7d8d1df0fa8de48a33086bbeea22e77d8166c6ae9eabbbc987e34327c038feb7945d4e26d459d1e7914d3c29521c6d630b52fbe1b8111ceac842d9ba05cc7580cbb9389d7201830735fc23c7962339e72ca6d33f91aec5d05683d93c95eeb09c4f5875496bed23266d560b968bd0d46127724f506cf4f79cb0283f3deefac90694f3333ed95f34e15e3530ee746549af11632952ee5ab47c5289574131442d7cca395b7d2e3bece4fd1060b53a44a0cc7c5ed7f951d4144f87ae1aa0f94a659f0b594aaee1a2ef8447daa6cb682fbb72dad0143c01209cecf920881ef06fdf9b7e608b4f8c4f5b10fc1beac17010b442fa7d53eb88e7e76fbc6218a6ca69e9ed98124dd735847d03bacda227ea7e0c6ac8b3692511be40bb649b19181cbefc580a47a09b7ce1fe7523bfc7846494303880757e8c944feae27ae0b0da20a1223cd247a97593ce53999f4d6505a5cc5180ba31637631451e47fd5eb7bb00f2aa35af012980d55088e163f02b919a7e552c17751e9d2c4f0fdc06a66e17ae3eadb5c942d82737dc8e3b94b230502014c7fe287ea49098da139a5b447feded31d23b7b7b820629094b2ec68833bdf1689fff8db2a589c546251a39ebf8d343ee5d54e9e3853cebac8892452e072ae0590c629b8d0eef852b0b6236d5dbb7e30ddbc6a54b1318aaf6d54f274d80a42d43b092368d8fda81dbdce1fe7c3a0b709d589c5115a1089369220e09ee39337c60f999b9c753584587d4fc672c6344b03b035465a87329120422ccce70c4c637824d0e081f1f67e5d62616538f15aa38b2608c29ee9aedfe4f7b80834e617669f6a3a22d0ddd5c309d83b5b1eca06a8b60cace0dd7215e0315d05150691ca1dde86f2c9b76afc72b911a0fc4a718ecca9836ea89659bf3f6fe37a12943cfc1341ca2b907c524913853c7577d6d6c351c969493b760"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 62.070806] binder: 7430:7436 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.070817] binder: 7436 RLIMIT_NICE not set [ 62.071362] binder: 7429:7435 got reply transaction with no transaction stack [ 62.071373] binder: 7429:7435 transaction failed 29201/-71, size 32-8 line 2670 [ 62.072511] binder: 7429:7435 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.072519] binder: 7435 RLIMIT_NICE not set [ 62.096364] binder: 7436 RLIMIT_NICE not set 2017/11/27 19:23:21 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:21 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c35000)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a4c000-0x4)=0xad9) poll(&(0x7f00000eb000-0x28)=[{r0, 0x100403, 0x0}, {r0, 0x4002, 0x0}, {r0, 0x40, 0x0}, {r1, 0x1020, 0x0}, {r0, 0x40, 0x0}], 0x5, 0x3f) [ 62.109531] binder: 7435 RLIMIT_NICE not set [ 62.111280] binder: 7429:7435 ioctl c0306201 2000afd0 returned -14 [ 62.111444] binder: release 7429:7435 transaction 380 in, still active 2017/11/27 19:23:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x60, &(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"925c9d9fd1c2f9056c8adb967986afca36dc0720c3b3d7d96810ad5ed3d9708dc63ad4ce4253b95937e4403cd3f739c8e0213e6e7a9110924e629df74e06cf6f3b5779b216427cb484232bebc6850b3a65aa3e93d31cc4f628ba97395b87fcc7d483ac95bfda1b9299a8b75ee8677b7b26c627e3e422b9df38170c18b3dce1671a66d7e66f9944f7020710e226cd3422eab05d5a01b3667ae549bdfebd6cf1cc691fdcd71af1794a35aa66b0375bd110e76b2e4817e92d54ede7728db318b41c672665f25ab47df6a7580f405fc2fcfb81b5a4d74a6872b18d011118a4ac0b327143036df4b4b33a53601b0e5241b39b0f2e4f314e8c85ee7f1e20ae2c48e70e1b23b4a7e03b269a32d61bd59590b0cc2f400b6d52507e647295a288518547fadfc0c0ecf2638b130b29ad1e658e12af14d8c74a594517dd6b55e3b44ecb5cf16e256e71ba2c95a1d480c68ed6027ff03a96b2bb09b561184c530486bafe7d8d1df0fa8de48a33086bbeea22e77d8166c6ae9eabbbc987e34327c038feb7945d4e26d459d1e7914d3c29521c6d630b52fbe1b8111ceac842d9ba05cc7580cbb9389d7201830735fc23c7962339e72ca6d33f91aec5d05683d93c95eeb09c4f5875496bed23266d560b968bd0d46127724f506cf4f79cb0283f3deefac90694f3333ed95f34e15e3530ee746549af11632952ee5ab47c5289574131442d7cca395b7d2e3bece4fd1060b53a44a0cc7c5ed7f951d4144f87ae1aa0f94a659f0b594aaee1a2ef8447daa6cb682fbb72dad0143c01209cecf920881ef06fdf9b7e608b4f8c4f5b10fc1beac17010b442fa7d53eb88e7e76fbc6218a6ca69e9ed98124dd735847d03bacda227ea7e0c6ac8b3692511be40bb649b19181cbefc580a47a09b7ce1fe7523bfc7846494303880757e8c944feae27ae0b0da20a1223cd247a97593ce53999f4d6505a5cc5180ba31637631451e47fd5eb7bb00f2aa35af012980d55088e163f02b919a7e552c17751e9d2c4f0fdc06a66e17ae3eadb5c942d82737dc8e3b94b230502014c7fe287ea49098da139a5b447feded31d23b7b7b820629094b2ec68833bdf1689fff8db2a589c546251a39ebf8d343ee5d54e9e3853cebac8892452e072ae0590c629b8d0eef852b0b6236d5dbb7e30ddbc6a54b1318aaf6d54f274d80a42d43b092368d8fda81dbdce1fe7c3a0b709d589c5115a1089369220e09ee39337c60f999b9c753584587d4fc672c6344b03b035465a87329120422ccce70c4c637824d0e081f1f67e5d62616538f15aa38b2608c29ee9aedfe4f7b80834e617669f6a3a22d0ddd5c309d83b5b1eca06a8b60cace0dd7215e0315d05150691ca1dde86f2c9b76afc72b911a0fc4a718ecca9836ea89659bf3f6fe37a12943cfc1341ca2b907c524913853c7577d6d6c351c969493b760"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:21 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 62.111450] binder: send failed reply for transaction 380 to 7429:7449 [ 62.132790] binder: release 7430:7445 transaction 378 out, still active [ 62.132796] binder: undelivered TRANSACTION_COMPLETE [ 62.132809] binder: send failed reply for transaction 379 to 7430:7436 [ 62.135792] binder: undelivered TRANSACTION_COMPLETE [ 62.135803] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.165105] binder: 7429:7449 got reply transaction with no transaction stack [ 62.165115] binder: 7429:7449 transaction failed 29201/-71, size 32-8 line 2670 [ 62.167287] binder: BINDER_SET_CONTEXT_MGR already set [ 62.167295] binder: 7429:7449 ioctl 40046207 0 returned -16 [ 62.167968] binder: 7430:7461 got reply transaction with no transaction stack [ 62.167976] binder: 7430:7461 transaction failed 29201/-71, size 32-8 line 2670 [ 62.168546] binder: 7429:7449 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.168555] binder: 7449 RLIMIT_NICE not set [ 62.168623] binder_alloc: 7429: binder_alloc_buf, no vma [ 62.168645] binder: 7429:7462 transaction failed 29189/-3, size 0-0 line 2870 [ 62.178367] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.178378] binder: 7426:7443 ioctl c0306201 20008000 returned -22 [ 62.179406] binder: BINDER_SET_CONTEXT_MGR already set [ 62.179415] binder: 7430:7445 ioctl 40046207 0 returned -16 [ 62.180449] binder: 7430:7461 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.180463] binder: 7461 RLIMIT_NICE not set [ 62.187665] binder: release 7430:7436 transaction 378 in, still active [ 62.187672] binder: send failed reply for transaction 378, target dead [ 62.187680] binder: undelivered TRANSACTION_COMPLETE [ 62.187688] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.208439] binder: 7430:7436 transaction failed 29189/-22, size 0-0 line 2755 [ 62.208494] binder: 7430:7445 transaction failed 29189/-22, size 0-0 line 2755 [ 62.226777] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.242086] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.242100] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.275505] binder: 7484:7487 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.275513] binder: 7487 RLIMIT_NICE not set [ 62.297661] binder: 7487 RLIMIT_NICE not set [ 62.299078] binder: release 7484:7487 transaction 388 out, still active [ 62.299084] binder: release 7484:7487 transaction 387 in, still active [ 62.299089] binder: undelivered TRANSACTION_COMPLETE [ 62.328214] binder: release 7484:7489 transaction 387 out, still active [ 62.328221] binder: undelivered TRANSACTION_COMPLETE [ 62.328232] binder: send failed reply for transaction 388, target dead [ 62.328240] binder: send failed reply for transaction 387, target dead [ 62.359710] binder: BINDER_SET_CONTEXT_MGR already set [ 62.359719] binder: 7484:7489 ioctl 40046207 0 returned -16 [ 62.361081] binder: 7484:7489 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x70, &(0x7f000000a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:22 executing program 5: poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) r0 = syz_open_dev$sg(&(0x7f000041b000)="2f6465762f73672300", 0x944, 0x200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f000073a000-0xc)={0x0, 0x3, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, @in6={0xa, 0x2, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x80000000}, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x287}]}, &(0x7f00001ad000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00006c5000-0x20)={r1, 0x18, "fd980e5a8783983a375e3087ac8915bff2c727e0b3eabf02"}, &(0x7f0000001000-0x4)=0x20) 2017/11/27 19:23:22 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) mmap(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x3f, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x1, 0x0, [{0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:22 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f000000a000)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000006000-0x4)=0x10, 0x80000) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000b000)="2e2f66696c653000", 0x4000, 0x60) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000004000-0x10)={0x9, 0x4000}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f000000a000)={0x0, 0x8, 0x77e, 0x3, 0x1, 0x3}, &(0x7f000000a000)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001000-0x8)={r2, 0x2}, 0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x1002) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = memfd_create(&(0x7f0000003000-0xd)="2f6465762f62696e6465722300", 0x2) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000005000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000)=0xe8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f000000a000-0x4)=0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f000000b000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000007000-0x4)={0x0}, &(0x7f0000009000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 62.361090] binder: 7489 RLIMIT_NICE not set [ 62.361169] binder_alloc: 7484: binder_alloc_buf, no vma [ 62.361189] binder: 7484:7490 transaction failed 29189/-3, size 0-0 line 2870 [ 62.362368] binder_alloc: 7484: binder_alloc_buf, no vma [ 62.362384] binder: 7484:7489 transaction failed 29189/-3, size 0-0 line 2870 [ 62.396159] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.396168] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000b3e000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2d0, 0x0) [ 62.550797] binder: 7497:7499 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.553058] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.553067] binder: 7501:7504 ioctl c0306201 20008000 returned -22 [ 62.569533] binder: 7499 RLIMIT_NICE not set [ 62.574957] binder: 7495:7498 got reply transaction with no transaction stack [ 62.574966] binder: 7495:7498 transaction failed 29201/-71, size 32-8 line 2670 2017/11/27 19:23:22 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002000)="2f6465762f6375736500", 0x800, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000009000)={0x0, 0x0}) ppoll(&(0x7f000000c000-0x38)=[{r2, 0x8, 0x0}, {r2, 0x80, 0x0}, {r1, 0x0, 0x0}, {r1, 0x420, 0x0}, {r1, 0x580, 0x0}, {r1, 0x180, 0x0}, {r1, 0x101, 0x0}], 0x7, &(0x7f000000b000-0x8)={r3, r4+10000000}, &(0x7f0000005000)={0xff}, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000008000)=0x1, 0x4) pipe2(&(0x7f000000b000-0x8)={0x0, 0x0}, 0x80000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000005000-0x4)=r5, 0x4) 2017/11/27 19:23:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000fc9000)="2f6465762f72746300", 0xfffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000c10000)={0xffffffffffffffff, 0x3000000000, 0x4, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc83, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00007dc000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x8000020000000805, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000f8f000)={0x80000000000002, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) sendto$inet(r1, &(0x7f00005d5000-0x7e)="c8", 0x1, 0x3, &(0x7f0000f02000+0x61a)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000d1b000-0x8)={0x4, 0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00008fb000-0x20)={@common="67726574617030000000000000000000", @ifru_flags=0x0}) r2 = socket(0x10000000010, 0x2, 0xc) readahead(r2, 0x10000, 0x4) write(r2, &(0x7f0000a78000)="1f0000000104ff00fd4345bb07000000004000000900010001160103000000", 0x1f) write(r2, &(0x7f00006ea000-0x21)="1f0000000104df00fd432dbb0700000000cb00000900050000000000000000d5be", 0x21) close(r1) mkdir(&(0x7f0000be1000-0x8)="2e2f66696c653000", 0x0) mknod$loop(&(0x7f0000ab8000)="2e2f66696c653000", 0x7020, 0x0) r3 = getpgid(0x0) getpgrp(r3) r4 = openat(0xffffffffffffff9c, &(0x7f000060d000-0x8)="2e2f66696c653000", 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x402, 0xffffffffffffffff) renameat(r5, &(0x7f0000993000)="2e2f66696c653000", r4, &(0x7f0000c3a000)="2e2f66696c653000") creat(&(0x7f00003b0000-0x8)="2e2f66696c653000", 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f000060d000-0x8)="2e2f66696c653000", 0x0, 0x0) munlock(&(0x7f0000ef4000/0x2000)=nil, 0x10005) clock_gettime(0x0, &(0x7f00008ca000)={0x0, 0x0}) write$sndseq(r0, &(0x7f00006dc000)=[{0x3f, 0x57a, 0x200, 0x4, @tick=0x4, {0x795, 0x200}, {0xb3, 0x800}, @addr={0x0, 0x1}}, {0x401, 0x1, 0x100, 0x0, @tick=0x5, {0x401, 0x4}, {0x200, 0x3ff}, @connect={{0xfff, 0x80}, {0x80000001, 0x2}}}, {0x5, 0xa98, 0xff, 0x58e4, @time={0x0, 0x989680}, {0xffe, 0x24}, {0x8001, 0x1}, @connect={{0x7fffffff, 0x3}, {0x0, 0x7f}}}, {0x3, 0x80000000, 0x5, 0xd79, @tick=0x81, {0xd2a, 0x8}, {0x5, 0x3}, @connect={{0x1, 0x0}, {0x7, 0x0}}}, {0x81, 0x8, 0x4, 0xc331, @tick=0x4, {0x9e5a084, 0x7}, {0x7ff, 0x7}, @raw32={[0x3f, 0x2, 0x1000]}}, {0x40, 0x4, 0x5, 0x0, @time={r7, r8+30000000}, {0x6, 0xf7e}, {0x5, 0x7}, @result={0x1, 0x80000000}}, {0x0, 0x200, 0xff, 0x9, @time={0x0, 0x0}, {0x0, 0x200}, {0x4, 0x9}, @time=@time={0x0, 0x0}}, {0x100000001, 0x1ff, 0x7, 0x0, @time={0x0, 0x0}, {0x1000, 0x3}, {0x7fffffff, 0x2c9}, @note={0x1, 0xfff, 0x7, 0x8a60, 0x1}}, {0x8, 0x657d, 0x52d, 0x7, @tick=0x4, {0x8, 0x47}, {0x9, 0xf6}, @time=@tick=0x2}, {0xad, 0x9, 0x2, 0xfc00000000000000, @time={0x0, 0x0}, {0x80000000, 0x5}, {0x101, 0x9}, @ext={0x59, &(0x7f0000719000-0x59)="80407b8e6b11f0d89571be93ad3ef8670c1d4e15a1ff4cddea15b73c559772dc7890c1fbbef8c7c27a5363c912c1807b6c3fc9a305f3da68c841b05dc05a109e25dff0af7499eede2ab0a762540eb60f549d84d529adc0c0db"}}], 0x1e0) read(r6, &(0x7f0000ac4000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xae) 2017/11/27 19:23:22 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 62.578597] binder_alloc: 7497: binder_alloc_buf, no vma [ 62.578620] binder: 7497:7511 transaction failed 29189/-3, size 0-0 line 2870 [ 62.580577] binder: 7495:7498 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.580585] binder: 7498 RLIMIT_NICE not set [ 62.585522] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:22 executing program 6: socketpair$ax25(0x3, 0x5, 0xcf, &(0x7f0000d72000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x78, &(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:22 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 62.585531] binder: 7501:7508 ioctl c0306201 20008000 returned -22 [ 62.601144] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.608233] binder: 7498 RLIMIT_NICE not set [ 62.611158] binder: 7495:7498 ioctl c0306201 2000afd0 returned -14 [ 62.621190] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.621200] binder: 7517:7518 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:22 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, r0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:22 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000000c000)="2f6465762f766373612300", 0x50000000000, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, r0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 62.622934] binder: BINDER_SET_CONTEXT_MGR already set [ 62.622949] binder: 7517:7521 ioctl 40046207 0 returned -16 2017/11/27 19:23:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x7c, &(0x7f000000a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:22 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$inet6(0xa, 0x80000, 0xfff, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f000000a000)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000072f000-0x78)={0x2, 0x78, 0xd4e7, 0x0, 0x0, 0xea1, 0x0, 0x0, 0xece37fd02f8048af, 0x0, 0x2001000000000fa, 0x9dba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x4bbc, 0x0, 0x80000000000000, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000)=0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000af5000)="2f6465762f70746d7800", 0x280000, 0x0) eventfd(0xb0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f0000011000-0x30)={0x3, 0x3, 0xfffffffffffffffd, 0x7, 0x107ff, 0x401}) r2 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r3 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00007d5000-0xe8)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xffff, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xfffffffffffffffe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0}, 0x20) write$tun(r4, &(0x7f00008ce000-0x1948)=@hdr={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0xb3, 0x84, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "bfe240", 0xf82, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [@routing={0x0, 0x0, 0x0, 0x0, 0x4, []}, @dstopts={0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x0, 0x0, ""}, {0x0, 0x1, "5b"}, {0x0, 0x1c, "e4568c61629b8014a42e6f4723acbd6f57dfe0e14c1a852d12dd6984"}]}, @dstopts={0x3b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}], "31191a0ef340626599662fc88945c94426d407a6617f70f328e830c8095f9f4eb2a65a85b9be682dc0b5b26a13f4ee5239f2b1a537b838197037cc53e93a9b55659b2b943e416f74"}}}}}, 0xe5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000468000-0xf)="2f6465762f73657175656e63657200", 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r6, 0x0) r7 = gettid() ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000a09000-0x64)={&(0x7f0000d37000-0x14)=[0x2, 0x20, 0x8, 0x3, 0x8], 0x5, 0x2, 0x8, 0x100, 0x80000001, 0xb6, {0x8, 0x0, 0x81, 0x80000000, 0x7, 0x1, 0x4, 0x10001, 0x1, 0x800, 0x72, 0x40, 0x5, 0x100000001, "2760e5dafb0a074706c32ca6f018af8c83f7fbd76351d2fff9f590d599170fad"}}) perf_event_open(&(0x7f000035e000)={0x2, 0x78, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r7, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000e6a000)=0x78) socketpair(0x8003, 0x7, 0x8, &(0x7f00006a2000+0x32a)={0xffffffffffffffff, 0xffffffffffffffff}) [ 62.630651] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.630661] binder: 7517:7518 ioctl c0306201 20008000 returned -22 [ 62.642848] binder: release 7495:7516 transaction 395 out, still active [ 62.642857] binder: undelivered TRANSACTION_COMPLETE [ 62.654984] binder: BINDER_SET_CONTEXT_MGR already set [ 62.654994] binder: 7497:7526 ioctl 40046207 0 returned -16 [ 62.655109] binder_alloc: 7496: binder_alloc_buf, no vma [ 62.655131] binder: 7496:7509 transaction failed 29189/-3, size 0-0 line 2870 [ 62.655181] binder_alloc: 7496: binder_alloc_buf, no vma [ 62.655198] binder: 7496:7524 transaction failed 29189/-3, size 0-0 line 2870 [ 62.684350] binder_alloc: 7497: binder_alloc_buf, no vma [ 62.684378] binder: 7497:7522 transaction failed 29189/-3, size 0-0 line 2870 [ 62.684467] binder_alloc: 7497: binder_alloc_buf, no vma [ 62.684487] binder: 7497:7526 transaction failed 29189/-3, size 0-0 line 2870 [ 62.684547] binder: 7495:7516 got reply transaction with no transaction stack [ 62.684554] binder: 7495:7516 transaction failed 29201/-71, size 32-8 line 2670 [ 62.684604] binder: BINDER_SET_CONTEXT_MGR already set [ 62.684612] binder: 7495:7528 ioctl 40046207 0 returned -16 [ 62.687678] binder: 7495:7516 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.687688] binder: 7516 RLIMIT_NICE not set [ 62.687756] binder_alloc: 7495: binder_alloc_buf, no vma [ 62.687780] binder: 7495:7528 transaction failed 29189/-3, size 0-0 line 2870 [ 62.688085] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.688097] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.697798] binder: release 7495:7498 transaction 395 in, still active [ 62.697805] binder: send failed reply for transaction 395, target dead [ 62.719694] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.727336] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.727346] binder: 7530:7542 ioctl c0306201 20008000 returned -22 [ 62.735601] binder: 7538:7540 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.735613] binder: 7540 RLIMIT_NICE not set [ 62.756327] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.756336] binder: 7530:7542 ioctl c0306201 20008000 returned -22 [ 62.759362] binder: 7545:7549 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.759371] binder: 7549 RLIMIT_NICE not set [ 62.766363] binder_alloc: 7538: binder_alloc_buf, no vma [ 62.766389] binder: 7538:7554 transaction failed 29189/-3, size 0-0 line 2870 [ 62.790102] binder: 7549 RLIMIT_NICE not set [ 62.792381] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.810194] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.810374] binder: 7559:7561 ioctl c0306201 20008000 returned -22 [ 62.819389] binder: release 7545:7556 transaction 407 out, still active [ 62.819397] binder: undelivered TRANSACTION_COMPLETE [ 62.819418] binder: send failed reply for transaction 408 to 7545:7549 [ 62.835080] binder: BC_ATTEMPT_ACQUIRE not supported [ 62.835091] binder: 7559:7562 ioctl c0306201 20008000 returned -22 [ 62.855879] binder: BINDER_SET_CONTEXT_MGR already set [ 62.855889] binder: 7545:7566 ioctl 40046207 0 returned -16 [ 62.859203] binder: 7545:7556 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 62.859214] binder: 7556 RLIMIT_NICE not set [ 62.859307] binder_alloc: 7545: binder_alloc_buf, no vma [ 62.859331] binder: 7545:7566 transaction failed 29189/-3, size 0-0 line 2870 [ 62.860995] binder_alloc: 7545: binder_alloc_buf, no vma [ 62.861072] binder: 7545:7556 transaction failed 29189/-3, size 0-0 line 2870 [ 62.876068] binder: release 7545:7549 transaction 407 in, still active [ 62.876076] binder: send failed reply for transaction 407, target dead [ 62.876084] binder: undelivered TRANSACTION_COMPLETE [ 62.876091] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.881466] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:22 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{0xffffffffffffffff, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {0xffffffffffffffff, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x7e, &(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:22 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f000000b000-0x4)=0xc) getpgid(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:22 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:22 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:22 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 62.881477] binder: 7538:7564 ioctl 40046207 0 returned -16 [ 62.881942] device gre0 entered promiscuous mode [ 62.882489] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.882502] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.899666] binder: 7538:7540 transaction failed 29189/-22, size 0-0 line 2755 [ 62.899724] binder: 7538:7554 transaction failed 29189/-22, size 0-0 line 2755 [ 62.920530] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.920545] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x100000000}]}) [ 63.200393] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.210301] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.228394] binder: BC_ATTEMPT_ACQUIRE not supported [ 63.233868] binder: 7573:7577 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x7f, &(0x7f000000a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 63.233876] binder: 7577 RLIMIT_NICE not set [ 63.236976] binder: 7574:7583 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.236986] binder: 7583 RLIMIT_NICE not set [ 63.265616] binder_alloc: 7574: binder_alloc_buf, no vma [ 63.265642] binder: 7574:7588 transaction failed 29189/-3, size 0-0 line 2870 [ 63.265885] binder_alloc: 7573: binder_alloc_buf, no vma [ 63.265906] binder: 7573:7590 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:23 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 5: r0 = socket(0xa, 0x803, 0x6) mmap(&(0x7f0000520000/0x2000)=nil, 0x2000, 0x3, 0x50, r0, 0x0) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x0, 0x32, r0, 0x0) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000fbd000-0xe)="6b657972696e67707070315e2c00", 0x3) restart_syscall() mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b31000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000e3f000-0x4)=0x14) sendmsg$nfc_llcp(r0, &(0x7f000044a000)={&(0x7f0000921000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1814145680ffffffffffff7891000076e43108f579bd95054d6b050000bebc48e8d8cda3d681fc482e6e0409000000000000da0303cc208a6e4bf82eff4d04", 0x0}, 0x60, &(0x7f000092b000)=[], 0x0, &(0x7f0000921000-0x64)={0x14, 0x1000000029, 0x3e, "00000000"}, 0x14, 0x0}, 0x0) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x40050, r0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0xa, 0x11, r1, 0x11) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x1, 0x32, r0, 0x0) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f000044f000)=0x0, &(0x7f0000000000)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r4 = syz_open_pts(r1, 0x20000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f000021f000)=0x0) r5 = fcntl$dupfd(r3, 0x0, r0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000482000-0x4)=0xffff, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000928000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="1fd6a5261f496e993f68aca8a0c98f72"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000de9000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x1003}) write$tun(r3, &(0x7f0000340000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0xe, 0x4, 0x0, 0x0, 0x1048, 0x1, 0x2000, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[@cipso={0x86, 0x6, 0xd0, []}, @ssrr={0x89, 0xb, 0x0, [@broadcast=0xffffffff, @rand_addr=0x0]}, @cipso={0x86, 0x6, 0x2, []}, @generic={0x0, 0xc, "0fb35c6e0cef960c3bcf"}]}}, @dccp={{0x3, 0x0, 0x4, 0x1, 0x562949e3, 0x0, 0x0, 0x3, 0x8, "749407", 0x8000, "b33a4b"}, "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"}}}, 0x1052) mmap(&(0x7f0000fbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffd, &(0x7f0000049000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 63.272942] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.290155] binder: BC_ATTEMPT_ACQUIRE not supported [ 63.290167] binder: 7571:7591 ioctl c0306201 20008000 returned -22 [ 63.325583] binder: 7601:7602 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.325593] binder: 7602 RLIMIT_NICE not set 2017/11/27 19:23:23 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x1, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {0xffffffffffffffff, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{0xffffffffffffffff, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {0xffffffffffffffff, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 63.325829] binder: 7601:7602 got new transaction with bad transaction stack, transaction 418 has target 7601:0 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 63.325841] binder: 7601:7602 transaction failed 29201/-71, size 0-0 line 2782 [ 63.327541] binder: BINDER_SET_CONTEXT_MGR already set [ 63.327548] binder: 7574:7597 ioctl 40046207 0 returned -16 [ 63.332881] binder_alloc: 7574: binder_alloc_buf, no vma [ 63.332900] binder: 7574:7583 transaction failed 29189/-3, size 0-0 line 2870 [ 63.332949] binder_alloc: 7574: binder_alloc_buf, no vma [ 63.332964] binder: 7574:7597 transaction failed 29189/-3, size 0-0 line 2870 [ 63.344682] binder: BINDER_SET_CONTEXT_MGR already set [ 63.344692] binder: 7573:7577 ioctl 40046207 0 returned -16 [ 63.349980] binder_alloc: 7573: binder_alloc_buf, no vma [ 63.349999] binder: 7573:7598 transaction failed 29189/-3, size 0-0 line 2870 [ 63.360105] binder_alloc: 7573: binder_alloc_buf, no vma [ 63.360126] binder: 7573:7577 transaction failed 29189/-3, size 0-0 line 2870 [ 63.364143] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.364155] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.369542] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.382813] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.382830] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.385954] binder: 7613:7615 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.385963] binder: 7615 RLIMIT_NICE not set [ 63.405627] binder: BINDER_SET_CONTEXT_MGR already set [ 63.405635] binder: 7601:7620 ioctl 40046207 0 returned -16 [ 63.408227] binder_alloc: 7601: binder_alloc_buf, no vma [ 63.408250] binder: 7601:7612 transaction failed 29189/-3, size 0-0 line 2870 [ 63.408304] binder_alloc: 7601: binder_alloc_buf, no vma [ 63.408322] binder: 7601:7620 transaction failed 29189/-3, size 0-0 line 2870 [ 63.412414] binder: 7615 RLIMIT_NICE not set [ 63.418751] binder: 7613:7615 ioctl c0306201 2000afd0 returned -14 [ 63.418824] binder: release 7613:7615 transaction 427 in, still active [ 63.418831] binder: send failed reply for transaction 427 to 7613:7623 [ 63.430066] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.430076] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.430143] binder: send failed reply for transaction 418 to 7601:7602 [ 63.430484] binder: undelivered TRANSACTION_COMPLETE [ 63.430491] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.430502] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.451482] binder: undelivered TRANSACTION_COMPLETE [ 63.451493] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.484560] binder: BINDER_SET_CONTEXT_MGR already set [ 63.484570] binder: 7613:7635 ioctl 40046207 0 returned -16 [ 63.489160] binder: 7613:7635 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.489168] binder: 7635 RLIMIT_NICE not set [ 63.492575] binder: 7613:7635 ioctl c0306201 2000afd0 returned -14 [ 63.492641] binder_alloc: 7613: binder_alloc_buf, no vma 2017/11/27 19:23:23 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:23 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r0, 0x200, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r0, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 5: mmap(&(0x7f0000000000/0x89f000)=nil, 0x89f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f000089a000-0x58)="e4a445eb7fff0500", 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00005d2000)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000831000)="2e2f66696c653000", 0x101080, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00008d3000)={0x7, 0x1, &(0x7f00008f8000-0x8)=[@map={0x4000, 0x4, 0x5, r1}], &(0x7f00006a3000-0x2)="3a00", 0x9, 0x80, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_yield() r2 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5fa, &(0x7f0000e1f000-0x5fa)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "43f087", 0x5c4, 0x88, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[@dstopts={0x3f, 0x2b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x0, 0x94, "599a901164caa512ad312e9dac267783b819e2855bc1bddd52a9e9749da6e33f82633075c723949427539cdb92ab08fc184a799b974a0b8d32e2bca14085cb2acd1b55a6bcd7af5d5dfbaf40f03878c92cf222714aa4a41d7f1e2427b9023a18a22217532231b33c3a64883e89b21f604db42f6b5ebdac9dda45fb6a412fc20039482718df5da73256e357a6fb0c755ce884d6ff"}, {0xff, 0x15, "7bd2b736e279958baa0daa2f7cef5c2900021643f0"}, {0xc2, 0xb0, "900b74c7b004be34f9368412cb388f9ebd2aa5b7bcd383d46df0536705817ab5ddec82dc57f1faf4728cbf43920504d6125978d0b9422850354f421f5dd9fb30d34fe003c863f7099a42cde4a27cdcb780352a2b812a8607ae3dcc6fb53fdf7cc3b66bd56bca3b0d7a317dbecb17ae39cf936f944c37510a1f384bf44970845234ce4fe7b03f3f6acef854ac541a3b8e07294e92dc2cb79d4037b45c7280e756d214cd478fe2728c53b99566e7b4c430"}]}, @hopopts={0x4, 0x5b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x7, 0x3d, "bdf891698c634212d19e263a6360d06883aa74569a24548314a3d9202bfb338ea3218ae4e0bbb1e188e6d633cf306b63ce43b898473524c0c96c47b925"}, {0x1, 0xce, "03754ac4a9ee40f056707fd560af33b3660e8e03b4ff9ffd677fb0dcddfc758cf729e2bebc69fe40f8e526dc695ce42c0946010467a3bb73e6cc2d8b47860dcf638a96a84de15eb3a011abf9f5a230cd4ac08427c44454659496889531119ec304d3d5911866ee5aab509f81c47843b3ef9c95bca96030f65ac0339712c11026f784211c743d39364b0ae41b29dbe92e2f2a5158d03b82d23bc80483cfa1adf87c7dbe01a9428bbd8b4cf6dbc8c5c03d26f90304426bf4b659f5446d9c1bc2a872a183564c9c1565690bbbb56d32"}, {0xc2, 0x8a, "95afac30d14260781ae11e41be622857373fb6e35feb56c94ee34add62943d18ac91c8d70fac985d5e853f8e5c3d64b543e4f02649f43ea694a8b32d4b823fb0af4ce778f310b7bd3304cc0df16004e9d4ff1f40cfc068b8f904f5dbd2342a7fc51662640bb555ceaab369c61b8b976b0f879db936459d030f05dd11b8dd0eba1398aa0b5eb5b6559c80"}, {0x5, 0xda, "cbf8ef754912998dcc0ca8fd492d61c2fe7b49d43a722f1841f3e9cafabe69cd88179801512beacd4cf3daa5c715fc09dd99ed2e7f6287805a273a86b5e45f0379325c989e79dcd50ad268711e8aaffcb2e92d2b6d12c43989c34a7d05a0b9eab06fd9ae362fc3d427c22c683370e14234f2eb98d3676f894407a9b7a2440732efd97d5fec703c1058ccc736387c4d6952a6ca1ce29bfc2c8d7daa56cbc4b96651e6f421ab499b0051f3c56cf4528deac7dcbca377f282467c638c391db9aec452814d7222db53e01f40de7922a816b487fd77d93f6ccaf3f65c"}, {0xfe, 0xb, "07acec96333b20b89cee6b"}, {0x0, 0x57, "347ccf56df3ab72e631a20ab142d27d26301d89b61ce348cb64bb4d5697d0dde80f88e72b0914a6aa9091e8941564381bae44815325855f5aa4fcef603046ad2f0ba547538f718599379e8752a9f93b22b7a4ce21f7432"}]}, @fragment={0x0, 0x401, 0xfffffffffffffff7, 0x7ff, 0x9, 0x8, 0x1}, @dstopts={0x856be93bec05e255, 0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xc2, 0x59, "cf09a590eff76c39843d8f2af4025fa92f24cf1f7254a46de393e6d26e598abf15ff3227384193286e742eb5f90c6afbe956da6de7f30755436b93f1bebc6a9451e8d7053fe06dee0e871567f310401478d109e0fd3efbea95"}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9c5a71", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [@routing={0x0, 0x2, 0x0, 0x0, 0x800, [@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x3f, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xc7, 0xb8, "a2ae1893d9f31317a3a763975203cba2df02f51e6215a977ab56fdd122f6062c8b8743830d685ddcf22e3afbc77d193da1124c18ddcb8a533637056eb9e453ff05b5348265fecb6c4b56463e9567b6cf8b38da747eaad71e4424dc3b1e587bb02d93935703e17979b8dcbea10d2ee6e429524a7dfd8688a1cb2284c873d1ec20e4f2a5f109244c43c565b4528f83bf1138fd79bff75a1df3f05f7197b52fb9df58ee25a8cc0e04b0f0a85f457e6a2b5b7345ec62329ee4e2"}]}], ""}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x7fd, 0xf) getsockname(r3, &(0x7f0000337000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f000025f000-0x4)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000afd000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, r4}, 0xc) sendmsg$inet_sctp(r3, &(0x7f00002b7000-0x38)={&(0x7f00004eb000-0x10)=@in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000b6b000-0x40)=[{&(0x7f000041f000)="307f93ee88257415ba027e58b48f74f2185d13ae7d52e567cd843c836545ae783bf2bd49f417d9adae89dc50bc72c0c4bc1b749f65e4ce8d63614cbf07929adb9fbb6437a30cb5bb9cda68ac55de9e7b5e21441efc547afd357de9fc6815c9fcf7300648f83521fa56fb2f934c614044de6fc7169590c537210d8432f9191deccfd8b8", 0x83}, {&(0x7f00000e7000-0x97)="3bbfd2e2b841fb9fc0f37af2bf6e9976f5d9a3e39c0541fbc7f2406f2a6488e1688c81581b8649cc06594721ae886ac122d96a91fb15f05e9f195cc9ef109ef081ab86c4ac73a7bef96cd223450476aa417eb7826523449697a07baa2fb9095e94621a8d8608975e1ba3a6ceccd94bc6597ea765b8e8b4a78ebfdc3a71848a307bfa011f693bf7230b01eff1bd693804bec257142ae3b6", 0x97}, {&(0x7f000087b000-0xf1)="e23d78aaac6b948406e8d45fc83974a4e9fc1defb8c975bb49977d0f10ccb459ae4ad29b257c05ea88d1d40642ba97d93e8ba82497881b6e5f057a0958ce515b02ed1e8e522d54713d6f23ccc3c96a28e1dc9bec774493e44325aa3edd0a97a4b96e6c371f68d2af49a71fdb8249e3f7fe2e7c694b9c1d892314883c41b8dac19bb249a75b78f61cf5497b3f204be1072a2b199e36d0c6b6dcc7a81543faa30c14ec89fb83a532c353258cfe882373daf5c6ee21e6745c650cce50ce148b2bc33a18a3f973269355fd6e74b1f9a03dea7f9249ce5d310e44664a6273e50d8f5725b9aba80c5f250926306d48d4437d6d95", 0xf1}, {&(0x7f0000b6a000)="d52819468bf7233da52cc92e99949aa9478678ff9bb9448f897a59f7da178116074b56ac506709ca4162c128118a8976399307417bfef5aded16969ac328abff36691bc05d2cb7cf51dbbce35db40b7a33cb72b4f85c3e361edf3e7184d401a58f63fab817e49d7619b1be2c585e38084f00b7c50f22ac97fa05062d73c9ba44726baddec3e83705", 0x88}], 0x4, &(0x7f0000b6a000)=[@init={0x18, 0x84, 0x0, {0xe740, 0x100000008, 0x10000, 0x1}}], 0x1, 0x20008000}, 0x4050) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000e30000)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r5, &(0x7f00004d6000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmmsg(r5, &(0x7f0000174000-0x78)=[{{&(0x7f0000826000)=@in6={0xa, 0x3, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7fffffff}, 