10a0, 0x0}], 0x6, 0x2400) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005000-0x5)="636f6d6d00") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000005000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$llc(r6, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000004000-0x4)=0x10) pread64(r6, &(0x7f0000004000-0x6f)="", 0x0, 0x0) write(r6, &(0x7f0000007000-0x47)="9be8cd722266e58025d27704aaa488afbfca752c692f7629810d10d2db0164cb7e3de60bb8facba61255a0050e2d6e42ff02ba2ddadbd6a163afc550c0051e7ffda1b8e39caa11", 0x47) 2017/12/14 11:57:37 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b89000)="2f73656c696e75782f656e666f72636500", 0x400, 0x0) openat(r0, &(0x7f00002b4000)="2e2f66696c653000", 0x100, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001000-0x28)={0x2, 0x7, 0x10001, 0x5, "0a4c831d9490248e9c413f9ea0c32d2f6dc3e0f49e654179834be37dbbd5efee"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001000-0x4)=0x3, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000003000-0x8)="2e2f66696c653000", 0x2000, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000d58000)="636f6d6d00") ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000654000-0x10)={0x9, &(0x7f0000193000-0x48)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00009e7000-0x8)={r2, 0x1}) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r1, r3) write$eventfd(r1, &(0x7f000001d000-0x8)=0x6, 0x8) preadv(r1, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) fgetxattr(r4, &(0x7f0000add000-0xd)=@random={"73797374656d2e00", "2665746831"}, &(0x7f00003f6000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f36000-0x9)="2f6465762f72746300", 0x103000, 0x0) r1 = openat(r0, &(0x7f0000d68000)="2e2f66696c653000", 0x481, 0x1) socketpair(0x11, 0x0, 0x0, &(0x7f0000e2c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f000094c000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f000026c000)="2e2f66696c653000", 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f000062c000-0x8)=0x0, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000049e000-0xe8)={{{@in=@multicast1=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000)=0xe8) r6 = memfd_create(&(0x7f0000699000-0x9)="2f2465762f72746300", 0x2) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000348000-0x4)=0x80000003, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xf, &(0x7f0000d06000)=0x0, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000dd000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00005e4000)={0x0, 0x81, "390cbb0defd4e1b0515bc433e82f899ab90bd65d85fbfb91c57db1e18fed1c18d1cce7475ffabfc5b1b42ca06a5f12c822abe05344bab410dbaecebe418eb10804df8d8d5d6b1d0ff4de73f0202213ad8486c3dedcb272e19475d3b24889c084ca19014338bd82348038eb9a4d2c6898b0e1ca14fece9b4c72d2b2a11bba43b002"}, &(0x7f0000c64000-0x4)=0x89) sendto$inet6(r2, &(0x7f0000f0f000-0x1000)="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", 0x1000, 0x801, &(0x7f00000d8000)={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000a65000-0x6)={r8, 0x7}, 0x6) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000d1f000)={{0xa, 0x2, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8889}, {0xa, 0x3, 0x400, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401}, 0x7d8, [0xff, 0x308, 0xee92, 0x5e0f, 0x9, 0x6, 0x800, 0xfffffffffffffffc]}, 0x5c) sendto$inet(r6, &(0x7f0000801000)="", 0x0, 0x20000000, &(0x7f0000013000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) add_key(&(0x7f000003f000-0x8)="6269675f6b657900", &(0x7f00009f2000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000512000)="", 0x0, 0x0) sync() socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f000007d000-0xd)="2f6465762f7573626d6f6e2300", 0x8, 0x200000) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00001fe000)={@generic="b07300000000000900000000000000c4", @ifru_names=@generic="3bf6756a3fe96d616b00000000000000"}) r9 = openat(r5, &(0x7f0000b53000)="2e2f66696c653000", 0x220600, 0x40) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00008f9000)=0x0) fcntl$setown(r4, 0x8, r10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000b0b000-0x48)={{0x3, 0x3, 0x2, 0x2, 0x6}, 0x7fff, 0xfffffffffffffe00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f00004eb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000002000-0x8)="2e2f66696c653000", 0x362) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f00004eb000)="2e2f66696c653000", &(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000002000)="6465627567667300", 0x80001, &(0x7f0000003000-0x50)="f889f4e8fc611de5191f0e8bf6164c5fb74623b56dd6426a80fb688d17f42ff5b9e7dc338c99bac154069f34467f6b27bf771bba560b99228ee5135b6c6a72280953167250910ce95d61cda6cd1d560f") r0 = syz_open_dev$binder(&(0x7f00004eb000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40087602, 0xfffffffffffffff9) [ 81.516677] binder: 9543:9544 ioctl 40046205 6 returned -22 [ 81.517729] binder: 9543:9544 Acquire 1 refcount change on invalid ref 0 ret -22 [ 81.517744] binder: 9543:9544 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.517783] binder: 9543:9544 ioctl 40046205 136 returned -22 [ 81.517852] binder: 9543:9544 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 81.526545] binder_alloc: binder_alloc_mmap_handler: 9543 20005000-20009000 already mapped failed -16 [ 81.527616] binder: 9545:9550 ioctl c018620b 20002fe8 returned -14 2017/12/14 11:57:37 executing program 7: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f000095d000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f00000b6000-0x4)=0x10) close(r0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f0000472000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00004ec000)={r2, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fanotify_init(0x2, 0x400) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000287000)=[@enter_looper={0x630c}], 0x16, 0x0, &(0x7f00004ee000-0x16)="9c725eb3a505c0a462eef0ca6aeb1d5789969d17907c"}) syz_open_dev$binder(&(0x7f000011c000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc020660b, 0x20000004) [ 81.544516] binder: 9543:9547 ioctl 40046205 6 returned -22 [ 81.547167] binder_alloc: binder_alloc_mmap_handler: 9543 20f65000-20f68000 already mapped failed -16 [ 81.554289] binder: BINDER_SET_CONTEXT_MGR already set [ 81.554293] binder: 9543:9547 ioctl 40046207 0 returned -16 [ 81.554332] binder: 9543:9544 ioctl 40046205 136 returned -22 [ 81.586352] binder: BINDER_SET_CONTEXT_MGR already set [ 81.586357] binder: 9539:9563 ioctl 40046207 0 returned -16 [ 81.586404] binder: 9545:9564 ioctl 40046205 800 returned -22 2017/12/14 11:57:37 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f000028c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) r3 = syz_open_dev$binder(&(0x7f0000001000-0x3)="2f6465762f62696e6465722300", 0x0, 0x7fe) r4 = mmap$binder(&(0x7f0000efd000/0x4000)=nil, 0x4000, 0x3000009, 0x8050, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x1) close(r3) r6 = syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) r7 = syz_open_dev$binder(&(0x7f0000003000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r7, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000003000-0x30)={0x0, 0x0, &(0x7f000057e000-0x8)=[], 0xf7, 