0x1c, &(0x7f00002d4000)=[{&(0x7f0000626000)="e22418103ac1582b859959fcda3d7e7d695ba11d7f10f506ab33f93add40b5b6", 0x20}, {&(0x7f00003f8000)="8fddbd432850155eb5691cf5cd7ac9d622e2266a98c94f76825ccd2ab6c96020d1d099100585f4607b6ac4f22697a20a619e36d2d51fa4abbe4cf9902d00e13fb27d861072e8d6915884d664ab3be0e050653269d85e75516597a822d0f6b3b6e89eb71e9196e2b11e7b4724670e68793a498fbc035b2c8a242c2d017b8bb8f459d1157940fc778ea3ebb8fa805804e867ae8715c7ff1b8a0d1490364368feb2df2a820b884a218c6d17a5a3019552911b106f28731e3bb995a8cb0dcd352b888c50219525920a240fa13e223dbaaf8d1baa44fbf6d293f203af9bd9f20a09b63474", 0xe2}], 0x2, &(0x7f00004af000-0x388)=[{0x90, 0x103, 0x6, "0342085335c6dba907c261bf992bc41169070482661b03660737194648efedef9565f3cf0621ede91d036d2d358aaf39afe5ba4b3e03d74fdc9ebfbfd04553b779e39a493251469f14c88c406416a7e40e3fb550119c0c22a7f4c37ce57fe59b676cbb94a90237152b4a797c496e963e5bc3cac95c084deccac329"}, {0x38, 0x10d, 0x400, "1529ef3e6eb3fd9971b8540602212ddef032e598a43075da4138920b0275e4a50b5a7a4c7ebc28"}, {0xb8, 0x10f, 0x80, "00992a8a821de6264ef3e66d6c377c307e6ddff5e0f8cff67b662d02fdbfa854ffabaeae77191e35a9f7cd32aeffaae8bbaaac38d073e73e99d909b4812124ae58215f5d9bc8e2c656f747ef49018fbba5afd85b2c76364eda8b97f8646837c8779f2d146330c839f99e1f877b15abcc0119680072aac5c065ac81ee5807b804c83570f5203aa76dbbab6fbfc3d7cf0b07abe3fe7cf3460c8ec51c7d232e5de4269ceab973ae"}, {0x70, 0x101, 0x1000, "aa950ba907b7a0312017f4451f917965c65b9318d28baabaf57af2cea2d197160b24323f2649505bd54eadccf9a00dead06e905cffc44e1bbe0bf113254b21b6854d290e2364874c4851473a5a9ce4ee91c5a688f74f9f601f"}, {0x30, 0x102, 0x3, "18009745c93b0ad57aa0f56bc7fc9bf93c24591aa8942e7d89789dae"}, {0xf8, 0x1ff, 0x36, "ea6e346d9debf1df5421d6b51e00cf4ab1f0e38357a5c59a94bf55c8c0c239f53aec489adc41c435c539e8ab5d63f6453db8c314485be162116e383cf6b258308a2591cf00131f3babef870beeeb52b1ba21b596877d3cbd5921f690a4ee3cd9ca8e54e4faf2e4d29ddeb7a4274c799b2d97f1d5a49f4d4d7ff458405f1f129a96ef22674979b44a3822594a7ab154568386c55d19e815b2c373ddae4c9f21802d69216c42df3af071f8c0b28e7219f62b45398fd1c6c49ab5d199f8a7b95a22afd6e41963898d2b9fa57089bdfd93e2e6e62f27f15134c4b90ea969606d544d42267b488685"}, {0x70, 0x102, 0x4, "817f9323bc3bba212d538250775679d5a5b997294887136a34902070b70d2588cc0c38621ada0a226e10d28eb5abfef89e412d57108554656dee946b037637dc582ae4e416cd8b406f1e80e394e32dd7de83d692cdc9c97c05106a8f989992"}], 0x7, 0x4000804}, 0x4}, {{&(0x7f0000b25000-0x10)=@ax25={0x3, {"ad4d8eebe67486"}, 0x6}, 0x10, &(0x7f0000019000-0x90)=[{&(0x7f0000f4f000-0x2d)="746b75078f9e9ef720a49af73f5c924472c3fda70651472ac8367f59b907529a92260c50845640ce3d49f6a49a", 0x2d}, {&(0x7f0000a06000)="167296ea0fc768bf4eac6f0a2cfa09cc8c2bb880bb197f237dc3fe00000007e8040000004afebf034c73f53a809e0fdd7c5ccd703c8795e22fd3082f37be", 0x3e}, {&(0x7f0000a3f000-0xbd)="5a1b9339cffeb04c07759706917774896d3d84a8f82b6ea4e41a6f048c025c88f0663f091c1f5e9c0836896730b348281fbec100293e886351029d25af85c2637b9a8b51a43a1cf85cd5eb3f03dedd0a9c652c2a65ab6c05037993dd819244036ee91656e3fd664fcf84fc0cc1b49cdb9eed33037f7865a92a4dbbc4b0296ad0cd06bc6036641379e31804f353867a33db9980e6ddfd59f25c5e09b530abccc9874a55849bdf35f71fa78ccda55fb9758a83217b8fb0e4df99219ba645", 0xbd}, {&(0x7f0000f8a000-0x1000)="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", 0x1000}, {&(0x7f00003da000)="80e6dba676f0a398ab7ebac7379e49f1e1b5e4335812fa6198a69e5b81729cb4bcae7aed32604aca6126f56e90d930ce9a9758410045d7523a8a66811d07fd224d87392877e0895cb39bd0bd3faa0e6eee0f975bf0dd503d06c9b87435672d1785e6833b96ecade5be02bc4fc8738dfad68b5c58ffffe3972f782dd559e7ec13f4e17f05d7685ba91589fd1ad93cd5a88a7946eab9be936409eb39fbed4a56f7ae37", 0xa2}, {&(0x7f00004b8000)="d94d0d8cc3a5103e803612488af0ce5141e0e43bcb27c3279fe60df0a6240e528d52c2072c3b9c0d677d519f87b1f7c2d1d8a141e9a4f19839419bdc0a", 0x3d}, {&(0x7f00006f3000-0xa4)="a8c69bf0416bc2847afe9ab9ca378c094adf59c05071c569f3559f03c32ff654f12ad4a43ac2f9150235e28050206a2b72a8fb6da8037782e1c2845722ab2d158724b5fdd8cafcdebb28a246f38491675901bbffe6957c640abb7131ed4ccd3beb27129cc4e1c73fa7fd1ddc2ebfce402fda8273ac34b12b34c9408c302b299592b2eca957ec285c65827248eca0663cbad973f378b94b4b11b4343076014ae8ff239eb0", 0xa4}, {&(0x7f00008d5000)="380324096ff72121b166555fceaefbd3f5b783c5d9aab0f9e643977d00f6daf500f4417d9bef8ce1ad57270b7f2a39533239fe5b668b52f807f2df68bb453e61fba68a52077c4c74615568bc7632ff1a", 0x50}, {&(0x7f000021b000-0xb2)="f9c9bb91dc4eecf0bb124adb6cdd681adffb9a0068dc31a13f1cfe40e46829cb24b3f97b64dcb7df5f673dcf81c37bbe1572800c2185cfcb79733a1feed13bbde440ec9e426d8fd308cf2b1971566ce21695dd53cebb5cda01aa53ea4cdd9968a2eea88b971e981c6ca5e4fc6da84356fe7c0ec582b26662ad1b4e730e7fc66b4dfbf71120bd9d15670f6822538692c4cf34ee335f460ca9d6d652b5d392b7018d32286a4c234754e2a452b47908c93cd54f", 0xb2}], 0x9, &(0x7f0000f87000)=[{0xd8, 0x18a, 0x5, "4edd4557c3d208c1cca262252f4e71af02e779168beca2273c9dacdcaa20e521e20a879152311c968bdeb92752efdef35c9dc4443863013367917a674d9d2b1047ef78e9d491b8e0079d33c5a8db33459a27484d757ba9b7b6286bbf3f11a75d68b487a6ee0f35aa0aaf607f203e8b7c9ded500d62ddd351cd811d9ebba92eed00008daaec17b0a2145e26299190daa7d06ee4da98f1fda8108adc30ce95397de154ff440db48369a3b2814769dc09e3020fc145e8bf9d9f97482850b3ff44ac7c64e3"}, {0xd0, 0x101, 0x80000001, "243420f72994c044ffb4a84bf4e9eb0c2942ea65fe7999a958231e5b8eee2750e2a0ac5e9e1583a2c6d50527fc611d048674cf590598c4f6d85bc2ece44a520e9026ef82a786e4f4fd32575e544fcf873b990b676aec5e788d0963f6771fcf23da306df3bfbbc2c933677f8b0157d8bf545f351ceefc475c6c702a88b32ccda2fdf9bf43c36da15856918bb8971a083f58333b751c4942b7f845a7420a1916661c2688a107bae0ed6a9b365ca8687200a647c1dc4e4bb4ec30db"}, {0x1010, 0x0, 0x4, "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"}, {0x108, 0x118, 0x3, "92074fd74bd98d0e75a09e2444c67c1bf7bb95b10ce10ca101e64397275f89dd38b562d99e77f29a16348cb9ee67635deddee389863166dfc01a0107c1d58339f1f2eceae69a9a07e8ec35e8b044cff6e1d2f2e88c42099a51c428e3c92077994270b019353f322182343754444f3d4f091721c262e57718889a32be34a56792f7862220e40dc36c3329927b00fa038007578f0a897b16a432072deea68c1b21325ae3bdbad290d2d6736ef579a08cc8c0978474c41d22c45f0ad425c56dd36c1cb98438a7fa9e4a4628e146ee9f1b8e868dd43e6493c3a2bd33ec4dd32f2220f2b024b54685de103f540e9af113643e5a827b975c27ab7e"}, {0xf8, 0x11, 0x200, "3a3b059b4284756a304c55bb805667776e5077b1570fa5f464ea5e0d805bf49137a372c66ad28c4c3cffe659b67a7e89cd9a3febff0ca415b12136dd8a02162c009db22c21d30c60065c2b970a7dbda12db86194ed92e2d2dfab14e87d4784538d03cea465f11dd4718705d5a102eb7ba06d3708dd21df45de4ba68ff989c4fd320afb7ceab73da4292d2001457af9406afc13af37b283f38739e7f77fe75a08ecaccb5211599cf93141efb334f255a19dd3cbd4a4bea71d7317556ccb36d2438125e88e6106d0b9c62f1f9a107b07840071088134408fef34ab85608abdffb44c09ea3c9e59"}, {0xa8, 0x10d, 0x80, "6bb679d9791ba8611704a54800f98fb52f565e227d08a29d84a7874639df6efd08e64ce52031c3271f0b9125a4561ca367150624a0ee96fc6ab378e5933aa581e5758d7ce03c49fdccb93d86c0aca4e06de97a0d2eb6503982eb765911eb67733c60548b5058cb089098242a12cd95ec06456f098d300716a5272fe039dd355f6e0f70a54b34b4fcd010e30e5665c5191860d11e"}, {0x88, 0x115, 0x14e, "da3d05b84465feb159f23867e42605971a9724e76ba3cc09ded951d942942fb565a3d6817fc352b888f5a4a26fd6dc05ec57d9f5fc61c354a576e25895a5669c0117fc398eee6b97b192969e28690e3575b55ed30bf02faf0668e14d0a3dc81f8f6fa6867a58565ae62b7c75f34966fb88"}, {0x78, 0x11b, 0xfda8, "0b5814a400bd1815f7a630930d0178b2c63b9a18b2789481372bb7c4588c3b6a2c8cd36a96b7efeb07c486cdd0eed73a1131f897093b4300071868fb8b17a526c64b027f3bf826a279d8a3d801ba88175d4c197a918a3be563b89d7faf8295f275b2a88bd4ca14"}, {0x70, 0x11f, 0x800, "8ddf326059045fdec3265fba69233a0692046deb379092ad4965bea19195bbd7afd9949c879a84ad7af7c617b8b586265da5674563d41b57c0aaf206c9275a8be11f43dd0de5e20d361ed44708524e2e3ae08aa0a1e387b854a162bc0e6d"}], 0x9, 0x40000}, 0xffffffffffff150c}], 0x2, 0x8001) r6 = socket$inet6(0xa, 0xffffffffffffffff, 0x47) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000248000)=0x0, &(0x7f0000e30000)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000e14000)={0x0, 0xffffffffffffffdf}, &(0x7f0000db9000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000417000)={r7, 0x1000, "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"}, &(0x7f0000a2b000-0x4)=0x1008) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f000058e000-0x8c)={r8, @in={{0x2, 0x1, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000dde000)=0x8c) mmap(&(0x7f0000000000/0xde3000)=nil, 0xde3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2004, 0x0) bind$inet6(r1, &(0x7f00008dc000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) 2017/11/27 19:23:23 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 63.492660] binder: 7613:7623 transaction failed 29189/-3, size 0-0 line 2870 [ 63.520178] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.703386] binder: 7571:7578 ioctl c0306201 20008000 returned -22 [ 63.721965] binder: BC_ATTEMPT_ACQUIRE not supported [ 63.730722] binder: 7637:7638 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000084f000-0x78)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00009f4000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000544000-0x1c)="") r0 = getpgrp(0x0) setpriority(0x0, r0, 0x85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fb1000)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000834000-0x4)=0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000325000)={0x6, r3, 0x0}) getdents(r4, &(0x7f0000e08000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe1) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8dbb, 0x0, 0x0, 0x0}, @map={0x5f34, 0x6, 0x6, r4}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) openat$kvm(0xffffffffffffff9c, &(0x7f0000005000-0x9)="2f6465762f6b766d00", 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000419000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1a, 0x6, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000170000-0x8)=0x2, 0x1, 0x2) [ 63.743299] binder: 7641:7646 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.743309] binder: 7646 RLIMIT_NICE not set [ 63.743478] binder: 7642:7647 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.743485] binder: 7647 RLIMIT_NICE not set 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={0xffffffffffffffff, 0x0, 0xe, 0x321, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x390, 0x0, 0x0}]}) [ 63.743894] binder: 7642:7647 got new transaction with bad transaction stack, transaction 432 has target 7642:0 [ 63.743906] binder: 7642:7647 transaction failed 29201/-71, size 0-0 line 2782 2017/11/27 19:23:23 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x8080, 0x0}, {r0, 0x1, 0x0}, {r0, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r0, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r0, 0x200, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r0, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 63.766726] binder: BINDER_SET_CONTEXT_MGR already set [ 63.766747] binder: 7637:7657 ioctl 40046207 0 returned -16 [ 63.768317] binder: 7646 RLIMIT_NICE not set [ 63.770905] binder: 7641:7646 ioctl c0306201 2000afd0 returned -14 [ 63.772845] binder: release 7641:7646 transaction 434 in, still active [ 63.772853] binder: send failed reply for transaction 434 to 7641:7658 2017/11/27 19:23:23 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 63.796491] binder_alloc: binder_alloc_mmap_handler: 7642 20000000-20002000 already mapped failed -16 [ 63.807552] binder: undelivered TRANSACTION_COMPLETE [ 63.807564] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.807626] binder: BINDER_SET_CONTEXT_MGR already set [ 63.807634] binder: 7642:7659 ioctl 40046207 0 returned -16 [ 63.811304] binder: 7642:7663 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.811313] binder: 7663 RLIMIT_NICE not set [ 63.812564] binder_alloc: 7642: binder_alloc_buf, no vma [ 63.812586] binder: 7642:7659 transaction failed 29189/-3, size 0-0 line 2870 [ 63.812636] binder_alloc: 7642: binder_alloc_buf, no vma [ 63.812651] binder: 7642:7663 transaction failed 29189/-3, size 0-0 line 2870 [ 63.841546] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.841555] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.841627] binder: send failed reply for transaction 432 to 7642:7647 [ 63.841739] binder: undelivered TRANSACTION_COMPLETE [ 63.841744] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.841747] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.843328] binder: BINDER_SET_CONTEXT_MGR already set [ 63.843339] binder: 7641:7669 ioctl 40046207 0 returned -16 [ 63.866081] binder: 7641:7646 transaction failed 29189/-22, size 0-0 line 2755 [ 63.866125] binder: 7641:7658 ioctl c0306201 2000afd0 returned -14 [ 63.906577] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:23 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0x0, 0x0, &(0x7f0000b9e000-0xe)="", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:23 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f73657175656e63657200", 0x100, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x0, 0x0, []}) 2017/11/27 19:23:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x5, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 63.929177] binder: 7688:7689 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 63.929185] binder: 7689 RLIMIT_NICE not set [ 63.929319] binder: 7688:7689 transaction failed 29189/-22, size 0-0 line 2755 [ 63.929434] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.998463] binder: 7688:7691 transaction failed 29189/-22, size 0-0 line 2755 [ 63.998494] binder: 7688:7692 transaction failed 29189/-22, size 0-0 line 2755 [ 64.019736] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.019747] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000042000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000e80000)=0x27) splice(r1, 0x0, r3, 0x0, 0x58, 0x0) close(r2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000e8d000)=0x0) writev(r0, &(0x7f0000e8c000-0x10)=[{&(0x7f0000e89000-0x23)="d5", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00003f2000)={0x0, 0xfffffffffffffff7}, &(0x7f000077e000)=0x8) 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0x7, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) [ 64.115718] binder: 7701:7704 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.122988] binder: 7704 RLIMIT_NICE not set [ 64.131957] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.137358] binder: 7702:7708 ioctl c0306201 20008000 returned -22 [ 64.147288] binder: 7704 RLIMIT_NICE not set [ 64.154381] binder: release 7701:7704 transaction 445 out, still active 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 64.154389] binder: release 7701:7704 transaction 444 in, still active [ 64.154395] binder: undelivered TRANSACTION_COMPLETE [ 64.181711] binder: release 7701:7713 transaction 444 out, still active [ 64.181717] binder: undelivered TRANSACTION_COMPLETE [ 64.181728] binder: send failed reply for transaction 445, target dead [ 64.181736] binder: send failed reply for transaction 444, target dead 2017/11/27 19:23:23 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000a000)=0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f000000a000)="2f6465762f696e7075742f6d6f7573652300", 0x20, 0x2) perf_event_open(&(0x7f0000006000-0x78)={0x5, 0x78, 0x3f, 0x1000, 0x279d7f6f, 0x1, 0x0, 0x9, 0x1, 0x0, 0x80000000, 0xa00d, 0x6, 0x16, 0x0, 0x6, 0x0, 0x6, 0x7, 0x20000, 0x2, 0x1, 0x5, 0x1000000, 0xfffffffffffffffe, 0x1, 0x0}, r1, 0x5, r2, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000049a000-0x400)={"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"}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 2017/11/27 19:23:23 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:23 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000004000-0x14)=@random={"62747266732e00", "2f6465762f62696e6465722300"}, &(0x7f000000b000-0x44)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x44) r1 = dup(r0) write$tun(r1, &(0x7f0000008000)=@hdr={0x3, 0x7, 0x5, 0x2, 0x200, 0x2, @ipv6={0x7, 0x6, "8a55ae", 0x12e1, 0xfe, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[@fragment={0xaf, 0xfffffffffffff0bf, 0x4, 0x2, 0x1, 0xe21, 0x2}, @hopopts={0x33, 0x21c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x3f, "d096fcf68cf4742bb66410ef6366841c1293f5f4047046bfbeefafda419b01c8059c5afbefd552a6087862ffeed15a6d0f90d526d69777b703f86b0ed0515b"}, {0x1, 0x0, ""}, {0x0, 0x3f, "0d10809d455eec46a959459d048cff9099ca10aeb4bb3bc2f5270e2ce6b959b6fe3f903f5df7a3e04dd259d2b9d99abf913e8abc54ee8ff624d2e4e189bf03"}, {0x7, 0x1000, "a18a1bc07c91100c58720200f772e2d89b0f8495309a89ef3830d03611e4e403fc79b0d09c320209d492d2a3aea64c3235369d1022019bfb532c2e30dcb0bbcb3525d37fa08b323a837b982837c99da4ed54126e48755c56cb501bfcf02a2d24e4f3efb9d5e35b1b911f62074adb905e23f6972654f7281e4d25710f334b2171d39ee7eb2087d0ff0e48966dfdaf555ae06bce12560d20c78c7580a8787172b4b1d22345f7a217f83d18bcc2b293301d4ae3e431b8f38fd3664d6f287d3aa7621168a52ad01ddd03802d3b43155ba03d0c883b9af95744112c52da443a9f656d48c9ebc75958ca9e0b085d798cc04e36918bc832437f4be9f95f856e534f9496276cb399c90cb995cf8bb02670ed6612ad5cbad63255a9131091a420c7701a771949018291b8395276a9b85de2d380d4f13201a15f00441ad42d6f1080ec8b48ce23ede6eecaed8ed8c8b18f38062daf9e5c43e52d2e227003940a9ab5f30760f3756109fe7edb5b902ae12dd35742def3c27eb1839259de2b3c93dc4d4f15c3e0a080ecd4beb2ee9534466f60d985a14744f9bf2155316afee6ef21d8591d4bd7a3e2d42296f4c83af98fe877526eb2351e45100dd79c18fdbbd00e788b900bad31bdef0d106b66de885458fdfa71391551393c26c6a9d177ace4a05305be06c1299ace90ed5bb557eb10c9f314e0006f10ce87215448a0f1b110d5dc8baf2090ff9a59076955e360b1627dda6220e6f199ce91c8ea9ee25159cbbe37f18aac709aa3643078f3ae9f0f213eead71ecf33550bf6a9a0e51f0cd060b79d7313ddcb94134e74b8d3fdf36eed004e0aa8df375e1911b9d2ab764ddc2ee11bf6ddcf3ab91cbf763e3b7ae30695020c98cba36f780a92a3886e138c6061f212b85a3f58a3921ae4859c2d71fee0418299824bf97db1a3ee6fb9051bc364221f1ba4bbc61ac49a4b5390b4e6960e26ea76fd0aa0ea112b4a7fedc01855f57f13a47652a624d81bf368f22d3760c31aea08e9b401455811e6362fb88c509888a41e6c45d8fc3c5ac3f7c5b81a0d19e250a95f9e728f3bf1dcb0b5e82bd893893b66c992d39255c62a394d85b8ae73c3680da9f9037531534c973dbc30cfd9e0b881c4324e96c39faea5ee1f108d9de019d72e9634ac349dbb75891f017a535bdd504466981e1c654f743ff0276949ec77eba9a46994c756cebfa2cc5d79dd4150e3a0d04ceaf7e31d73687b02fd029fcf81088a2bf4904f1420524b0c88275c72270fe5ed71fa9c4bdddae4bd44be44c5928d4b715945f11b28a0705be00e602d0de2516ee764a06ddbfd92cecc539d294dcb43180a00f1c86dc49449f031c41af2d7f18002f410a925db7eebf983c9d75683691425d65bae4c471e6aca3c106a00cbca5482322dd09925c4ecd2bff86129bfb38ad1bc5eaff562c49f0a2ff13b6df5374254635e88d078efe1bbc00adca918feb019a3629dc6514a4188bceb4ef918572bc0643e64b7fe1c448527d6db29bbda8388d2ea65587765cbf52df1e5d8ddefbfcf7bc58b162ae00a11444670be51b47767a63eba971430a1383e2678260c3aa304edcec023a3027dc0f6b8a370c992691a7cc0cdbb55bad4cdbb3990592e7824cf59c1c708cff15a2dc6113391f6433af967a43c30fde6b41dfb5bb7d87059e084a8baaaee2594df49e15d6ad6ed1aaf88f81d7219524b6efcae6e94061c06fd35c9763003e8a79adff33d5ce59647698a949899173967df4ceb95823295db0da63fbae14a7ab81d4a0cbfaaec4bc5480625209c8a9e408751f5df1406e586ce4e6b07b23faa485bad311a6739789622547faedd75919145d73ad3af52fcbf23893496cb90f389ab04a2a7f438ad199c83d24b75936f8a6cdc0eccf5486f93d6c0e295e12b109273e4d77d9b45764f7ffbc0577541fe55b89e9b7fac39502447cc2dd078071dccde14fba733212010afd4573965fde0d3d256a0ae3968a317282db92a65bbdb654871aed511bfef6225596d14365027d06bad89a46278f78e61575eb7187c20244ffe097347617ddaeda7da767a4cba820dbc8a31400ba73905a76b1690db945549719b7df09c9148fb8d84de96824ef42fc13b66656ccb84b86426df7573fbf6ac9d90b1280f7e063453975be282bad6992caa3acd8d3dbaacada692fc9a1c6d0ddaef1f2ce049fd91ce40347576d4f3398c714b0c3e2af898166529d3b8f47c8ac8a1122932bc10e4f9e4e2e313af5d54e7140ca7bf03029bcfb0a3e49b575c5c2bd56ff5b5fbf965931e918b43efb09ca3d612eb917db9a4e3594828ee30e01079a87729c538013eea2fca96ca525e549bff4aa14b794bd11413bbf1631a2559fa2d7cd8f542269ffb171f83dd21a65a766294adeeafaf31a01ef82b603131e2b0f4f962b32c6ef50796194e2dacc15d8e248199539b21deda769b9a1d4f384204742ea2099d1054816739d2e696692205ab2bd61e15b617544f4be66574a822f6d36ff75baf067d20096310725ab013a8f9478a99695e8adc0d41490717991f7b891510baa7ec43a5cb19ac4ee68b69bb49832648e647325a4571375d1d6fd32ccace31a38594822daefe410c20d3c8765e2344be0dcab724b4c62c5ecbcca860a7bff9f3854b08c1ef4d2d83dbdfae520ae976da3cca48d19bd0d1358c4a5dcebd3d4c63279f0d249137beb97f76b74b4c58ca25855c8a7281fb5b8953fd63f742f4824e6516cfa360894f61ee860268c623c4478919e68291f94a946f958a32f4fed9243e2eaaf2f894392ab6eacf7d2fa133b2d8743b23d70e216bf98ad6593658a3b9634bf53514dc987af1218fe3b3ae964521c63e0eaccdf4ad4bdedbd0dabceac6813a108568859b0e36e056ab9a36e8efea105edcd722df3097aaae1c1b40a8077356056553878e048a2555a9acc921b7f3ac94aebb5cf541a32ffd04383920b790e1d5b639dcf385524d310e932f3afc273df9a90d23723c03cc7158288733c2c4421d4e7f9648e63465f8539a744c36ad32f9ae54ebe84af0e9ba9e7137c9bfd8cd9888051046a529c5d6cf19ca7c775bbfb5724d64f0b2350a3f585e768b86356a556f55640e0ae7a7e57703e9b3865001e580474524a7be4bb2d7d8bcd8c041efac05131c3d39440c386144df8f57dde211043b20826a0ac76378f458676bb4165e6bed6dd873ca4e26d6a3d7a41c05345f09f10640b39f4a1cbd608ba4d86cc1c2562d2faa1553a6543e6488ab9a75b3da2e7d93e5cd3f18904ba4fde9155de018f4f5254f8cf2f439d39eb593442851317b00eda4dd3ccd29cad74fd3bfc8472dfbe78d428baac634a8300f58356ea83624022042682e7443057e8a8be903a55e020d1d95cced16746aa0b2209c214f1e2b90c89e608053e08268ab2ef323f0d7c4c8003aced65aa40322977fb0060a28def93d6e6415fcf2a19d4a6e020bdeec64718e711086fe819d7ca2349851ec8e0a3581c3dad68f088c37fcdd39d159c2d5ce74c9ff866c9dbdc14e97148a89c047d5e551c984a1dbf69e9143b6f6eb06a33bf9da01e1c113b0d1be7dedc73e89df6748f72c712d4568ca26250a33d5d8c09240672e39a1b2e3e024d32df15243534f78c31aaaded8483c3eace9c820a5d3c3b7bd9cb70f95bfedd7afc2899903f00316914817c84e6f2c426ef78f1e874657996795ffccb1dc796d95f4860755d9c8dc3a8e6a85970e651bd5d96f7e2d9ea99e2e7848851fdd3b667a76fa61813524ec4d2c769c3390aa48b993f326b571b21fcd2885d6fd8d4b8a6321a0b89f9220bd42ddfdd35edd3d424f0f92dcc162baedc2c0b1460a85d0d84795400588f987e3cb74ddf756a924af65f9da6f3b0ea07e68f73fcfe2a20083338b6bcb0816c0b6bfbae9400b0ff48b0e6fe22312c6581c8b7a8e5b71f4c01b089f76ac5e54082cac100c201a71265c45b3571dadde447553dfd456a448527eac760b18561f05b6e72579ec798b9fb9e4141c9d5856708cb20727e33f1d28cb968acbda24e1f44522c8631b888a18544364d9e705f15edc8a5b963d9ef146d05f742bef27794c974d07e01c8911681d4601b5485d830973f28e35bec3fc9610b54b8c4aadab328f6b6e90d9d0c3db257bd8571356775b74793f21af6fd2453e8de2e524a2b65f57fc09f6aea0d4dd1f492b69ceb387206248eda4317c8fec9677beb7c800c482fc55f134f44b89105cc14b3b9e0795171dafb98b5161f75c454b8649f99accd73fdee84a20514b4d2f77577b438fd017fb8595148d442da7733b15790a010c03c681a07680fc0e3f2e1d147d6310cfe3793c320e8dbd96145af597a0e627e3600750296edce3dc452fb77ed0cded2594cfb66e9216a93ad936ce6f9edde52e3cc25536a902d9deae6b818d75d27d60dbce47038977cb594996410aa262c76c3a5508fb88dca568176cda924a04afbabab4c686a993ff6a353b4b3754f89cacfbcc8d9c6d0d07003b43f97e6b321e7062f02b227d2699bd9a8ae705715b03598decbc90086f1f9c14b4351c006d6bfa50c6ecfcd6a78b1a427213d032bfa77c645bf1b2723b40e2aac26fe73de567a962b1749e7653d286ef8ad2bcacbcd32c82644a2655bee20b3f16d93eadfe6b4deba46863bf47ae9dd5b050170f1bd6af8e59d98369736b826ff783cef13b6cbcf9c68632e68106cce687c45d19055c98b2afee1a296537e2457a54d006dcf4c861c9ff90f8517fe35f79ba2349d8e4aedc53899faf9d269ec6e7a5b093b1a43d4ac73ce4911af79afab70af839d327858c87de5323a4e9f1b58f4a992850410ce28d34dd522d25f8e6c4e3e6aba123b571a2d93f73231e9e231a5068d5ac4f0c38add4b480ac2b30cbd1cdc558901312b685b88f3d06b1b112ddeec1ec764d6235184753cda661656c7328610c28e6b8929dcecd185fb8f3388873c8189042b0ef56e926713638d7f35f0dfb32eb909938cd1f05774617adac6b6229cf03332ea0fba46bd6c590274acdf8be634fb4caa4e8ae5e125f1c8bbc1fdcbae5c3a3f612d6467db5e6025718e7b53b96f1ffefb84fb7ba27320b1629a8d2fffc219a74b66268796c8b5c932791009dc9a1a8cc073fb24ab04a9dcc13d7d13666d8a9fba961e89d2df3cbcd1101fc1fbb95bda804cc68b3648e2936c917cc885b4aa20affc9baede1e13afd4caa26ea7f5033a21432b7a3b935096b289e42b3b498c6b78428106c561c5ef7d5f28aef46bbda8bcf8ee47db65a8bda9b4d5e4398d6f1eee0fd884206095ffb4853e89123b4e387b73d14d030730f79d147057366bce2a06c5824786017caee2e83c0c8c1b53c3d7d7cf356347936731aecde782e505cf28a63f09d2c1004b1389370d484d35cc11a5d8baddbf561a4db7fe9f92ccf4a059191e584059d7a5ffdcfef0f798d3f07510389b9b9f5c8ac1a87cef220fe9a61a12dee2e0efab9faa1fb657fbccf4e1cd80088be384e969caa00d0ae9b34ef94706fa371915ee7727d64eee1523c88375582e4521098763ac495d0ed5b2851b76f8afe4f356b5b10be8d75e58db7e355baeee4e45219c48078a07a2dc67418946b13c2b0f5381969e4e2c18c8c9847a20a0dc8bf0a7cba24de7aa21da0eaf825530c727598adf48591a6459816bf5c7d76bf51ace6effb158a92ec11e165c0c515ec1a66fd556bf53db42eb015897154424697979b7fb6ee097fec957410c275eb513173035faa0244e8b237094162127842f32ea3ddc2168f27555d4bd13591da62b158533c5bce1804e1f62112"}, {0xc2, 0x5e, "fde4be90b2e77198089fbb3e2e5d3b2afbf0f1cdbb0c278300deb198d32fc133667525a8656604243482f0feee187d6c5f83c975e069a2bf34fe50ff937d1fceb5d1aeeaa3925a1ed4a4f5339b0e9c00993812f08e227ad166de5b180a07"}]}, @dstopts={0x7f, 0x2d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x3d, "44cf6f4020d41e5d73fa92052c40b61928653594f104f3abf5b3d54acc26db9a5eb25d93fcf1bbbfd704c2e4bd9d5d2ea0e3b9ca5c4730ad338d21ed47"}, {0xcb, 0x9b, "07c093948068e249db41f67c53b2edb4f9768be0946e32504f9c9104cfcfe8cd8f39454fa32b4a0dfa2f43100085f93703d80b6a78b978112e59edcfee32e1cc62b62d151d7747b204b3f334c6d8bf15afadbf36a83959bddcf9bbab50925e752664e8a8eaa0b2503aa32237205e5f7779d7e1f9d7d8a908dfb2194ca32a4755e46e5060539ceb034855902562a3d4524b0de772826a9762e3fd85"}, {0x0, 0x8f, "01bf0a16f06df26579bdb937f55553213a3b237f1e114a415545049940e1a09e064b57ece227d979be04b190778fefd1e10483902f976c65ee6cea74e945bb8e2a100f62f6c8f68604140287f00af5425fd3a34b1343bc58c60f844a2b15ff4c52a265e83adf44e079aa73e8b97e850db570a576560cf47b907e4c044413bc6a6e1e550683b20e1c4974ef9d764568"}]}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0xfffffffffffff41a, 0x5, "e93318639d57899bded2f36fdaea5430373858f3e144ce8cd12359f639cc5e743ecb9db73e223eae6a8051e50dddc495bd1f28a9d05b21a9f3b34c1c652a4e023d399066084e34247b3d708c7cfefc7e84b0b286544249bdfe8a24f8f0845f8893e3fef5590b8a0a53a0125a"}}}}, 0x1313) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007000-0xc)="2f6465762f72666b696c6c00", 0x200000, 0x0) [ 64.214817] binder: BINDER_SET_CONTEXT_MGR already set [ 64.220280] binder: 7701:7730 ioctl 40046207 0 returned -16 [ 64.234922] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.234931] binder: 7733:7736 ioctl c0306201 20008000 returned -22 [ 64.240413] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:23 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xb, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326c", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$inet(0x2, 0x4, 0x7fff, &(0x7f0000007000-0x8)={0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000002000)={0x0, 0x7f, 0x29, 0x6, 0x101, 0x4, 0x9, 0x8b6, {0x0, @in6={{0xa, 0x0, 0x101, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x81, 0x80, 0xaac, 0x1}}, &(0x7f000000b000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001000-0x18)={r2, 0x80, 0x0, 0x7fff, 0x4}, &(0x7f0000007000-0x4)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 64.240422] binder: 7733:7739 ioctl c0306201 20008000 returned -22 [ 64.263198] binder: 7701:7713 transaction failed 29189/-22, size 0-0 line 2755 [ 64.263302] binder: 7701:7704 transaction failed 29189/-22, size 0-0 line 2755 [ 64.268731] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.268740] binder: 7749:7750 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c94000-0x8)="2e2f66696c653000", 0x188) mount(&(0x7f00001b0000)="2e2f66696c653000", &(0x7f000040e000)="2e2f66696c653000", &(0x7f0000f35000-0x8)="6f7665726c617900", 0x1, &(0x7f00004ce000-0x1)="02") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x7) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f000090a000)="2f6465762f6c6f6f702300", 0xfffffffffffffffc, 0x200000000000000) r1 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x3ff, 0x0) r2 = gettid() ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f000004e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x5, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f000000c000-0x9)="2f6465762f73672300", 0x0, 0x2) clock_gettime(0x2, &(0x7f00001fb000)={0x0, 0x0}) bind$ax25(r1, &(0x7f0000b07000)={0x3, {"fddbbada8dc428"}, 0x8}, 0x10) waitid(0x800000000004, r2, 0x0, 0xa0000000, &(0x7f000027e000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000a23000)=0x80f, 0x4) getitimer(0x1000000000000, &(0x7f00000a2000)={{0x0, 0x0}, {0x0, 0x0}}) write$evdev(r4, &(0x7f000082c000-0x78)=[{{0x0, 0x0}, 0x400, 0x8, 0xffffffffffff062c}, {{0x0, 0x2710}, 0x0, 0x3, 0x8416}, {{r5, r6}, 0x0, 0x9, 0xa}, {{r5, 0x0}, 0x1, 0x3ff, 0x40}, {{0x0, 0x0}, 0xc96, 0x0, 0x8000}], 0x78) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a62000-0xb)="2f6465762f6877726e6700", 0x3c, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) ioprio_get$pid(0x2, 0x0) epoll_create(0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000438000)="2f6465762f6877726e6700", 0x4203, 0x0) syz_open_pts(r7, 0x400000) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr(r3, &(0x7f00005f1000-0x10)=@random={"2c7370d6de", "2f6465762f6c6f6f702300"}, &(0x7f000003c000-0xb)="2f6465762f6c6f6f702300", 0xb, 0x3) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, r3, 0x0) sync() ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f73657175656e63657200", 0x420000, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f000000a000)=[@in6={0xa, 0x0, 0x5, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x8000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0xab4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}], 0x6) [ 64.273413] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.273422] binder: 7749:7750 ioctl c0306201 20008000 returned -22 [ 64.331383] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:24 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xd, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce013", &(0x7f0000ffa000)="", 0x0, 0x9}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) accept4(0xffffffffffffffff, &(0x7f0000003000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10, 0x0) 2017/11/27 19:23:24 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x4, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 64.331394] binder: 7760:7763 ioctl c0306201 20008000 returned -22 [ 64.385603] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.399784] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.404202] binder: 7774:7779 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) accept4(0xffffffffffffffff, &(0x7f0000003000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10, 0x0) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) r1 = socket(0x5, 0x3, 0x6) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000009000-0xb)="2f6465762f766373612300", 0x9, 0x101000) recvfrom$llc(r1, &(0x7f000000a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x99, 0x40000021, 0x0, 0x0) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[{0x14, 0x25, 0x1, 0x100000000, 0x9, "dfff0500"}], 0x14}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) [ 64.404211] binder: 7779 RLIMIT_NICE not set [ 64.404455] binder: 7774:7779 got new transaction with bad transaction stack, transaction 451 has target 7774:0 [ 64.404466] binder: 7774:7779 transaction failed 29201/-71, size 0-0 line 2782 [ 64.410379] binder: 7776:7782 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.410388] binder: 7782 RLIMIT_NICE not set 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) accept4(0xffffffffffffffff, &(0x7f0000003000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10, 0x0) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 64.414250] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.414261] binder: 7772:7773 ioctl c0306201 20008000 returned -22 [ 64.430220] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.430230] binder: 7772:7773 ioctl c0306201 20008000 returned -22 [ 64.432701] binder: 7782 RLIMIT_NICE not set [ 64.444242] binder: release 7776:7782 transaction 455 out, still active 2017/11/27 19:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000002b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000000c000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00006c6000)={0x1, 0x0, [{0x38e, 0x0, 0x0}]}) 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) accept4(0xffffffffffffffff, &(0x7f0000003000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10, 0x0) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f000000a000)={0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000008000)="2e2f66696c653000", 0x400000, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f000000c000-0x2)=0x1000, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f000000a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x800}) 2017/11/27 19:23:24 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 64.444249] binder: release 7776:7782 transaction 454 in, still active [ 64.444254] binder: undelivered TRANSACTION_COMPLETE [ 64.466981] binder_alloc: binder_alloc_mmap_handler: 7774 20000000-20002000 already mapped failed -16 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) accept4(0xffffffffffffffff, &(0x7f0000003000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000008000-0x4)=0x10, 0x0) 2017/11/27 19:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[], 0x0, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 64.468703] binder: release 7776:7793 transaction 454 out, still active [ 64.468709] binder: undelivered TRANSACTION_COMPLETE [ 64.468720] binder: send failed reply for transaction 455, target dead [ 64.468728] binder: send failed reply for transaction 454, target dead [ 64.471132] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.471141] binder: 7798:7800 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f000000b000-0x8)={0x0, 0x0}) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000003000)="a9fe1e08006dd78de60b5810ebebb0e185303c634af35fa4645a5990a5bbf0cca6a79c4243803ea2a8e75f1e1a5da924818c0b5d01fdbb71d871f6afccfb455c5339c3510d883eb8991bc8f9bec9560eb91e79e251685da5194644052acfdf17003a2ebf0c72595b1f1ba8b7251dc88240d5f7e157db41d03d38326a9b6fe8e62895b815c0d87c3ff5d26384ae5bdb070cd3") 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) 2017/11/27 19:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a27000)="2f6465762f6e65742f74756e00", 0x0, 0x80c) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x2fd}) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000273000-0xba)="58870349cfc1618bdd853e2a313d083a6c50bd18d3b3786ba889a8fc7521cd91ca3b099ef72ece348910f6c53ae9e2ddcd6d713c50fce9e29d0304c867d2088ee8db015aa48337ff2504c0a13b6356e399a31f960c1fbc7a25d04047078e517f974958a229a3f705476df03eb08f2646d5d3e181374a5c0a5adecde067a1f0a06c5c2afc01a9b265595d6dd1c9084e8d989384e37f4c1bc170a9202399c9352634bb04a0a80ed5408356cda8cbff32c3150d43c635e333dc64cb", 0xba) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00009f9000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x27e000)=nil, 0x27e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x20000000006) r3 = timerfd_create(0x4, 0x800) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000e05000)={{0x77359400, 0x0}, {0x77359400, 0x0}}, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) getuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00004d0000-0x8)={0x0, 0x0}) bind$unix(r5, &(0x7f000060b000-0xa)=@abs={0x1, 0x0, 0x3}, 0x8) bind$unix(r5, &(0x7f0000abf000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) r6 = syz_open_dev$sg(&(0x7f000002f000-0x9)="2f6465762f73672300", 0x1, 0x422400) setsockopt$inet_dccp_int(r6, 0x21, 0x0, &(0x7f000071b000)=0xfffffffffffffffd, 0x4) fcntl$setflags(r4, 0x2, 0x1becec7c2605bb5f) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getpeername$unix(r6, &(0x7f00000ad000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f000027d000)=0x8) accept4$unix(r6, &(0x7f000027c000)=@abs={0x0, 0x0, 0x0}, &(0x7f000027c000+0x7f0)=0xfffffffffffffc88, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r7, &(0x7f0000011000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000a000)=[{&(0x7f0000005000)=[{0x10, 0x12, 0x15a7, 0x0, 0x0, ""}], 0x10}], 0x1, &(0x7f0000b41000-0x18)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2, 0x800000000000, 0xffffffbffffffff9, 0xe, 0x0, 0x0, 0x80000000}, 0x20) write$tun(r2, &(0x7f0000991000)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0xed0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x11, 0x1}, {[@hopopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "8a5bd8", 0x4, 0x0, 0x0, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, [@dstopts={0x0, 0x1be, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x0, 0x0, ""}, {0xff, 