0x0, &(0x7f000057e000-0xf7)="bb5827b7cc7fd2c8b880838b49dd6bc3ab1f3a2fb92227a4b3bbc423032ea5617d49d6f610037cff2d4e5da6a4c4dfc6c76427885eabc229349aa759489c2739573ae1d2e25fa38921a2ba2ce3646982ff097fe5b86ae8a46037d9a8d5897304faf4cb411495d3a37f583327a24f1402b713e49470ae82c15c14e1e50d2bfa6035f3b06ff2c68020797104ba59e67b3022de6b303d91b9ba7feb581b021184b26e74c9beb92d21fb2d9e836ccfa68e30b015e9af1512426b7e2022d347f9174eb03d43a77c81cec8e46cbc7eda157f7c1c8348402e7170012be340c6928ebea25edfa2f95898c1671bf73bafe857d313f5ecbf8fd14009"}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000004000-0x18)={r5, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$binder(&(0x7f000057b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) close(r0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000007000-0x48)=[{r6, 0x400, 0x0}, {r0, 0x4, 0x0}, {r8, 0x1000, 0x0}, {r7, 0x2000, 0x0}, {r8, 0x48, 0x0}, {r6, 0x88, 0x0}, {r8, 0x0, 0x0}, {r7, 0x2, 0x0}, {r0, 0x4008, 0x0}], 0x9, 0xeabb) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0xffff) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x2, 0x1113, r8, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x51, r7, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x20, 0x0, &(0x7f000057e000-0x20)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x4}], 0xa9, 0x0, &(0x7f0000002000)="c0928423a714b77fae8105c08a6987d1c07c99736eb7793cfa9964a7322d94160108d4200ff9897bcc76f229406324aacbaa3affd74c366abe6bbb14a2bb5f8bf0c478dae4a2ef245a71261a33b667a723f70f38fe8679a862c98c4da0716b7f761ffe21d136923c5d8f143177de568c412110d5a424188085e8ea06ababe2dc8f4a469ec348e365ce4811123f29ccf70854d3dd5a4cb086442c0a996893f8c6fe1f51b3c1f2fecd1f"}) poll(&(0x7f0000007000-0x20)=[{r7, 0x102, 0x0}, {r8, 0x8000, 0x0}, {r1, 0x0, 0x0}, {r8, 0x0, 0x0}], 0x4, 0x7fff) [ 81.588429] binder_alloc: 9539: binder_alloc_buf, no vma [ 81.588460] binder: 9539:9554 transaction failed 29189/-3, size 0-0 line 3131 [ 81.610181] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.615664] binder: 9539:9554 got reply transaction with no transaction stack [ 81.615668] binder: 9539:9554 transaction failed 29201/-71, size 0-0 line 2924 [ 81.615818] binder: 9560:9571 ioctl 40087602 fffffffffffffff9 returned -22 [ 81.651044] binder: 9560:9575 ioctl 40087602 fffffffffffffff9 returned -22 [ 81.672129] binder: 9539:9542 transaction failed 29189/-3, size 0-0 line 3131 [ 81.680665] binder: send failed reply for transaction 1348, target dead [ 81.686038] binder: 9545:9558 ioctl 40046205 800 returned -22 [ 81.695300] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.703698] binder: undelivered TRANSACTION_ERROR: 29190 2017/12/14 11:57:37 executing program 1: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000)="706167656d617000") readv(r0, &(0x7f0000009000-0xa0)=[{&(0x7f0000009000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x76}, {&(0x7f0000007000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000d000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000004000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000e000-0xb5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb5}, {&(0x7f000000a000+0x454)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfe}, {&(0x7f0000004000-0x38)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x38}, {&(0x7f0000010000-0xfa)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfa}], 0x8) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000013000-0x8)="2e2f66696c653000", &(0x7f0000012000)=@random={"757365722e00", "2a6d696d655f74797065ce5d7070703000"}, &(0x7f0000011000-0x8)="706167656d617000", 0x8, 0x2) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000011000)={0x3, &(0x7f0000011000)=[0x10000, 0x6, 0x0]}) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) read(r0, &(0x7f00003ef000-0x2a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2a) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ec000)={0x0, 0x0, &(0x7f00004ec000)=[], 0xd9, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480676ff11dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x2) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40286608, 0x480802) close(r1) syz_open_dev$binder(&(0x7f00004bc000)="2f6465762f62696e6465722300", 0x0, 0x805) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close(r1) poll(&(0x7f000010f000-0x20)=[{r1, 0x44, 0x0}, {r1, 0x42d6, 0x0}, {r1, 0x8, 0x0}, {r1, 0x200, 0x0}], 0x4, 0x6) 2017/12/14 11:57:37 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f73656c662f6e65742f70666b657900", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000977000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, &(0x7f0000001000-0x7f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7f, 0x40000000, &(0x7f0000000000)={0x11, 0x17, r1, 0x1, 0xffff, 0x6, @random="bd01fd1c66e8", [0x0, 0x0]}, 0x14) 2017/12/14 11:57:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000c4e000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0xf, 0x30, r0, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004eb000)=[], 0x16, 0x0, &(0x7f0000000000)="9c725eb3a505c0a462eef0ca6aeb1d5789969d17907c"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc020660b, 0x20000005) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000314000)={0xc, 0x0, &(0x7f00004ee000-0xc)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f00004ed000)=""}) poll(&(0x7f00004ed000-0x50)=[{r1, 0x0, 0x0}, {r1, 0x8006, 0x0}, {r1, 0x402, 0x0}, {r1, 0x4101, 0x0}, {r1, 0x6060, 0x0}, {r1, 0x4000, 0x0}, {r1, 0x4100, 0x0}, {r1, 0x2c0, 0x0}, {r1, 0x0, 0x0}, {r1, 0x2, 0x0}], 0xa, 0xfff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x7c872, 0xffffffffffffffff, 0x0) poll(&(0x7f0000331000-0x28)=[{r1, 0x100, 0x0}, {r1, 0x2002, 0x0}, {r1, 0xc018, 0x0}, {r1, 0x100, 0x0}, {r1, 0x80, 0x0}], 0x5, 0x1c5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00003b5000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000356000)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x4eb000)=nil, 0x4eb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:37 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={r3, 0x0, 0x0, 0x0}) close(r1) r4 = syz_open_dev$binder(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x48, 0x0, &(0x7f000000d000-0x48)=[@exit_looper={0x630d}, @enter_looper={0x630c}, @exit_looper={0x630d}, @clear_death={0x400c630f, 0x1, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper={0x630c}, @acquire={0x40046305, 0x3}], 0xbb, 0x0, &(0x7f000000c000)="4159895b9255b3da0e1c8567855c4b1c4e0a5a2b22e6bff2176876e964fc93dd16637121620869d06bf6c2680f4aae385511e95c35b730456f95d3b55b3078d9dd6e57b9c94310dca3e10d673b28128a58605d3fce740c8989ab206c1554b4cee74945aab000baa489a9a77aafc058751ae981e17bcd76de3feda92594095e7fda5d45f492c866c269df283e96ec820142f84f1ea4b9c249479285c85d5c8272a0af4607f6d7f9c6f02419f2efb0cac57a98a16c9561103e008cf3"}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f000000d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000009000)=0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00004ed000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000287000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004ee000-0x16)=""}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x20000006) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000439000-0x98)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00003f7000-0x4)=0x98) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000004000-0xa)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x8010, r0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000004000)={r1, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000004000-0x14)=[@acquire_done={0x40106309, r1, 0x3}], 0x1, 0x0, &(0x7f0000003000)="e3"}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000004000)=0x1c) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000001000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, &(0x7f0000006000-0x4)=0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2017/12/14 