0xdf2, "071ac9a9afb6dfb308a4841013156054248b563e9c29aa08d860a1fd81cd41e9809138f968b03f35556880461c4e02b5bd8919cc42648eb26d55f3bc8c176b92230596ddaf8318cfd7cf996f372f3d66741602834d58b088eb557cdc92f16f7629b14a925c52dec934a20a7515478f330070d67967b2a8cc0df4ea6c95c0b05f5f240e7c0e9369dd7bf8c155ef7109e6d3929a278d5a90599a37a768210004a39c53437b6b455c17d461cd524a9a1aba1c43293e8df7999bd9cdc2031bd698d44b9c6ae3001179bc40b500d80e02626a95b4d454e2caa80d973efc7cac82a6a57499b927225f2226a8704c4925981b4718b9b3eb2b698ed65ea9b1a309e7603608ff3e9d64eeae9db47f52b7e2abaf45bd7c17a219cd1fba3b0ee40dbdb0a411cb2656d1ab7451e0dd57e4adcd9b42e71da5ba887280200cb3fc237f73878a1d23f70766bc119829b0c83b161d7af050158e7641aab384936db50375bf26ff9cee9c606496dbc0da5a2ebd68f98cacd85d15b485c032908ddd4abc560b4e121b0a5faad6260143c731a6f9a29d082bd037e41b712fc2951a3e7c97b1c7fe71b00c145943c5009191383be7c0c41f74e518c9f8f549656f99592c057acad42ba7be3258cfb05ed89c33b8db8fddd199ea46c304656b3f1f361bd9fa696bb0c92f10b52929d8c62da09c5d96481294c7248fe24db95e734e35a39bc9d7f9488db66655dd83eb54be13b6dca761dec767800b613e0f1689afb6e031826aa3bc6d869e6412d072aaa70a7a77645827e239b19c80af5797985e348d4df106be2ddba4afd822c9411a4a355c70970d3e6b45dfff6ebfd17903cf0051e61d3a76c4d5f76bdf3725f789678c37f1c5168b1f7a242844dafd8e40e4993afc2c3f363b762c6a950f1c350067e6f55e91d9a50e03d0a4242bed3bb5b4b01d246386ba099a4ed6cec2caf548916dead8ebcee00564e6c60f98a79c76897de7b5187ab133959d96635c5547282ea43c63a11bc159082b1895abc081582be6911e2570508d30f80f553f12f8d41c9a2fdc2fe9db74969dc2aaddb6846920c7d843c6b84816386378d25db9ffbb8a229770ed14711303a9f990946a7a85ef97e079e0c237779cb31c75443e209045f06be109906d0627023a72b9f49b1ab73e4976f410dbcd87ae4b56a8d2b7babe06a4da96169ed975f35e63c34d32cff0a8de0e14a0f49fa14ede3d0b24bf27a0847fa49d00e525099374838150f21643a29b1bff83c63031454a7f168672e021c1f01fa9f9db782294d2241e819c560c1be318de04612f2c26c7ac8ae8fed3de6478583b8101ab5ab0dc4d0f6c7e7adbfe23ee4eaaf4e0a1528227742e835c50e3aba41d12075e0bf2b34be81d87d8b50beff9b9ad69d375138bc36cd2c1c4205d8d8bc1c3797b5e68dd2ac76ed48def5b16c68df6e84d24a3b11ceea2b616fb5903c0048ad7bcfb512d70c8a71e6f54e34f9deab7e99cbbc1db525f44c953222350bc09bd94d162e27620dab07e40c760ca664a7441373637b7649c91bbc8bb539bdfbe06a5a2f217909810074505ef61a16db18f5f2b90db493be7afa1f1e2a785856ff3685c1fadaf1d4d22ad6edd81b6020e41bd53aca7f78653f4fb9920be1a0073266500e1cdc6fad6ad1fd014af0ee2256726b61dd26cf4ed5f9ce68b698c7b261c70a60e2b95877d04ebced3304a9693b245d6a3c58f147206f6e50712f0e804d9ca6e04ca975d24036f67f68ae0d8e3544d7d8b7688c2671e1defbfab6a80d25ebb6ca41a37b6b0a78775753d82f1117bcc14ca34369ff4bdb666fbda3302946efb4c33eab34ac38a184093e20e1c3ab6bd6c5992b489c610cf4c139046f0b8ab11f1c8d4578712e09cf53ab342762d594ac5ca7138b533d3849adaf63df94f26e8d8d4f8e2941a20fbdb9093976197061dde066aeaee520fc2cf2887d28f8223a362d5896cdda561349189c3206548a76b040f3b22f45b6eb3f25f4962bf937c48e455e71ab07bee0fb2d86a350e114ef4edaf2d246ecc8e67ddd6b989a5f8c4419caa7b362f41202f8c8f6978a11c1bbb12f4ed69a0ab3d2b8c5353d4e89679d84e6a17481165651c3988a32def6ccb09fbb44f49ade396e39128e6aa89d1becd70115d9aa64304742a0ba3c44884338de8936bc6c29faf7a65d9ee95bd72122726c4a781460b733791641ec881ad894f9d9fb612277946e769233e862c2e4115c95f0cdd9ca64de985580389009d217f86045397c359d4a5bd52c73e0339a6d5a82da79bff24086073f5f1bdcbf038730d7b8614d037d136f73493549cec6fc3182f33dbb295707f17b37724bd476bc05f24b0dccb216fb556b5d9802922dc78cde7865cfda4daae7b5329afad34d4b37e1c0c4bb64236b7ca067449f315b6f1e6053fc634751193573f78273b3557f0d177f3b71ddfe311123415efe7948477dbbfa40ab7c358ac090d0955e32a54cc84f6629e9c0560fe3df8a3a3a115d1ccebc97a49205b0266f84037c8cff1f875ea437d518806dfebff94971eea65f5d99c1428f244c68a7d4e9624842970b7e9caec54bbf44c01593fa45407cc5b77f754673613362be9adddf304176a807bbfa03fe8cf45bbc43da931c3835c5e598e23a13b0a486ae1491afad4b84f7f06baa0dd644690bddb6e5c4d29f3523aec84a7f82ed0d85b4f11c9d942af8f52a9dc1cabe3bda1c365bc93a8fa68dc69585c89337b38eeacbe64ef0af750ad836da1423f1f3b90d0297489719122ffd41cac8776ffa166d73e12475e9dd6e1fa3294f850ef2d184438e1bbde1207a95fd9b9c55be3d05c7f14759ad6557a378f00888717e2996625774b0b5370c8e85f7239216c11121a8b1513d7a72db2b4f009bf7b18ede816aec2e03cb2caddc19433941f6679ad93a8356c7b690c383a062107ce897dc99e81f216d0a26b0c1ba2480653e234652159693be1e2d14373986573aca3b1e4f7cc0e7ad6c49d8ee8284decd1fed98e124a2fef484cf50c088fec42218f67fea9f7e547230990922a62a62c7e475faa5204f56dd37a15aba1db8989235d0a56491e42b935085f6fded167723b29898063efacea159632fa06fee8df61dccb3e92c2517bb6b748fb8a545915cfeadb1f6098319c6a7a2f5d13374729280e8bd0d8370d3546dbb339c250bd4bc32b2ca2c388c350943303cf4e141f38dd7637aff2cb346b2a74567e9d1307cd6f0d74df3d40d4f29f34021efcbd13f0552db8c8555142df194bf121c76be2f0c4bade225e27411a20b5da05131884050c131d978d76ba47a19059f4cdbe7efdc67394358cf72efc24d9f74e37706ecdfdb580d16b8158a734848673594564503c26ecd13ffa3307ba0e8d6d80e19e382f4e4f6195f2352f83e06ae071fd6988564a81acc4347433dd488eb902e24b7119d30353f7545d34112781e20618d3ddf15a71408132cc20ad391fc9f05a9008b223f8ce3b282c551cd8198e59608c0c809de713a9730c6c758b70987b900ef9f234316cdd3b068dea936e8197ffbbee2257de642b2849d70e898b428c6b2ddaf6a7e8cd65284457f88f9be038a671a86c59ae265bb030247521c504020ab54a0d8f4904af66b55d64305702f2196a9b6755ce1e9f94638a3eb621d31bfa00da40b3e8f6669708fdf932bc8364ecd24960f0e37a16a1eb551ef60b9083cd470514a80cfa5b0342394f94a2e0aea9a98f390ec89b5c80952f4e61363b646204df692a0f037f02da70ba84ec4e02b375be9ea9fce30aca5fb0998f19a5e693043811d4131f2eb64b44d54855aa5b4be89e534d3824ac608f3f17e36bf57a6c8c7f81a23e680d90ada3e44bc708f23e4661068bb20b196b1775a211e4221e45a2ae9ce89b900a8fba3075051e9bfa22bd8d4051de8470d2a8d908003e0f5d2188df4c2cae28826de17ee06ef96913f4de680480284cbd11135aed2b89a1de2186d285379841e9ad2ce7dbbe1d4f585b1f8435e8afa99ce1031fd8938d6a39394392a9f325a756adcaaa65f1f0e324d945c4066d55ab7f2ae79d31fd010a988425b0bf989fd5464b0c16c97475a8a48b9bb71388884a3b2ff6e26e52b29f9ec29affbdf1d61eec9f60ae7b4082fea64652c99a484c6e2ac11cfb25948aff6786b882d1bc408959c5120141f284e6636490cbaba509a0175cb26f1ecd978c1ac918e654d41fa3a60507c4c39d56c43adfbcc9a66e747d63419867b272b848e9917676b056ed48fe4e9a9a550cf1551f87cdf8f81e955fc47ec2987804bf217d4693d66043a4d6d8cd06ba018ae3452830ff7a39bd6d2f5b4f8e8eb80038e9c3a3fd908cfd4f6375ea672f3207b9e2016b2e076f6c4a41b5f619a2724b5698df665412b966548ce5a36eeeb347152569f52865ea875750cf9f84d833f0337d4f51b43c6cef3bbbd4c481e02cccdd39b1092c91096ebffb86766f82388e7877b35ad5a8465c8c37b0f08d5a12c554a5b9085d01548c1076b250299e659c139ef8a720937c823fb30533be162de117eeec39cf1972b536562a451a30f74c8307b4ab6aa473b7a065a459960203c1ae4635c35851f41d6f7b243b355625fad8ba273fbe26f3b671f37f3eb152ec9ec0bafb5f4f151fac39f8135eff342a6eb2d8e923c0dfcd0b3ec3160fc398e1cdae1a6c66e5e62499685136680c1e9d6c7f5eb1b5b0801d78267ac008f372d980082b270905031c3f0968ce8c5f09401629d728a319caef0bfc55d170268fa891e651bb9cf4946398eac45e8e7c76eef1577246f2d4749198b0dabeb01e65472c5a46712dbab8bd943cf8cce71e6f0bb66ebb5a38dcb2c9a1afa9a8b25d4b4055ded0d2d3df0a90f6062919b40f66eda0308ddffc9b06f4793366237cfa8f90558038783e6c2700d22ebeddedd1ef132eecb07211e98eb1128b7da2375be4a56cf528924f627d2dfb01db959a3b0454b6604c08cfc21643cb3b5c1b84e9b096a8f97f017908596e40249bb59c39d7e6769e2741b4e220d15f3693bd265f4126ae55153c79ee6b85d7ac5520"}]}], "d34c15e270817811b9781922f391d70e26dd62f9e46e21cdb0d40a9f37e4b494b8427875fb115ad9c00cc1d55577779d6cedac6a5f4ae40ded31e69f20b6fd4367783f3d9cf07572796a51c82e1aa82c55b152ccff0591d7ccf4df3985c8951db52c3064f56d4e81332008828ad542b639d2df8531b0a65bcaaec566fe8f386d2e9f4588018db5f90098181d866fb784a0eeecbeae7f7e1a2a1f"}}}}}, 0xf02) openat$vcs(0xffffffffffffff9c, &(0x7f0000efb000)="2f6465762f76637300", 0x10842, 0x0) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x6, 0x7, &(0x7f000000a000)={0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f000000b000-0xdf)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 64.473844] binder: BINDER_SET_CONTEXT_MGR already set [ 64.473853] binder: 7774:7790 ioctl 40046207 0 returned -16 [ 64.476842] binder: 7774:7790 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.476852] binder: 7790 RLIMIT_NICE not set 2017/11/27 19:23:24 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x4, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[], 0x0}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000200000a, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:24 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000064f000)="2f6465762f73657175656e63657200", 0x6082, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000000)={0x3, 0xffffffff, 0x400, 0x6, 0x9f, 0x6, 0x7fffffff, 0xfaf7, 0x9, 0x7}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000002000-0x8)={0x5, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc008641d, &(0x7f0000002000-0x8)={r1, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000002000)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000002000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000003000)=0x14) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast1=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000)=0xe8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003000)={{{@in=@local={0xac, 0x14, 0x0, 0xaa}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3, 0xa694, 0x1, 0x7f, 0x4, 0x20, 0x0, 0xff, r2, r3}, {0x8, 0x4cc, 0xfffffffffffffe01, 0x4, 0x400, 0x9, 0x2, 0x41}, {0x100, 0x7, 0x5, 0x100000001}, 0x5, 0x9324, 0x400, 0x1, 0x8, 0x2}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x5594, 0x0}, 0x10, @in6=@loopback={0x0, 0x1}, 0x1a41e6cd, 0x2, 0x3, 0x8000, 0x20000, 0x4, 0x1}}, 0xe8) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000001000-0xd8)=@ioapic={0x4, 0x0, 0x989, 0x0, 0x0, [{0x22, 0x0, 0x1772, [0x0, 0x0, 0x0, 0x0], 0x400}, {0x8, 0x3, 0x3, [0x0, 0x0, 0x0, 0x0], 0x90dd}, {0x1000, 0x3, 0x2, [0x0, 0x0, 0x0, 0x0], 0x6}, {0x2, 0x7fffffff, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0], 0x1000}, {0x3ff, 0x0, 0x40, [0x0, 0x0, 0x0, 0x0], 0xf}, {0x5, 0x8, 0x2, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x3, 0xfff, 0x2, [0x0, 0x0, 0x0, 0x0], 0x8}, {0x3f, 0x8, 0x40, [0x0, 0x0, 0x0, 0x0], 0x3e0000000000000}, {0x1, 0x40, 0x7, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x4, 0x40, 0xff44, [0x0, 0x0, 0x0, 0x0], 0x3ff}, {0x1c, 0x10001, 0x101, [0x0, 0x0, 0x0, 0x0], 0x6710e5e}, {0xac, 0x5, 0x1, [0x0, 0x0, 0x0, 0x0], 0x65}, {0x0, 0x2, 0xa669, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x91f8, 0x7, 0x6, [0x0, 0x0, 0x0, 0x0], 0x7ff}, {0x6370, 0x6046, 0x19a2bfb5, [0x0, 0x0, 0x0, 0x0], 0x64}, {0xbe8, 0x9, 0x6, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x3b078000000000, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0], 0x7}, {0x1, 0x1, 0x583, [0x0, 0x0, 0x0, 0x0], 0x9}, {0xc8, 0x4, 0x1, [0x0, 0x0, 0x0, 0x0], 0x4}, {0x80, 0x4f1d, 0x0, [0x0, 0x0, 0x0, 0x0], 0x80000000}, {0xc91, 0x1f, 0x1, [0x0, 0x0, 0x0, 0x0], 0xfffffffffffff001}, {0xd43, 0x81, 0x5, [0x0, 0x0, 0x0, 0x0], 0x8000}, {0xc5d1, 0x1, 0x1f, [0x0, 0x0, 0x0, 0x0], 0x5}, {0x101, 0xaa, 0x0, [0x0, 0x0, 0x0, 0x0], 0x5}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = getpgid(0xffffffffffffffff) r6 = getpgid(0xffffffffffffffff) tgkill(r5, r6, 0x1e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) [ 64.476928] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.476948] binder: 7774:7799 transaction failed 29189/-3, size 0-0 line 2870 [ 64.482341] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.482361] binder: 7774:7790 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80287010) 2017/11/27 19:23:24 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x0, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) [ 64.504997] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.505009] binder: 7798:7800 ioctl c0306201 20008000 returned -22 [ 64.509583] binder: BINDER_SET_CONTEXT_MGR already set [ 64.509591] binder: 7776:7807 ioctl 40046207 0 returned -16 [ 64.516578] binder: 7776:7815 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[], 0x0}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:24 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000c000-0x4)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000005000)=r1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x1, 0x80000) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f000000b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f000000c000-0x10)={0x0, 0x104000, 0x0}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000a000)={0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f000000b000)="8dacdfbbe9c246b3bc89338537c3043b82a39a787fec119089c49d7233d97df5960d47a98a0b37bc4e6bfd74ff70924d537afc11a3f4220fcf1885f81fd62c89f00360a393696506051d6009957a96d1942e24a759c3f2d2cf4a844ceca5999b5170cf59b80b6dc07129604928d9c48e6abb16e83f9ab35382") mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f000000c000)={0xfffffffffffffffe, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10c, 0x0, &(0x7f0000008000)=[@register_looper={0x630b}, @clear_death={0x400c630f, 0x0, 0x1}, @request_death={0x400c630e, 0x4, 0x2}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x28, 0x30, &(0x7f000000a000)=[@ptr={0x70742a85, 0x1, &(0x7f000000a000)=0x0, 0x1, 0x0, 0x4}], &(0x7f0000007000)=[0x58, 0x78, 0x68, 0x38, 0x30, 0x40]}, 0x100000000}}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x28, 0x20, &(0x7f0000009000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000001000)=0x0, 0x1, 0x4, 0x12}], &(0x7f0000005000)=[0x48, 0x20, 0x30, 0x18]}}, @acquire_done={0x40106309, r4, 0x4}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f000000a000)=[], &(0x7f0000002000)=[0x0, 0x40, 0x38, 0x30, 0x48]}}], 0x90, 0x0, &(0x7f0000006000)="0f97ec54a21050a18238bc268b9cceff6ec289984a7112047fda4ee483061645608e5e17298eaa55d3a3eabe77ea2431402b474baed20ca243539f0f90a969b679927f4eabf588451cb45f5f058a8b89ce0d5c06bed806998fa8aa4b57cb6850a66fa025eb1637de32a4aec868d8fbce8da2bb049aed87e701b963a0c5900c52e7e6b3353038a3ce0a46cb198bf30d40"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:24 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) 2017/11/27 19:23:24 executing program 7: [ 64.516589] binder: 7815 RLIMIT_NICE not set [ 64.526045] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.526066] binder: 7776:7793 transaction failed 29189/-3, size 0-0 line 2870 [ 64.526146] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.526165] binder: 7776:7807 transaction failed 29189/-3, size 0-0 line 2870 [ 64.536284] binder: 7814:7816 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:24 executing program 3: 2017/11/27 19:23:24 executing program 7: 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) 2017/11/27 19:23:24 executing program 3: [ 64.536292] binder: 7816 RLIMIT_NICE not set [ 64.536677] binder: 7814:7816 got new transaction with bad transaction stack, transaction 461 has target 7814:0 [ 64.536689] binder: 7814:7816 transaction failed 29201/-71, size 0-0 line 2782 [ 64.549411] binder: BINDER_SET_CONTEXT_MGR already set [ 64.549419] binder: 7817:7819 ioctl 40046207 0 returned -16 2017/11/27 19:23:24 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x0, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x4, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 7: 2017/11/27 19:23:24 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) 2017/11/27 19:23:24 executing program 1: 2017/11/27 19:23:24 executing program 3: 2017/11/27 19:23:24 executing program 1: 2017/11/27 19:23:24 executing program 3: [ 64.552929] binder: 7817:7819 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.552938] binder: 7819 RLIMIT_NICE not set [ 64.560923] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.560932] binder: 7824:7826 ioctl c0306201 20008000 returned -22 [ 64.562650] binder: BINDER_SET_CONTEXT_MGR already set [ 64.562657] binder: 7827:7829 ioctl 40046207 0 returned -16 2017/11/27 19:23:24 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 64.567406] binder: 7827:7829 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.567414] binder: 7829 RLIMIT_NICE not set [ 64.592977] binder_alloc: binder_alloc_mmap_handler: 7814 20000000-20002000 already mapped failed -16 [ 64.597617] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.597625] binder: 7824:7826 ioctl c0306201 20008000 returned -22 [ 64.603450] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.603474] binder: 7827:7839 transaction failed 29189/-3, size 0-0 line 2870 [ 64.603547] binder: BINDER_SET_CONTEXT_MGR already set [ 64.603560] binder: 7814:7841 ioctl 40046207 0 returned -16 [ 64.603710] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.603729] binder: 7817:7834 transaction failed 29189/-3, size 0-0 line 2870 [ 64.605713] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.606086] binder: 7814:7832 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.606094] binder: 7832 RLIMIT_NICE not set [ 64.606129] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.606169] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.606190] binder: 7814:7835 transaction failed 29189/-3, size 0-0 line 2870 [ 64.607376] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.607394] binder: 7814:7832 transaction failed 29189/-3, size 0-0 line 2870 [ 64.642586] binder: BINDER_SET_CONTEXT_MGR already set [ 64.642595] binder: 7851:7855 ioctl 40046207 0 returned -16 [ 64.653241] binder: 7851:7855 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.653256] binder: 7855 RLIMIT_NICE not set [ 64.656697] binder: BINDER_SET_CONTEXT_MGR already set [ 64.656706] binder: 7827:7859 ioctl 40046207 0 returned -16 [ 64.668515] binder: 7827:7859 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.668524] binder: 7859 RLIMIT_NICE not set [ 64.670849] binder: BINDER_SET_CONTEXT_MGR already set [ 64.670859] binder: 7817:7854 ioctl 40046207 0 returned -16 [ 64.672871] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.672894] binder: 7827:7859 transaction failed 29189/-3, size 0-0 line 2870 [ 64.673202] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.673225] binder: 7827:7852 transaction failed 29189/-3, size 0-0 line 2870 [ 64.674309] binder: 7817:7854 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.674317] binder: 7854 RLIMIT_NICE not set [ 64.674397] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.674424] binder: 7817:7864 transaction failed 29189/-3, size 0-0 line 2870 [ 64.676974] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.676992] binder: 7817:7854 transaction failed 29189/-3, size 0-0 line 2870 [ 64.689523] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.689532] binder: 7868:7870 ioctl c0306201 20008000 returned -22 [ 64.694725] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.694751] binder: 7851:7869 transaction failed 29189/-3, size 0-0 line 2870 [ 64.709572] binder: BINDER_SET_CONTEXT_MGR already set [ 64.709581] binder: 7868:7871 ioctl 40046207 0 returned -16 [ 64.731276] binder: BINDER_SET_CONTEXT_MGR already set [ 64.731285] binder: 7873:7875 ioctl 40046207 0 returned -16 [ 64.734095] binder: BINDER_SET_CONTEXT_MGR already set [ 64.734103] binder: 7878:7882 ioctl 40046207 0 returned -16 [ 64.734437] binder: 7878:7882 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.734446] binder: 7882 RLIMIT_NICE not set [ 64.735843] binder: 7873:7875 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.735852] binder: 7875 RLIMIT_NICE not set [ 64.744912] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.744922] binder: 7879:7885 ioctl c0306201 20008000 returned -22 [ 64.759677] binder: BINDER_SET_CONTEXT_MGR already set [ 64.759686] binder: 7851:7889 ioctl 40046207 0 returned -16 [ 64.762513] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.762538] binder: 7873:7892 transaction failed 29189/-3, size 0-0 line 2870 [ 64.764006] binder: 7851:7884 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.764050] binder: 7884 RLIMIT_NICE not set [ 64.764285] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.764304] binder: 7851:7889 transaction failed 29189/-3, size 0-0 line 2870 [ 64.764425] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.764444] binder: 7878:7891 transaction failed 29189/-3, size 0-0 line 2870 [ 64.766490] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.766509] binder: 7851:7884 transaction failed 29189/-3, size 0-0 line 2870 [ 64.774655] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.781692] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.812598] binder: BINDER_SET_CONTEXT_MGR already set [ 64.812606] binder: 7899:7903 ioctl 40046207 0 returned -16 [ 64.819082] binder: 7899:7903 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.819090] binder: 7903 RLIMIT_NICE not set [ 64.847076] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.847100] binder: 7899:7917 transaction failed 29189/-3, size 0-0 line 2870 [ 64.854874] binder: BINDER_SET_CONTEXT_MGR already set [ 64.854882] binder: 7873:7912 ioctl 40046207 0 returned -16 [ 64.856423] binder: BINDER_SET_CONTEXT_MGR already set [ 64.856431] binder: 7878:7907 ioctl 40046207 0 returned -16 [ 64.859435] binder: 7878:7907 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.859443] binder: 7907 RLIMIT_NICE not set [ 64.859519] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.859539] binder: 7878:7911 transaction failed 29189/-3, size 0-0 line 2870 [ 64.860271] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.860289] binder: 7873:7909 transaction failed 29189/-3, size 0-0 line 2870 [ 64.860335] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.860393] binder: 7873:7912 transaction failed 29189/-3, size 0-0 line 2870 [ 64.865503] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.865522] binder: 7878:7907 transaction failed 29189/-3, size 0-0 line 2870 [ 64.870582] binder: 7900:7914 unknown command 24146986 [ 64.870590] binder: 7900:7914 ioctl c0306201 2000a000 returned -22 [ 64.871812] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.871819] binder: 7900:7914 ioctl c0306201 20008000 returned -22 [ 64.910636] binder: BINDER_SET_CONTEXT_MGR already set [ 64.910643] binder: 7923:7930 ioctl 40046207 0 returned -16 [ 64.911352] binder: BINDER_SET_CONTEXT_MGR already set [ 64.911361] binder: 7899:7929 ioctl 40046207 0 returned -16 [ 64.914165] binder: 7899:7920 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.914174] binder: 7920 RLIMIT_NICE not set [ 64.914313] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.914335] binder: 7899:7929 transaction failed 29189/-3, size 0-0 line 2870 [ 64.915783] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.915815] binder: 7899:7920 transaction failed 29189/-3, size 0-0 line 2870 [ 64.916068] binder: 7923:7930 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.916074] binder: 7930 RLIMIT_NICE not set [ 64.918521] binder: 7900:7921 unknown command 24146986 [ 64.918528] binder: 7900:7921 ioctl c0306201 2000a000 returned -22 [ 64.918555] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.918561] binder: 7900:7931 ioctl c0306201 20008000 returned -22 [ 64.920163] binder: BINDER_SET_CONTEXT_MGR already set [ 64.920169] binder: 7927:7934 ioctl 40046207 0 returned -16 [ 64.920298] binder: 7927:7934 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.920305] binder: 7934 RLIMIT_NICE not set [ 64.936957] binder: BINDER_SET_CONTEXT_MGR already set [ 64.936963] binder: 7936:7937 ioctl 40046207 0 returned -16 [ 64.937411] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.937431] binder: 7923:7938 transaction failed 29189/-3, size 0-0 line 2870 [ 64.939715] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.941339] binder: 7936:7937 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.941346] binder: 7937 RLIMIT_NICE not set [ 64.942351] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.942371] binder: 7927:7939 transaction failed 29189/-3, size 0-0 line 2870 [ 64.945177] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.963650] binder_alloc: 7814: binder_alloc_buf, no vma [ 64.963669] binder: 7936:7941 transaction failed 29189/-3, size 0-0 line 2870 [ 64.985118] binder: BINDER_SET_CONTEXT_MGR already set [ 64.985126] binder: 7927:7942 ioctl 40046207 0 returned -16 [ 64.985155] binder: BINDER_SET_CONTEXT_MGR already set [ 64.985161] binder: 7923:7943 ioctl 40046207 0 returned -16 [ 64.986439] binder: 7927:7942 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 64.986447] binder: 7942 RLIMIT_NICE not set [ 64.986733] binder_alloc: 7774: binder_alloc_buf, no vma [ 64.986750] binder: 7927:7944 transaction failed 29189/-3, size 0-0 line 2870 [ 64.988285] binder: 7927:7942 ioctl c0306201 2000afd0 returned -14 [ 64.989621] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.989638] binder: 7923:7940 transaction failed 29189/-3, size 0-0 line 2870 [ 64.989875] binder_alloc: 7776: binder_alloc_buf, no vma [ 64.989890] binder: 7923:7943 transaction failed 29189/-3, size 0-0 line 2870 [ 65.007588] binder: BINDER_SET_CONTEXT_MGR already set [ 65.007596] binder: 7936:7946 ioctl 40046207 0 returned -16 [ 65.010057] binder: 7936:7945 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.010064] binder: 7945 RLIMIT_NICE not set [ 65.010128] binder_alloc: 7814: binder_alloc_buf, no vma [ 65.010145] binder: 7936:7946 transaction failed 29189/-3, size 0-0 line 2870 [ 65.015205] binder: 7936:7945 ioctl c0306201 2000afd0 returned -14 [ 65.782348] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782546] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782555] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782614] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782633] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782641] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782784] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782793] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:25 executing program 6: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000001000-0x5d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) tee(r1, r1, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80287010) 2017/11/27 19:23:25 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 3: [ 65.782860] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782955] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.782964] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.843350] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.848978] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.861239] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000c84000-0xb)="635a66732e696400257000", &(0x7f00007c5000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000fee000)="6173796d6d657472696300", &(0x7f0000b7e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00001eb000-0xd6)="6031f206243aab73c49c911a43a17427c3873d0d7026724f94113379e7a891496d4e4931eceffec7c4aac091994610d9d2e2f73b746a62a6c52968e0283229ed5a92162ea4492764547ff6fa0902cdfec3d0202fdaf6813e4aa10cdd0dbfddbb1761d0d043160deac67a75957a5cdd07072ad1fba6806ea7ffb35ca206541d2f0f06871a8466ed91d245cf53f7c7c89e7bdb72d5176fba6615a1dbdd148b24393e75c43a03e51af32d74e6d4ee83bc917489a1d1f12d44719dd207ca92e2364f2197b4b6f17b03c04d9511f859d30f29fe8ae5c4bd", 0xd5, r0) keyctl$invalidate(0x15, r1) 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 5: 2017/11/27 19:23:25 executing program 7: [ 65.878582] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.884987] binder: 7951:7955 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.884997] binder: 7955 RLIMIT_NICE not set [ 65.887471] binder: BINDER_SET_CONTEXT_MGR already set [ 65.887480] binder: 7953:7960 ioctl 40046207 0 returned -16 [ 65.887885] binder: BINDER_SET_CONTEXT_MGR already set [ 65.887892] binder: 7952:7958 ioctl 40046207 0 returned -16 [ 65.888219] binder: 7952:7958 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.888227] binder: 7958 RLIMIT_NICE not set [ 65.888554] binder: BC_ATTEMPT_ACQUIRE not supported [ 65.888562] binder: 7954:7961 ioctl c0306201 20008000 returned -22 [ 65.892224] binder: 7953:7960 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.892232] binder: 7960 RLIMIT_NICE not set [ 65.918216] binder: 7955 RLIMIT_NICE not set 2017/11/27 19:23:25 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r1, 0x1, 0x0}], 0x2, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 5: 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000002000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f000000a000)=0x1c, 0x51b41e7ab9d4c849) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f000000a000)="ae7c13bdf05bfa063a250ed5b30454980024aace6ca8d53198e6087bcf369ee995f380f57eca091911cd20b5fa18f56560eb86d5b460b302044b42ae17514d6f8219b376a31e6af5afe5c47544a570f434eb9ec22ba8fcd895e8595b2d7896b95d43cd21b4cd8b62320628f969995d030dde10ab2fa14b6d5919efd5b669e8f5e1de06f3", 0x84) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:25 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 5: [ 65.918494] binder_alloc: 7774: binder_alloc_buf, no vma [ 65.918518] binder: 7952:7975 transaction failed 29189/-3, size 0-0 line 2870 [ 65.918632] binder_alloc: 7814: binder_alloc_buf, no vma [ 65.918652] binder: 7953:7977 transaction failed 29189/-3, size 0-0 line 2870 [ 65.924994] binder: BC_ATTEMPT_ACQUIRE not supported [ 65.925008] binder: 7971:7974 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 5: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 3: [ 65.927616] binder: release 7951:7955 transaction 496 out, still active [ 65.927622] binder: release 7951:7955 transaction 492 in, still active [ 65.927628] binder: undelivered TRANSACTION_COMPLETE [ 65.927810] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.928213] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:25 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 65.928226] binder: 7971:7980 ioctl 40046207 0 returned -16 [ 65.956850] binder: release 7951:7972 transaction 492 out, still active [ 65.956855] binder: undelivered TRANSACTION_COMPLETE [ 65.956863] binder: send failed reply for transaction 496, target dead [ 65.956868] binder: send failed reply for transaction 492, target dead [ 65.969105] binder: BINDER_SET_CONTEXT_MGR already set [ 65.969114] binder: 7952:7981 ioctl 40046207 0 returned -16 [ 65.975996] binder: 7952:7981 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.976079] binder: 7981 RLIMIT_NICE not set 2017/11/27 19:23:25 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 5: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000008000-0x8)="2e2f66696c653000", &(0x7f000000b000-0x1a)=@known="636f6d2e6170706c652e73797374656d2e536563757269747900", &(0x7f0000004000-0xc)="2b5b00", 0x3, 0x1) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000a000)="2e2f66696c653000", 0x210200, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f000000b000-0x8)={0x7, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$mice(&(0x7f0000008000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x800) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000006000)="7472757374656400", &(0x7f0000003000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000000b000)="776c616e30766d6e657431262e757365722d00", 0xfffffffffffffffc) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000b000)="626c61636b6c69737400", &(0x7f000000b000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000000c000)="766d6e6574316d643573756d00", r3) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f000000d000-0x8)="2e2f66696c653000", 0x10) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25a) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f000000e000-0x4)=0xf63, 0x4) readv(r2, &(0x7f0000003000)=[{&(0x7f000000b000-0x2d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2d}, {&(0x7f000000c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5a}, {&(0x7f0000007000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd3}, {&(0x7f000000c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xae}, {&(0x7f0000008000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x41}], 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f000000c000-0x8c)={0x4, 0x5, 0x3, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f000000a000)=0x0, &(0x7f000000a000)=0x4) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:25 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x5, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 7: 2017/11/27 19:23:25 executing program 7: [ 65.976312] binder_alloc: 7774: binder_alloc_buf, no vma [ 65.976333] binder: 7952:7983 transaction failed 29189/-3, size 0-0 line 2870 [ 65.976447] binder: BINDER_SET_CONTEXT_MGR already set [ 65.976454] binder: 7951:7984 ioctl 40046207 0 returned -16 [ 65.978247] binder: 7952:7981 ioctl c0306201 2000afd0 returned -14 [ 65.980990] binder_alloc: 7951: binder_alloc_buf, no vma [ 65.981032] binder: 7951:7972 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:25 executing program 5: 2017/11/27 19:23:25 executing program 3: 2017/11/27 19:23:25 executing program 1: 2017/11/27 19:23:25 executing program 7: [ 65.981076] binder_alloc: 7951: binder_alloc_buf, no vma [ 65.981092] binder: 7951:7984 transaction failed 29189/-3, size 0-0 line 2870 [ 65.981738] binder: BINDER_SET_CONTEXT_MGR already set [ 65.981744] binder: 7953:7985 ioctl 40046207 0 returned -16 [ 65.984174] binder: 7953:7982 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 65.984182] binder: 7982 RLIMIT_NICE not set 2017/11/27 19:23:25 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 65.984247] binder_alloc: 7814: binder_alloc_buf, no vma [ 65.984264] binder: 7953:7985 transaction failed 29189/-3, size 0-0 line 2870 [ 65.985691] binder: 7953:7982 ioctl c0306201 2000afd0 returned -14 [ 66.006973] binder: BINDER_SET_CONTEXT_MGR already set [ 66.006982] binder: 7986:7987 ioctl 40046207 0 returned -16 [ 66.026578] binder: 7986:7987 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.026588] binder: 7987 RLIMIT_NICE not set [ 66.042130] binder: 7993:7998 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:26 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00005c1000)="2f6465762f7663732300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000511000)="", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f000063b000)="2f6465762f76637300", 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000a2d000-0xe8)={{{@in=@loopback=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a8d000+0x2e7)=0xe8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) move_pages(0x0, 0x0, &(0x7f0000171000)=[], 0x0, &(0x7f0000755000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00008f7000-0x8)={0x100000001, 0x0}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000478000)=0x8000000000a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000fc7000-0x90)={[0x0, 0xf1, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x8, 0x0], 0x0, 0x300}) setreuid(0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000d71000)={0x0, 0x5e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x104, 0x10000, 0x0, 0x7f, 0x7, 0x1, 0x8c62, 0x0, 0x800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00008d2000)=0x2) epoll_pwait(r0, &(0x7f000086d000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x0, &(0x7f0000c3e000)={0x0}, 0x8) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x0, 0x0, 0x1, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x4, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) 2017/11/27 19:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000768000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00004a7000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000965000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x102) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000002000)={&(0x7f0000001000-0xc)=[0x0], 0x1, 0x0, 0x1000, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, "e4bffa8d29596130d16ecd5211baeea5d6e37ddc3d5e2cd1d70b16d5a2fee8bf"}}) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000fb2000-0x4)=0x200) syz_open_dev$mouse(&(0x7f0000550000)="2f6465762f696e7075742f6d6f7573652300", 0x1f, 0x0) 2017/11/27 19:23:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) listen(r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00004ff000)={0x10, 0x0, 0xfffffffffffffffe, 0x5}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000506000-0x9)="2f6465762f73672300", 0x8, 0x0) symlinkat(&(0x7f0000ae5000-0x8)="2e2f66696c653000", r3, &(0x7f0000707000-0x8)="2e2f66696c653000") r4 = socket(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$nfc_llcp(r4, &(0x7f0000eb2000-0x60)={0x27, 0x9, 0x1e, 0x2, 0x0, 0x0, "ec16ec5fc266f9e29fe9745f0e797302ce2f9c92a504fd487f599b93d4afd509f648d4f94a116455765f3d0c9df7b8c40a110a795ba5fb8e26bc20758befe9", 0x8000}, 0x60) mlock(&(0x7f0000900000/0x4000)=nil, 0x4000) iopl(0x20000000000b) socketpair$inet(0x2, 0x800, 0x400, &(0x7f000077d000-0x8)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000ee7000-0x1c)={0xa, 0x0, 0x20, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8}, 0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c10000)={0x0, 0x0, 0x0}, &(0x7f0000959000)=0xc) fcntl$setown(r5, 0x8, r6) fcntl$getownex(r5, 0x10, &(0x7f000069c000-0x8)={0x0, 0x0}) process_vm_readv(r7, &(0x7f0000cd6000)=[{&(0x7f000045b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}, {&(0x7f000088f000-0x8b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8b}, {&(0x7f0000fbe000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa2}, {&(0x7f000041e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x30}, {&(0x7f0000479000-0x16)="00000000000000000000000000000000000000000000", 0x16}, {&(0x7f0000b25000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xed}], 0x6, &(0x7f0000df9000)=[{&(0x7f0000489000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x79}], 0x1, 0x0) tkill(r7, 0x31) ptrace$poke(0x4, r7, &(0x7f0000827000)=0x0, 0x9) ptrace$setopts(0x420b, r7, 0x8, 0x20000008) request_key(&(0x7f0000c92000-0x12)="2e726571756573745f6b65795f6175746800", &(0x7f000056c000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000237000)="00", 0xfffffffffffffffc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback=0x7f000001, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x2, 0x0, 0x0}, 0x0, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0xe8) 2017/11/27 19:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000aa3000)="2f6465762f6e65742f74756e00", 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00004d6000)="2f6465762f73657175656e63657200", 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) syz_open_dev$tun(&(0x7f0000638000)="2f6465762f6e65742f74756e00", 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000d59000)={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="355d742bbbce16a558fab900a4065ac6"}) ioctl$TUNATTACHFILTER(r1, 0xc0045877, &(0x7f0000fb1000)={0x1, &(0x7f0000fb2000-0x20)=[{0x6, 0x0, 0x0, 0x0}]}) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000c40000-0x6)="6c6f676f6e00", &(0x7f00001ea000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000e65000-0xb)="7b5e6b657972696e672a00", 0xfffffffffffffffb) request_key(&(0x7f00008fb000)="7573657200", &(0x7f00009c8000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000898000-0x1)="00", 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 66.042141] binder: 7998 RLIMIT_NICE not set [ 66.042308] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.042328] binder: 7993:7998 transaction failed 29189/-3, size 0-0 line 2870 [ 66.046462] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.046472] binder: 7992:7997 ioctl c0306201 20008000 returned -22 [ 66.057526] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.057548] binder: 7986:8004 transaction failed 29189/-3, size 0-0 line 2870 [ 66.058693] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:26 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f72746300", 0x181180, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) utimensat(r1, &(0x7f000000a000)="2e2f66696c653000", &(0x7f0000007000)={{0x0, 0x7530}, {r2, r3/1000+10000}}, 0x100) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f6877726e6700", 0x200, 0x0) write$evdev(r4, &(0x7f0000001000)=[{{0x77359400, 0x0}, 0x80, 0x0, 0x6}, {{0x0, 0x0}, 0x80, 0x21, 0x2}, {{0x0, 0x2710}, 0x5a, 0x80000001, 0x40}, {{0x0, 0x0}, 0x2, 0x100, 0x6b}, {{0x0, 0x2710}, 0x9, 0x7, 0x1}, {{0x0, 0x2710}, 0x3ff, 0x40, 0x5}, {{0x0, 0x7530}, 0xa000, 0xb8, 0x6}, {{0x77359400, 0x0}, 0x4bb3, 0x2, 0x3}], 0x80) 2017/11/27 19:23:26 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 66.058701] binder: 7994:7996 ioctl 40046207 0 returned -16 [ 66.058907] binder: 7994:7996 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.058916] binder: 7996 RLIMIT_NICE not set [ 66.061531] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.080645] binder_alloc: 7774: binder_alloc_buf, no vma 2017/11/27 19:23:26 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) epoll_create1(0x80000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x1) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000008000)=0x0, &(0x7f000000b000-0x4)=0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000006000-0x30)={0x60, 0x0, &(0x7f0000006000-0x60)=[@reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x60, 0x8, &(0x7f0000005000-0x60)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000a000)=0x0, 0x1, 0x4, 0x2f}, @fda={0x66646185, 0x6, 0x3, 0x5}], &(0x7f0000001000-0x8)=[0x18]}}, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, r2, 0x0}], 0x20, 0x0, &(0x7f0000006000)="0d1500c2105aee9215a8ec2904fa958c803cdb9a161b5a4a12f5744058d32b62"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:26 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {0xffffffffffffffff, 0x1, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000f42000)={0x200000000, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x402, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) symlink(&(0x7f000027b000-0x8)="2e2f66696c653000", &(0x7f0000016000-0x8)="2e2f66696c653000") r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x1c) r1 = syz_open_dev$urandom(&(0x7f000016b000)="2f6465762f7572616e646f6d00", 0x0, 0x2000) listen(r0, 0x100000001) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x2000000010d, 0x800000000d, &(0x7f0000001000-0x1)="03", 0x1) r3 = request_key(&(0x7f0000a43000)="69645f6c656761637900", &(0x7f00004c9000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000084c000-0x3)="013a0d", 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000869000-0x8)="6b657972696e6700", &(0x7f000059f000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000fed000)=[{&(0x7f00002d8000)="02f04bafedfa21e67aaf9bb2c9c75b1437a3fdac21cb05064b19ff4f17c87d18972f044a499d3ff790f1d34e408308417b815478e680e94b370589ce6401778119d768542c9e3f8979046c1cef1277c564215f4b46370fda1b9dc5e2594ad738c080a675e3602972e97d52eafeae632c20000f59dc60b672894bc38a2dc58151ca7c9cb8cb", 0x85}, {&(0x7f0000e1e000)="", 0x0}, {&(0x7f0000580000-0x2f)="1a57789971620871ba260702ee2f2d95a5d73cd44fb39dadbf50261099406094cc8ca1e1dd5373b382d702ae8c9dd8", 0x2f}, {&(0x7f00008d9000-0x9d)="f8468f3d6b75ea9c53751bef7de87dcd7e5a5cb048dadf2c29367aa4973e28e0343762c127dfbc18463324d324e97e1082f62a1fc809c976ce1c78ab91a638c502ab3fbad7b0e54cc10fd86ecbe5e94e6662d4587c6d5d428342f13d0c834f9a667cf33c1a2aadcee1bd1e3cf8587d0ec297d5d2ad40fc45d0080a531f9a5449b0aa005658a115f12cf5899921915185a387c95c1ea582cb490f1fc6b1", 0x9d}], 0x4, r4) connect$inet(r2, &(0x7f0000772000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r5 = accept4(r0, &(0x7f0000958000)=@ethernet={0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f86000-0x4)=0x10, 0x80000) accept4$llc(r5, &(0x7f000096e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000d44000)=0x10, 0x7fe) write(r2, &(0x7f000025b000-0x1)="e5", 0x1) sendto$inet(r2, &(0x7f00008f3000-0x1)="50", 0x1, 0x40000, &(0x7f0000034000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt(r0, 0xffffffffffffffff, 0x4, &(0x7f00008f4000-0xb7)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000904000-0x4)=0xb7) openat$vcs(0xffffffffffffff9c, &(0x7f0000365000)="2f6465762f76637300", 0x2000, 0x0) sendto(r2, &(0x7f00001fd000-0x1000)="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", 0x1000, 0x1, &(0x7f000000c000)=@ethernet={0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r6 = dup2(r1, r5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000abc000-0x4)=0x0) [ 66.080669] binder: 7994:8010 transaction failed 29189/-3, size 0-0 line 2870 [ 66.087462] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.093462] binder: 7993:8009 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.093474] binder: 8009 RLIMIT_NICE not set [ 66.093548] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.093567] binder: 7993:8012 transaction failed 29189/-3, size 0-0 line 2870 [ 66.094740] binder_alloc: 7814: binder_alloc_buf, no vma 2017/11/27 19:23:26 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:26 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x1110, r0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x1, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f000000b000-0x1)="d8"}) r1 = open(&(0x7f0000008000+0x547)="2e2f66696c653000", 0x20000, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000009000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xb90, 0x7b, 0x6, 0x0, 0xfffffffffffff800, 0x0, 0xf000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) 2017/11/27 19:23:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x0, r0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) socket$inet_tcp(0x2, 0x1, 0x0) [ 66.094756] binder: 7993:8009 transaction failed 29189/-3, size 0-0 line 2870 [ 66.112148] binder: BINDER_SET_CONTEXT_MGR already set [ 66.112157] binder: 7986:8013 ioctl 40046207 0 returned -16 [ 66.115878] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.115898] binder: 7986:8011 transaction failed 29189/-3, size 0-0 line 2870 [ 66.115944] binder_alloc: 7951: binder_alloc_buf, no vma 2017/11/27 19:23:26 executing program 5: 2017/11/27 19:23:26 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x0, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:26 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000008000)="2f6465762f766373612300", 0x6, 0x400000) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000008000-0x10)={0x0, 0x9, 0x400, 0x8}, &(0x7f000000a000)=0x10) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000000b000-0x98)={r1, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x0}, &(0x7f000000b000-0x4)=0x98) r2 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:26 executing program 5: [ 66.115960] binder: 7986:8013 transaction failed 29189/-3, size 0-0 line 2870 [ 66.127432] binder: BINDER_SET_CONTEXT_MGR already set [ 66.127440] binder: 7994:8014 ioctl 40046207 0 returned -16 [ 66.135121] binder: 7994:8014 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.135131] binder: 8014 RLIMIT_NICE not set [ 66.135211] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.135232] binder: 7994:8015 transaction failed 29189/-3, size 0-0 line 2870 [ 66.136414] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.136430] binder: 7994:8014 transaction failed 29189/-3, size 0-0 line 2870 [ 66.138173] binder: BINDER_SET_CONTEXT_MGR already set [ 66.138180] binder: 8016:8017 ioctl 40046207 0 returned -16 [ 66.142576] binder: 8016:8017 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.142585] binder: 8017 RLIMIT_NICE not set [ 66.184731] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.184756] binder: 8016:8023 transaction failed 29189/-3, size 0-0 line 2870 [ 66.187502] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.189615] binder: BINDER_SET_CONTEXT_MGR already set [ 66.189623] binder: 8025:8029 ioctl 40046207 0 returned -16 [ 66.190686] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.190694] binder: 8024:8028 ioctl c0306201 20008000 returned -22 [ 66.199552] binder: 8025:8029 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.199560] binder: 8029 RLIMIT_NICE not set [ 66.213181] binder: BINDER_SET_CONTEXT_MGR already set [ 66.213189] binder: 8022:8031 ioctl 40046207 0 returned -16 [ 66.213332] binder: 8022:8031 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.213341] binder: 8031 RLIMIT_NICE not set [ 66.230078] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.230101] binder: 8025:8040 transaction failed 29189/-3, size 0-0 line 2870 [ 66.238969] binder: BINDER_SET_CONTEXT_MGR already set [ 66.238978] binder: 8016:8039 ioctl 40046207 0 returned -16 [ 66.239094] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.239117] binder: 8022:8041 transaction failed 29189/-3, size 0-0 line 2870 [ 66.241698] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.242885] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.242903] binder: 8016:8038 transaction failed 29189/-3, size 0-0 line 2870 [ 66.243139] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.243154] binder: 8016:8039 transaction failed 29189/-3, size 0-0 line 2870 [ 66.268094] binder: BINDER_SET_CONTEXT_MGR already set [ 66.268102] binder: 8043:8045 ioctl 40046207 0 returned -16 [ 66.272481] binder: 8043:8045 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.272489] binder: 8045 RLIMIT_NICE not set [ 66.284408] binder: BINDER_SET_CONTEXT_MGR already set [ 66.284416] binder: 8025:8046 ioctl 40046207 0 returned -16 [ 66.286841] binder: 8025:8042 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.286849] binder: 8042 RLIMIT_NICE not set [ 66.286918] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.286937] binder: 8025:8046 transaction failed 29189/-3, size 0-0 line 2870 [ 66.288101] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.288117] binder: 8025:8042 transaction failed 29189/-3, size 0-0 line 2870 [ 66.297095] binder: BINDER_SET_CONTEXT_MGR already set [ 66.297102] binder: 8022:8044 ioctl 40046207 0 returned -16 [ 66.297207] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.297227] binder: 8043:8048 transaction failed 29189/-3, size 0-0 line 2870 [ 66.304917] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.304938] binder: 8022:8047 transaction failed 29189/-3, size 0-0 line 2870 [ 66.304994] binder: 8022:8044 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.305005] binder: 8044 RLIMIT_NICE not set [ 66.305377] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.306154] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.306170] binder: 8022:8044 transaction failed 29189/-3, size 0-0 line 2870 [ 66.362694] binder: 8053:8061 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.362705] binder: 8061 RLIMIT_NICE not set [ 66.363648] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.363670] binder: 8053:8061 transaction failed 29189/-3, size 0-0 line 2870 [ 66.363811] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.365318] binder: BINDER_SET_CONTEXT_MGR already set [ 66.365332] binder: 8043:8060 ioctl 40046207 0 returned -16 [ 66.365782] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.365791] binder: 8058:8064 ioctl c0306201 20008000 returned -22 [ 66.385386] binder: BINDER_SET_CONTEXT_MGR already set [ 66.385395] binder: 8057:8063 ioctl 40046207 0 returned -16 [ 66.391549] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.391577] binder: 8043:8049 transaction failed 29189/-3, size 0-0 line 2870 [ 66.391668] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.391691] binder: 8043:8060 transaction failed 29189/-3, size 0-0 line 2870 [ 66.395145] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.395156] binder: 8058:8067 ioctl c0306201 20008000 returned -22 [ 66.395524] binder: 8057:8063 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.395534] binder: 8063 RLIMIT_NICE not set [ 66.424896] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.424922] binder: 8057:8077 transaction failed 29189/-3, size 0-0 line 2870 [ 66.427702] binder: BINDER_SET_CONTEXT_MGR already set [ 66.427712] binder: 8076:8078 ioctl 40046207 0 returned -16 [ 66.432910] binder: 8076:8078 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.432920] binder: 8078 RLIMIT_NICE not set [ 66.437238] binder: 8072:8075 ioctl c0306201 20005fd0 returned -14 [ 66.437309] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.437316] binder: 8072:8075 ioctl c0306201 20008000 returned -22 [ 66.437998] binder: 8053:8069 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.438026] binder: 8069 RLIMIT_NICE not set [ 66.438111] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.438133] binder: 8053:8074 transaction failed 29189/-3, size 0-0 line 2870 [ 66.443538] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.443559] binder: 8053:8069 transaction failed 29189/-3, size 0-0 line 2870 [ 66.451694] binder: 8072:8079 ioctl c0306201 20005fd0 returned -14 [ 66.472750] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.472779] binder: 8076:8084 transaction failed 29189/-3, size 0-0 line 2870 [ 66.487853] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.489769] binder: BINDER_SET_CONTEXT_MGR already set [ 66.489778] binder: 8085:8086 ioctl 40046207 0 returned -16 [ 66.490907] binder: 8085:8086 ioctl c0306201 2000a000 returned -14 [ 66.491036] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.491055] binder: 8085:8086 transaction failed 29189/-3, size 0-0 line 2870 [ 66.491330] binder: 8085:8086 ioctl c0306201 2000afd0 returned -14 [ 66.491380] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.498093] binder: BINDER_SET_CONTEXT_MGR already set [ 66.498101] binder: 8057:8089 ioctl 40046207 0 returned -16 [ 66.499867] binder: 8087:8088 ioctl c0306201 2000afd0 returned -14 [ 66.500796] binder: 8057:8083 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.500805] binder: 8083 RLIMIT_NICE not set [ 66.500878] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.500897] binder: 8057:8089 transaction failed 29189/-3, size 0-0 line 2870 [ 66.502105] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.502123] binder: 8057:8083 transaction failed 29189/-3, size 0-0 line 2870 [ 66.540644] binder: BINDER_SET_CONTEXT_MGR already set [ 66.540652] binder: 8099:8101 ioctl 40046207 0 returned -16 [ 66.546499] binder: 8099:8101 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.546511] binder: 8101 RLIMIT_NICE not set [ 66.559787] binder: BINDER_SET_CONTEXT_MGR already set [ 66.559797] binder: 8085:8097 ioctl 40046207 0 returned -16 [ 66.562601] binder: 8085:8097 ioctl c0306201 2000a000 returned -14 [ 66.562860] binder_alloc: 7774: binder_alloc_buf, no vma [ 66.562885] binder: 8085:8104 transaction failed 29189/-3, size 0-0 line 2870 [ 66.568328] binder: 8085:8097 ioctl c0306201 2000afd0 returned -14 [ 66.577237] binder: BINDER_SET_CONTEXT_MGR already set [ 66.577247] binder: 8076:8108 ioctl 40046207 0 returned -16 [ 66.577383] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.577407] binder: 8099:8110 transaction failed 29189/-3, size 0-0 line 2870 [ 66.585199] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.585208] binder: 8105:8106 ioctl c0306201 20008000 returned -22 [ 66.596688] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.596711] binder: 8076:8100 transaction failed 29189/-3, size 0-0 line 2870 [ 66.596791] binder_alloc: 7951: binder_alloc_buf, no vma [ 66.596810] binder: 8076:8084 transaction failed 29189/-3, size 0-0 line 2870 [ 66.628888] binder: BINDER_SET_CONTEXT_MGR already set [ 66.628898] binder: 8099:8118 ioctl 40046207 0 returned -16 [ 66.632155] binder: 8099:8113 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 66.632165] binder: 8113 RLIMIT_NICE not set [ 66.632457] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.632480] binder: 8099:8118 transaction failed 29189/-3, size 0-0 line 2870 [ 66.633675] binder_alloc: 7814: binder_alloc_buf, no vma [ 66.633696] binder: 8099:8113 transaction failed 29189/-3, size 0-0 line 2870 [ 67.394609] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.394958] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f3b000)={0x26, "6165616400000000000000000000", 0x0, 0x0, "73657169762865636861696e697628726663343130362867636d2861657329292929000000000000000000000000000000000000000000000000000000000000"}, 0x58) r1 = dup(r0) bind$nfc_llcp(r1, &(0x7f0000dbf000)={0x27, 0x0, 0x8, 0x5, 0x9, 0x707, "d5c7634b8d51c7350431c8920d9a338d70d639241be01c147bc372487f0f6881fa3c5451af9ca796fd86fc50166c2f60bf381b581af0c2283d8920195e732d", 0x3}, 0x60) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000fe6000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xd, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @empty=0x0, {[@end={0x0}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [{[@empty=0x0], 0x0}, {[@rand_addr=0x0], 0x0}]}, @ssrr={0x89, 0x1f, 0x0, [@remote={0xac, 0x14, 0x0, 0xbb}, @rand_addr=0x0, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast2=0xe0000002, @empty=0x0, @rand_addr=0x0]}, @lsrr={0x83, 0x13, 0x0, [@multicast2=0xe0000002, @rand_addr=0x0, @rand_addr=0x0, @multicast2=0xe0000002]}, @lsrr={0x83, 0x23, 0x0, [@multicast1=0xe0000001, @multicast1=0xe0000001, @multicast1=0xe0000001, @broadcast=0xffffffff, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, @rand_addr=0x0, @multicast2=0xe0000002]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0xd, "df21741175882f00000009"}]}]}}, ""}}}}}, 0x0) 2017/11/27 19:23:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x0, r0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) socket$inet_tcp(0x2, 0x1, 0x0) 2017/11/27 19:23:27 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f73657175656e63657200", 0xa8001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000008000)={0x401, 0x5}) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:27 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x5, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 67.401690] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.402100] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.402244] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.405917] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.405928] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.406000] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.406053] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.406091] binder: release 7814:7816 transaction 461 out, still active 2017/11/27 19:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f000093e000)=@assoc_id=0x0, 0x4) r0 = open$dir(&(0x7f0000e2b000-0x8)="2e2f66696c653000", 0x1, 0x8) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000467000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00006ba000)={0x4, 0x8001, 0x7, 0x4, 0x0}, &(0x7f0000ac1000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f000055c000)={0x5, 0xa, 0x200000000000002, 0xfff, r2}, &(0x7f0000491000)=0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000107000)={0x5e1, 0x7, 0x0}, 0x4) readlinkat(r0, &(0x7f0000982000)="2e2f66696c653000", &(0x7f0000939000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbc) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b1c000+0x326)="2f6465762f7667615f6172626974657200", 0x100ffd, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00005f3000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = accept4(r5, &(0x7f00001cd000)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000304000-0x4)=0x58, 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000b09000-0x88)={0x800, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000fcb000-0x6)={r3, 0x5}, 0x6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000a0000-0x6)={r3, 0x100000001}, &(0x7f0000df3000)=0x6) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000ef0000-0x4)=0x0, &(0x7f0000ebf000-0x4)=0x4) setsockopt$inet6_int(r5, 0x29, 0xcb, &(0x7f00004b3000)=0x0, 0x4) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00006fe000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000d47000-0xa0)={0x0, @in6={{0xa, 0x0, 0x3800000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xc5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x23, 0x800, 0x8c, 0x8, 0xdc}, &(0x7f0000dde000-0x4)=0xa0) socket$inet(0x2, 0x1, 0x2) socket$inet6(0xa, 0x200000805, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000b47000-0x8)={0x0, 0x2}, &(0x7f000092c000)=0x8) 2017/11/27 19:23:27 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006000-0xc)="2f6465762f72666b696c6c00", 0x8900, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = accept4(r1, &(0x7f0000008000)=@in={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000005000)=0x10, 0x800) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f000000b000-0x8)={r1, 0x7f}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f000000c000-0x79)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f000000e000-0x4)=0x6a, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f000000d000-0x10)=@req={0xbd, 0x7, 0x1000, 0xeb}, 0x10) [ 67.406096] binder: undelivered TRANSACTION_COMPLETE [ 67.406103] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.406144] binder: send failed reply for transaction 461, target dead [ 67.411204] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.411216] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.411310] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.411322] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.411363] binder: release 7774:7779 transaction 451 out, still active [ 67.411369] binder: undelivered TRANSACTION_COMPLETE [ 67.411376] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.411412] binder: send failed reply for transaction 451, target dead [ 67.416814] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.416826] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418650] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418661] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418733] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418743] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418805] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418874] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418885] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418952] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.418962] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419098] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419112] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419207] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419217] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419289] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419300] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419370] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419380] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419451] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419461] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419533] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419543] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419612] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419622] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419698] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419768] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419778] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.419852] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.470326] binder: BC_ATTEMPT_ACQUIRE not supported [ 67.470336] binder: 8123:8128 ioctl c0306201 20008000 returned -22 [ 67.472815] binder: 8124:8129 ioctl c0306201 2000a000 returned -14 [ 67.473405] binder: 8124:8129 ioctl c0306201 2000afd0 returned -14 [ 67.473532] binder: release 8124:8129 transaction 537 out, still active [ 67.473538] binder: undelivered TRANSACTION_COMPLETE [ 67.482172] binder: 8125:8134 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 67.482180] binder: 8134 RLIMIT_NICE not set [ 67.484972] binder: 8126:8130 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 67.484982] binder: 8130 RLIMIT_NICE not set [ 67.490087] binder: BC_ATTEMPT_ACQUIRE not supported [ 67.490096] binder: 8123:8135 ioctl c0306201 20008000 returned -22 [ 67.512230] binder: 8130 RLIMIT_NICE not set [ 67.514712] binder: 8134 RLIMIT_NICE not set [ 67.521102] binder: BINDER_SET_CONTEXT_MGR already set [ 67.521112] binder: 8124:8141 ioctl 40046207 0 returned -16 [ 67.521673] binder: release 8125:8134 transaction 543 out, still active [ 67.521681] binder: release 8125:8134 transaction 542 in, still active [ 67.521687] binder: undelivered TRANSACTION_COMPLETE [ 67.522576] binder: 8124:8141 ioctl c0306201 2000a000 returned -14 [ 67.522644] binder_alloc: 8124: binder_alloc_buf, no vma [ 67.522666] binder: 8124:8148 transaction failed 29189/-3, size 0-0 line 2870 [ 67.524006] binder: 8124:8141 ioctl c0306201 2000afd0 returned -14 [ 67.531146] binder: BC_ATTEMPT_ACQUIRE not supported [ 67.531154] binder: 8152:8155 ioctl c0306201 20008000 returned -22 [ 67.535321] binder: release 8126:8145 transaction 540 out, still active [ 67.535328] binder: undelivered TRANSACTION_COMPLETE [ 67.535344] binder: send failed reply for transaction 541 to 8126:8130 [ 67.550142] binder: send failed reply for transaction 537, target dead [ 67.550376] binder: release 8125:8151 transaction 542 out, still active [ 67.550383] binder: undelivered TRANSACTION_COMPLETE [ 67.550396] binder: send failed reply for transaction 543, target dead [ 67.550406] binder: send failed reply for transaction 542, target dead [ 67.551889] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.553636] binder: BINDER_SET_CONTEXT_MGR already set [ 67.553645] binder: 8126:8163 ioctl 40046207 0 returned -16 [ 67.556139] binder: 8126:8145 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 67.556148] binder: 8145 RLIMIT_NICE not set [ 67.556224] binder_alloc: 8126: binder_alloc_buf, no vma [ 67.556246] binder: 8126:8163 transaction failed 29189/-3, size 0-0 line 2870 [ 67.557454] binder_alloc: 8126: binder_alloc_buf, no vma [ 67.557474] binder: 8126:8145 transaction failed 29189/-3, size 0-0 line 2870 [ 67.562690] binder: BC_ATTEMPT_ACQUIRE not supported [ 67.562700] binder: 8152:8155 ioctl c0306201 20008000 returned -22 [ 67.572218] binder: release 8126:8130 transaction 540 in, still active [ 67.572225] binder: send failed reply for transaction 540, target dead [ 67.572233] binder: undelivered TRANSACTION_COMPLETE [ 67.572241] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.573731] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.573744] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.584533] binder: BINDER_SET_CONTEXT_MGR already set [ 67.584543] binder: 8125:8168 ioctl 40046207 0 returned -16 [ 67.590402] binder_alloc: 8125: binder_alloc_buf, no vma [ 67.590426] binder: 8125:8151 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:27 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000000b000-0x8)={0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r2, r3, 0x2, &(0x7f0000004000)={0x1, 0x8, 0xff, 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005000)={@common="626f6e64300000000000000000000000", @ifru_addrs={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r4 = memfd_create(&(0x7f0000001000-0x11)="6e6f64657621766d6e65743128656d3000", 0x3) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000a000)={r4, 0x2, 0x21, 0x43, &(0x7f000000a000)="fd8e2e86ab6d2b24e1935c76b91a6a10bf175558b84abf26586443f95e7b4b59e6", &(0x7f000000a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xaa, 0x1412}, 0x28) ftruncate(r0, 0x3ff) 2017/11/27 19:23:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x0, r0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) socket$inet_tcp(0x2, 0x1, 0x0) 2017/11/27 19:23:27 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x4, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000d18000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r0 = accept4(0xffffffffffffff9c, &(0x7f00004e4000-0x10)=@in={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000990000)=0x10, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000d7c000)={0xffffffffffffff9c}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000a75000)={0x6, {0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, 0x8, 0xa0dc, 0x6, 0x0, &(0x7f0000eee000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x736, 0x2, 0x10001}) r2 = add_key$keyring(&(0x7f0000a7f000-0x8)="6b657972696e6700", &(0x7f0000d45000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000284000)="5b84706800", &(0x7f000026d000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000245000)="00", r2) add_key(&(0x7f000076d000-0xb)="706b6373375f7465737400", &(0x7f00004bc000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x100f3, r3) prctl$setname(0xf, &(0x7f0000a19000-0x3)="2e2d00") 2017/11/27 19:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000d81000-0xa8)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2017/11/27 19:23:27 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x805, 0x84) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000005000)="", &(0x7f0000000000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000006000)=0xe8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000000, 0x32, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000007000)={0xa, 0x1, 0x409952e4, @loopback={0x0, 0x1}, 0x3}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0) socket$inet_sctp(0x2, 0x3, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001000-0x78)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0xac, 0x85, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000062e000-0xb)="2f6465762f766373612300", 0x1c000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000a63000-0x20)={0x6, 0x80000001, 0x8000, 0x2, 0xff, 0x8, 0x3c663f01, 0x401, 0x0}, &(0x7f0000f54000)=0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000e59000-0x8)={0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f000020d000)="2f6465762f6c6f6f702300", 0x0, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f000080c000-0xc)="2f6465762f6175746f667300", 0x2000000000, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000b9000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x0, "581639186d73539f147f5cfc51799953e6601f9842d6905e3739ee86b5bbce63cf22e55b8b3bea74641f880c3c55b57ef7b40e6cb41eab115c90cda7df11569f", "2d00c5322305ec4e77f21747c384b4aa030fa400130b000000000001000000000070d6ae9400881ebe86fe9eac500d0afa320962525c9b959848d66165c5f829", "98da380301fd2d2d415de2e13600080041000000008595be080000003c62f18f", [0x2, 0x0]}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00002c7000)={r3, 0x7}, &(0x7f000074b000)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f000068c000-0x8c)={r5, @in6={{0xa, 0x1, 0x401, @loopback={0x0, 0x1}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) sendmsg(r2, &(0x7f0000eb1000-0x38)={&(0x7f00006ac000-0x6)=@hci={0x1f, 0x1, 0xd3950c7b8a99a568}, 0x6, &(0x7f0000160000-0x60)=[{&(0x7f00000f9000)="b1107df443fca9a51b500b4e6327834c4cb11de59f3cf09b8cbd3b7fe342f66e23e1d2e4139613224e2d9f14c61143dce10ed68e900e425dd528c0464fbd44d48b4762871c689a9b869d2c8b3d762c325c59ab67d241dee923dd056dd32471275e4f0fdc384884ab915db98b1c09461ff00a74dd014e12c057a5fac02b16a62141f31b848eb7718d6f839dd9a8c31d1624", 0x91}, {&(0x7f0000626000)="64992db91285cacd36dd9baeaf04606c594b949c89c35922dfe46c47abee7bc7d0067afd1f2df21215c9", 0x2a}, {&(0x7f0000a96000-0x21)="628e73cca62a7ff362f2a17051364abec808cb81ca0470bf98bb4d6b03c53d4040", 0x21}, {&(0x7f00000cb000-0xc4)="5c67e55fae286f39837a3b1619e326202034f4e0df36acf99b2d10684f6c98ea1543957d6e8a8fd77fd9bc6202a979bcffa5dc44f96ddb22c0d3273aed54e7f4d2ac0496a91cb1726aded07d4603110704297672e4d48bf508c0e0f32bb07e5f7dff323dcc5da404e75586daec4d47adfba84afd49573fc3a932ce1dc5c08bb1a0fe56af637edc8b634618ddd32ad8f24e2a76cae6c800f95c0b70013a10992b61a4755ba136b330ffdbbeb3304f6227fcd0c2cebf294ab60886608aae64ddad28a1e517", 0xc4}, {&(0x7f00009bd000-0x50)="893543b7402cf59783d40bb32f4dd94ee100782e9c82b662bf6e4c615bbf5d8f5c0e6d64940f5f9f19898f9725ee5f704e3bcaf4e1168f30527079be3f952364a44d32ee07e07078901f21592626d6ed", 0x50}, {&(0x7f0000b99000-0x4b)="936ac359ef48ac48108068e17684825f037a173dc09effde0d30708e9d1777ec0df694e57cdf20297416e927b3aa7b9008e01b9931fc84e7364c69de8e075d5f4ad7a2e2725b2528fe2ccc", 0x4b}], 0x6, &(0x7f0000eb8000)=[{0x1010, 0x109, 0x0, "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"}, {0xc8, 0x108, 0x4, "20af893a6fe06daa26bc08abfc38a5dea2e231d5164657c62fdf0ddd490d3010c5d9ab563bf04ebd6914d7bc7a064812ee32587206ebf4321ce1cee6ddb955e0e218a50c25051777e46404c8cb6f535b3583285bb88bdecb85dbb2e60d75a8658fd2d38434793b9989ad5fae7c2e6e20e83f9b74f680412c9e463c36bc70cdc98b3777a97c3523b902e3affdafb6211cbbcf6dc7e85ca3c61056c820d8a22e169ff61ee5dbf49973290308f6fa1ecc9aa8"}, {0x1010, 0x108, 0x0, "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"}, {0x1010, 0x0, 0x3, "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"}], 0x4, 0x2004c005}, 0x40011) mmap(&(0x7f00001a8000/0x2000)=nil, 0x2000, 0x0, 0x51, r1, 0x0) clone(0x10a0100, &(0x7f0000a2c000-0x1)="51", &(0x7f0000348000)=0x0, &(0x7f0000b35000)=0x0, &(0x7f00006b6000)="f9") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 67.590523] binder_alloc: 8125: binder_alloc_buf, no vma [ 67.590545] binder: 8125:8168 transaction failed 29189/-3, size 0-0 line 2870 [ 67.608513] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.608526] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.115552] binder: BC_ATTEMPT_ACQUIRE not supported 2017/11/27 19:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0xffffffffc) rename(&(0x7f00003d2000-0x8)="2e2f66696c653000", &(0x7f0000f99000)="2e2f66696c653000") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f000014a000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) perf_event_open(&(0x7f0000ee7000+0x687)={0x0, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) timer_create(0x0, &(0x7f00009fc000)={0x2000000000000000, 