11:57:37 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) close(r1) syz_open_dev$binder(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x48, 0x0, &(0x7f000000d000-0x48)=[@exit_looper={0x630d}, @enter_looper={0x630c}, @exit_looper={0x630d}, @clear_death={0x400c630f, 0x1, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper={0x630c}, @acquire={0x40046305, 0x3}], 0xbb, 0x0, &(0x7f000000c000)="4159895b9255b3da0e1c8567855c4b1c4e0a5a2b22e6bff2176876e964fc93dd16637121620869d06bf6c2680f4aae385511e95c35b730456f95d3b55b3078d9dd6e57b9c94310dca3e10d673b28128a58605d3fce740c8989ab206c1554b4cee74945aab000baa489a9a77aafc058751ae981e17bcd76de3feda92594095e7fda5d45f492c866c269df283e96ec820142f84f1ea4b9c249479285c85d5c8272a0af4607f6d7f9c6f02419f2efb0cac57a98a16c9561103e008cf3"}) fchdir(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) 2017/12/14 11:57:37 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6877726e6700", 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f000000b000)={0x4, 0x3, 0x100000001, 0x101, 0x5, 0xab8, 0x200, 0x800, 0xffff, 0x9053}) r1 = syz_open_procfs(0x0, &(0x7f0000004000)="6e7300") mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f000000e000-0xd3)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000d000-0xe8)={{{@in=@loopback=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000c000-0x4)=0xe8) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000000a000)="2e2f66696c653000", 0x8) mq_timedreceive(r0, &(0x7f000000f000-0xc9)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc9, 0x6, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f000000f000)={0xf920, 0x100, 0x7, 0x97, &(0x7f0000004000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1f, &(0x7f000000e000-0x1f)="00000000000000000000000000000000000000000000000000000000000000", 0x3a, &(0x7f0000005000-0x3a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) getdents64(r1, &(0x7f000000b000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f000000a000)=0x0, &(0x7f0000001000-0x4)=0x4) [ 81.747711] binder: binder_mmap: 9581 20005000-20009000 bad vm_flags failed -1 [ 81.763936] binder: 9588:9591 ioctl 4020940d 20001000 returned -22 [ 81.770640] binder: 9595:9597 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 81.776967] binder: BINDER_SET_CONTEXT_MGR already set [ 81.776970] binder: 9588:9591 ioctl 40046207 0 returned -16 [ 81.776994] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/14 11:57:37 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x9b, 0x0, &(0x7f0000000000)="e847bfedc9511c0eae895ae0d360ad6bed6e57f495d709d93aad80a1af0958f77c43d30efa8da69843977e7f9800684c63fae1785d2e46e0566e61cbd1b3b87658111bca87319fc92ac9e6ef45487db94a5d625e8734c4bb569d89006faa1d1724e83674e43a53e41491b3a4720cf1f1a08da981669a9a40bd3c0aa4daa3b736cf873aaabd2d555884b5db405c2d5707c35027ef6087e526dbbcdb"}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x800, 0x4, &(0x7f0000002000-0x8)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000004000-0x8)=@assoc_value={0x0, 0xffffffffffffb675}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002000-0xa0)={r3, @in6={{0xa, 0x1, 0xce, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x4, 0xfffffffffffffffe, 0x2, 0x4}, 0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000003000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000002000)=0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000006000-0xe7)={r3, 0xdf, "cc61a71a801215bde44c3c6e767a8bcac9e4eab41b3fd38f6c2b0c4908b7cad248567b7a8465cf56ea10bf86499f47658fa50181bf3652bda6d4a86ee82dca888c980000db11bd19c981c01e2e5ffe03aa3ffb645e84d9d3a5269f87b55d326e7d07517a4d8c446891d7f9cd159645e5d9beac9fa68ac409944311d2ffac342d02c01b363b55e446b09d17d9d5076b680bdf0e0dc6187c8714dd5f4d87eca7c2ce9417e788dff6cd699965df872be8e0c2388e915841e11127f0c533ca5b7d073c9959f87ec086458a7db8d7f65966ee2440432a6964655085adf4b0ffd4a2"}, &(0x7f0000002000-0x4)=0xe7) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000003000-0x18)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1f, r4}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000001000)={0x4, 0x0, &(0x7f00004f0000)=[@exit_looper={0x630d}], 0x0, 0x0, &(0x7f00004f1000-0x2c)=""}) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = mmap$binder(&(0x7f0000472000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ec000)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00004ee000)="2f6465762f6175746f667300", 0x101000, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00004ed000)=0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00004ed000)={0x0, 0x0, 0x0}, &(0x7f00004ed000+0x6eb)=0xc) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00004ed000)={0x0, 0x0, 0x0}, &(0x7f00004ed000)=0xc) fcntl$getown(r0, 0x9) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00004ed000)={{{@in=@broadcast=0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00004ee000-0x4)=0xe8) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f00004ed000)="2e2f66696c653000", &(0x7f000016d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f00004ef000-0x8)="2e2f66696c653000", &(0x7f00004ed000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f00004ee000-0x8)="2e2f66696c653000", &(0x7f0000438000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000007000-0x4)=0xfffffffffffeffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000005000-0x30)={0x0, 0x0, &(0x7f0000003000)=[], 0xc5, 0x0, &(0x7f0000005000-0xf2)="e67dbdce520ad8a5d0f2a742dc0d1d720d320aa16f899ba359b02a7d0b2a8d2023e2816be7a8dc2ca20528f0ac21f7e51af6eb25f0310d45a79cf05c9afae8d5ec17a0d1be707ad5478a41d8cfa1b1bcdb1bf32efa66afd2cd6495b358985169eb657b2661210f5a8dec5d208273ca6d045e096843368ffaf850dbd07464fd6f63c4456d39192478e0765d9da7c42fde963647b887c87753a0ac6dbb7ba62d098c9bf3eab452612658881773567a636fc178d81f46a533d6cd6423d6568f45591ef2c1959f"}) [ 81.776996] binder: 9588:9591 ioctl 40046207 0 returned -16 [ 81.783360] binder: BINDER_SET_CONTEXT_MGR already set [ 81.783364] binder: 9588:9591 ioctl 40046207 0 returned -16 [ 81.785095] binder: 9592:9598 ioctl 40046205 2 returned -22 [ 81.786603] binder: 9592:9598 ioctl 40286608 480802 returned -22 [ 81.792061] binder: BINDER_SET_CONTEXT_MGR already set [ 81.792064] binder: 9605:9609 ioctl 40046207 0 returned -16 [ 81.792113] binder: 9605:9609 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 81.792128] binder: 9605:9609 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 81.792142] binder: 9605:9609 Release 1 refcount change on invalid ref 4 ret -22 [ 81.792146] binder: 9605:9609 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 81.792150] binder: 9605:9609 Acquire 1 refcount change on invalid ref 3 ret -22 [ 81.793827] binder: BINDER_SET_CONTEXT_MGR already set [ 81.793831] binder: 9605:9609 ioctl 40046207 0 returned -16 [ 81.794877] binder: 9588:9602 ioctl 4020940d 20001000 returned -22 [ 81.795324] binder: 9605:9609 Acquire 1 refcount change on invalid ref 0 ret -22 [ 81.798681] binder: BINDER_SET_CONTEXT_MGR already set [ 81.798685] binder: 9588:9602 ioctl 40046207 0 returned -16 [ 81.810043] binder: 9605:9609 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.818030] binder: 9605:9609 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 81.818047] binder: 9605:9609 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.818062] binder: 9605:9609 Release 1 refcount change on invalid ref 4 ret -22 [ 