0x0, 0x0, @thr={&(0x7f0000113000)="", &(0x7f000050b000-0xb6)=""}, []}, &(0x7f0000e8f000)=0x0) [ 68.123106] binder: 8183:8186 got new transaction with bad transaction stack, transaction 551 has target 8183:0 [ 68.123120] binder: 8183:8186 transaction failed 29201/-71, size 0-0 line 2782 [ 68.123186] binder: release 8183:8186 transaction 551 out, still active [ 68.123191] binder: undelivered TRANSACTION_COMPLETE [ 68.123200] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.124659] binder: 8182:8192 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x0, r0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) socket$inet_tcp(0x2, 0x1, 0x0) 2017/11/27 19:23:27 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0xc, 0x0, &(0x7f000000b000-0x10)=[@dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000152000-0x4)=0xffffffffffffffff, 0x4) [ 68.124668] binder: 8192 RLIMIT_NICE not set [ 68.129746] binder: 8184:8190 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.129755] binder: 8190 RLIMIT_NICE not set [ 68.150341] binder: 8192 RLIMIT_NICE not set [ 68.165526] binder: release 8182:8192 transaction 556 out, still active [ 68.165534] binder: release 8182:8192 transaction 555 in, still active 2017/11/27 19:23:27 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) socket$inet_tcp(0x2, 0x1, 0x0) 2017/11/27 19:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000314000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f00006c2000)="2f6465762f7663732300", 0x401, 0x100000200100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00009b6000-0xa0)={0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffff80, 0x1, 0x4, 0x6, 0x60}, 0xa0) getuid() ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000fcb000)=@add_del={0x2, &(0x7f00004e7000-0x10)=@common="69702a6772653000000000ff00000000", 0x158b}) r3 = socket$inet6(0xa, 0x80005, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001000-0x10)={0x0, 0x2, &(0x7f0000001000-0xd)=[@in={0x2, 0x1, @rand_addr=0x800000000b90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xfffffffffffffffb, @loopback={0x0, 0x1}, 0xcf0}]}, &(0x7f0000003000)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000415000-0x10)=[@generic={0x8db7, 0x0, 0x0, 0x1}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000ef5000-0x6)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000e14000-0x4)=r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00009c6000-0xc)={&(0x7f000069f000)="2e2f66696c653000", r4}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000a9e000)={r0, r4}) 2017/11/27 19:23:27 executing program 5: [ 68.165540] binder: undelivered TRANSACTION_COMPLETE [ 68.177268] binder: 8190 RLIMIT_NICE not set [ 68.188398] binder: release 8182:8200 transaction 555 out, still active [ 68.188405] binder: undelivered TRANSACTION_COMPLETE [ 68.188417] binder: send failed reply for transaction 556, target dead [ 68.188426] binder: send failed reply for transaction 555, target dead [ 68.191931] binder: BINDER_SET_CONTEXT_MGR already set [ 68.191939] binder: 8179:8196 ioctl 40046207 0 returned -16 [ 68.194304] binder: BC_ATTEMPT_ACQUIRE not supported [ 68.194314] binder: 8179:8205 ioctl c0306201 20008000 returned -22 [ 68.203852] binder: BINDER_SET_CONTEXT_MGR already set [ 68.203861] binder: 8183:8201 ioctl 40046207 0 returned -16 [ 68.205169] binder_alloc: 8183: binder_alloc_buf, no vma [ 68.205190] binder: 8183:8204 transaction failed 29189/-3, size 0-0 line 2870 [ 68.211797] binder: send failed reply for transaction 551, target dead [ 68.211907] binder: 8183:8201 transaction failed 29189/-22, size 0-0 line 2755 [ 68.217864] binder: BINDER_SET_CONTEXT_MGR already set [ 68.217872] binder: 8182:8210 ioctl 40046207 0 returned -16 [ 68.221945] binder_alloc: 8182: binder_alloc_buf, no vma [ 68.221966] binder: 8182:8200 transaction failed 29189/-3, size 0-0 line 2870 [ 68.222033] binder_alloc: 8182: binder_alloc_buf, no vma [ 68.222050] binder: 8182:8210 transaction failed 29189/-3, size 0-0 line 2870 [ 68.225817] binder: release 8184:8202 transaction 557 out, still active [ 68.225823] binder: undelivered TRANSACTION_COMPLETE [ 68.225837] binder: send failed reply for transaction 558 to 8184:8190 [ 68.242454] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.242467] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.247924] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.247943] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.273675] binder: 8215:8219 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.280372] binder: release 8184:8190 transaction 557 in, still active [ 68.280378] binder: send failed reply for transaction 557, target dead [ 68.280387] binder: undelivered TRANSACTION_COMPLETE [ 68.280395] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.286450] binder: 8184:8190 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.286459] binder: 8190 RLIMIT_NICE not set [ 68.292081] binder: 8216:8225 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.292088] binder: 8225 RLIMIT_NICE not set [ 68.303942] binder: release 8184:8190 transaction 566 out, still active [ 68.303948] binder: undelivered TRANSACTION_COMPLETE [ 68.303962] binder: release 8184:8202 transaction 565 out, still active [ 68.303967] binder: undelivered TRANSACTION_COMPLETE [ 68.304120] binder: send failed reply for transaction 565, target dead [ 68.304127] binder: send failed reply for transaction 566, target dead [ 68.316198] binder: 8215:8231 got new transaction with bad transaction stack, transaction 568 has target 8215:0 [ 68.316213] binder: 8215:8231 transaction failed 29201/-71, size 0-0 line 2782 [ 68.317484] binder: release 8215:8231 transaction 568 out, still active [ 68.317489] binder: undelivered TRANSACTION_COMPLETE [ 68.317497] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.320880] binder: 8225 RLIMIT_NICE not set [ 68.322282] binder: release 8216:8225 transaction 571 out, still active [ 68.322288] binder: release 8216:8225 transaction 570 in, still active [ 68.322292] binder: undelivered TRANSACTION_COMPLETE [ 68.347203] binder: release 8216:8234 transaction 570 out, still active [ 68.347209] binder: undelivered TRANSACTION_COMPLETE [ 68.347221] binder: send failed reply for transaction 571, target dead [ 68.347228] binder: send failed reply for transaction 570, target dead [ 68.384637] binder: BINDER_SET_CONTEXT_MGR already set [ 68.384647] binder: 8216:8236 ioctl 40046207 0 returned -16 [ 68.388347] binder: BINDER_SET_CONTEXT_MGR already set [ 68.388354] binder: 8215:8219 ioctl 40046207 0 returned -16 [ 68.388666] binder_alloc: 8216: binder_alloc_buf, no vma [ 68.388686] binder: 8216:8234 transaction failed 29189/-3, size 0-0 line 2870 [ 68.388731] binder_alloc: 8216: binder_alloc_buf, no vma [ 68.388746] binder: 8216:8236 transaction failed 29189/-3, size 0-0 line 2870 [ 68.389490] binder: 8215:8219 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.389554] binder_alloc: 8215: binder_alloc_buf, no vma [ 68.389569] binder: 8215:8235 transaction failed 29189/-3, size 0-0 line 2870 [ 68.390745] binder_alloc: 8215: binder_alloc_buf, no vma 2017/11/27 19:23:28 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)="2f6465762f7161745f6164665f63746c00", 0x2000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x1500, 0x7ff, &(0x7f0000ffd000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000da7000-0xa)="2e2f636f6e74726f6c00", 0x0) finit_module(r0, &(0x7f0000456000)="76626f786e6574302900", 0x3) link(&(0x7f0000515000-0xa)="2e2f636f6e74726f6c00", &(0x7f000032a000-0xa)="2e2f636f6e74726f6c00") eventfd2(0x3, 0x800) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fcb000-0xa)="2e2f636f6e74726f6c00", 0x898) 2017/11/27 19:23:28 executing program 5: 2017/11/27 19:23:28 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x3, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:28 executing program 6: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x4008630a, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[0x18, 0x0, 0x0]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/11/27 19:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) connect$inet(r0, &(0x7f0000d18000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000a9b000-0x44)={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1e, {0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="0a62e88e46fd2aaa0e647929c4d3bb94"}) add_key(&(0x7f000076d000-0xb)="706b6373375f7465737400", &(0x7f00004bc000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$mouse(&(0x7f0000782000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x501000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000f7d000)={0x81, 0x5, 0x5, 0x9, "2b08f7b0cebdf7820b90b95bce02a46b6cd23b5ee177dbc3e5405ca7243cde14"}) 2017/11/27 19:23:28 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:28 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ptrace(0x8, r0) 2017/11/27 19:23:28 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:28 executing program 5: r0 = syz_fuseblk_mount(&(0x7f0000e15000-0x8)="2e2f66696c653000", &(0x7f00008ab000)="2e2f66696c653000", 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000f47000-0x1000)="", 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000aaa000)=@syzn={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002000-0xb)="2f6465762f766373612300", 0xffff, 0x80000) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x3, 0x7ff, 0x5, 0x8, 0x0, 0x800, 0x10000, 0xff, 0x8, 0xffff, 0x8, 0x800}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f72746300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0xa, 0x0, [{0xbbc4feaf77015386, 0x9, 0x0, 0x8000, 0x3f, 0x5, 0xd49, [0x0, 0x0, 0x0]}, {0x8000000d, 0x5, 0x1, 0x68, 0x7ff, 0x9978, 0x64dd, [0x0, 0x0, 0x0]}, {0x40000000, 0x7fff, 0x0, 0x8, 0x6, 0x0, 0x4dbb, [0x0, 0x0, 0x0]}, {0x7, 0x100000001, 0x1, 0x0, 0x401, 0xc73, 0x8fe2, [0x0, 0x0, 0x0]}, {0x6, 0x81, 0x0, 0x1ff, 0x9, 0x65244908, 0x3, [0x0, 0x0, 0x0]}, {0x80000007, 0x80000000, 0x1, 0x9, 0x1, 0x8, 0x7fff, [0x0, 0x0, 0x0]}, {0x0, 0xaf4, 0x4, 0x80000001, 0x7, 0x5, 0x2, [0x0, 0x0, 0x0]}, {0xb, 0x1f, 0x5, 0x6, 0x5, 0x400, 0x60b, [0x0, 0x0, 0x0]}, {0x80000008, 0x6, 0x4, 0x4, 0x100000000, 0x5, 0xffffffffffffffff, [0x0, 0x0, 0x0]}, {0x6, 0x1ff, 0x1, 0x3, 0x10000, 0x8, 0x3ff, [0x0, 0x0, 0x0]}]}) [ 68.390760] binder: 8215:8219 transaction failed 29189/-3, size 0-0 line 2870 [ 68.408807] binder: send failed reply for transaction 568, target dead [ 68.409132] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.409141] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.422133] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.422142] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.753272] binder: 8179:8187 ioctl c0306201 20008000 returned -22 2017/11/27 19:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000d88000-0x4)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00001d5000)={0x0, @in6={{0xa, 0x0, 0xfffffffffffffff9, @loopback={0x0, 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x1f, 0x5, 0x400, 0x80000000}, &(0x7f000083c000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00001f9000-0x8)={r1, 0x3ff}, &(0x7f00000b4000)=0x8) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000db5000)=0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009000-0x1118)=[{0x14, 0x10, 0xfffffffffff7ffff, 0x0, 0x0, "03"}], 0x14}], 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000672000)={r2, 0xfff}, &(0x7f0000b92000)=0x8) 2017/11/27 19:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f000031f000-0x8)="6b657972696e6700", &(0x7f000069d000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = request_key(&(0x7f0000cdb000)="6269675f6b657900", &(0x7f0000b2d000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a18000)="235c272800", 0xfffffffffffffffb) r1 = syz_open_dev$mouse(&(0x7f0000759000)="2f6465762f696e7075742f6d6f7573652300", 0x6, 0x103880) fcntl$setsig(r1, 0xa, 0x9) set_robust_list(&(0x7f0000394000-0x18)={&(0x7f0000f20000/0x1000)=nil, 0x1, &(0x7f0000be9000/0x4000)=nil}, 0x18) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000bb000-0x3)=0x0) add_key$keyring(&(0x7f0000871000)="6b657972696e6700", &(0x7f0000b8c000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r0) 2017/11/27 19:23:28 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1, 0x0}) [ 68.779956] binder: BC_ATTEMPT_ACQUIRE not supported [ 68.783412] binder: 8248 RLIMIT_NICE not set [ 68.783555] binder: 8243:8252 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.783561] binder: 8252 RLIMIT_NICE not set [ 68.790252] binder: 8239:8246 BC_DEAD_BINDER_DONE 0000000000000002 not found 2017/11/27 19:23:28 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") sched_getattr(r0, &(0x7f000000c000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) 2017/11/27 19:23:28 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000004b000)="2f246367726f75706c6f00", 0x0, 0x0, &(0x7f000004b000)={0x4, 0x3, 0x0, 0xffffffff, 0x1, 0x0, 0x7ffffffff, 0xfffffffffffffffc}) symlink(&(0x7f0000feb000-0x8)="2e2f66696c653000", &(0x7f00002fb000)="2e2f66696c653000") socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f000009e000-0x8)={0x0, 0x0}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f000038f000)={"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"}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000868000-0x18)={0x0, 0x0, 0x30, 0x8007, 0x8000000000000}, &(0x7f0000200000)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000588000-0xa0)={r1, @in6={{0xa, 0x3, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x4, 0x3, 0x80000000, 0x40}, &(0x7f0000af3000+0xd2a)=0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000097c000)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000e26000)=0x79) mlockall(0x8000400002000004) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = getpid() mknod(&(0x7f00001c2000)="2e2f66696c653000", 0x1040, 0x0) execve(&(0x7f00006b9000-0x8)="2e2f66696c653000", &(0x7f0000a7c000-0x38)=[], &(0x7f0000b25000)=[&(0x7f0000517000)="70707330235b650200000070656c51232720", &(0x7f0000319000-0xe)="776c616e302a7472757374656400", &(0x7f000042d000)="2f246367726f75706c6f00", &(0x7f0000415000-0x3)="2a00", &(0x7f0000c75000)="2f246367726f75706c6f00"]) process_vm_writev(r2, &(0x7f0000e2e000-0x90)=[{&(0x7f0000803000-0x47)="", 0x0}, {&(0x7f000036b000-0xdb)="00", 0x1}], 0x2, &(0x7f0000c63000)=[{&(0x7f0000ca4000)="000000000000000000000000000000000000000000000000000000000000000000", 0x21}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f000069c000-0xa6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000069000)=0xa6) lgetxattr(&(0x7f0000c6e000-0x8)="2e2f66696c653000", &(0x7f0000b76000)=@random={"73656375726974792e00", "2f2900"}, &(0x7f0000cb0000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f000098d000)={r1, 0x9, 0x3d, "40320f2adaaafe62326095b62fa5de04b7126598f3da852f38fc98baf87840e7fc1c3c0a8cfdf44f805908afdafb8374dd814a7428a1eef468808afd21"}, 0x45) r3 = socket$inet(0x2, 0x806, 0x0) bind$inet(r3, &(0x7f0000575000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r3, &(0x7f0000d18000-0x10)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) add_key(&(0x7f000076d000-0xb)="706b6373375f7465737400", &(0x7f00004bc000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 2017/11/27 19:23:28 executing program 7: 2017/11/27 19:23:28 executing program 7: 2017/11/27 19:23:28 executing program 7: [ 68.790260] binder: 8246 RLIMIT_NICE not set [ 68.809328] binder: 8252 RLIMIT_NICE not set [ 68.811178] binder: release 8243:8252 transaction 580 out, still active [ 68.811184] binder: release 8243:8252 transaction 579 in, still active [ 68.811189] binder: undelivered TRANSACTION_COMPLETE [ 68.813535] binder: 8248 RLIMIT_NICE not set 2017/11/27 19:23:28 executing program 7: 2017/11/27 19:23:28 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}], 0x2, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 68.816620] binder: release 8245:8248 transaction 582 out, still active [ 68.816628] binder: release 8245:8248 transaction 581 in, still active [ 68.816633] binder: undelivered TRANSACTION_COMPLETE [ 68.818321] binder: 8246 RLIMIT_NICE not set [ 68.833180] binder: release 8243:8260 transaction 579 out, still active [ 68.833185] binder: undelivered TRANSACTION_COMPLETE [ 68.833195] binder: send failed reply for transaction 580, target dead [ 68.833203] binder: send failed reply for transaction 579, target dead [ 68.838201] binder: release 8245:8259 transaction 581 out, still active [ 68.838206] binder: undelivered TRANSACTION_COMPLETE [ 68.838217] binder: send failed reply for transaction 582, target dead [ 68.838225] binder: send failed reply for transaction 581, target dead [ 68.853094] binder: release 8239:8264 transaction 583 out, still active [ 68.853100] binder: undelivered TRANSACTION_COMPLETE [ 68.853116] binder: send failed reply for transaction 584 to 8239:8246 [ 68.867495] binder: BINDER_SET_CONTEXT_MGR already set [ 68.867503] binder: 8245:8259 ioctl 40046207 0 returned -16 [ 68.869074] binder: 8259 RLIMIT_NICE not set [ 68.869236] binder_alloc: 8245: binder_alloc_buf, no vma [ 68.869256] binder: 8245:8281 transaction failed 29189/-3, size 0-0 line 2870 [ 68.869304] binder: BINDER_SET_CONTEXT_MGR already set [ 68.869310] binder: 8243:8282 ioctl 40046207 0 returned -16 [ 68.870519] binder_alloc: 8245: binder_alloc_buf, no vma [ 68.870535] binder: 8245:8259 transaction failed 29189/-3, size 0-0 line 2870 [ 68.874758] binder_alloc: 8243: binder_alloc_buf, no vma [ 68.874777] binder: 8243:8260 transaction failed 29189/-3, size 0-0 line 2870 [ 68.874917] binder_alloc: 8243: binder_alloc_buf, no vma [ 68.874934] binder: 8243:8282 transaction failed 29189/-3, size 0-0 line 2870 [ 68.876620] binder: BINDER_SET_CONTEXT_MGR already set [ 68.876629] binder: 8239:8288 ioctl 40046207 0 returned -16 [ 68.879120] binder: 8239:8264 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.879127] binder: 8264 RLIMIT_NICE not set [ 68.879193] binder_alloc: 8239: binder_alloc_buf, no vma [ 68.879210] binder: 8239:8288 transaction failed 29189/-3, size 0-0 line 2870 [ 68.880396] binder_alloc: 8239: binder_alloc_buf, no vma [ 68.880412] binder: 8239:8264 transaction failed 29189/-3, size 0-0 line 2870 [ 68.898391] binder: release 8239:8246 transaction 583 in, still active [ 68.898398] binder: send failed reply for transaction 583, target dead [ 68.898406] binder: undelivered TRANSACTION_COMPLETE [ 68.898414] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.902818] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.902828] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.903233] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.903243] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.903591] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.903600] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.928423] binder: 8295:8296 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.928432] binder: 8296 RLIMIT_NICE not set [ 68.955318] binder: 8296 RLIMIT_NICE not set [ 68.978212] binder: release 8295:8297 transaction 592 out, still active [ 68.978217] binder: undelivered TRANSACTION_COMPLETE [ 68.978229] binder: send failed reply for transaction 593 to 8295:8296 [ 68.992730] binder: BINDER_SET_CONTEXT_MGR already set [ 68.992738] binder: 8295:8298 ioctl 40046207 0 returned -16 [ 68.995110] binder: 8295:8297 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 68.995117] binder: 8297 RLIMIT_NICE not set [ 68.995179] binder_alloc: 8295: binder_alloc_buf, no vma [ 68.995197] binder: 8295:8298 transaction failed 29189/-3, size 0-0 line 2870 [ 68.996364] binder_alloc: 8295: binder_alloc_buf, no vma [ 68.996380] binder: 8295:8297 transaction failed 29189/-3, size 0-0 line 2870 [ 69.008079] binder: release 8295:8296 transaction 592 in, still active [ 69.008085] binder: send failed reply for transaction 592, target dead [ 69.008092] binder: undelivered TRANSACTION_COMPLETE [ 69.008099] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.016344] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:28 executing program 6: 2017/11/27 19:23:28 executing program 7: 2017/11/27 19:23:28 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000004000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:28 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:28 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:28 executing program 3: 2017/11/27 19:23:28 executing program 5: 2017/11/27 19:23:28 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}], 0x1, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000004000)={0x0, 0x0}) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:29 executing program 5: [ 69.016351] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.288453] binder: 8244:8249 ioctl c0306201 20008000 returned -22 [ 69.311047] binder: 8300:8302 got new transaction with bad transaction stack, transaction 597 has target 8300:0 [ 69.321398] binder: 8300:8302 transaction failed 29201/-71, size 0-0 line 2782 [ 69.365672] binder: release 8300:8302 transaction 597 out, still active [ 69.372520] binder: undelivered TRANSACTION_COMPLETE [ 69.377726] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.390048] binder: 8303:8317 ioctl c0306201 2000a000 returned -14 [ 69.398988] binder: 8303:8329 ioctl c0306201 2000afd0 returned -14 [ 69.399067] binder_alloc: 8303: binder_alloc_buf, no vma 2017/11/27 19:23:29 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x60, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 7: [ 69.399087] binder: 8303:8317 transaction failed 29189/-3, size 0-0 line 2870 [ 69.409492] binder: 8305:8330 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 69.409500] binder: 8330 RLIMIT_NICE not set [ 69.409589] binder_alloc: 8305: binder_alloc_buf, no vma [ 69.409607] binder: 8305:8332 transaction failed 29189/-3, size 0-0 line 2870 [ 69.410783] binder_alloc: 8305: binder_alloc_buf, no vma [ 69.410799] binder: 8305:8330 transaction failed 29189/-3, size 0-0 line 2870 [ 69.418566] binder: BINDER_SET_CONTEXT_MGR already set [ 69.418575] binder: 8300:8302 ioctl 40046207 0 returned -16 [ 69.419875] binder_alloc: 8300: binder_alloc_buf, no vma [ 69.419893] binder: 8300:8331 transaction failed 29189/-3, size 0-0 line 2870 [ 69.425811] binder: 8300:8302 unknown command 0 [ 69.425819] binder: 8300:8302 ioctl c0306201 2000a000 returned -22 [ 69.428797] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.428806] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.430789] binder: send failed reply for transaction 597, target dead [ 69.460110] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.471686] binder: 8336 RLIMIT_NICE not set [ 69.493492] binder: 8336 RLIMIT_NICE not set [ 69.494875] binder: release 8335:8336 transaction 607 out, still active [ 69.494880] binder: release 8335:8336 transaction 606 in, still active [ 69.494885] binder: undelivered TRANSACTION_COMPLETE [ 69.516223] binder: release 8335:8337 transaction 606 out, still active [ 69.516228] binder: undelivered TRANSACTION_COMPLETE [ 69.516240] binder: send failed reply for transaction 607, target dead [ 69.516248] binder: send failed reply for transaction 606, target dead [ 69.531918] binder: BINDER_SET_CONTEXT_MGR already set [ 69.531926] binder: 8335:8337 ioctl 40046207 0 returned -16 [ 69.533209] binder: 8337 RLIMIT_NICE not set [ 69.533277] binder_alloc: 8335: binder_alloc_buf, no vma [ 69.533296] binder: 8335:8338 transaction failed 29189/-3, size 0-0 line 2870 [ 69.534465] binder_alloc: 8335: binder_alloc_buf, no vma [ 69.534481] binder: 8335:8337 transaction failed 29189/-3, size 0-0 line 2870 [ 69.563932] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:29 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x0, 0x0}) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:29 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x1, 0x0}], 0x2, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000004000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 7: [ 69.563942] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.622112] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.645913] binder: 8348:8351 ioctl c0306201 2000a000 returned -14 [ 69.653055] binder: 8346:8350 got new transaction with bad transaction stack, transaction 612 has target 8346:0 [ 69.653068] binder: 8346:8350 transaction failed 29201/-71, size 0-0 line 2782 [ 69.653133] binder: release 8346:8350 transaction 612 out, still active [ 69.653137] binder: undelivered TRANSACTION_COMPLETE [ 69.653146] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.666388] binder: 8341:8343 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 69.666396] binder: 8343 RLIMIT_NICE not set [ 69.683235] binder: 8348:8361 ioctl c0306201 2000afd0 returned -14 [ 69.688414] binder: 8343 RLIMIT_NICE not set [ 69.690138] binder: release 8348:8361 transaction 615 out, still active [ 69.690143] binder: undelivered TRANSACTION_COMPLETE [ 69.697603] binder: BINDER_SET_CONTEXT_MGR already set [ 69.697611] binder: 8346:8362 ioctl 40046207 0 returned -16 [ 69.698918] binder_alloc: 8346: binder_alloc_buf, no vma [ 69.698937] binder: 8346:8364 transaction failed 29189/-3, size 0-0 line 2870 [ 69.700107] binder_alloc: 8346: binder_alloc_buf, no vma [ 69.700124] binder: 8346:8362 transaction failed 29189/-3, size 0-0 line 2870 [ 69.711162] binder: release 8341:8363 transaction 616 out, still active [ 69.711167] binder: undelivered TRANSACTION_COMPLETE [ 69.711181] binder: send failed reply for transaction 617 to 8341:8343 [ 69.725969] binder: send failed reply for transaction 612, target dead [ 69.728292] binder: BINDER_SET_CONTEXT_MGR already set [ 69.728299] binder: 8341:8367 ioctl 40046207 0 returned -16 [ 69.733558] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.733566] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.733648] binder: 8341:8367 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 69.733656] binder: 8367 RLIMIT_NICE not set [ 69.733751] binder: BINDER_SET_CONTEXT_MGR already set [ 69.733765] binder: 8348:8368 ioctl 40046207 0 returned -16 [ 69.734148] binder_alloc: 8341: binder_alloc_buf, no vma [ 69.734169] binder: 8341:8369 transaction failed 29189/-3, size 0-0 line 2870 [ 69.735369] binder_alloc: 8341: binder_alloc_buf, no vma [ 69.735385] binder: 8341:8363 transaction failed 29189/-3, size 0-0 line 2870 [ 69.736336] binder: 8348:8368 ioctl c0306201 2000a000 returned -14 [ 69.737716] binder_alloc: 8348: binder_alloc_buf, no vma [ 69.737733] binder: 8348:8366 transaction failed 29189/-3, size 0-0 line 2870 [ 69.737762] binder: 8348:8368 ioctl c0306201 2000afd0 returned -14 [ 69.747308] binder: release 8341:8343 transaction 616 in, still active [ 69.747314] binder: send failed reply for transaction 616, target dead [ 69.747321] binder: undelivered TRANSACTION_COMPLETE 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() userfaultfd(0x0) ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:29 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002000)="00000000f000010075656e6365723200") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001000-0x2)="9b1c", &(0x7f0000004000-0x4)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f0000000000)="3c") ustat(0x0, &(0x7f00008c0000-0x6)={0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$mice(&(0x7f0000002000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x6020c0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000cc4000)={"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"}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x4000000000c12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0xff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffff9c, 0x200600) r3 = openat(0xffffffffffffffff, &(0x7f0000829000-0x8)="2e2f66696c653000", 0x100, 0x92) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b3b, 0x5) symlink(&(0x7f0000979000)="2e2f66696c653000", &(0x7f0000fcf000)="2e2f66696c653000") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000157000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42, 0x60000, 0x5, 0xc9b7, 0x8001, 0xff, 0x13bd5253, 0x0, 0x4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000fc5000-0x4)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000fbe000-0x4)=r4) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x200000000000d000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000cc4000-0x1)="f5") clock_gettime(0x4, &(0x7f00002ec000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000aa5000)={0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f000005b000-0x1b0)=[{0x400000081, 0x0, 0x0, 0x4, @time={r5, r6+30000000}, {0x0, 0x0}, {0x0, 0x0}, @raw8={"b1cb87152790e915a4ab446e"}}], 0x1c) restart_syscall() socket$bt_rfcomm(0x1f, 0x3, 0x3) utimensat(r1, &(0x7f00006a3000-0x8)="2e2f66696c653000", &(0x7f0000adb000)={{0x0, 0x0}, {0x0, 0x2710}}, 0x100) 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x30, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 6: [ 69.747327] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.752217] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.752230] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.930281] binder: send failed reply for transaction 615, target dead [ 69.939432] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.950873] binder: 8370:8372 got new transaction with bad transaction stack, transaction 624 has target 8370:0 [ 69.961169] binder: 8370:8372 transaction failed 29201/-71, size 0-0 line 2782 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 5: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 3: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace(0x0, r0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") [ 69.969775] binder: 8379 RLIMIT_NICE not set [ 69.981824] binder: 8378:8384 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 69.981835] binder: 8384 RLIMIT_NICE not set [ 69.998323] binder: release 8377:8379 transaction 629 out, still active [ 69.998332] binder: send failed reply for transaction 628 to 8377:8392 2017/11/27 19:23:29 executing program 7: 2017/11/27 19:23:29 executing program 6: 2017/11/27 19:23:29 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 69.998343] binder: undelivered TRANSACTION_COMPLETE [ 70.012367] binder: 8384 RLIMIT_NICE not set [ 70.029081] binder: undelivered TRANSACTION_COMPLETE [ 70.029094] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.035598] binder: release 8378:8399 transaction 630 out, still active [ 70.035603] binder: undelivered TRANSACTION_COMPLETE [ 70.035617] binder: send failed reply for transaction 631 to 8378:8384 [ 70.052127] binder: BINDER_SET_CONTEXT_MGR already set [ 70.052135] binder: 8370:8405 ioctl 40046207 0 returned -16 [ 70.056628] binder: BINDER_SET_CONTEXT_MGR already set [ 70.056635] binder: 8377:8392 ioctl 40046207 0 returned -16 [ 70.057894] binder: 8392 RLIMIT_NICE not set [ 70.057962] binder_alloc: 8377: binder_alloc_buf, no vma [ 70.057980] binder: 8377:8408 transaction failed 29189/-3, size 0-0 line 2870 [ 70.058636] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058642] binder: 8378:8409 ioctl 40046207 0 returned -16 [ 70.062132] binder_alloc: 8377: binder_alloc_buf, no vma [ 70.062150] binder: 8377:8392 transaction failed 29189/-3, size 0-0 line 2870 [ 70.065081] binder_alloc: 8370: binder_alloc_buf, no vma [ 70.065101] binder: 8370:8401 transaction failed 29189/-3, size 0-0 line 2870 [ 70.065161] binder_alloc: 8370: binder_alloc_buf, no vma [ 70.065179] binder: 8370:8405 transaction failed 29189/-3, size 0-0 line 2870 [ 70.066628] binder: 8378:8409 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.066636] binder: 8409 RLIMIT_NICE not set [ 70.068561] binder_alloc: 8378: binder_alloc_buf, no vma [ 70.068582] binder: 8378:8412 transaction failed 29189/-3, size 0-0 line 2870 [ 70.075339] binder_alloc: 8378: binder_alloc_buf, no vma [ 70.075356] binder: 8378:8399 transaction failed 29189/-3, size 0-0 line 2870 [ 70.085427] binder: send failed reply for transaction 629, target dead [ 70.089732] binder: release 8378:8384 transaction 630 in, still active [ 70.089737] binder: send failed reply for transaction 630, target dead [ 70.089744] binder: undelivered TRANSACTION_COMPLETE [ 70.089750] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.104921] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.104932] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.104985] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.104999] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.105520] binder: 8414 RLIMIT_NICE not set [ 70.129400] binder: 8414 RLIMIT_NICE not set [ 70.132645] binder: release 8413:8414 transaction 640 out, still active [ 70.132651] binder: release 8413:8414 transaction 639 in, still active [ 70.132655] binder: undelivered TRANSACTION_COMPLETE [ 70.154160] binder: release 8413:8415 transaction 639 out, still active [ 70.154165] binder: undelivered TRANSACTION_COMPLETE [ 70.154175] binder: send failed reply for transaction 640, target dead [ 70.154183] binder: send failed reply for transaction 639, target dead [ 70.169753] binder: BINDER_SET_CONTEXT_MGR already set [ 70.169760] binder: 8413:8415 ioctl 40046207 0 returned -16 [ 70.171042] binder: 8415 RLIMIT_NICE not set [ 70.171109] binder_alloc: 8413: binder_alloc_buf, no vma 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0xc, 0x0, &(0x7f000000b000-0x10)=[@dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x30, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.171128] binder: 8413:8416 transaction failed 29189/-3, size 0-0 line 2870 [ 70.172295] binder_alloc: 8413: binder_alloc_buf, no vma [ 70.172310] binder: 8413:8415 transaction failed 29189/-3, size 0-0 line 2870 [ 70.202807] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.202817] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.383294] binder: release 8370:8372 transaction 624 out, still active [ 70.390254] binder: undelivered TRANSACTION_COMPLETE 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 6: [ 70.407210] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.425233] binder: 8428 RLIMIT_NICE not set [ 70.426691] binder: 8421:8425 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.426715] binder: 8423:8426 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.426721] binder: 8426 RLIMIT_NICE not set [ 70.451378] binder: 8421:8440 got new transaction with bad transaction stack, transaction 646 has target 8421:0 [ 70.451390] binder: 8421:8440 transaction failed 29201/-71, size 0-0 line 2782 [ 70.451726] binder: release 8424:8428 transaction 649 out, still active [ 70.451734] binder: send failed reply for transaction 647 to 8424:8439 [ 70.451743] binder: undelivered TRANSACTION_COMPLETE [ 70.452536] binder: release 8421:8440 transaction 646 out, still active 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 1: ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x3c, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: [ 70.452540] binder: undelivered TRANSACTION_COMPLETE [ 70.452548] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.455617] binder: 8426 RLIMIT_NICE not set [ 70.473210] binder: undelivered TRANSACTION_COMPLETE [ 70.473221] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.488762] binder: BINDER_SET_CONTEXT_MGR already set [ 70.488769] binder: 8424:8439 ioctl 40046207 0 returned -16 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: [ 70.490047] binder: 8439 RLIMIT_NICE not set [ 70.490110] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.490128] binder: 8424:8443 transaction failed 29189/-3, size 0-0 line 2870 [ 70.491298] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.491314] binder: 8424:8439 transaction failed 29189/-3, size 0-0 line 2870 [ 70.494145] binder: release 8423:8441 transaction 650 out, still active 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 1: ptrace(0x0, 0x0) clone(0x0, &(0x7f000000c000-0x8f)="8491910bb7c08b15a688e98dabc59c94fd9c941dbc19df6b88b7f61518ca34c4a8eb06ba23c5d1a8cd0ca974bc375d61d09037e0b344f6fa6d84ee7ff3b14f7db2dc868a349ffe81c94dd7804fb68dbfa6c5d64b9eecb4677c5b9d084ff352252a55b3969cd99ec5518a9094fc93fe2d3457e7e9f256f61153a4785dba9c069103bccab0c1564139729d43c774f3cf", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.494150] binder: undelivered TRANSACTION_COMPLETE [ 70.494162] binder: send failed reply for transaction 651 to 8423:8426 [ 70.503116] binder: BINDER_SET_CONTEXT_MGR already set [ 70.503124] binder: 8421:8444 ioctl 40046207 0 returned -16 [ 70.505428] binder: 8421:8444 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.506626] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.506643] binder: 8421:8444 transaction failed 29189/-3, size 0-0 line 2870 [ 70.506712] binder_alloc: 8421: binder_alloc_buf, no vma 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x42, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f01316"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 6: [ 70.506727] binder: 8421:8442 transaction failed 29189/-3, size 0-0 line 2870 [ 70.509720] binder: BINDER_SET_CONTEXT_MGR already set [ 70.509727] binder: 8423:8445 ioctl 40046207 0 returned -16 [ 70.512110] binder: 8423:8441 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.512117] binder: 8441 RLIMIT_NICE not set [ 70.512177] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.512194] binder: 8423:8445 transaction failed 29189/-3, size 0-0 line 2870 [ 70.513361] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.513377] binder: 8423:8441 transaction failed 29189/-3, size 0-0 line 2870 [ 70.571334] binder: BINDER_SET_CONTEXT_MGR already set [ 70.571344] binder: 8452:8453 ioctl 40046207 0 returned -16 [ 70.572083] binder: 8453 RLIMIT_NICE not set 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x0, 0x0, &(0x7f0000004000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 1: ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="a60bd858852db3b3a6342a5710a68b503d163a8ea0cc75c38570425da9d18a7990f4f237bedfbf5f09e242469e042cddefb9edc9c6da76cf4e8fa81cc0b2de3cb9772ab0da10c0d476a94eeb5393f3") 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.574411] binder: BINDER_SET_CONTEXT_MGR already set [ 70.574421] binder: 8454:8459 ioctl 40046207 0 returned -16 [ 70.574543] binder: 8459 RLIMIT_NICE not set [ 70.574771] binder: BINDER_SET_CONTEXT_MGR already set [ 70.574778] binder: 8455:8460 ioctl 40046207 0 returned -16 [ 70.576246] binder: 8455:8460 ioctl c0306201 2000a000 returned -14 [ 70.576357] binder_alloc: 8423: binder_alloc_buf, no vma 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x45, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 1: ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: [ 70.576378] binder: 8455:8460 transaction failed 29189/-3, size 0-0 line 2870 [ 70.578887] binder: 8455:8460 ioctl c0306201 2000afd0 returned -14 [ 70.593463] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.593484] binder: 8452:8467 transaction failed 29189/-3, size 0-0 line 2870 [ 70.595917] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x60, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0xc, 0x0, &(0x7f000000b000-0x10)=[@dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.599173] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.599208] binder: 8454:8468 transaction failed 29189/-3, size 0-0 line 2870 [ 70.601604] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.615732] binder: BINDER_SET_CONTEXT_MGR already set [ 70.615740] binder: 8455:8470 ioctl 40046207 0 returned -16 [ 70.618468] binder: 8455:8469 ioctl c0306201 2000a000 returned -14 [ 70.618567] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.618599] binder: 8455:8470 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x47, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 3: [ 70.619922] binder: 8455:8469 ioctl c0306201 2000afd0 returned -14 [ 70.638140] binder: BINDER_SET_CONTEXT_MGR already set [ 70.638148] binder: 8452:8473 ioctl 40046207 0 returned -16 [ 70.641774] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.641792] binder: 8452:8471 transaction failed 29189/-3, size 0-0 line 2870 [ 70.641835] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.641850] binder: 8452:8473 transaction failed 29189/-3, size 0-0 line 2870 [ 70.648876] binder: BINDER_SET_CONTEXT_MGR already set [ 70.648883] binder: 8454:8472 ioctl 40046207 0 returned -16 [ 70.650119] binder: 8472 RLIMIT_NICE not set [ 70.650183] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.650199] binder: 8454:8474 transaction failed 29189/-3, size 0-0 line 2870 [ 70.651366] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.651382] binder: 8454:8472 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x90, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.700542] binder: BINDER_SET_CONTEXT_MGR already set [ 70.700552] binder: 8481:8483 ioctl 40046207 0 returned -16 [ 70.700986] binder: 8481:8483 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 70.700995] binder: 8483 RLIMIT_NICE not set [ 70.701305] binder: BINDER_SET_CONTEXT_MGR already set [ 70.701312] binder: 8480:8484 ioctl 40046207 0 returned -16 [ 70.706429] binder: 8480:8484 ioctl c0306201 2000a000 returned -14 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 5: [ 70.706524] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.706544] binder: 8480:8484 transaction failed 29189/-3, size 0-0 line 2870 [ 70.706965] binder: 8480:8484 ioctl c0306201 2000afd0 returned -14 [ 70.714684] binder: BINDER_SET_CONTEXT_MGR already set [ 70.714692] binder: 8488:8491 ioctl 40046207 0 returned -16 [ 70.714835] binder: 8491 RLIMIT_NICE not set 2017/11/27 19:23:30 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xa8, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f2"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 6: 2017/11/27 19:23:30 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.722694] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.722716] binder: 8481:8496 transaction failed 29189/-3, size 0-0 line 2870 [ 70.725057] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.736373] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.736396] binder: 8488:8498 transaction failed 29189/-3, size 0-0 line 2870 [ 70.738788] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.757153] binder: BINDER_SET_CONTEXT_MGR already set [ 70.757163] binder: 8480:8499 ioctl 40046207 0 returned -16 2017/11/27 19:23:30 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 3: 2017/11/27 19:23:30 executing program 7: 2017/11/27 19:23:30 executing program 6: [ 70.762985] binder: 8480:8497 ioctl c0306201 2000a000 returned -14 [ 70.763092] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.763111] binder: 8480:8499 transaction failed 29189/-3, size 0-0 line 2870 [ 70.763608] binder: BINDER_SET_CONTEXT_MGR already set [ 70.763614] binder: 8481:8501 ioctl 40046207 0 returned -16 [ 70.764431] binder: 8480:8497 ioctl c0306201 2000afd0 returned -14 [ 70.768297] binder: 8481:8501 BC_DEAD_BINDER_DONE 0000000000000000 not found 2017/11/27 19:23:30 executing program 1: 2017/11/27 19:23:30 executing program 5: 2017/11/27 19:23:30 executing program 7: [ 70.768305] binder: 8501 RLIMIT_NICE not set [ 70.769592] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.769609] binder: 8481:8501 transaction failed 29189/-3, size 0-0 line 2870 [ 70.769663] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.769679] binder: 8481:8500 transaction failed 29189/-3, size 0-0 line 2870 [ 70.800112] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xb4, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x0, 0x0, &(0x7f0000004000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.800121] binder: 8488:8502 ioctl 40046207 0 returned -16 [ 70.801985] binder: 8502 RLIMIT_NICE not set [ 70.802747] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.802765] binder: 8488:8503 transaction failed 29189/-3, size 0-0 line 2870 [ 70.803935] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.803951] binder: 8488:8502 transaction failed 29189/-3, size 0-0 line 2870 [ 70.809250] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 3: [ 70.809258] binder: 8509:8512 ioctl 40046207 0 returned -16 [ 70.809781] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.809799] binder: 8509:8512 transaction failed 29189/-3, size 0-0 line 2870 [ 70.812890] binder: BINDER_SET_CONTEXT_MGR already set [ 70.812895] binder: 8510:8513 ioctl 40046207 0 returned -16 [ 70.817831] binder: 8510:8513 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.817975] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.817992] binder: 8510:8513 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xba, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x60, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.818134] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.855648] binder: BINDER_SET_CONTEXT_MGR already set [ 70.855656] binder: 8520:8523 ioctl 40046207 0 returned -16 [ 70.855786] binder: 8523 RLIMIT_NICE not set [ 70.866893] binder: BINDER_SET_CONTEXT_MGR already set [ 70.866901] binder: 8509:8529 ioctl 40046207 0 returned -16 [ 70.869576] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.869596] binder: 8509:8529 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x0, 0x0, &(0x7f000000a000-0x7c)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: [ 70.870772] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.870789] binder: 8509:8521 transaction failed 29189/-3, size 0-0 line 2870 [ 70.877967] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.877987] binder: 8520:8532 transaction failed 29189/-3, size 0-0 line 2870 [ 70.880361] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.884029] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.884047] binder: 8510:8530 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: [ 70.887544] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.887567] binder: 8510:8524 transaction failed 29189/-3, size 0-0 line 2870 [ 70.930060] binder: BINDER_SET_CONTEXT_MGR already set [ 70.930069] binder: 8540:8542 ioctl 40046207 0 returned -16 [ 70.930454] binder: 8540:8542 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.930464] binder: 8542 RLIMIT_NICE not set 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xbd, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a64024"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0x90, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 70.931989] binder: BINDER_SET_CONTEXT_MGR already set [ 70.931997] binder: 8520:8533 ioctl 40046207 0 returned -16 [ 70.932608] binder: BINDER_SET_CONTEXT_MGR already set [ 70.932615] binder: 8539:8543 ioctl 40046207 0 returned -16 [ 70.932813] binder: 8539:8543 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 70.933310] binder: 8533 RLIMIT_NICE not set 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 6: [ 70.933451] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.933470] binder: 8520:8541 transaction failed 29189/-3, size 0-0 line 2870 [ 70.934641] binder_alloc: 8424: binder_alloc_buf, no vma [ 70.934657] binder: 8520:8533 transaction failed 29189/-3, size 0-0 line 2870 [ 70.952391] binder_alloc: 8421: binder_alloc_buf, no vma [ 70.952412] binder: 8540:8544 transaction failed 29189/-3, size 0-0 line 2870 [ 70.954374] binder_alloc: 8423: binder_alloc_buf, no vma [ 70.954395] binder: 8539:8545 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xbf, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xa8, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f2"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 7: [ 70.954775] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.985328] binder: BINDER_SET_CONTEXT_MGR already set [ 70.985336] binder: 8551:8552 ioctl 40046207 0 returned -16 [ 70.985446] binder: 8552 RLIMIT_NICE not set [ 71.007836] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.007859] binder: 8551:8561 transaction failed 29189/-3, size 0-0 line 2870 [ 71.008753] binder: 8540:8558 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.008761] binder: 8558 RLIMIT_NICE not set [ 71.013381] binder: BINDER_SET_CONTEXT_MGR already set [ 71.013388] binder: 8539:8560 ioctl 40046207 0 returned -16 [ 71.013561] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.013580] binder: 8540:8559 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: [ 71.013640] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.013656] binder: 8540:8558 transaction failed 29189/-3, size 0-0 line 2870 [ 71.014919] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.015804] binder: 8539:8557 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.015874] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.015891] binder: 8539:8560 transaction failed 29189/-3, size 0-0 line 2870 [ 71.015990] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.017082] binder_alloc: 8423: binder_alloc_buf, no vma 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xb4, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: [ 71.017098] binder: 8539:8557 transaction failed 29189/-3, size 0-0 line 2870 [ 71.053859] binder: BINDER_SET_CONTEXT_MGR already set [ 71.053876] binder: 8569:8570 ioctl 40046207 0 returned -16 [ 71.054239] binder: 8570 RLIMIT_NICE not set [ 71.063450] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: [ 71.063458] binder: 8551:8568 ioctl 40046207 0 returned -16 [ 71.063868] binder: BINDER_SET_CONTEXT_MGR already set [ 71.063875] binder: 8567:8571 ioctl 40046207 0 returned -16 [ 71.064098] binder: 8567:8571 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.064106] binder: 8571 RLIMIT_NICE not set [ 71.065388] binder: 8568 RLIMIT_NICE not set [ 71.065456] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.065475] binder: 8551:8572 transaction failed 29189/-3, size 0-0 line 2870 [ 71.066685] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.066701] binder: 8551:8568 transaction failed 29189/-3, size 0-0 line 2870 [ 71.085550] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.085571] binder: 8569:8573 transaction failed 29189/-3, size 0-0 line 2870 [ 71.086895] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.086914] binder: 8567:8574 transaction failed 29189/-3, size 0-0 line 2870 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xba, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x3, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 6: [ 71.092171] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.128859] binder: BINDER_SET_CONTEXT_MGR already set [ 71.128867] binder: 8580:8585 ioctl 40046207 0 returned -16 [ 71.129046] binder: 8585 RLIMIT_NICE not set [ 71.137348] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.137370] binder: 8569:8587 transaction failed 29189/-3, size 0-0 line 2870 [ 71.143794] binder: 8569:8584 unknown command 0 [ 71.143804] binder: 8569:8584 ioctl c0306201 2000a000 returned -22 [ 71.144997] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.153137] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.153157] binder: 8567:8586 transaction failed 29189/-3, size 0-0 line 2870 [ 71.153251] binder_alloc: 8421: binder_alloc_buf, no vma 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 3: 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 1: 2017/11/27 19:23:31 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xbd, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a64024"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{0xffffffffffffffff, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 71.153267] binder: 8567:8589 transaction failed 29189/-3, size 0-0 line 2870 [ 71.153337] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.153355] binder: 8580:8591 transaction failed 29189/-3, size 0-0 line 2870 [ 71.154405] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.154574] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.156511] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.194251] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:31 executing program 6: 2017/11/27 19:23:31 executing program 7: 2017/11/27 19:23:31 executing program 5: 2017/11/27 19:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000aa3000)="2f6465762f6e65742f74756e00", 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004d6000)="2f6465762f73657175656e63657200", 0x40, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000896000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) r3 = syz_open_dev$tun(&(0x7f0000638000)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000ff04fffb7d0106bc5c", @ifru_names=@generic="df45650b2b8f222d911f6f8a77d710ec"}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000d59000)={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, {0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="355d742bbbce16a558fab900a4065ac6"}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000fb1000)={0x1, &(0x7f0000fb2000-0x20)=[{0x6, 0x0, 0x0, 0x0}]}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000061000-0x9)="2f6465762f72746300", 0x101000, 0x0) io_submit(0x0, 0x6, &(0x7f0000c74000-0x30)=[&(0x7f00002bd000-0x40)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000eb3000)="65dfe6e1ceae0e42c18c20250208bce57fdae69965e371b07c913e6392b6dc23ec660ef174e1a9162c7383d368446d417bd5db0802ddccd39fb9aba003e90d8b82d2babee59a827f602e61ebc3b62234bedc011db96996b3e021", 0x5a, 0x6, 0x0, 0x0, r5}, &(0x7f00004a6000-0x40)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, r0, &(0x7f00006ac000-0xeb)="39c1fb33d0d84e07223e75dfffddf06d618e35efd74d08d301e6a0cbc776ea35a524596c01453e6d3f1ea6cf8ab081fded8382ade7bb9a72929e6dfda6d57a86a0870a2ec5a61d0e0b8910c030e78ad1d254715059f558e5a3841133edc4014b2b04bf6c46f8ea6c4aa3ccddff7b7cdfb2c54b8219917f97138cb0a45a3595b80ade17d622a4e8960c1d5da1e4333fce55176635bcf840266c149c4693df050dfffce455455b73cc5ee6334e127bcaa13ff600439f9a69852f1897cadfb2df93dca05893a40d6c8751100fc952394fd80a85374a019446564c8dc98f97b78239e1da35dfb5b513d83e146e", 0xeb, 0x9, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00004b5000-0x40)={0x0, 0x0, 0x0, 0x7, 0xfff, r0, &(0x7f00000a1000-0x99)="0750b7c603933fb19582b9a06aa856bcc810df6e8b80d48a55b92031234b5aa2c52f51c88725817c4ee81a8e8e264af6580f411557a7743e2db9242d7a76147c9830b6df928386e4f37e28b4194920a4e9f96184f6358d09f1fec7c8b8f3c071fb6d94b067d8c34d43a678dcaeab6c706e495c706e33cf916e38ce4afe9396b53f0372c802a318e53992e847634ba8e2698cec1a2431765222", 0x99, 0x2, 0x0, 0x1, r5}, &(0x7f0000daa000)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000886000)="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", 0x1000, 0x800, 0x0, 0x0, r5}, &(0x7f0000ece000)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f000021b000)="7c917fc8587a2b63918e64351825606c941ff68a3cd28287b04abf565a501ac6a87b964488327808b5c4ef874cc2345ec23c45", 0x33, 0x80, 0x0, 0x0, r5}, &(0x7f0000242000)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000d5b000-0x26)="93710a1ae3a74f18536f71573e65cb09f2a61d2f68b955b9fb61dca06d8a8f671c788663e51f", 0x26, 0x1, 0x0, 0x0, r5}]) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e7, 0xea, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x9, 0x3f1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) getpid() unshare(0x1) r7 = request_key(&(0x7f0000c40000-0x6)="6c6f676f6e00", &(0x7f00001ea000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000e65000-0xb)="7b5e6b657972696e672a00", 0xfffffffffffffffb) request_key(&(0x7f00008fb000)="7573657200", &(0x7f00009c8000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000898000-0x1)="00", 0xfffffffffffffffe) r8 = request_key(&(0x7f000083a000)="69645f000000010000000000", &(0x7f0000df8000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000020f000)="00", r7) keyctl$invalidate(0x15, r8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000e3a000-0xa)="0879856b616c6c657200", &(0x7f0000dab000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000108000-0x1)="78", 0x1, 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f00004ed000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x200000000400, 0x8440) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x2e, &(0x7f0000f45000-0x4c)="", &(0x7f0000245000)=0x0) socketpair(0x5, 0x800, 0x800, &(0x7f0000ad3000-0x8)={0x0, 0x0}) 2017/11/27 19:23:31 executing program 7: getresgid(&(0x7f0000006000)=0x0, &(0x7f000000a000-0x4)=0x0, &(0x7f000000a000-0x4)=0x0) get_mempolicy(&(0x7f0000001000-0x4)=0x0, &(0x7f0000006000-0x8)=0x0, 0x8001, &(0x7f0000005000/0x1000)=nil, 0x0) r0 = creat(&(0x7f0000bc3000-0x8)="2e2f66696c653000", 0x4) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000123000)=0xff9) seccomp(0x0, 0x0, &(0x7f0000005000)={0x2, &(0x7f0000007000)=[{0x0, 0x4, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) socket$netlink(0x10, 0x3, 0x17) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f00007c0000)=0x0, &(0x7f0000001000-0x4)=0x4) 2017/11/27 19:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000038e000-0x9)="2f6465762f6b766d00", 0x40000040000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00009db000)={[{0x7f, 0x5, 0x0, 0x80, 0x20000000, 0x5, 0x9, 0xffffffff, 0x1000, 0x1, 0x10001, 0x8, 0x265a14fd}, {0x5, 0x2, 0xa2, 0x100, 0x400, 0x6, 0x3, 0x7fff, 0x4, 0x800, 0x8000, 0x200, 0xfff}, {0x3ff, 0x3, 0x0, 0x1, 0x8000, 0x3, 0x0, 0x3, 0x6, 0x1ff, 0x7f, 0x401, 0x9}], 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000359000-0xc8)={0x4, 0x0, [{0x47, 0x4, 0x0, 0x0, @irqchip={0x8, 0x2}}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x395, 0x1}}, {0xfff, 0x3, 0x0, 0x0, @irqchip={0x4, 0x2}}, {0x10001, 0x3, 0x0, 0x0, @msi={0x40, 0xdfb, 0x8}}]}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000054b000/0x18000)=nil, &(0x7f0000828000-0x18)=[@text32={0x20, &(0x7f0000ae8000)="c4c17d2b461a66ba2000ec26670ff29f775466b804008ee8c744240000900000c7442402b0000000c7442406000000000f01142466baa000b87b0000000f23d00f21f8ea8a4affffef000f23f8f6774666baa000ed66bb42ecc4e285a2a50000", 0x60}], 0x1, 0x2, &(0x7f0000aed000)=[], 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000055000-0x8)=0x2) r4 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x0, 0x0) ioctl(r4, 0x2276, &(0x7f0000001000)="") 2017/11/27 19:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r1, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r3}) r5 = accept4(r4, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r4, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r7, 0x408040) r8 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r9 = dup3(r8, r5, 0x80002) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r10 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r10, 0x125e) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r11, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) 2017/11/27 19:23:31 executing program 3: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002f6000)={@broadcast=0xffffffff, @multicast1=0xe0000001}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000043f000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_getparam(0x0, &(0x7f0000dd4000-0x4)=0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f000085e000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00008dc000-0x70)={[{0x5, 0xffffffffffff258a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000480000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7f}, {0x9, 0x10001, 0x7, 0x3, 0x7, 0x9, 0x4, 0x6, 0x3, 0x1, 0x100000001, 0x80, 0xb8}, {0x3, 0x8, 0x4, 0x9, 0xfff, 0x95, 0x7, 0x2, 0x5, 0x1, 0x8001, 0x6, 0x5}], 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000f4c000+0x1aa)={0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 71.194259] binder: 8597:8600 ioctl 40046207 0 returned -16 [ 71.194508] binder: 8597:8600 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.194518] binder: 8600 RLIMIT_NICE not set [ 71.197061] binder: BINDER_SET_CONTEXT_MGR already set [ 71.197072] binder: 8598:8601 ioctl 40046207 0 returned -16 [ 71.197247] binder: 8598:8601 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 71.197254] binder: 8601 RLIMIT_NICE not set [ 71.203519] binder: BINDER_SET_CONTEXT_MGR already set [ 71.203526] binder: 8580:8599 ioctl 40046207 0 returned -16 [ 71.204776] binder: 8599 RLIMIT_NICE not set [ 71.205967] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.205986] binder: 8580:8599 transaction failed 29189/-3, size 0-0 line 2870 [ 71.216466] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.216486] binder: 8597:8603 transaction failed 29189/-3, size 0-0 line 2870 [ 71.218859] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.222142] binder_alloc: 8423: binder_alloc_buf, no vma 2017/11/27 19:23:31 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x0, 0x0, &(0x7f000000a000-0x7c)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r1, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r3}) r5 = accept4(r4, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r4, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r7, 0x408040) r8 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r9 = dup3(r8, r5, 0x80002) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r10 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r10, 0x125e) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r11, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) 2017/11/27 19:23:32 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xbf, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:32 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x0, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 71.222162] binder: 8598:8604 transaction failed 29189/-3, size 0-0 line 2870 [ 71.257228] binder: BINDER_SET_CONTEXT_MGR already set [ 71.257237] binder: 8610:8615 ioctl 40046207 0 returned -16 [ 71.257359] binder: 8615 RLIMIT_NICE not set [ 71.268946] binder: BINDER_SET_CONTEXT_MGR already set [ 71.268956] binder: 8598:8617 ioctl 40046207 0 returned -16 [ 71.271576] binder: 8598:8613 BC_DEAD_BINDER_DONE 0000000000000000 not found 2017/11/27 19:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000018e000-0x10)="2f6465762f73657175656e6365723200", 0x40000202, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00008f4000-0x4)={r0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000-0x4)=0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000f01000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000ad1000)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x72002, 0x25, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) r3 = socket$netlink(0x10, 0x3, 0xc) write(r3, &(0x7f0000776000-0x1f)="1f000000100007010000000000b412fc03000004080001000480000000ffef", 0x100b8) [ 71.271598] binder: 8613 RLIMIT_NICE not set [ 71.271682] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.271702] binder: 8598:8617 transaction failed 29189/-3, size 0-0 line 2870 [ 71.272869] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.272885] binder: 8598:8613 transaction failed 29189/-3, size 0-0 line 2870 [ 71.274412] binder: BINDER_SET_CONTEXT_MGR already set [ 71.274419] binder: 8597:8618 ioctl 40046207 0 returned -16 [ 71.287214] binder_alloc: 8421: binder_alloc_buf, no vma 2017/11/27 19:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r1, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r3}) r5 = accept4(r4, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r4, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r7, 0x408040) r8 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r9 = dup3(r8, r5, 0x80002) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r10 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r10, 0x125e) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r11, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) [ 71.287234] binder: 8597:8611 transaction failed 29189/-3, size 0-0 line 2870 [ 71.287574] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.287593] binder: 8597:8618 transaction failed 29189/-3, size 0-0 line 2870 [ 71.289608] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.289852] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.289872] binder: 8610:8620 transaction failed 29189/-3, size 0-0 line 2870 [ 71.290956] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:32 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:32 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:32 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x3, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 71.291054] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.333589] binder: BINDER_SET_CONTEXT_MGR already set [ 71.333597] binder: 8627:8629 ioctl 40046207 0 returned -16 [ 71.333800] binder: 8627:8629 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.333807] binder: 8629 RLIMIT_NICE not set [ 71.335066] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/27 19:23:32 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000-0x30)={0x58, 0x0, &(0x7f0000005000-0x58)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000003000)=[@fda={0x66646185, 0x3, 0x1, 0x1a}], &(0x7f0000003000-0x8)=[0x38]}, 0x7f}}, @dead_binder_done={0x40086310, 0x3}], 0x94, 0x0, &(0x7f0000005000)="796a823e49d276622651719e1ef684d18ade927460534c3ebde1114a218e5f85b69fb32607a1cb7263af93eeb2ec9f66041ff7801a1d4a5aafa9e620b1173abf6fed629d578fde33384c3f00d6181e16be665761de06f0e58d35a7278912633a0d25cc80fbff60b15b02d1393be0f81289bf9544c737a81c18d18614645fbe448cc6d8c11b71773e046f3f6085bbcdf02e3e45ad"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {r1, 0x1, 0x0}, {r1, 0x88, 0x0}, {r0, 0x8, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x6, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x0, 0x2) r2 = dup2(r1, r0) ioctl(r1, 0x227b, &(0x7f0000001000)="06") fcntl$setstatus(r1, 0x4, 0xc00) write$evdev(r2, &(0x7f000053e000)=[{{0x0, 0x0}, 0x3, 0xfffffffffffffffd, 0x200009}, {{0x77359400, 0x0}, 0x6, 0x1, 0x6}], 0x30) readv(r2, &(0x7f000026b000)=[{&(0x7f0000267000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f0000f97000-0x6)="000000000000", 0x6}], 0x2) [ 71.335073] binder: 8621:8630 ioctl 40046207 0 returned -16 [ 71.335235] binder: 8621:8630 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.335323] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.335341] binder: 8621:8630 transaction failed 29189/-3, size 0-0 line 2870 [ 71.342989] binder: BINDER_SET_CONTEXT_MGR already set [ 71.342996] binder: 8610:8628 ioctl 40046207 0 returned -16 [ 71.344349] binder: 8628 RLIMIT_NICE not set 2017/11/27 19:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r1, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r3}) r5 = accept4(r4, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r4, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r7, 0x408040) r8 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r9 = dup3(r8, r5, 0x80002) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r10 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r10, 0x125e) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r11, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) [ 71.345559] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.345577] binder: 8610:8628 transaction failed 29189/-3, size 0-0 line 2870 [ 71.355456] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.355476] binder: 8627:8632 transaction failed 29189/-3, size 0-0 line 2870 [ 71.357814] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.388113] binder: BINDER_SET_CONTEXT_MGR already set [ 71.388124] binder: 8621:8634 ioctl 40046207 0 returned -16 [ 71.390667] binder: 8621:8633 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.390742] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.390763] binder: 8621:8634 transaction failed 29189/-3, size 0-0 line 2870 [ 71.392452] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.392474] binder: 8621:8633 transaction failed 29189/-3, size 0-0 line 2870 [ 71.398148] binder: BINDER_SET_CONTEXT_MGR already set [ 71.398156] binder: 8639:8641 ioctl 40046207 0 returned -16 [ 71.398295] binder: 8641 RLIMIT_NICE not set [ 71.412323] binder: BINDER_SET_CONTEXT_MGR already set [ 71.412332] binder: 8627:8646 ioctl 40046207 0 returned -16 [ 71.420058] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.420079] binder: 8627:8640 transaction failed 29189/-3, size 0-0 line 2870 [ 71.420124] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.420140] binder: 8627:8646 transaction failed 29189/-3, size 0-0 line 2870 [ 71.423314] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.423335] binder: 8639:8647 transaction failed 29189/-3, size 0-0 line 2870 [ 71.425702] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.460142] binder: BINDER_SET_CONTEXT_MGR already set [ 71.460151] binder: 8653:8655 ioctl 40046207 0 returned -16 [ 71.460329] binder: 8653:8655 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.460336] binder: 8655 RLIMIT_NICE not set [ 71.460994] binder: BINDER_SET_CONTEXT_MGR already set [ 71.461004] binder: 8654:8657 ioctl 40046207 0 returned -16 [ 71.461308] binder: 8654:8657 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.461314] binder: 8657 RLIMIT_NICE not set [ 71.473921] binder: BINDER_SET_CONTEXT_MGR already set [ 71.473930] binder: 8639:8656 ioctl 40046207 0 returned -16 [ 71.475208] binder: 8656 RLIMIT_NICE not set [ 71.475313] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.475334] binder: 8639:8658 transaction failed 29189/-3, size 0-0 line 2870 [ 71.482433] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.482452] binder: 8653:8659 transaction failed 29189/-3, size 0-0 line 2870 [ 71.483363] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.483383] binder: 8654:8660 transaction failed 29189/-3, size 0-0 line 2870 [ 71.485726] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.530927] binder: BINDER_SET_CONTEXT_MGR already set [ 71.530936] binder: 8666:8669 ioctl 40046207 0 returned -16 [ 71.531106] binder: 8669 RLIMIT_NICE not set [ 71.536818] binder: BINDER_SET_CONTEXT_MGR already set [ 71.536825] binder: 8653:8673 ioctl 40046207 0 returned -16 [ 71.539309] binder: 8653:8667 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.539316] binder: 8667 RLIMIT_NICE not set [ 71.539401] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.539419] binder: 8653:8673 transaction failed 29189/-3, size 0-0 line 2870 [ 71.539693] binder: BINDER_SET_CONTEXT_MGR already set [ 71.539700] binder: 8654:8674 ioctl 40046207 0 returned -16 [ 71.540588] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.540604] binder: 8653:8667 transaction failed 29189/-3, size 0-0 line 2870 [ 71.543311] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.543328] binder: 8654:8668 transaction failed 29189/-3, size 0-0 line 2870 [ 71.543423] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.543439] binder: 8654:8674 transaction failed 29189/-3, size 0-0 line 2870 [ 71.560133] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.560162] binder: 8666:8675 transaction failed 29189/-3, size 0-0 line 2870 [ 71.574675] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.582432] binder: BINDER_SET_CONTEXT_MGR already set [ 71.582439] binder: 8681:8683 ioctl 40046207 0 returned -16 [ 71.582608] binder: 8681:8683 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.582615] binder: 8683 RLIMIT_NICE not set [ 71.587345] binder: BINDER_SET_CONTEXT_MGR already set [ 71.587352] binder: 8682:8684 ioctl 40046207 0 returned -16 [ 71.587670] binder: 8682:8684 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.587677] binder: 8684 RLIMIT_NICE not set [ 71.604373] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.604395] binder: 8681:8686 transaction failed 29189/-3, size 0-0 line 2870 [ 71.610134] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.610158] binder: 8682:8687 transaction failed 29189/-3, size 0-0 line 2870 [ 71.612496] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.619678] binder: BINDER_SET_CONTEXT_MGR already set [ 71.619685] binder: 8666:8685 ioctl 40046207 0 returned -16 [ 71.620936] binder: 8685 RLIMIT_NICE not set [ 71.621021] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.621039] binder: 8666:8688 transaction failed 29189/-3, size 0-0 line 2870 [ 71.643660] binder: BINDER_SET_CONTEXT_MGR already set [ 71.643667] binder: 8681:8691 ioctl 40046207 0 returned -16 [ 71.657731] binder: 8681:8689 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.657739] binder: 8689 RLIMIT_NICE not set [ 71.661832] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.661851] binder: 8681:8691 transaction failed 29189/-3, size 0-0 line 2870 [ 71.663340] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.663370] binder: 8681:8689 transaction failed 29189/-3, size 0-0 line 2870 [ 71.681531] binder: BINDER_SET_CONTEXT_MGR already set [ 71.681540] binder: 8682:8699 ioctl 40046207 0 returned -16 [ 71.686055] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.686073] binder: 8682:8690 transaction failed 29189/-3, size 0-0 line 2870 [ 71.686117] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.686133] binder: 8682:8699 transaction failed 29189/-3, size 0-0 line 2870 [ 71.690183] binder: BINDER_SET_CONTEXT_MGR already set [ 71.690190] binder: 8697:8702 ioctl 40046207 0 returned -16 [ 71.690301] binder: 8702 RLIMIT_NICE not set [ 71.716168] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.716194] binder: 