81.818066] binder: 9605:9609 IncRefs 0 refcount change on invalid ref 2 ret -22 2017/12/14 11:57:37 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x3, 0x8000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r1, &(0x7f0000002000-0xe0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe0, 0x0, &(0x7f0000001000-0x8)=@abs={0x1, 0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x800, 0x8, 0xfffffffffffffffd, 0x400, 0x2, 0x7, 0x8, {0x0, @in6={{0xa, 0x1, 0x80, @loopback={0x0, 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f63, 0x1f, 0x9, 0x39, 0x3ff}}, &(0x7f0000000000+0xdad)=0xb8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000003000-0x10)={r2, 0x0, 0x9, 0x100000000}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000000)={0x4, 0x0, &(0x7f00004f0000)=[@exit_looper={0x630d}], 0x3e, 0x0, &(0x7f0000001000-0x3e)="0dd67998a936134a9273cab869331971250cf408685f4f7e886bd3cd2e875a78fe109c1188478b2e1a0646d038b5c4cb0de712c98317d37b99e6ec8f7474"}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000003000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20001) getsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000001000)=0x6a) r4 = syz_open_dev$sg(&(0x7f0000002000)="2f6465762f73672300", 0xdc, 0x400) splice(r0, 0x0, r1, 0x0, 0x800, 0x2) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000001000)=0x100, 0x4) 2017/12/14 11:57:37 executing program 3: mmap(&(0x7f0000000000/0xfba000)=nil, 0xfba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fb3000-0x78)={0x2, 0x78, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2420, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x0, 0x80000000000001, &(0x7f0000013000-0x10)={0x0, &(0x7f000002e000-0x8)=[]}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002f000-0x10)={0x2, &(0x7f0000001000-0x10)=[{0x28, 0xffffffffffffffff, 0x800, 0xfffffffffffff010}, {0x80000006, 0x100000004, 0x4, 0x1001}]}, 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000030000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000e79000-0x4)=0x0, &(0x7f0000fbb000-0x4)=0x4) r4 = getpid() fcntl$setown(r1, 0x8, r4) sendmsg$nfc_llcp(r3, &(0x7f0000014000)={&(0x7f0000003000-0x60)={0x27, 0x5, 0x3, 0x5, 0x3, 0xfffffffffffffffe, "55689d844febc2dfd6ff1acb5afea2fdb39b64fa44c153ab9feda9d25e0c25e5b4b8778bd7d08f3b257f2203bf654c9f21f54f59de892028d8622c00630748", 0xd346}, 0x60, &(0x7f0000026000)=[], 0x0, &(0x7f000002e000)={0x1010, 0x1, 0x1, "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"}, 0x1010, 0xfffffffffffffffd}, 0x1) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000fbd000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fbd000)=0xe8) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000fbb000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$ax25(r3, &(0x7f0000028000-0x10)={0x3, {"760100c50dcbec"}, 0x9f}, 0x10) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000012000-0x4)=0x0, &(0x7f000002e000-0x4)=0x4) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r3, 0x89e3, &(0x7f0000fbc000)=0xf51c) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000fba000)={0x3, &(0x7f0000fbb000-0xc)=[0x7c8, 0x6, 0x1]}) ioctl$sock_ipx_SIOCGIFADDR(r3, 0x8915, &(0x7f0000a77000-0x20)={"7e95c7fd73a8f34f49414acf27b765b5", {0x4, 0xe75f, 0x6, "029083809a52", 0x2, 0x0}}) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000fbd000-0x5)="fffffffd2a", 0x5, 0x8800020004000, 0x0, 0x0) r6 = dup2(r2, r2) ioctl$KDDISABIO(r6, 0x4b37) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfff) 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)="2f70726f632f73656c662f6e65742f70666b657900", 0x62000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)="706167656d617000") preadv(r0, &(0x7f0000b25000-0x50)=[{&(0x7f0000712000-0x8)="0000000000000000", 0x8}, {&(0x7f0000aea000)="000000000000000000000000000000000000000000", 0x15}], 0x2, 0x0) lseek(r0, 0x0, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f00007f8000)="2f6465762f6b657963686f726400", 0x24800, 0x0) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0xb22000)=nil, 0xb22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b22000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b23000-0x4)="00", 0x2) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000b24000)="7472757374656400", &(0x7f0000b25000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b24000)="add212f135243be077d68343009ccd20d367bece9a41c026ff183f69cb4d949eca0af505b6e2559022edb2a93bf35446fc3de8330683915fe24cc4c562cd1c93c7a98fdcb9c388a45c9f6e6f67aefdfae288c2e699eae541f7afd4205d522d93f27a7b62af85f86db808c008969a92e4694eaeb6c8e448e6eaa934edcb502d2f282686e474f893701f1a192663fb9034394b68946d7a224925797411b8414e9927ee0366c6d59f8ab6e60f636b595ad920ad3e18b66d1ead83cc1e51f409ea65ae45161723d7fe2f51763c392f6e9744", 0xd0, 0xfffffffffffffffa) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000b25000-0xda)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) mmap(&(0x7f0000b22000/0x1000)=nil, 0x1000, 0x3, 0x50, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x4) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000b22000)=0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f000013b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000340000-0x20)=[{&(0x7f00006ad000)="85f0c47d4c63a832378f32584f", 0xd}, {&(0x7f00000b0000-0xe)="327f0088ed3a0cace9a73dab4557", 0xe}], 0x2, 0x6) recvmmsg(r0, &(0x7f0000b23000)=[{{&(0x7f0000b24000-0x10)=@ethernet={0x0, @random="000000000000", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000b23000)=[{&(0x7f0000b23000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42}, {&(0x7f0000147000)="0000000000000000000000000000", 0xe}], 0x2, &(0x7f0000b24000-0xc4)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc4, 0x81}, 0x100000000}], 0x1, 0x0, 0x0) write(r0, &(0x7f00006e8000-0x2)="e59b", 0x2) sendfile(r0, r0, &(0x7f0000001000)=0x0, 0x45) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000230000-0x118)={0x22c4, {{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f000085f000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt(r2, 0x3a, 0x1, &(0x7f0000001000)="", &(0x7f0000001000)=0x0) 2017/12/14 11:57:37 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002b6000-0x10)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000a0d000-0x20)={0xfffffffffffffffb, 0x0, 0x1, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000512000)={0x10000, r1, 0x10001, 0xfff}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000c0d000)={0x2, 0x200}) r2 = socket$inet6(0xa, 0x1, 0x20000000000) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000d1c000-0x4)=0x4, 0x4) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x30000000000008, &(0x7f0000670000-0x4)=0x3fb, 0x4) bind$inet6(r2, &(0x7f0000524000-0x1c)={0xa, 0x0, 0xfffffffffffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000f62000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001000-0x4)=0x9, 0x4) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000925000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000d1b000+0x252)=0x48) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 81.818069] binder: 9605:9609 Acquire 1 refcount change on invalid ref 3 ret -22 [ 81.964461] binder: 9615:9621 unknown command 0 [ 81.974683] binder: 9615:9621 ioctl c0306201 20004fd0 returned -22 [ 81.985325] binder: 9595:9620 tried to acquire reference to desc 0, got 1 instead [ 81.985385] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0xfb1000)=nil, 0xfb1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f7000-0x7)="6d6f756e747300") r1 = epoll_create(0x1f) r2 = memfd_create(&(0x7f0000270000-0x6)="7b656d315e00", 0x3) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00005fa000-0x10)=@req={0x1f, 0x1, 0x0, 0x81}, 0x10) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000e32000-0xe8)={0x0, 0x0, 0x0, 0x1, 0x91, 0x0, 0x7, 0x7, 0x1, "918f849b8af871dddbd48fc20f8b7887eaf08c9a2680eff32026e139908f783d3c63ec2efdf9492099e3c900063dca091dd2387dc4403367449e37a1447b1cc0", "22d533d72698c8ae6934594edb3b7a55fb7d82adb2987498d4fdfd4bd551f5c5cd057e9aa1c3f5e721d85f4dca533315c05c342f1f9977fee13c7c70ca149e2a", "fd3d9bb63439f53a68812c12c8887a81e88196666349376c8e75c01d49735474", [0x4, 0x5]}) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f000042d000-0x4)=0x0, &(0x7f0000fb1000)=0x0, &(0x7f0000fb1000)=0x0) setfsuid(r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faf000-0xc)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000d6000)={0x20000000, 0x0}) [ 81.985388] binder: 9595:9611 ioctl 40046207 0 returned -16 [ 81.995369] binder: 9595:9597 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 81.995386] binder: 9595:9597 Release 1 refcount change on invalid ref 4 ret -22 [ 81.995391] binder: 9595:9597 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 81.995395] binder: 9595:9597 Acquire 1 refcount change on invalid ref 3 ret -22 [ 82.007743] binder: 9595:9597 tried to acquire reference to desc 0, got 1 instead 2017/12/14 11:57:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000251000-0xa)="2f6465762f70746d7800", 0x1, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGSID(r0, 0x540f, &(0x7f000057d000-0x4)=0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000d5e000)=0x5) socketpair(0xf, 0x0, 0x3ff, &(0x7f00002d8000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f000008c000-0x64)={&(0x7f0000a12000)=[0x80000000, 0x400, 0x8, 0x7, 0x1, 0x0, 0x28e, 0x4], 0x8, 0x5, 0x0, 0x3, 0x1000, 0x3, {0x9, 0x81, 0x72, 0x80000000, 0x1, 0x1f, 0x0, 0x1fffe000000, 0x2, 0x7ff, 0x18a4, 0x2, 0x9, 0x8, "4da7ae538005299e936585d3ce5cec78089b5ca9836963b90ed3d7ffad006010"}}) r4 = syz_open_procfs(r1, &(0x7f0000531000)="6e756d615f6d61707300") ioctl$TCGETS(r4, 0x5401, &(0x7f0000f3e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000e60000-0x4)=0x5, 0x4) gettid() sendfile(r4, r4, &(0x7f00003c9000-0x8)=0x4, 0x400000ff) 2017/12/14 11:57:37 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={@generic="14204b56ba0caa3a0313cedfc69c4afd", @ifru_flags=0x0}) mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="636f726564756d705f66696c74657200") ioctl$TCSETS(r1, 0x5402, &(0x7f0000005000-0x24)={0x3, 0x81, 0x1, 0x101, 0x200000000000009, 0x2, 0x9, 0x9, 0x1, 0x3, 0x100000001, 0x4}) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000005000)=0x0, &(0x7f0000018000-0x4)=0x4) pwritev(r1, &(0x7f000000d000)=[{&(0x7f0000014000-0xa8)="39", 0x1}, {&(0x7f0000015000)="28", 0x1}], 0x2, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000007000-0x8)="6b657972696e6700", &(0x7f000000e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000018000-0x6)="6c6f676f6e00", &(0x7f0000018000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000011000-0x20)="21b050998b40a5a64f072d90fdd84d8cebe1775d3a88f0c6a21a1960d7d19643", 0x20, r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000014000-0x4)={0x1, 0x0, []}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000003000)=0x5, 0x4) [ 82.007761] binder: 9595:9597 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 82.022132] binder: 9594:9639 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 82.029224] binder: BINDER_SET_CONTEXT_MGR already set [ 82.029228] binder: 9595:9597 ioctl 40046207 0 returned -16 [ 82.029684] binder: 9595:9611 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 82.029699] binder: 9595:9611 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 82.029714] binder: 9595:9611 Release 1 refcount change on invalid ref 4 ret -22 2017/12/14 11:57:37 executing program 0: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004eb000)=[], 0x16, 0x0, &(0x7f00004ec000)="9c725eb3a505c0a462eef0ca4beb1d5797969d17907c"}) close(r0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x20000005) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f00004ed000-0x50)=[{r0, 0x0, 0x0}, {r0, 0x8006, 0x0}, {r0, 0x402, 0x0}, {r0, 0x4101, 0x0}, {r0, 0x6060, 0x0}, {r0, 0x4000, 0x0}, {r0, 0x4100, 0x0}, {r0, 0x2c0, 0x0}, {r0, 0x0, 0x0}, {r0, 0x2, 0x0}], 0xa, 0xfff) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00004ed000)="2f73656c696e75782f7573657200", 0x2, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004ee000-0x10)={0x0, 0x94, &(0x7f00004ed000)=[@in6={0xa, 0x3, 0x80000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x1, @loopback={0x0, 0x1}, 0x3}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0x1}]}, &(0x7f00002be000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000314000-0x8)={r2, 0x9}, &(0x7f0000115000-0x4)=0x8) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00004d7000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) poll(&(0x7f0000012000-0x8)=[{r0, 0x8000, 0x0}], 0x1, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x7c872, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4eb000)=nil, 0x4eb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:37 executing program 3: memfd_create(&(0x7f0000db4000-0x1)="00", 0x2) mmap(&(0x7f0000000000/0xd2f000)=nil, 0xd2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f00001e5000)=@random={"73656375726974792e00", "00"}, &(0x7f0000d30000)="000000000000000000000000000000000000000000000000000000", 0x1b) r1 = syz_open_dev$binder(&(0x7f0000d2f000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000945000/0x4000)=nil, 0x4000, 0x8, 0x48010, r1, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000d2f000)={0x18, 0x0, &(0x7f000027e000)=[@acquire={0x40046305, 0x4}, @clear_death={0x400c630f, 0x2, 0x0}], 0xf9, 0x0, &(0x7f0000d2f000)="f62b3ebc118cf66164f2db86729594add7b5ef8a33e097ba1cbe560b525d6f4fac41b4e5403199c2c5f9071494d73d84e05f7413441229db287ff7fd96653c06d6a43d5b8d0d56a8f97c2935d20c9fecbfe5b5f44eff0a3d712e16b0166744d106ef6836815faccddf083db07950ed2c1226e97143a17414dc48fade5a48e7598514a7e62722f1576a8abf3108ef8c513365c876f2d71443986a8407a9db8901e708f74e61807f1e4deceb213ad81c8c1f6f44bed72770cd1cbf2421234dc8cd655899a8bf588d9616ed2b742662c4aad1787bf45720af9f16c2885f511074c84e971ad09c9e395da8c1ee7e98554918cb81bd270446d9149d"}) mmap$binder(&(0x7f0000483000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) r3 = syz_open_dev$binder(&(0x7f00003b3000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000004000-0x14)=[@acquire_done={0x40106309, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000003000)=""}) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000d30000)={0xa4, 0x0, &(0x7f0000d31000-0xa4)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000839000)=[@flat={0x77682a85, 0xb, r2, 0x1}], &(0x7f00001c9000-0x10)=[0x18, 0x78]}, 0x10000}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x70, 0x30, &(0x7f0000902000)=[@fda={0x66646185, 0x8, 0x0, 0x33}, @ptr={0x70742a85, 0x1, &(0x7f0000d31000-0x1)=0x0, 0x1, 0x3, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000d31000-0x1)=0x0, 0x1, 0x0, 0x17}], &(0x7f0000bbb000)=[0x38, 0x18, 0x78, 0x38, 0x18, 0x38]}, 0x7fff}}, @acquire={0x40046305, 0x1}, @enter_looper={0x630c}], 0xe0, 