8697:8710 transaction failed 29189/-3, size 0-0 line 2870 [ 71.724468] binder: BINDER_SET_CONTEXT_MGR already set [ 71.724477] binder: 8709:8712 ioctl 40046207 0 returned -16 [ 71.724696] binder: 8709:8712 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.724704] binder: 8712 RLIMIT_NICE not set [ 71.727867] binder: BINDER_SET_CONTEXT_MGR already set [ 71.727874] binder: 8706:8711 ioctl 40046207 0 returned -16 [ 71.728064] binder: 8706:8711 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.728071] binder: 8711 RLIMIT_NICE not set [ 71.748256] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.748292] binder: 8709:8714 transaction failed 29189/-3, size 0-0 line 2870 [ 71.750375] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.750395] binder: 8706:8715 transaction failed 29189/-3, size 0-0 line 2870 [ 71.750687] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.763606] binder: BINDER_SET_CONTEXT_MGR already set [ 71.763613] binder: 8697:8713 ioctl 40046207 0 returned -16 [ 71.764867] binder: 8713 RLIMIT_NICE not set [ 71.764932] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.764949] binder: 8697:8716 transaction failed 29189/-3, size 0-0 line 2870 [ 71.766102] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.766117] binder: 8697:8713 transaction failed 29189/-3, size 0-0 line 2870 [ 71.802763] binder: BINDER_SET_CONTEXT_MGR already set [ 71.802772] binder: 8709:8719 ioctl 40046207 0 returned -16 [ 71.802828] binder: BINDER_SET_CONTEXT_MGR already set [ 71.802835] binder: 8706:8720 ioctl 40046207 0 returned -16 [ 71.805317] binder: BINDER_SET_CONTEXT_MGR already set [ 71.805327] binder: 8726:8727 ioctl 40046207 0 returned -16 [ 71.805472] binder: 8706:8718 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.805480] binder: 8718 RLIMIT_NICE not set [ 71.805553] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.805573] binder: 8706:8720 transaction failed 29189/-3, size 0-0 line 2870 [ 71.805891] binder: 8727 RLIMIT_NICE not set [ 71.806946] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.806966] binder: 8709:8719 transaction failed 29189/-3, size 0-0 line 2870 [ 71.807366] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.807384] binder: 8706:8718 transaction failed 29189/-3, size 0-0 line 2870 [ 71.807527] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.807547] binder: 8709:8717 transaction failed 29189/-3, size 0-0 line 2870 [ 71.828396] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.828416] binder: 8726:8731 transaction failed 29189/-3, size 0-0 line 2870 [ 71.841952] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.847473] binder: BINDER_SET_CONTEXT_MGR already set [ 71.847482] binder: 8732:8734 ioctl 40046207 0 returned -16 [ 71.847713] binder: 8732:8734 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.847721] binder: 8734 RLIMIT_NICE not set [ 71.862784] binder: BINDER_SET_CONTEXT_MGR already set [ 71.862791] binder: 8738:8740 ioctl 40046207 0 returned -16 [ 71.862964] binder: 8738:8740 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.862972] binder: 8740 RLIMIT_NICE not set [ 71.868496] binder: BINDER_SET_CONTEXT_MGR already set [ 71.868504] binder: 8726:8731 ioctl 40046207 0 returned -16 [ 71.874061] binder: 8731 RLIMIT_NICE not set [ 71.874145] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.874164] binder: 8726:8741 transaction failed 29189/-3, size 0-0 line 2870 [ 71.875334] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.875350] binder: 8726:8731 transaction failed 29189/-3, size 0-0 line 2870 [ 71.892432] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.892452] binder: 8732:8742 transaction failed 29189/-3, size 0-0 line 2870 [ 71.893619] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.893655] binder: 8738:8748 transaction failed 29189/-3, size 0-0 line 2870 [ 71.893704] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.907299] binder: BINDER_SET_CONTEXT_MGR already set [ 71.907306] binder: 8749:8751 ioctl 40046207 0 returned -16 [ 71.907445] binder: 8751 RLIMIT_NICE not set [ 71.929393] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.929415] binder: 8749:8756 transaction failed 29189/-3, size 0-0 line 2870 [ 71.932154] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.936690] binder: BINDER_SET_CONTEXT_MGR already set [ 71.936698] binder: 8738:8758 ioctl 40046207 0 returned -16 [ 71.939101] binder: 8738:8755 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.939108] binder: 8755 RLIMIT_NICE not set [ 71.939178] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.939195] binder: 8738:8758 transaction failed 29189/-3, size 0-0 line 2870 [ 71.940385] binder_alloc: 8423: binder_alloc_buf, no vma [ 71.940402] binder: 8738:8755 transaction failed 29189/-3, size 0-0 line 2870 [ 71.947737] binder: BINDER_SET_CONTEXT_MGR already set [ 71.947744] binder: 8732:8757 ioctl 40046207 0 returned -16 [ 71.951634] binder_alloc: 8421: binder_alloc_buf, no vma [ 71.951651] binder: 8732:8757 transaction failed 29189/-3, size 0-0 line 2870 [ 71.961694] binder: BINDER_SET_CONTEXT_MGR already set [ 71.961701] binder: 8749:8756 ioctl 40046207 0 returned -16 [ 71.962934] binder: 8756 RLIMIT_NICE not set [ 71.963022] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.963040] binder: 8749:8759 transaction failed 29189/-3, size 0-0 line 2870 [ 71.964208] binder_alloc: 8424: binder_alloc_buf, no vma [ 71.964223] binder: 8749:8756 transaction failed 29189/-3, size 0-0 line 2870 [ 71.992678] binder: BINDER_SET_CONTEXT_MGR already set [ 71.992686] binder: 8765:8768 ioctl 40046207 0 returned -16 [ 71.992923] binder: 8765:8768 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 71.992932] binder: 8768 RLIMIT_NICE not set [ 72.001248] binder: BINDER_SET_CONTEXT_MGR already set [ 72.001256] binder: 8769:8771 ioctl 40046207 0 returned -16 [ 72.006707] binder: 8771 RLIMIT_NICE not set [ 72.011996] binder: BINDER_SET_CONTEXT_MGR already set [ 72.012007] binder: 8766:8770 ioctl 40046207 0 returned -16 [ 72.012427] binder: 8766:8770 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.012435] binder: 8770 RLIMIT_NICE not set [ 72.015363] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.015402] binder: 8765:8779 transaction failed 29189/-3, size 0-0 line 2870 [ 72.031566] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.031591] binder: 8769:8780 transaction failed 29189/-3, size 0-0 line 2870 [ 72.033991] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.035522] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.035541] binder: 8766:8781 transaction failed 29189/-3, size 0-0 line 2870 [ 72.036821] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.057993] binder: BINDER_SET_CONTEXT_MGR already set [ 72.058005] binder: 8765:8783 ioctl 40046207 0 returned -16 [ 72.060525] binder: 8765:8782 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.060533] binder: 8782 RLIMIT_NICE not set [ 72.060604] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.060622] binder: 8765:8783 transaction failed 29189/-3, size 0-0 line 2870 [ 72.061863] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.061880] binder: 8765:8782 transaction failed 29189/-3, size 0-0 line 2870 [ 72.076663] binder: BINDER_SET_CONTEXT_MGR already set [ 72.076670] binder: 8766:8787 ioctl 40046207 0 returned -16 [ 72.081120] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.081138] binder: 8766:8787 transaction failed 29189/-3, size 0-0 line 2870 [ 72.082391] binder: BINDER_SET_CONTEXT_MGR already set [ 72.082397] binder: 8769:8784 ioctl 40046207 0 returned -16 [ 72.083683] binder: 8784 RLIMIT_NICE not set [ 72.083788] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.083804] binder: 8769:8786 transaction failed 29189/-3, size 0-0 line 2870 [ 72.084971] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.084987] binder: 8769:8784 transaction failed 29189/-3, size 0-0 line 2870 [ 72.124688] binder: BINDER_SET_CONTEXT_MGR already set [ 72.124697] binder: 8793:8795 ioctl 40046207 0 returned -16 [ 72.124888] binder: 8793:8795 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.124897] binder: 8795 RLIMIT_NICE not set [ 72.142770] binder: BINDER_SET_CONTEXT_MGR already set [ 72.142779] binder: 8799:8800 ioctl 40046207 0 returned -16 [ 72.142898] binder: 8800 RLIMIT_NICE not set [ 72.156226] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.156251] binder: 8793:8808 transaction failed 29189/-3, size 0-0 line 2870 [ 72.157174] binder: BINDER_SET_CONTEXT_MGR already set [ 72.157183] binder: 8794:8804 ioctl 40046207 0 returned -16 [ 72.157578] binder: 8794:8804 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.157587] binder: 8804 RLIMIT_NICE not set [ 72.184255] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.184282] binder: 8799:8814 transaction failed 29189/-3, size 0-0 line 2870 [ 72.186513] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.186540] binder: 8794:8817 transaction failed 29189/-3, size 0-0 line 2870 [ 72.192810] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.193909] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.241531] binder: BINDER_SET_CONTEXT_MGR already set [ 72.241541] binder: 8793:8825 ioctl 40046207 0 returned -16 [ 72.261827] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.261853] binder: 8793:8819 transaction failed 29189/-3, size 0-0 line 2870 [ 72.261903] binder: 8793:8808 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.261912] binder: 8808 RLIMIT_NICE not set [ 72.263300] binder: BINDER_SET_CONTEXT_MGR already set [ 72.263309] binder: 8794:8833 ioctl 40046207 0 returned -16 [ 72.263705] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.263724] binder: 8793:8808 transaction failed 29189/-3, size 0-0 line 2870 [ 72.268743] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.268764] binder: 8794:8828 transaction failed 29189/-3, size 0-0 line 2870 [ 72.269317] binder: BINDER_SET_CONTEXT_MGR already set [ 72.269325] binder: 8799:8827 ioctl 40046207 0 returned -16 [ 72.279275] binder: 8827 RLIMIT_NICE not set [ 72.283711] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.283732] binder: 8799:8830 transaction failed 29189/-3, size 0-0 line 2870 [ 72.284950] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.284972] binder: 8799:8814 transaction failed 29189/-3, size 0-0 line 2870 [ 72.325743] binder: BINDER_SET_CONTEXT_MGR already set [ 72.325754] binder: 8841:8844 ioctl 40046207 0 returned -16 [ 72.326097] binder: 8841:8844 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.326106] binder: 8844 RLIMIT_NICE not set [ 72.335198] binder: BINDER_SET_CONTEXT_MGR already set [ 72.335207] binder: 8845:8847 ioctl 40046207 0 returned -16 [ 72.335416] binder: 8845:8847 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.335424] binder: 8847 RLIMIT_NICE not set [ 72.339458] binder: 8839:8842 got reply transaction with no transaction stack [ 72.339466] binder: 8839:8842 transaction failed 29201/-71, size 32-8 line 2670 [ 72.347804] binder: BINDER_SET_CONTEXT_MGR already set [ 72.347813] binder: 8848:8849 ioctl 40046207 0 returned -16 [ 72.347947] binder: 8849 RLIMIT_NICE not set [ 72.348357] binder: 8839:8842 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.348365] binder: 8842 RLIMIT_NICE not set [ 72.361241] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.361268] binder: 8841:8850 transaction failed 29189/-3, size 0-0 line 2870 [ 72.372716] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.372739] binder: 8845:8852 transaction failed 29189/-3, size 0-0 line 2870 [ 72.374504] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.374747] binder: 8842 RLIMIT_NICE not set [ 72.375595] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.375618] binder: 8848:8854 transaction failed 29189/-3, size 0-0 line 2870 [ 72.391793] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.417453] binder: release 8839:8853 transaction 769 out, still active [ 72.417461] binder: undelivered TRANSACTION_COMPLETE [ 72.417478] binder: send failed reply for transaction 771 to 8839:8842 [ 72.425865] nla_parse: 29 callbacks suppressed [ 72.425871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 72.446798] binder: BINDER_SET_CONTEXT_MGR already set [ 72.446809] binder: 8841:8866 ioctl 40046207 0 returned -16 [ 72.447312] binder: 8839:8853 got reply transaction with no transaction stack [ 72.447322] binder: 8839:8853 transaction failed 29201/-71, size 32-8 line 2670 [ 72.449577] binder: 8864 RLIMIT_NICE not set [ 72.450795] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.450816] binder: 8841:8859 transaction failed 29189/-3, size 0-0 line 2870 [ 72.451209] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.451228] binder: 8848:8868 transaction failed 29189/-3, size 0-0 line 2870 [ 72.452411] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.452429] binder: 8848:8864 transaction failed 29189/-3, size 0-0 line 2870 [ 72.453366] binder: BINDER_SET_CONTEXT_MGR already set [ 72.453376] binder: 8848:8858 ioctl 40046207 0 returned -16 [ 72.454544] binder: BINDER_SET_CONTEXT_MGR already set [ 72.454551] binder: 8839:8853 ioctl 40046207 0 returned -16 [ 72.454785] binder: BINDER_SET_CONTEXT_MGR already set [ 72.454792] binder: 8845:8862 ioctl 40046207 0 returned -16 [ 72.457955] binder: 8839:8853 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.457963] binder: 8853 RLIMIT_NICE not set [ 72.458033] binder_alloc: 8839: binder_alloc_buf, no vma [ 72.458052] binder: 8839:8863 transaction failed 29189/-3, size 0-0 line 2870 [ 72.460783] binder: 8845:8857 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.460792] binder: 8857 RLIMIT_NICE not set [ 72.460871] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.460891] binder: 8845:8862 transaction failed 29189/-3, size 0-0 line 2870 [ 72.466356] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.466379] binder: 8845:8857 transaction failed 29189/-3, size 0-0 line 2870 [ 72.496087] binder: BINDER_SET_CONTEXT_MGR already set [ 72.496102] binder: 8870:8871 ioctl 40046207 0 returned -16 [ 72.496397] binder: 8870:8871 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.496405] binder: 8871 RLIMIT_NICE not set [ 72.506374] binder: BINDER_SET_CONTEXT_MGR already set [ 72.506382] binder: 8873:8878 ioctl 40046207 0 returned -16 [ 72.506497] binder: 8878 RLIMIT_NICE not set [ 72.509695] binder: BINDER_SET_CONTEXT_MGR already set [ 72.509703] binder: 8872:8876 ioctl 40046207 0 returned -16 [ 72.509891] binder: 8872:8876 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.509899] binder: 8876 RLIMIT_NICE not set [ 72.512775] binder: 8874:8879 got reply transaction with no transaction stack [ 72.512782] binder: 8874:8879 transaction failed 29201/-71, size 32-8 line 2670 [ 72.513578] binder: BINDER_SET_CONTEXT_MGR already set [ 72.513585] binder: 8874:8879 ioctl 40046207 0 returned -16 [ 72.518484] binder: 8874:8879 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.518514] binder: 8879 RLIMIT_NICE not set [ 72.519060] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.519087] binder: 8870:8880 transaction failed 29189/-3, size 0-0 line 2870 [ 72.533201] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.533227] binder: 8873:8882 transaction failed 29189/-3, size 0-0 line 2870 [ 72.539627] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.539654] binder: 8872:8883 transaction failed 29189/-3, size 0-0 line 2870 [ 72.547121] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.547346] binder_alloc: 8839: binder_alloc_buf, no vma [ 72.547398] binder: 8874:8885 transaction failed 29189/-3, size 0-0 line 2870 [ 72.575272] binder: BINDER_SET_CONTEXT_MGR already set [ 72.575281] binder: 8870:8890 ioctl 40046207 0 returned -16 [ 72.580079] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.580100] binder: 8870:8887 transaction failed 29189/-3, size 0-0 line 2870 [ 72.582526] binder_alloc: 8421: binder_alloc_buf, no vma [ 72.582548] binder: 8870:8890 transaction failed 29189/-3, size 0-0 line 2870 [ 72.623172] binder: 8874:8892 got reply transaction with no transaction stack [ 72.623180] binder: 8874:8892 transaction failed 29201/-71, size 32-8 line 2670 [ 72.634425] binder: 8872:8891 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.634436] binder: 8891 RLIMIT_NICE not set [ 72.636107] binder_alloc: 8423: binder_alloc_buf, no vma [ 72.636152] binder: 8872:8891 transaction failed 29189/-3, size 0-0 line 2870 [ 72.637919] binder: BINDER_SET_CONTEXT_MGR already set [ 72.637929] binder: 8874:8892 ioctl 40046207 0 returned -16 [ 72.641660] binder: 8874:8892 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 72.641670] binder: 8892 RLIMIT_NICE not set [ 72.641764] binder_alloc: 8839: binder_alloc_buf, no vma [ 72.641785] binder: 8874:8899 transaction failed 29189/-3, size 0-0 line 2870 [ 72.644777] binder: BINDER_SET_CONTEXT_MGR already set [ 72.644785] binder: 8873:8894 ioctl 40046207 0 returned -16 [ 72.646115] binder: 8894 RLIMIT_NICE not set [ 72.646206] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.646226] binder: 8873:8900 transaction failed 29189/-3, size 0-0 line 2870 [ 72.647412] binder_alloc: 8424: binder_alloc_buf, no vma [ 72.647430] binder: 8873:8894 transaction failed 29189/-3, size 0-0 line 2870 [ 74.725646] binder: send failed reply for transaction 624, target dead [ 74.732656] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.738345] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.744123] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.749750] binder: release 8839:8842 transaction 769 in, still active [ 74.756427] binder: send failed reply for transaction 769, target dead [ 74.763109] binder: undelivered TRANSACTION_COMPLETE [ 74.768222] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.773773] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.779479] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.785136] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.790686] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.796361] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.801904] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.807516] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.813195] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.818780] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.824442] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.830070] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.835617] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.841339] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.847176] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.852829] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.858333] binder: release 8423:8426 transaction 650 in, still active [ 74.865004] binder: send failed reply for transaction 650, target dead [ 74.871690] binder: undelivered TRANSACTION_COMPLETE [ 74.876795] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.882336] binder: send failed reply for transaction 646, target dead [ 74.889105] binder: send failed reply for transaction 649, target dead [ 74.896967] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.902445] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.908046] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.913529] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.919038] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.924485] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.930075] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.935563] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.941033] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.946545] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.952107] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.957554] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.963078] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.968571] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.974043] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.980824] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.986282] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.991782] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.997298] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.002744] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.008262] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.013717] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.019638] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.025365] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.030860] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.036318] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.041812] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.047285] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.052733] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.058293] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.063765] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.069260] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.074719] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.080210] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.085664] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.091157] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.096612] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.102108] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.107565] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.113103] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.118646] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.124098] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.129717] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.135181] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.140680] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.146192] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.151636] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.157152] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.162599] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.168117] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.173637] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.179091] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.184584] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.190198] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.195646] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.201161] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.206607] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.212097] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.217587] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.223050] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.228526] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.233982] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.240448] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.245898] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.251385] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.256838] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.262321] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.267788] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.273275] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.280536] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.286242] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.291753] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.297196] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.302714] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.308200] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.313652] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.319145] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.324616] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.330192] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.335644] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.341135] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:35 executing program 5 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[], 0x0}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:35 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r1, 0x88, 0x0}, {r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x3, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:35 executing program 3 (fault-call:4 fault-nth:0): mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:35 executing program 6 (fault-call:1 fault-nth:0): ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") [ 75.346686] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/27 19:23:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r1, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r3}) r5 = accept4(r4, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r4, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r7, 0x408040) r8 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r9 = dup3(r8, r5, 0x80002) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r10 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r10, 0x125e) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r11, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) 2017/11/27 19:23:35 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{r0, 0x8080, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x10, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x2}], 0xc0, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0977eb92087ae81c5edbd8273edd16b36e2916439ef6373b6cde76535577fcfed313d43808fbf51f77c524c875f51f23f302a8b1470f2e15e9465127e54ba1f0df55ef5ad3a813c9b73d9c2009979e95a29149c85b32da310bd56d7a95bffa5f26b117ac5ded6e2dee983065dc3362f5bb2f1a6402405bdac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:35 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r1, 0x200, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {r0, 0x20, 0x0}, {r1, 0x40, 0x0}], 0x4, 0x55) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/11/27 19:23:35 executing program 7 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80287010) 2017/11/27 19:23:35 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f76637300", 0x40000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) pipe(&(0x7f0000d16000)={0x0, 0x0}) ioctl$LOOP_CLR_FD(r0, 0x80287010) timerfd_gettime(r1, &(0x7f0000bb4000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) 2017/11/27 19:23:35 executing program 5 (fault-call:3 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[], 0x0}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f000037c000)=0x0, 0x4) 2017/11/27 19:23:35 executing program 6 (fault-call:1 fault-nth:1): ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") [ 75.374885] binder: 8903:8907 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 75.382210] binder: 8907 RLIMIT_NICE not set [ 75.388772] binder: 8909:8914 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 75.388781] binder: 8914 RLIMIT_NICE not set [ 75.390260] FAULT_INJECTION: forcing a failure. 2017/11/27 19:23:35 executing program 3 (fault-call:4 fault-nth:1): mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f000000d000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/27 19:23:35 executing program 6 (fault-call:1 fault-nth:2): ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") 2017/11/27 19:23:35 executing program 5 (fault-call:3 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000851000)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000743000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000a4e000)={r0, 0x0, 0xe, 0x0, &(0x7f0000b9e000-0xe)="aa4278d6a94ead3789326ce01300", &(0x7f0000ffa000)="", 0x0, 0x0}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f000085a000)={0x0, 0x0, &(0x7f0000664000)=[{&(0x7f0000b55000)=[], 0x0}], 0x1, &(0x7f000061e000)=[], 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f000037c000)=0x0, 0x4) [ 75.390260] name failslab, interval 1, probability 0, space 0, times 0 [ 75.390271] CPU: 0 PID: 8915 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.390277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.390280] Call Trace: 2017/11/27 19:23:35 executing program 6 (fault-call:1 fault-nth:3): ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") 2017/11/27 19:23:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r0, &(0x7f0000b21000)="7c", 0x1, 0x0, &(0x7f00005f9000)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x10, &(0x7f000076d000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r2}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000750000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dea000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000e7000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x80000000000003, r2}) r4 = accept4(r3, &(0x7f0000dea000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f0000deb000)=0x8, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000183000-0x4)=0x0) fcntl$getownex(r3, 0x10, &(0x7f00004bc000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000ef1000)="2e2f66696c653000", 0x240200, 0x10e) syz_open_pts(r6, 0x408040) r7 = syz_open_dev$vcsn(&(0x7f0000c51000-0xa)="2f6465762f7663732300", 0xbc, 0x202102) r8 = dup3(r7, r4, 0x80002) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000309000)=0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000d82000)={@generic="e8b8312f453e867e5b8c0373e8e605f8", @ifru_flags=0xa400}) r9 = syz_open_dev$loop(&(0x7f000071c000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x101) memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) ioctl$LOOP_CLR_FD(r9, 0x125e) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x1, 0x0) write$fuse(r10, &(0x7f0000003000-0x14)={0x14, 0x0, 0xa, @fuse_poll_out={0x0}}, 0x14) 2017/11/27 19:23:35 executing program 6 (fault-call:1 fault-nth:4): ptrace(0x0, 0x0) clone(0x80102000, &(0x7f000000c000-0x8f)="", &(0x7f0000004000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000008000)="") [ 75.390297] dump_stack+0x194/0x257 [ 75.390316] ? arch_local_irq_restore+0x53/0x53 [ 75.390357] should_fail+0x8c0/0xa40 [ 75.390374] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.390393] ? lock_page_memcg+0x2bd/0x3b0 [ 75.390403] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.390423] ? find_held_lock+0x39/0x1d0 [ 75.390456] ? lock_downgrade+0x980/0x980 [ 75.390501] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.390508] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.390525] ? rcu_note_context_switch+0x710/0x710 [ 75.390554] should_failslab+0xec/0x120 [ 75.390569] kmem_cache_alloc_node+0x56/0x760 [ 75.390606] copy_process.part.36+0x1a6a/0x4ae0 [ 75.390613] ? print_usage_bug+0x3f0/0x3f0 [ 75.390653] ? __cleanup_sighand+0x40/0x40 [ 75.390669] ? update_load_avg+0x1c8/0x2020 [ 75.390687] ? __lock_acquire+0x6e9/0x47f0 [ 75.390704] ? update_cfs_rq_load_avg.part.70+0x2d0/0x2d0 [ 75.390711] ? __lock_is_held+0xbc/0x140 [ 75.390758] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.390773] ? __lock_is_held+0xbc/0x140 [ 75.390815] ? __lock_is_held+0xbc/0x140 [ 75.390832] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.390850] ? check_noncircular+0x20/0x20 [ 75.390871] ? perf_trace_lock+0x900/0x900 [ 75.390897] ? perf_event_sync_stat+0x5b0/0x5b0 [ 75.390908] ? __perf_event_task_sched_in+0x200/0xc20 [ 75.390929] ? find_held_lock+0x39/0x1d0 [ 75.390960] ? lock_downgrade+0x980/0x980 [ 75.390981] ? lock_acquire+0x1d5/0x580 [ 75.390990] ? finish_task_switch+0x1aa/0x740 [ 75.391017] ? lock_release+0xda0/0xda0 [ 75.391027] ? compat_start_thread+0x80/0x80 [ 75.391041] ? do_raw_spin_trylock+0x190/0x190 [ 75.391057] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.391071] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.391086] ? trace_hardirqs_on+0xd/0x10 [ 75.391096] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.391111] ? finish_task_switch+0x1d3/0x740 [ 75.391123] ? finish_task_switch+0x1aa/0x740 [ 75.391145] ? copy_overflow+0x20/0x20 [ 75.391175] ? __schedule+0x8f3/0x2060 [ 75.391200] ? __sched_text_start+0x8/0x8 [ 75.391215] ? map_files_get_link+0x3a0/0x3a0 [ 75.391222] ? __lock_is_held+0xbc/0x140 [ 75.391245] _do_fork+0x1ef/0xff0 [ 75.391267] ? fork_idle+0x2d0/0x2d0 [ 75.391286] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.391299] ? kernel_read+0x120/0x120 [ 75.391313] ? wait_for_completion+0x7b0/0x7b0 [ 75.391340] ? schedule+0xf5/0x430 [ 75.391350] ? __lock_is_held+0xbc/0x140 [ 75.391364] ? __schedule+0x2060/0x2060 [ 75.391404] ? __sb_end_write+0x9e/0xd0 [ 75.391418] ? exit_to_usermode_loop+0x8c/0x310 [ 75.391438] ? trace_hardirqs_off+0xd/0x10 [ 75.391449] ? exit_to_usermode_loop+0x198/0x310 [ 75.391466] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.391487] SyS_clone+0x37/0x50 [ 75.391500] ? entry_INT80_compat+0x40/0x40 [ 75.391513] do_fast_syscall_32+0x3ee/0xf9d [ 75.391535] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.391559] ? lockdep_sys_exit+0x47/0xf0 [ 75.391570] ? syscall_return_slowpath+0x2ad/0x550 [ 75.391585] ? sysret32_from_system_call+0x5/0x3b [ 75.391604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.391625] entry_SYSENTER_compat+0x51/0x60 [ 75.391633] RIP: 0023:0xf7ff7c79 [ 75.391638] RSP: 002b:00000000f77f308c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.391647] RAX: ffffffffffffffda RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.391651] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.391655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.391659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.391664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.395600] FAULT_INJECTION: forcing a failure. [ 75.395600] name failslab, interval 1, probability 0, space 0, times 0 [ 75.395609] CPU: 1 PID: 8918 Comm: syz-executor5 Not tainted 4.15.0-rc1+ #107 [ 75.395614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.395617] Call Trace: [ 75.395632] dump_stack+0x194/0x257 [ 75.395652] ? arch_local_irq_restore+0x53/0x53 [ 75.395663] ? find_held_lock+0x39/0x1d0 [ 75.395693] should_fail+0x8c0/0xa40 [ 75.395716] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.395747] ? find_held_lock+0x39/0x1d0 [ 75.395783] ? lock_downgrade+0x980/0x980 [ 75.395829] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.395847] ? rcu_note_context_switch+0x710/0x710 [ 75.395854] ? find_held_lock+0x39/0x1d0 [ 75.395883] should_failslab+0xec/0x120 [ 75.395897] __kmalloc+0x63/0x760 [ 75.395910] ? __fget_light+0x29d/0x390 [ 75.395927] ? bpf_test_init.isra.7+0x7c/0xe0 [ 75.395949] bpf_test_init.isra.7+0x7c/0xe0 [ 75.395970] bpf_prog_test_run_skb+0xfb/0x990 [ 75.395986] ? __might_sleep+0x95/0x190 [ 75.395998] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.396007] ? bpf_prog_add+0x7b/0xa0 [ 75.396016] ? fput+0xd2/0x140 [ 75.396028] ? __bpf_prog_get+0x81/0x220 [ 75.396041] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.396054] SyS_bpf+0x1024/0x4410 [ 75.396064] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.396072] ? __fdget_pos+0x131/0x1a0 [ 75.396091] ? bpf_prog_get+0x20/0x20 [ 75.396104] ? perf_trace_lock+0x900/0x900 [ 75.396130] ? lock_downgrade+0x980/0x980 [ 75.396143] ? check_noncircular+0x20/0x20 [ 75.396172] ? find_held_lock+0x39/0x1d0 [ 75.396184] ? check_noncircular+0x20/0x20 [ 75.396212] ? lock_downgrade+0x980/0x980 [ 75.396222] ? __lock_is_held+0xbc/0x140 [ 75.396254] ? find_held_lock+0x39/0x1d0 [ 75.396286] ? lock_downgrade+0x980/0x980 [ 75.396301] ? get_pid_task+0xbc/0x140 [ 75.396315] ? proc_fail_nth_write+0xb5/0x260 [ 75.396326] ? map_files_get_link+0x3a0/0x3a0 [ 75.396333] ? __lock_is_held+0xbc/0x140 [ 75.396358] ? find_held_lock+0x39/0x1d0 [ 75.396393] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.396406] ? kernel_read+0x120/0x120 [ 75.396419] ? wait_for_completion+0x7b0/0x7b0 [ 75.396442] ? __lock_is_held+0xbc/0x140 [ 75.396487] ? __sb_end_write+0x9e/0xd0 [ 75.396509] ? fput+0xd2/0x140 [ 75.396521] ? SyS_write+0x184/0x220 [ 75.396551] ? do_fast_syscall_32+0x156/0xf9d [ 75.396569] ? bpf_prog_get+0x20/0x20 [ 75.396581] do_fast_syscall_32+0x3ee/0xf9d [ 75.396606] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.396630] ? lockdep_sys_exit+0x47/0xf0 [ 75.396641] ? syscall_return_slowpath+0x2ad/0x550 [ 75.396658] ? sysret32_from_system_call+0x5/0x3b [ 75.396679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.396705] entry_SYSENTER_compat+0x51/0x60 [ 75.396711] RIP: 0023:0xf7fc6c79 [ 75.396716] RSP: 002b:00000000f77c208c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 75.396725] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020a4e000 [ 75.396730] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.396735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.396740] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.396746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.400344] binder: 8916 RLIMIT_NICE not set [ 75.418907] binder: 8914 RLIMIT_NICE not set [ 75.419412] binder: 8903:8919 got new transaction with bad transaction stack, transaction 794 has target 8903:0 [ 75.419425] binder: 8903:8919 transaction failed 29201/-71, size 0-0 line 2782 [ 75.430782] FAULT_INJECTION: forcing a failure. [ 75.430782] name failslab, interval 1, probability 0, space 0, times 0 [ 75.430801] CPU: 1 PID: 8923 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #107 [ 75.430820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.430824] Call Trace: [ 75.430839] dump_stack+0x194/0x257 [ 75.430858] ? arch_local_irq_restore+0x53/0x53 [ 75.430870] ? page_add_new_anon_rmap+0x750/0x750 [ 75.430900] should_fail+0x8c0/0xa40 [ 75.430927] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.430953] ? print_usage_bug+0x3f0/0x3f0 [ 75.430971] ? find_held_lock+0x39/0x1d0 [ 75.431012] ? lock_downgrade+0x980/0x980 [ 75.431057] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.431076] ? rcu_note_context_switch+0x710/0x710 [ 75.431104] should_failslab+0xec/0x120 [ 75.431118] kmem_cache_alloc_trace+0x4b/0x750 [ 75.431156] refill_pi_state_cache.part.6+0xa5/0x2f0 [ 75.431166] ? hash_futex+0x210/0x210 [ 75.431173] binder: release 8903:8919 transaction 794 out, still active [ 75.431180] ? __lock_acquire+0x6e9/0x47f0 [ 75.431181] binder: undelivered TRANSACTION_COMPLETE [ 75.431191] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.431201] ? perf_trace_lock+0x900/0x900 [ 75.431223] futex_requeue+0x1887/0x2370 [ 75.431243] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.431272] ? futex_lock_pi+0x1050/0x1050 [ 75.431289] ? check_noncircular+0x20/0x20 [ 75.431312] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.431320] ? __fdget_pos+0x131/0x1a0 [ 75.431340] ? check_noncircular+0x20/0x20 [ 75.431353] ? perf_trace_lock+0x900/0x900 [ 75.431378] ? lock_downgrade+0x980/0x980 [ 75.431413] do_futex+0x8d0/0x2280 [ 75.431428] ? check_noncircular+0x20/0x20 [ 75.431475] ? exit_robust_list+0x240/0x240 [ 75.431504] ? find_held_lock+0x39/0x1d0 [ 75.431538] ? lock_downgrade+0x980/0x980 [ 75.431551] ? get_pid_task+0xbc/0x140 [ 75.431565] ? proc_fail_nth_write+0xb5/0x260 [ 75.431578] ? map_files_get_link+0x3a0/0x3a0 [ 75.431585] ? __lock_is_held+0xbc/0x140 [ 75.431610] ? find_held_lock+0x39/0x1d0 [ 75.431645] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.431657] ? kernel_read+0x120/0x120 [ 75.431670] ? wait_for_completion+0x7b0/0x7b0 [ 75.431693] ? __lock_is_held+0xbc/0x140 [ 75.431737] compat_SyS_futex+0x27f/0x380 [ 75.431763] ? compat_SyS_get_robust_list+0x300/0x300 [ 75.431770] ? SyS_write+0x184/0x220 [ 75.431779] ? __do_page_fault+0x3d6/0xc90 [ 75.431794] ? SyS_read+0x220/0x220 [ 75.431809] ? do_fast_syscall_32+0x156/0xf9d [ 75.431835] ? compat_SyS_get_robust_list+0x300/0x300 [ 75.431849] do_fast_syscall_32+0x3ee/0xf9d [ 75.431874] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.431892] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.431907] ? lockdep_sys_exit+0x47/0xf0 [ 75.431918] ? syscall_return_slowpath+0x2ad/0x550 [ 75.431936] ? sysret32_from_system_call+0x5/0x3b [ 75.431958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.431983] entry_SYSENTER_compat+0x51/0x60 [ 75.431990] RIP: 0023:0xf7fe4c79 [ 75.431994] RSP: 002b:00000000f77bf08c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 75.432004] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000c [ 75.432010] RDX: 0000000000000001 RSI: 000000002000d000 RDI: 0000000020048000 [ 75.432015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.432020] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.432025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.432802] binder: 8916 RLIMIT_NICE not set [ 75.443993] FAULT_INJECTION: forcing a failure. [ 75.443993] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.444004] CPU: 0 PID: 8928 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.444010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.444012] Call Trace: [ 75.444025] dump_stack+0x194/0x257 [ 75.444042] ? arch_local_irq_restore+0x53/0x53 [ 75.444074] should_fail+0x8c0/0xa40 [ 75.444090] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.444118] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.444132] ? __lock_acquire+0x6e9/0x47f0 [ 75.444163] ? __lock_acquire+0x6e9/0x47f0 [ 75.444192] ? check_noncircular+0x20/0x20 [ 75.444204] ? perf_trace_lock+0x900/0x900 [ 75.444216] ? should_fail+0x23b/0xa40 [ 75.444240] __alloc_pages_nodemask+0x338/0xd80 [ 75.444249] ? lock_page_memcg+0x2bd/0x3b0 [ 75.444256] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.444272] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 75.444279] ? find_held_lock+0x39/0x1d0 [ 75.444309] ? lock_downgrade+0x980/0x980 [ 75.444353] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.444367] ? rcu_note_context_switch+0x710/0x710 [ 75.444385] cache_grow_begin+0x72/0x3f0 [ 75.444405] kmem_cache_alloc_node+0x443/0x760 [ 75.444440] copy_process.part.36+0x1a6a/0x4ae0 [ 75.444453] ? __lock_acquire+0x6e9/0x47f0 [ 75.444482] ? __cleanup_sighand+0x40/0x40 [ 75.444508] ? print_usage_bug+0x3f0/0x3f0 [ 75.444515] ? wake_up_page_bit+0x530/0x530 [ 75.444530] ? __lock_is_held+0xbc/0x140 [ 75.444574] ? __lock_acquire+0x6e9/0x47f0 [ 75.444593] ? perf_trace_lock+0x900/0x900 [ 75.444607] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.444633] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.444646] ? check_noncircular+0x20/0x20 [ 75.444657] ? perf_trace_lock+0x900/0x900 [ 75.444668] ? print_usage_bug+0x3f0/0x3f0 [ 75.444682] ? check_noncircular+0x20/0x20 [ 75.444703] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.444711] ? __fdget_pos+0x131/0x1a0 [ 75.444728] ? check_noncircular+0x20/0x20 [ 75.444739] ? perf_trace_lock+0x900/0x900 [ 75.444761] ? lock_downgrade+0x980/0x980 [ 75.444773] ? check_noncircular+0x20/0x20 [ 75.444798] ? find_held_lock+0x39/0x1d0 [ 75.444810] ? check_noncircular+0x20/0x20 [ 75.444833] ? lock_downgrade+0x980/0x980 [ 75.444843] ? __lock_is_held+0xbc/0x140 [ 75.444875] ? find_held_lock+0x39/0x1d0 [ 75.444905] ? lock_downgrade+0x980/0x980 [ 75.444917] ? get_pid_task+0xbc/0x140 [ 75.444929] ? proc_fail_nth_write+0xb5/0x260 [ 75.444941] ? map_files_get_link+0x3a0/0x3a0 [ 75.444947] ? __lock_is_held+0xbc/0x140 [ 75.444969] _do_fork+0x1ef/0xff0 [ 75.444990] ? fork_idle+0x2d0/0x2d0 [ 75.445008] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.445019] ? kernel_read+0x120/0x120 [ 75.445031] ? wait_for_completion+0x7b0/0x7b0 [ 75.445052] ? __lock_is_held+0xbc/0x140 [ 75.445093] ? __sb_end_write+0x9e/0xd0 [ 75.445112] ? fput+0xd2/0x140 [ 75.445123] ? SyS_write+0x184/0x220 [ 75.445131] ? __do_page_fault+0x3d6/0xc90 [ 75.445144] ? SyS_read+0x220/0x220 [ 75.445164] SyS_clone+0x37/0x50 [ 75.445175] ? entry_INT80_compat+0x40/0x40 [ 75.445188] do_fast_syscall_32+0x3ee/0xf9d [ 75.445211] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.445226] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.445239] ? lockdep_sys_exit+0x47/0xf0 [ 75.445250] ? syscall_return_slowpath+0x2ad/0x550 [ 75.445266] ? sysret32_from_system_call+0x5/0x3b [ 75.445286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.445309] entry_SYSENTER_compat+0x51/0x60 [ 75.445319] RIP: 0023:0xf7ff7c79 [ 75.445323] RSP: 002b:00000000f77f308c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.445332] RAX: ffffffffffffffda RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.445336] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.445340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.445345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.445349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.449866] binder: release 8910:8916 transaction 798 out, still active [ 75.449875] binder: release 8910:8916 transaction 797 in, still active [ 75.449881] binder: undelivered TRANSACTION_COMPLETE [ 75.453357] binder: release 8909:8921 transaction 795 out, still active [ 75.453362] binder: undelivered TRANSACTION_COMPLETE [ 75.459771] FAULT_INJECTION: forcing a failure. [ 75.459771] name failslab, interval 1, probability 0, space 0, times 0 [ 75.459780] CPU: 1 PID: 8929 Comm: syz-executor5 Not tainted 4.15.0-rc1+ #107 [ 75.459785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.459788] Call Trace: [ 75.459802] dump_stack+0x194/0x257 [ 75.459826] ? arch_local_irq_restore+0x53/0x53 [ 75.459839] ? __free_insn_slot+0x5c0/0x5c0 [ 75.459870] should_fail+0x8c0/0xa40 [ 75.459888] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.459897] ? is_bpf_text_address+0xa4/0x120 [ 75.459909] ? kernel_text_address+0x102/0x140 [ 75.459924] ? __kernel_text_address+0xd/0x40 [ 75.459937] ? unwind_get_return_address+0x61/0xa0 [ 75.459950] ? __save_stack_trace+0x7e/0xd0 [ 75.459967] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.459977] ? depot_save_stack+0x12c/0x490 [ 75.459995] ? check_noncircular+0x20/0x20 [ 75.460010] ? perf_trace_lock+0x900/0x900 [ 75.460022] ? save_stack+0x43/0xd0 [ 75.460029] ? kasan_kmalloc+0xad/0xe0 [ 75.460037] ? __kmalloc+0x162/0x760 [ 75.460047] ? bpf_prog_test_run_skb+0xfb/0x990 [ 75.460055] ? SyS_bpf+0x1024/0x4410 [ 75.460063] ? do_fast_syscall_32+0x3ee/0xf9d [ 75.460071] ? entry_SYSENTER_compat+0x51/0x60 [ 75.460088] ? find_held_lock+0x39/0x1d0 [ 75.460111] ? find_held_lock+0x39/0x1d0 [ 75.460132] should_failslab+0xec/0x120 [ 75.460145] kmem_cache_alloc+0x47/0x760 [ 75.460155] ? lock_downgrade+0x980/0x980 [ 75.460167] ? __might_fault+0xe0/0x1d0 [ 75.460176] ? kasan_unpoison_shadow+0x35/0x50 [ 75.460196] __build_skb+0x9d/0x450 [ 75.460210] ? skb_try_coalesce+0x1c50/0x1c50 [ 75.460221] ? __check_object_size+0x25d/0x4f0 [ 75.460248] ? __might_sleep+0x95/0x190 [ 75.460270] build_skb+0x6f/0x2a0 [ 75.460281] ? __build_skb+0x450/0x450 [ 75.460290] ? _copy_from_user+0x99/0x110 [ 75.460309] ? bpf_test_init.isra.7+0x50/0xe0 [ 75.460328] bpf_prog_test_run_skb+0x189/0x990 [ 75.460343] ? __might_sleep+0x95/0x190 [ 75.460356] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.460365] ? bpf_prog_add+0x7b/0xa0 [ 75.460374] ? fput+0xd2/0x140 [ 75.460388] ? __bpf_prog_get+0x81/0x220 [ 75.460401] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.460414] SyS_bpf+0x1024/0x4410 [ 75.460423] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.460431] ? __fdget_pos+0x131/0x1a0 [ 75.460451] ? bpf_prog_get+0x20/0x20 [ 75.460463] ? perf_trace_lock+0x900/0x900 [ 75.460487] ? lock_downgrade+0x980/0x980 [ 75.460490] binder: BINDER_SET_CONTEXT_MGR already set [ 75.460497] binder: 8903:8931 ioctl 40046207 0 returned -16 [ 75.460503] ? check_noncircular+0x20/0x20 [ 75.460532] ? find_held_lock+0x39/0x1d0 [ 75.460545] ? check_noncircular+0x20/0x20 [ 75.460572] ? lock_downgrade+0x980/0x980 [ 75.460583] ? __lock_is_held+0xbc/0x140 [ 75.460616] ? find_held_lock+0x39/0x1d0 [ 75.460650] ? lock_downgrade+0x980/0x980 [ 75.460662] ? get_pid_task+0xbc/0x140 [ 75.460675] ? proc_fail_nth_write+0xb5/0x260 [ 75.460688] ? map_files_get_link+0x3a0/0x3a0 [ 75.460695] ? __lock_is_held+0xbc/0x140 [ 75.460718] ? find_held_lock+0x39/0x1d0 [ 75.460751] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.460760] ? kernel_read+0x120/0x120 [ 75.460772] ? wait_for_completion+0x7b0/0x7b0 [ 75.460792] ? __lock_is_held+0xbc/0x140 [ 75.460839] ? __sb_end_write+0x9e/0xd0 [ 75.460857] ? fput+0xd2/0x140 [ 75.460868] ? SyS_write+0x184/0x220 [ 75.460893] ? do_fast_syscall_32+0x156/0xf9d [ 75.460911] ? bpf_prog_get+0x20/0x20 [ 75.460922] do_fast_syscall_32+0x3ee/0xf9d [ 75.460945] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.460966] ? lockdep_sys_exit+0x47/0xf0 [ 75.460976] ? syscall_return_slowpath+0x2ad/0x550 [ 75.460993] ? sysret32_from_system_call+0x5/0x3b [ 75.461013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.461035] entry_SYSENTER_compat+0x51/0x60 [ 75.461041] RIP: 0023:0xf7fc6c79 [ 75.461045] RSP: 002b:00000000f77c208c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 75.461054] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020a4e000 [ 75.461059] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.461064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.461068] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.461072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.471778] binder_alloc: 8903: binder_alloc_buf, no vma [ 75.471815] binder: 8903:8919 transaction failed 29189/-3, size 0-0 line 2870 [ 75.472402] binder_alloc: 8903: binder_alloc_buf, no vma [ 75.472425] binder: 8903:8931 transaction failed 29189/-3, size 0-0 line 2870 [ 75.474386] FAULT_INJECTION: forcing a failure. [ 75.474386] name failslab, interval 1, probability 0, space 0, times 0 [ 75.474395] CPU: 1 PID: 8937 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.474400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.474403] Call Trace: [ 75.474415] dump_stack+0x194/0x257 [ 75.474432] ? arch_local_irq_restore+0x53/0x53 [ 75.474467] should_fail+0x8c0/0xa40 [ 75.474485] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.474521] ? find_held_lock+0x39/0x1d0 [ 75.474554] ? lock_downgrade+0x980/0x980 [ 75.474603] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.474614] ? rcu_read_lock_sched_held+0x108/0x120 [ 75.474631] ? rcu_note_context_switch+0x710/0x710 [ 75.474661] should_failslab+0xec/0x120 [ 75.474675] kmem_cache_alloc+0x47/0x760 [ 75.474688] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.474699] ? rcu_pm_notify+0xc0/0xc0 [ 75.474719] prepare_creds+0x78/0x360 [ 75.474730] ? abort_creds+0x130/0x130 [ 75.474745] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.474753] ? __lockdep_init_map+0xe4/0x650 [ 75.474774] copy_creds+0x7b/0x3a0 [ 75.474795] copy_process.part.36+0xb28/0x4ae0 [ 75.474816] ? __lock_acquire+0x6e9/0x47f0 [ 75.474851] ? __cleanup_sighand+0x40/0x40 [ 75.474882] ? print_usage_bug+0x3f0/0x3f0 [ 75.474891] ? wake_up_page_bit+0x530/0x530 [ 75.474908] ? __lock_is_held+0xbc/0x140 [ 75.474960] ? __lock_acquire+0x6e9/0x47f0 [ 75.474983] ? perf_trace_lock+0x900/0x900 [ 75.474999] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.475029] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.475043] ? check_noncircular+0x20/0x20 [ 75.475055] ? perf_trace_lock+0x900/0x900 [ 75.475068] ? print_usage_bug+0x3f0/0x3f0 [ 75.475083] ? check_noncircular+0x20/0x20 [ 75.475107] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.475115] ? __fdget_pos+0x131/0x1a0 [ 75.475134] ? check_noncircular+0x20/0x20 [ 75.475146] ? perf_trace_lock+0x900/0x900 [ 75.475171] ? lock_downgrade+0x980/0x980 [ 75.475184] ? check_noncircular+0x20/0x20 [ 75.475213] ? find_held_lock+0x39/0x1d0 [ 75.475226] ? check_noncircular+0x20/0x20 [ 75.475253] ? lock_downgrade+0x980/0x980 [ 75.475264] ? __lock_is_held+0xbc/0x140 [ 75.475300] ? find_held_lock+0x39/0x1d0 [ 75.475334] ? lock_downgrade+0x980/0x980 [ 75.475347] ? get_pid_task+0xbc/0x140 [ 75.475360] ? proc_fail_nth_write+0xb5/0x260 [ 75.475373] ? map_files_get_link+0x3a0/0x3a0 [ 75.475380] ? __lock_is_held+0xbc/0x140 [ 75.475405] _do_fork+0x1ef/0xff0 [ 75.475428] ? fork_idle+0x2d0/0x2d0 [ 75.475447] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.475459] ? kernel_read+0x120/0x120 [ 75.475472] ? wait_for_completion+0x7b0/0x7b0 [ 75.475494] ? __lock_is_held+0xbc/0x140 [ 75.475539] ? __sb_end_write+0x9e/0xd0 [ 75.475559] ? fput+0xd2/0x140 [ 75.475571] ? SyS_write+0x184/0x220 [ 75.475579] ? __do_page_fault+0x3d6/0xc90 [ 75.475593] ? SyS_read+0x220/0x220 [ 75.475616] SyS_clone+0x37/0x50 [ 75.475627] ? entry_INT80_compat+0x40/0x40 [ 75.475641] do_fast_syscall_32+0x3ee/0xf9d [ 75.475668] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.475692] ? lockdep_sys_exit+0x47/0xf0 [ 75.475704] ? syscall_return_slowpath+0x2ad/0x550 [ 75.475723] ? sysret32_from_system_call+0x5/0x3b [ 75.475745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.475771] entry_SYSENTER_compat+0x51/0x60 [ 75.475777] RIP: 0023:0xf7ff7c79 [ 75.475782] RSP: 002b:00000000f77f308c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.475792] RAX: ffffffffffffffda RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.475797] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.475801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.475806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.475816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.476074] binder: release 8910:8927 transaction 797 out, still active [ 75.476081] binder: undelivered TRANSACTION_COMPLETE [ 75.476095] binder: send failed reply for transaction 798, target dead [ 75.476105] binder: send failed reply for transaction 797, target dead [ 75.495379] binder: BINDER_SET_CONTEXT_MGR already set [ 75.495390] binder: 8909:8936 ioctl 40046207 0 returned -16 [ 75.496847] FAULT_INJECTION: forcing a failure. [ 75.496847] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.496860] CPU: 0 PID: 8945 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #107 [ 75.496866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.496869] Call Trace: [ 75.496884] dump_stack+0x194/0x257 [ 75.496900] ? arch_local_irq_restore+0x53/0x53 [ 75.496931] should_fail+0x8c0/0xa40 [ 75.496947] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.496972] ? print_usage_bug+0x3f0/0x3f0 [ 75.496982] ? lock_downgrade+0x980/0x980 [ 75.496994] ? __bpf_address_lookup+0x2b0/0x2b0 [ 75.497014] ? check_noncircular+0x20/0x20 [ 75.497026] ? find_held_lock+0x39/0x1d0 [ 75.497052] ? lock_downgrade+0x980/0x980 [ 75.497064] ? __free_insn_slot+0x5c0/0x5c0 [ 75.497081] ? find_held_lock+0x39/0x1d0 [ 75.497111] should_fail_futex.part.10+0x1a/0x20 [ 75.497121] get_futex_key+0x3a7/0x1d50 [ 75.497130] ? __bpf_address_lookup+0x2b0/0x2b0 [ 75.497157] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 75.497177] ? rcutorture_record_progress+0x10/0x10 [ 75.497199] ? is_bpf_text_address+0xa4/0x120 [ 75.497209] ? kernel_text_address+0x102/0x140 [ 75.497223] ? __kernel_text_address+0xd/0x40 [ 75.497234] ? unwind_get_return_address+0x61/0xa0 [ 75.497246] ? __save_stack_trace+0x7e/0xd0 [ 75.497263] ? depot_save_stack+0x12c/0x490 [ 75.497283] ? save_stack+0xa3/0xd0 [ 75.497293] ? save_stack+0x43/0xd0 [ 75.497299] ? kasan_kmalloc+0xad/0xe0 [ 75.497307] ? kmem_cache_alloc_trace+0x136/0x750 [ 75.497324] ? refill_pi_state_cache.part.6+0xa5/0x2f0 [ 75.497333] ? futex_requeue+0x1887/0x2370 [ 75.497343] ? do_futex+0x8d0/0x2280 [ 75.497352] ? compat_SyS_futex+0x27f/0x380 [ 75.497362] ? do_fast_syscall_32+0x3ee/0xf9d [ 75.497371] ? entry_SYSENTER_compat+0x51/0x60 [ 75.497386] ? find_held_lock+0x39/0x1d0 [ 75.497415] ? lock_downgrade+0x980/0x980 [ 75.497453] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.497464] ? rcu_pm_notify+0xc0/0xc0 [ 75.497490] ? refill_pi_state_cache.part.6+0xa5/0x2f0 [ 75.497500] ? rcu_read_lock_sched_held+0x108/0x120 [ 75.497510] ? kmem_cache_alloc_trace+0x459/0x750 [ 75.497541] ? refill_pi_state_cache.part.6+0x24f/0x2f0 [ 75.497551] ? hash_futex+0x210/0x210 [ 75.497564] ? __lock_acquire+0x6e9/0x47f0 [ 75.497596] futex_requeue+0x38a/0x2370 [ 75.497631] ? futex_lock_pi+0x1050/0x1050 [ 75.497645] ? check_noncircular+0x20/0x20 [ 75.497663] ? lock_acquire+0x1d5/0x580 [ 75.497673] ? __fdget_pos+0x131/0x1a0 [ 75.497689] ? check_noncircular+0x20/0x20 [ 75.497716] ? lock_downgrade+0x980/0x980 [ 75.497742] do_futex+0x8d0/0x2280 [ 75.497754] ? check_noncircular+0x20/0x20 [ 75.497784] ? exit_robust_list+0x240/0x240 [ 75.497808] ? find_held_lock+0x39/0x1d0 [ 75.497836] ? lock_downgrade+0x980/0x980 [ 75.497848] ? get_pid_task+0xbc/0x140 [ 75.497860] ? proc_fail_nth_write+0xb5/0x260 [ 75.497872] ? map_files_get_link+0x3a0/0x3a0 [ 75.497878] ? __lock_is_held+0xbc/0x140 [ 75.497898] ? find_held_lock+0x39/0x1d0 [ 75.497925] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.497939] ? kernel_read+0x120/0x120 [ 75.497951] ? wait_for_completion+0x7b0/0x7b0 [ 75.497972] ? __lock_is_held+0xbc/0x140 [ 75.498013] compat_SyS_futex+0x27f/0x380 [ 75.498035] ? compat_SyS_get_robust_list+0x300/0x300 [ 75.498041] ? SyS_write+0x184/0x220 [ 75.498049] ? __do_page_fault+0x3d6/0xc90 [ 75.498064] ? SyS_read+0x220/0x220 [ 75.498077] ? do_fast_syscall_32+0x156/0xf9d [ 75.498093] ? compat_SyS_get_robust_list+0x300/0x300 [ 75.498105] do_fast_syscall_32+0x3ee/0xf9d [ 75.498126] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.498146] ? lockdep_sys_exit+0x47/0xf0 [ 75.498156] ? syscall_return_slowpath+0x2ad/0x550 [ 75.498172] ? sysret32_from_system_call+0x5/0x3b [ 75.498190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.498211] entry_SYSENTER_compat+0x51/0x60 [ 75.498217] RIP: 0023:0xf7fe4c79 [ 75.498222] RSP: 002b:00000000f77bf08c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 75.498230] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000c [ 75.498234] RDX: 0000000000000001 RSI: 000000002000d000 RDI: 0000000020048000 [ 75.498239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.498243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.498248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.498647] binder: 8909:8921 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 75.498655] binder: 8921 RLIMIT_NICE not set [ 75.499431] FAULT_INJECTION: forcing a failure. [ 75.499431] name failslab, interval 1, probability 0, space 0, times 0 [ 75.499439] CPU: 0 PID: 8947 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.499444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.499447] Call Trace: [ 75.499458] dump_stack+0x194/0x257 [ 75.499473] ? arch_local_irq_restore+0x53/0x53 [ 75.499506] should_fail+0x8c0/0xa40 [ 75.499525] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.499538] ? depot_save_stack+0x12c/0x490 [ 75.499559] ? find_held_lock+0x39/0x1d0 [ 75.499585] ? lock_downgrade+0x980/0x980 [ 75.499618] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.499633] ? rcu_note_context_switch+0x710/0x710 [ 75.499656] should_failslab+0xec/0x120 [ 75.499669] __kmalloc_track_caller+0x5f/0x760 [ 75.499677] ? rcu_pm_notify+0xc0/0xc0 [ 75.499693] ? prepare_creds+0x78/0x360 [ 75.499702] ? selinux_cred_prepare+0x43/0xa0 [ 75.499719] kmemdup+0x24/0x50 [ 75.499732] selinux_cred_prepare+0x43/0xa0 [ 75.499745] security_prepare_creds+0x7d/0xb0 [ 75.499762] prepare_creds+0x2b1/0x360 [ 75.499772] ? abort_creds+0x130/0x130 [ 75.499785] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.499791] ? __lockdep_init_map+0xe4/0x650 [ 75.499810] copy_creds+0x7b/0x3a0 [ 75.499829] copy_process.part.36+0xb28/0x4ae0 [ 75.499842] ? __lock_acquire+0x6e9/0x47f0 [ 75.499869] ? __cleanup_sighand+0x40/0x40 [ 75.499893] ? print_usage_bug+0x3f0/0x3f0 [ 75.499900] ? wake_up_page_bit+0x530/0x530 [ 75.499913] ? __lock_is_held+0xbc/0x140 [ 75.499947] ? __lock_acquire+0x6e9/0x47f0 [ 75.499965] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.499983] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.499990] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 75.500000] ? check_noncircular+0x20/0x20 [ 75.500010] ? print_usage_bug+0x3f0/0x3f0 [ 75.500021] ? print_usage_bug+0x3f0/0x3f0 [ 75.500036] ? check_noncircular+0x20/0x20 [ 75.500054] ? lock_acquire+0x1d5/0x580 [ 75.500062] ? __fdget_pos+0x131/0x1a0 [ 75.500079] ? check_noncircular+0x20/0x20 [ 75.500106] ? lock_downgrade+0x980/0x980 [ 75.500118] ? check_noncircular+0x20/0x20 [ 75.500140] ? find_held_lock+0x39/0x1d0 [ 75.500151] ? check_noncircular+0x20/0x20 [ 75.500177] ? lock_downgrade+0x980/0x980 [ 75.500186] ? __lock_is_held+0xbc/0x140 [ 75.500222] ? find_held_lock+0x39/0x1d0 [ 75.500255] ? lock_downgrade+0x980/0x980 [ 75.500267] ? get_pid_task+0xbc/0x140 [ 75.500279] ? proc_fail_nth_write+0xb5/0x260 [ 75.500294] ? map_files_get_link+0x3a0/0x3a0 [ 75.500301] ? __lock_is_held+0xbc/0x140 [ 75.500330] _do_fork+0x1ef/0xff0 [ 75.500354] ? fork_idle+0x2d0/0x2d0 [ 75.500372] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.500384] ? kernel_read+0x120/0x120 [ 75.500396] ? wait_for_completion+0x7b0/0x7b0 [ 75.500418] ? __lock_is_held+0xbc/0x140 [ 75.500464] ? __sb_end_write+0x9e/0xd0 [ 75.500484] ? fput+0xd2/0x140 [ 75.500494] ? SyS_write+0x184/0x220 [ 75.500500] ? __do_page_fault+0x3d6/0xc90 [ 75.500514] ? SyS_read+0x220/0x220 [ 75.500535] SyS_clone+0x37/0x50 [ 75.500545] ? entry_INT80_compat+0x40/0x40 [ 75.500557] do_fast_syscall_32+0x3ee/0xf9d [ 75.500581] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.500603] ? lockdep_sys_exit+0x47/0xf0 [ 75.500612] ? syscall_return_slowpath+0x2ad/0x550 [ 75.500629] ? sysret32_from_system_call+0x5/0x3b [ 75.500649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.500673] entry_SYSENTER_compat+0x51/0x60 [ 75.500678] RIP: 0023:0xf7ff7c79 [ 75.500682] RSP: 002b:00000000f77f308c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.500689] RAX: ffffffffffffffda RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.500693] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.500697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.500700] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.500704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.500995] binder: BINDER_SET_CONTEXT_MGR already set [ 75.501007] binder: 8910:8927 ioctl 40046207 0 returned -16 [ 75.501155] binder_alloc: 8909: binder_alloc_buf, no vma [ 75.501177] binder: 8909:8921 transaction failed 29189/-3, size 0-0 line 2870 [ 75.502458] binder: 8927 RLIMIT_NICE not set [ 75.502530] binder_alloc: 8910: binder_alloc_buf, no vma [ 75.502548] binder: 8910:8943 transaction failed 29189/-3, size 0-0 line 2870 [ 75.503454] FAULT_INJECTION: forcing a failure. [ 75.503454] name failslab, interval 1, probability 0, space 0, times 0 [ 75.503462] CPU: 1 PID: 8941 Comm: syz-executor5 Not tainted 4.15.0-rc1+ #107 [ 75.503467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.503469] Call Trace: [ 75.503480] dump_stack+0x194/0x257 [ 75.503496] ? arch_local_irq_restore+0x53/0x53 [ 75.503527] should_fail+0x8c0/0xa40 [ 75.503543] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.503560] ? __lock_is_held+0xbc/0x140 [ 75.503577] ? find_held_lock+0x39/0x1d0 [ 75.503610] ? __lock_is_held+0xbc/0x140 [ 75.503650] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.503658] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.503670] ? rcu_note_context_switch+0x710/0x710 [ 75.503696] should_failslab+0xec/0x120 [ 75.503708] kmem_cache_alloc+0x47/0x760 [ 75.503717] ? print_usage_bug+0x3f0/0x3f0 [ 75.503744] ptlock_alloc+0x24/0x70 [ 75.503757] pte_alloc_one+0x59/0x100 [ 75.503768] __pte_alloc+0x2a/0x310 [ 75.503786] __handle_mm_fault+0x3300/0x3ad0 [ 75.503806] ? __pmd_alloc+0x4e0/0x4e0 [ 75.503822] ? find_held_lock+0x39/0x1d0 [ 75.503853] ? lock_downgrade+0x980/0x980 [ 75.503862] ? __lock_is_held+0xbc/0x140 [ 75.503926] handle_mm_fault+0x334/0x8d0 [ 75.503933] ? down_read_trylock+0xdb/0x170 [ 75.503940] ? __do_page_fault+0x32d/0xc90 [ 75.503952] ? __handle_mm_fault+0x3ad0/0x3ad0 [ 75.503960] ? vmacache_find+0x5f/0x280 [ 75.503969] ? vmacache_update+0xfe/0x130 [ 75.503984] ? find_vma+0x30/0x150 [ 75.504001] __do_page_fault+0x5c9/0xc90 [ 75.504026] ? mm_fault_error+0x2c0/0x2c0 [ 75.504046] ? lock_downgrade+0x980/0x980 [ 75.504063] do_page_fault+0xee/0x720 [ 75.504076] ? __do_page_fault+0xc90/0xc90 [ 75.504084] ? find_held_lock+0x39/0x1d0 [ 75.504114] ? lock_downgrade+0x980/0x980 [ 75.504125] ? __might_fault+0xe0/0x1d0 [ 75.504140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.504164] page_fault+0x22/0x30 [ 75.504172] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 75.504176] RSP: 0018:ffff88019caf75d8 EFLAGS: 00010203 [ 75.504183] RAX: ffffed003a2f00aa RBX: 000000000000000e RCX: 0000000000000001 [ 75.504188] RDX: 0000000000000006 RSI: ffff8801d1780540 RDI: 0000000020ffa000 [ 75.504193] RBP: ffff88019caf7608 R08: 37ad4ea9d67842aa R09: ffffed003a2f00aa [ 75.504198] R10: 0000000000000002 R11: ffffed003a2f00a9 R12: 0000000020ffa000 [ 75.504202] R13: ffff8801d1780540 R14: 00007ffffffff000 R15: 0000000020ffa00e [ 75.504244] ? _copy_to_user+0x9b/0xc0 [ 75.504262] bpf_test_finish.isra.6+0x54/0xd0 [ 75.504280] bpf_prog_test_run_skb+0x6c7/0x990 [ 75.504302] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.504313] ? fput+0xd2/0x140 [ 75.504326] ? __bpf_prog_get+0x81/0x220 [ 75.504337] ? bpf_test_finish.isra.6+0xd0/0xd0 [ 75.504349] SyS_bpf+0x1024/0x4410 [ 75.504358] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.504365] ? __fdget_pos+0x131/0x1a0 [ 75.504383] ? bpf_prog_get+0x20/0x20 [ 75.504395] ? perf_trace_lock+0x900/0x900 [ 75.504417] ? lock_downgrade+0x980/0x980 [ 75.504429] ? check_noncircular+0x20/0x20 [ 75.504455] ? find_held_lock+0x39/0x1d0 [ 75.504466] ? check_noncircular+0x20/0x20 [ 75.504490] ? lock_downgrade+0x980/0x980 [ 75.504500] ? __lock_is_held+0xbc/0x140 [ 75.504532] ? find_held_lock+0x39/0x1d0 [ 75.504563] ? lock_downgrade+0x980/0x980 [ 75.504576] ? get_pid_task+0xbc/0x140 [ 75.504587] ? proc_fail_nth_write+0xb5/0x260 [ 75.504599] ? map_files_get_link+0x3a0/0x3a0 [ 75.504606] ? __lock_is_held+0xbc/0x140 [ 75.504628] ? find_held_lock+0x39/0x1d0 [ 75.504660] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.504671] ? kernel_read+0x120/0x120 [ 75.504682] ? wait_for_completion+0x7b0/0x7b0 [ 75.504703] ? __lock_is_held+0xbc/0x140 [ 75.504743] ? __sb_end_write+0x9e/0xd0 [ 75.504762] ? fput+0xd2/0x140 [ 75.504772] ? SyS_write+0x184/0x220 [ 75.504797] ? do_fast_syscall_32+0x156/0xf9d [ 75.504818] ? bpf_prog_get+0x20/0x20 [ 75.504830] do_fast_syscall_32+0x3ee/0xf9d [ 75.504853] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.504867] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.504880] ? lockdep_sys_exit+0x47/0xf0 [ 75.504890] ? syscall_return_slowpath+0x2ad/0x550 [ 75.504907] ? sysret32_from_system_call+0x5/0x3b [ 75.504927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.504950] entry_SYSENTER_compat+0x51/0x60 [ 75.504955] RIP: 0023:0xf7fc6c79 [ 75.504959] RSP: 002b:00000000f77c208c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 75.504968] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020a4e000 [ 75.504972] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.504977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.504981] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.504985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.505225] binder_alloc: 8910: binder_alloc_buf, no vma [ 75.505244] binder: 8910:8927 transaction failed 29189/-3, size 0-0 line 2870 [ 75.523523] binder: release 8909:8914 transaction 795 in, still active [ 75.523530] binder: send failed reply for transaction 795, target dead [ 75.527079] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.527473] FAULT_INJECTION: forcing a failure. [ 75.527473] name failslab, interval 1, probability 0, space 0, times 0 [ 75.527481] CPU: 0 PID: 8950 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.527485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.527488] Call Trace: [ 75.527499] dump_stack+0x194/0x257 [ 75.527513] ? arch_local_irq_restore+0x53/0x53 [ 75.527520] ? __save_stack_trace+0x7e/0xd0 [ 75.527545] should_fail+0x8c0/0xa40 [ 75.527558] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.527572] ? find_held_lock+0x39/0x1d0 [ 75.527588] ? find_held_lock+0x39/0x1d0 [ 75.527613] ? lock_downgrade+0x980/0x980 [ 75.527645] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 75.527658] ? rcu_note_context_switch+0x710/0x710 [ 75.527669] ? kvm_clock_get_cycles+0x25/0x30 [ 75.527687] should_failslab+0xec/0x120 [ 75.527697] kmem_cache_alloc_trace+0x4b/0x750 [ 75.527706] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.527712] ? __lockdep_init_map+0xe4/0x650 [ 75.527723] ? __lockdep_init_map+0xe4/0x650 [ 75.527739] lockdep_init_task+0x187/0x210 [ 75.527751] copy_process.part.36+0x16eb/0x4ae0 [ 75.527782] ? __cleanup_sighand+0x40/0x40 [ 75.527803] ? print_usage_bug+0x3f0/0x3f0 [ 75.527810] ? wake_up_page_bit+0x530/0x530 [ 75.527823] ? __lock_is_held+0xbc/0x140 [ 75.527859] ? __lock_acquire+0x6e9/0x47f0 [ 75.527882] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.527904] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 75.527916] ? check_noncircular+0x20/0x20 [ 75.527926] ? print_usage_bug+0x3f0/0x3f0 [ 75.527935] ? print_usage_bug+0x3f0/0x3f0 [ 75.527948] ? check_noncircular+0x20/0x20 [ 75.527964] ? lock_acquire+0x1d5/0x580 [ 75.527972] ? __fdget_pos+0x131/0x1a0 [ 75.527987] ? check_noncircular+0x20/0x20 [ 75.528015] ? lock_downgrade+0x980/0x980 [ 75.528024] ? check_noncircular+0x20/0x20 [ 75.528046] ? find_held_lock+0x39/0x1d0 [ 75.528055] ? check_noncircular+0x20/0x20 [ 75.528076] ? lock_downgrade+0x980/0x980 [ 75.528084] ? __lock_is_held+0xbc/0x140 [ 75.528110] ? find_held_lock+0x39/0x1d0 [ 75.528136] ? lock_downgrade+0x980/0x980 [ 75.528146] ? get_pid_task+0xbc/0x140 [ 75.528157] ? proc_fail_nth_write+0xb5/0x260 [ 75.528167] ? map_files_get_link+0x3a0/0x3a0 [ 75.528173] ? __lock_is_held+0xbc/0x140 [ 75.528192] _do_fork+0x1ef/0xff0 [ 75.528210] ? fork_idle+0x2d0/0x2d0 [ 75.528224] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 75.528234] ? kernel_read+0x120/0x120 [ 75.528245] ? wait_for_completion+0x7b0/0x7b0 [ 75.528262] ? __lock_is_held+0xbc/0x140 [ 75.528299] ? __sb_end_write+0x9e/0xd0 [ 75.528321] ? fput+0xd2/0x140 [ 75.528331] ? SyS_write+0x184/0x220 [ 75.528339] ? __do_page_fault+0x3d6/0xc90 [ 75.528352] ? SyS_read+0x220/0x220 [ 75.528371] SyS_clone+0x37/0x50 [ 75.528381] ? entry_INT80_compat+0x40/0x40 [ 75.528393] do_fast_syscall_32+0x3ee/0xf9d [ 75.528414] ? do_int80_syscall_32+0x9d0/0x9d0 [ 75.528427] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.528439] ? lockdep_sys_exit+0x47/0xf0 [ 75.528450] ? syscall_return_slowpath+0x2ad/0x550 [ 75.528466] ? sysret32_from_system_call+0x5/0x3b [ 75.528485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.528506] entry_SYSENTER_compat+0x51/0x60 [ 75.528512] RIP: 0023:0xf7ff7c79 [ 75.528516] RSP: 002b:00000000f77f308c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.528525] RAX: ffffffffffffffda RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.528530] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.528534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.528539] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.528543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.530604] kasan: CONFIG_KASAN_INLINE enabled [ 75.530607] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 75.530614] general protection fault: 0000 [#1] SMP KASAN [ 75.530619] Dumping ftrace buffer: [ 75.530623] (ftrace buffer empty) [ 75.530625] Modules linked in: [ 75.530633] CPU: 0 PID: 8951 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #107 [ 75.530636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.530640] task: ffff8801d0a2a400 task.stack: ffff8801c6cb8000 [ 75.530647] RIP: 0010:lockdep_invariant_state+0xd6/0x120 [ 75.530651] RSP: 0018:ffff8801c6cbfe48 EFLAGS: 00010002 [ 75.530656] RAX: dffffc0000000000 RBX: 0000000000001d88 RCX: ffffffff81008dab [ 75.530660] RDX: 00000000000003bc RSI: 0000000000000000 RDI: 0000000000001de0 [ 75.530664] RBP: ffff8801c6cbfe58 R08: 0000000000000000 R09: 0000000000000000 [ 75.530667] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.530671] R13: ffff8801c6cbff20 R14: ffff8801c6cbff58 R15: ffff8801d0a2a400 [ 75.530676] FS: 0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000f77f3b40 [ 75.530680] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 75.530684] CR2: 00000000f77f3100 CR3: 00000001d1a06000 CR4: 00000000001406f0 [ 75.530690] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 75.530694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 75.530695] Call Trace: [ 75.530704] lockdep_sys_exit+0x47/0xf0 [ 75.530711] syscall_return_slowpath+0x240/0x550 [ 75.530719] ? prepare_exit_to_usermode+0x340/0x340 [ 75.530727] ? copy_overflow+0x20/0x20 [ 75.530743] ret_from_fork+0x15/0x30 [ 75.530747] RIP: 0023:0xf7ff7c79 [ 75.530750] RSP: 002b:000000002000bf71 EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 75.530756] RAX: 0000000000000000 RBX: 0000000080102000 RCX: 000000002000bf71 [ 75.530760] RDX: 0000000020004000 RSI: 0000000020004000 RDI: 0000000020008000 [ 75.530763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.530766] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.530770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.530784] Code: 83 90 11 00 00 83 e0 3f 48 89 c2 48 c1 e2 04 48 29 c2 48 b8 00 00 00 00 00 fc ff df 49 8d 1c d4 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 48 c7 43 58 00 00 00 00 5b 41 5c 5d c3 0f ff [ 75.530901] RIP: lockdep_invariant_state+0xd6/0x120 RSP: ffff8801c6cbfe48 [ 75.530909] ---[ end trace ed3431a1a61271eb ]--- [ 75.530913] Kernel panic - not syncing: Fatal exception [ 75.533735] Dumping ftrace buffer: [ 75.533737] (ftrace buffer empty) [ 75.533740] Kernel Offset: disabled