0x0, &(0x7f0000c9c000-0xe0)="a1de87046e0746a26aa8aedefdf10573595e9d9d5b6ccd84c7192a4eca56aa025f5d4410e27a23be6958dc14bf9c4bb372261cdef7b1a5ca54a6b2fd2e831a8f01f1d0634a85dd44a14ec5acddebe57e76dec80604a250e1c2fdb6e74779e90da0883ed29f59bc21384e12fb08e108a0539fd987e387f9950856492e6abc85df82628da7c6298bde0d7140557a90514982addecffed3f4b9ece64fb2f19811ed9da05f5165b7c8bcf366b3c00de2460fa994df8f219b45a3296f2518bdfa39b8e8188c572d88cf1d39b3b6b7d494d85afd3a0986b4f454c2b1ac6fd87421735b"}) 2017/12/14 11:57:37 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002b6000-0x10)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000a0d000-0x20)={0xfffffffffffffffb, 0x0, 0x1, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000512000)={0x10000, r1, 0x10001, 0xfff}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000c0d000)={0x2, 0x200}) r2 = socket$inet6(0xa, 0x1, 0x20000000000) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000d1c000-0x4)=0x4, 0x4) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x30000000000008, &(0x7f0000670000-0x4)=0x3fb, 0x4) bind$inet6(r2, &(0x7f0000524000-0x1c)={0xa, 0x0, 0xfffffffffffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000f62000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001000-0x4)=0x9, 0x4) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000925000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000d1b000+0x252)=0x48) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f6d6c7300", 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0xffffffffffff4435) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f000052b000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000844000-0x78)={0x7ff, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0xceb, 0x9, 0x0, 0x2, &(0x7f0000d0f000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x100000000, 0x7, 0x7fffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000d58000)="636f6d6d00") getsockopt(r2, 0x5cbc, 0xfff, &(0x7f0000027000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000ac2000-0x4)=0x85) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(r2, &(0x7f000001d000-0x8)=0x6, 0x8) preadv(r2, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000c14000-0x15)="2f6465762f706b74636476642f636f6e74726f6c00", 0x0, 0x0) 2017/12/14 11:57:37 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000131000)="2f6465762f7573626d6f6e2300", 0xffff, 0xc00) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001000-0x10)={0x0, 0x0, 0x2}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001000-0x10)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={r1, r2, 0x4}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005000-0x5)="636f6d6d00") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000005000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8) pread64(r0, &(0x7f0000000000)="", 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000006000-0x18)="000000000000000000000000000000000000000000000000") write(r3, &(0x7f0000007000-0x47)="9be8cd722266e58025d27704aaa488afbfca752c692f7629810d10d2db0164cb7e3de60bb8facba61255a0050e2d6e42ff02ba2ddadbd6a163afc550c0051e7ffda1b8e39caa11", 0x47) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = mmap$binder(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x4, 0x810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000400000)={r1, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0c0583b, 0x20400006) get_thread_area(&(0x7f00003f7000)={0x100, 0x0, 0x2400, 0x5, 0x0, 0x6, 0x0, 0x1, 0x6927, 0x1}) 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x40032, r0, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000005000)={0x8, 0x0, &(0x7f0000005000)=[@increfs={0x40046304, 0x2}], 0x97, 0x0, &(0x7f0000002000-0x97)="fb1ab69a287f2ee7ae064e3e914f39409a382082bd7dc20a7c9d92c898cdaf75924fa2bf72ea6886c95a6e45267d860d47c2e89044769e33dbc48c323ca7ed0bea79006211879077feab343e0836765571fa9d5afdfbd2844a2a0e9cde9dcdb1977ce06944c8a31fe8d219ba00a15ab95588e6d297c3387b9ce5fe132f45ab629527afd3a64ffe95b75067f3087eb495ef999c5f4f9e5f"}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000004000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001000-0x1e0)=[{{&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000001000-0x10)=[{&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xac}], 0x1, &(0x7f0000002000-0x66)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x66, 0x9}, 0x65}, {{&(0x7f0000000000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000002000-0x80)=[{&(0x7f0000001000)="0000000000", 0x5}, {&(0x7f0000001000-0x89)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x89}, {&(0x7f0000002000-0x44)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x44}, {&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9}, {&(0x7f0000002000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}, {&(0x7f0000001000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xed}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc4}], 0x8, &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x53, 0x8000}, 0x5}, {{&(0x7f0000001000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000000000)=[{&(0x7f0000001000)="000000000000000000000000000000000000000000000000", 0x18}, {&(0x7f0000001000-0x9c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9c}, {&(0x7f0000001000-0x94)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94}, {&(0x7f0000002000-0xca)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}], 0x5, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68, 0x4}, 0x4}, {{&(0x7f0000001000+0x592)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000-0x80)=[{&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x84}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x76}, {&(0x7f0000002000-0x60)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x60}, {&(0x7f0000002000-0x3)="000000", 0x3}, {&(0x7f0000001000-0x6a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}, {&(0x7f0000002000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}], 0x8, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd, 0x8}, 0x6}, {{&(0x7f0000002000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000002000-0x80)=[{&(0x7f0000000000)="", 0x0}, {&(0x7f0000001000-0x15)="000000000000000000000000000000000000000000", 0x15}, {&(0x7f0000001000-0x16)="00000000000000000000000000000000000000000000", 0x16}, {&(0x7f0000001000-0x2)="0000", 0x2}, {&(0x7f0000001000-0xf)="000000000000000000000000000000", 0xf}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda}, {&(0x7f0000000000)="0000", 0x2}, {&(0x7f0000001000-0x8a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8a}], 0x8, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000", 0x1c, 0x7ff}, 0x8000000}, {{0x0, 0x0, &(0x7f0000001000-0x30)=[{&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd8}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe6}, {&(0x7f0000002000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd}], 0x3, &(0x7f0000001000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd, 0x65ba}, 0x4}, {{&(0x7f0000001000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f0000002000-0x50)=[{&(0x7f0000001000)="000000", 0x3}, {&(0x7f0000002000-0x7c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfe}, {&(0x7f0000002000-0xf7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf7}, {&(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x5, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x52, 0x5c1}, 0x2}, {{&(0x7f0000000000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000002000-0x20)=[{&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb9}, {&(0x7f0000002000-0x5e)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5e}], 0x2, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000", 0x20, 0x0}, 0x7}], 0x8, 0x40000042, &(0x7f0000001000-0x10)={0x77359400, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0xfffffffffffffff7, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f000055e000-0x8)="2e2f66696c653000", 0x48) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f000082c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000c8e000-0x4)=0x0) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00001e8000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000e39000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000d42000-0xd)="6e65742f736f636b7374617400") sysfs$3(0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) 2017/12/14 11:57:37 executing program 1: mmap(&(0x7f0000000000/0xfb1000)=nil, 0xfb1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f7000-0x7)="6d6f756e747300") r1 = epoll_create(0x1f) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000e32000-0xe8)={0x0, 0x0, 0x0, 0x1, 0x91, 0x0, 0x7, 0x7, 0x1, "918f849b8af871dddbd48fc20f8b7887eaf08c9a2680eff32026e139908f783d3c63ec2efdf9492099e3c900063dca091dd2387dc4403367449e37a1447b1cc0", "22d533d72698c8ae6934594edb3b7a55fb7d82adb2987498d4fdfd4bd551f5c5cd057e9aa1c3f5e721d85f4dca533315c05c342f1f9977fee13c7c70ca149e2a", "fd3d9bb63439f53a68812c12c8887a81e88196666349376c8e75c01d49735474", [0x4, 0x5]}) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000d5b000-0x4)=0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000fb3000-0xe8)={{{@in=@loopback=0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fb2000)=0xe8) getgroups(0x2, &(0x7f0000628000)=[0x0, 0x0]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000966000-0xc)={r2, r3, r4}, 0xc) getresuid(&(0x7f000042d000-0x4)=0x0, &(0x7f0000fb1000)=0x0, &(0x7f0000fb1000)=0x0) setfsuid(r5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faf000-0xc)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000d6000)={0x20000000, 0x0}) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000fb2000)={&(0x7f0000ef2000/0x2000)=nil, 0x800, 0x3, 0x0, &(0x7f00007fa000/0x3000)=nil, 0x44}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000067d000-0x18)={0xaa, 0x22, 0x0}) fsync(r1) 2017/12/14 11:57:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00007bc000)="2f6465762f6877726e6700", 0x30000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000e34000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") clone(0x0, &(0x7f0000fbf000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f0000804000)="") sysfs$3(0x3) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f000052a000-0x78)={0x8, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x101, 0x3ff, 0x2, 0x40, 0x0, 0x9, 0x6, 0x1f}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000eb0000-0xf7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f00006c0000-0x8)={0x0, 0x0}, 0x1, 0x0) [ 82.029718] binder: 9595:9611 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 82.029722] binder: 9595:9611 Acquire 1 refcount change on invalid ref 3 ret -22 [ 82.135936] binder: 9665:9679 got transaction to invalid handle 2017/12/14 11:57:37 executing program 7: mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000415000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000415000)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000417000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000417000-0x30)={0x5c, 0x0, &(0x7f0000418000-0x5c)=[@decrefs={0x40046307, 0x2}, @increfs_done={0x40046307, 0x4, 0x4}, @exit_looper={0x630d}, @exit_looper={0x630d}, @release={0x40046306, 0x4}, @acquire={0x40046305, 0x2}, @register_looper={0x630b}, @release={0x40046306, 0x2}, @acquire_done={0x40046307, 0x0, 0x0}, @release={0x40046306, 0x0}], 0x1000, 0x0, &(0x7f000007a000-0x1000)="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"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) mmap(&(0x7f0000415000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000417000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000418000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000416000-0x30)={0x4, 0x0, &(0x7f0000326000-0x38)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000415000)="16"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8cf) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000277000-0x30)={0x8, 0x0, &(0x7f000001a000)=[@increfs={0x40046304, 0x0}], 0xb8, 0x0, &(0x7f0000416000)="dd1e871b0791e0dbd0909dabf693209994b5bebc781e2a0c6e74ca9771e6ef27c46b1fc0dfc0a2082d9e134641da778cc287560966a6e5cdba4ae9ca36ed92ac52cd2f890826444bfd0d261feb6dd6e978daceff043c9b1c74255ef53f48542130fe59b6e30f4133b13e09553583d7500746d5df9205b541bb7d7ab511105e9ea2694bde3163727733fc1b16e286754e8dca161d59063af680b6d03aae9c08968a936217c736d014f9670a525d921e9cf3530ee889179235"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000041a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x5) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000042d000-0x18)={0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00002f6000-0x10)=[{r0, 0x5, 0x0}, {r1, 0x2080, 0x0}], 0x2, 0x1ff) mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00005b4000)={0x24, 0x0, &(0x7f00005b5000-0x24)=[@register_looper={0x630b}, @increfs={0x40046304, 0x4}, @increfs_done={0x40046307, 0x50, 0x8}, @exit_looper={0x630d}], 0xf1, 0x0, &(0x7f000077b000-0xf1)="08351844de9aa25e660f0e467b61d86ea3e0335e4dc8ab87d809bbd33a83730d638d88ee9a1c1e9a607d34fcc51af54bbfac7ea7dfaef4b83933eefd6d2d6f0f79a8c232729ffd4f118879140086260f841cb5801a6c52f6a2ba0ef1feaee46c2c0baf40d649442ae1fe7b25628c9ebba990a3c04cd366902ceb04e380b47ce13e04f77e28b115a27f3cb7f03d953f6bba3a3e2fdc2056f392f40d8197f27fd137053b047158431f359b81d86da2e36e6559185bec6662e94b61fe47261fb01a667bb46af0c9ea178816f0ce48ae8acfb415ff499694ad2725355044b1149f6d1679ffb20462827ed1305adf6600f8a805"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8) 2017/12/14 11:57:37 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000131000)="2f6465762f7573626d6f6e2300", 0xffff, 0xc00) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001000-0x10)={0x0, 0x0, 0x2}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001000-0x10)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={r1, r2, 0x4}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005000-0x5)="636f6d6d00") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000005000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8) pread64(r3, &(0x7f0000004000-0x6f)="", 0x0, 0x0) write(r3, &(0x7f0000007000-0x47)="9be8cd722266e58025d27704aaa488afbfca752c692f7629810d10d2db0164cb7e3de60bb8facba61255a0050e2d6e42ff02ba2ddadbd6a163afc550c0051e7ffda1b8e39caa11", 0x47) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000006000)={0xffffffff7fffffff, 0x8, 0x7, 0x8001, 0x0}, &(0x7f0000007000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000006000)={r4, @in6={{0xa, 0x1, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xeea}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffff00000, 0x10}, 0x98) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000043c000)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00001da000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x481014) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ec000)={0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00003e0000/0x4000)=nil, 0x4000, 0xfffffc, 0x12, r0, 0xfffffffffffffffc) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00004ed000)="2e2f66696c653000", 0x10040, 0x20) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00004ee000-0x4)=0x0, &(0x7f00000d7000)=0x4) r3 = syz_open_dev$binder(&(0x7f00002e6000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) [ 82.143811] binder: 9665:9679 transaction failed 29201/-22, size 24-16 line 3008 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0xd34000)=nil, 0xd34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d31000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5460, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00002fd000-0x10)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) mmap(&(0x7f0000d34000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00002d6000-0xa0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x221, 0x10001, 0x5, 0xe0, 0x3}, &(0x7f0000d35000-0x4)=0xa0) mmap(&(0x7f0000d34000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d34000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000d35000-0x10)={r2, 0x7c, &(0x7f0000d35000-0x7c)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00001d5000-0x4)=0x10) mmap(&(0x7f0000d35000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d35000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000d35000)=0x0, &(0x7f0000d36000-0x4)=0x4) 2017/12/14 11:57:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000040d000)="6e657400") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00006e0000+0x7e9)={{0x5, 0x6}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x14, 0x48, 0x80000000, 0x3ff, 0x200, 0x760, 0xffffffffffffffff, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000d58000)="636f6d6d00") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(r1, &(0x7f000001d000-0x8)=0x6, 0x8) preadv(r1, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) 2017/12/14 11:57:37 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000a000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000008000)={r2, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000009000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f000000a000-0x48)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) r5 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000001000)={r3, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={r4, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0xc)={0xd0, 0x0, &(0x7f0000009000)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x1, 0x10, 0x0, 0x0, 0x18, 0x48, &(0x7f000000a000-0x18)=[@flat={0x776a2a85, 0x0, r7, 0x1}], &(0x7f000000a000-0x48)=[0x0, 0x0, 0x78, 0x18, 0x40, 0x20, 0x38, 0x78, 0x78]}, 0x143d}}, @clear_death={0x400c630f, 0x4, 0x1}, @request_death={0x400c630e, 0x1, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f0000009000)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x40, 0x5, 0x3}], &(0x7f0000009000)=[0x30, 0x70, 0x40]}}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x4}, @exit_looper={0x630d}, @free_buffer={0x40086303, r6}, @register_looper={0x630b}], 0xcd, 0x0, &(0x7f0000009000)="d9074f74b50291cabab83ae2f7fd638b18f19665cf247c2b15e203efeb26eb3dde0ddf775815f0031e2e727d53b4375ca0cb632ed882efdb83533efa3880adb7924518e10804662b0682834c16050df803aadef08624ecb5e2a481a4daaf27e5b6bff40d053b9037abea2fe8612953950392492c901066bfe3ebd9e354384da289689c17013c000e4898c03f2839693031bd5eb810274c246394fc36b1695bc5b00afdbe2e2e4f00b030472fb1f922b0f5da5e06872344798c052aa53e2dd0f5e038bf99121ea6ef9fa1301558"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1, 0x0}], 0x68, 0x0, &(0x7f000000b000)="2013943a3fe15cefd8cf60911547e33f000d486fea3c2b3ca527fd34a673119ba569c03b0fc8967ba8cb2e0e9d246da8d83a755efc044cb58d1f9712fdda6b5ca0b9904bf7e8372e34b3830917355477749b07c7bc0f44e26b5ea0ab2376f2706d1aceb2fd999492"}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x6d, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86e80167fa02e3e40a76e46a2ce3429950b25fc59de79fd800b5eb848533b81d8200dbb46cd9"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 82.170315] binder: 9694:9700 ioctl 40046205 7 returned -22 [ 82.181364] binder: 9694:9700 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 82.181414] binder: BINDER_SET_CONTEXT_MGR already set [ 82.181418] binder: 9699:9703 ioctl 40046207 0 returned -16 [ 82.187249] binder: BINDER_SET_CONTEXT_MGR already set [ 82.187252] binder: 9665:9698 ioctl 40046207 0 returned -16 [ 82.189574] binder: 9665:9679 got transaction to invalid handle 2017/12/14 11:57:37 executing program 0: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x0, 0x0, &(0x7f00004ec000)=[], 0xd9, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480676ff11dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480802) close(r0) r1 = syz_open_dev$binder(&(0x7f00004bc000)="2f6465762f62696e6465722300", 0x0, 0x805) fadvise64(r1, 0x0, 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r0) poll(&(0x7f000010f000-0x20)=[{r0, 0x44, 0x0}, {r0, 0x42d6, 0x0}, {r0, 0x8, 0x0}, {r0, 0x200, 0x0}], 0x4, 0x6) 2017/12/14 11:57:37 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000dd4000)="2f73656c696e75782f706f6c69637900", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000bdb000-0x6)={0x0, 0x6}, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r1, 0x7b}, 0x6) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000008000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000004000-0x24)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000002000)="b1"}) close(r2) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000004000-0xd4)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000-0x1)=[], &(0x7f000000d000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4f)=""}) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) 2017/12/14 11:57:37 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000008000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000007000)=0x1c) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000009000-0x108)={0x0, @in={{0x2, 0x0, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x101, 0x7fff, 0xf, 0x25, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff, 0xd1, 0x80000000, 0x9, 0x3, 0x8, 0x0, 0x7]}, &(0x7f0000009000-0x2)=0x108) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002000)={r1, 0x7}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x800) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xc, 0x40010, r2, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000005000-0x18)={r4, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000009000-0x48)=[], 0x0, 0x2b) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x10012, r2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f000000c000-0x8)={r1, 0x3f}, &(0x7f000000c000-0x4)=0x8) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000d000-0x10)=[{r2, 0x0, 0x0}], 0x1, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) 2017/12/14 11:57:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f000055e000)=[{&(0x7f0000894000)="965634f7cc14edb70e2a2327bc5203c3", 0x10}], 0x1) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00007ee000)="2f73656c696e75782f6176632f63616368655f737461747300", 0x0, 0x0) recvfrom(r4, &(0x7f0000013000-0x8d)="", 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}, 0x0}, 0x10) writev(r0, &(0x7f0000572000-0x80)=[{&(0x7f000088b000-0x9e)="82670a592b5bd51d8f03ced0dcf01f575abff92b35762906b04729cd5feaa1a4842b0f4ed71d6bc36720daf99f3536e28824ca54ece676bbc8759b4f4c08f457a0ed91a9ada878eb5531fb6d626c8af071097a16f5556a68ad9a04dfafaead7bc4d2d6b80fe881a9ce752625ce2bb1f98bdb8a38e5de398db4d6e18de3c318472c041a24133614f8a6a3928c60108e3a8597fc368ebfbf96346a5bec3551", 0x9e}, {&(0x7f00001e9000-0x5c)="61c8f2f3ecad98715671baa311ca19fa79943b4e9d3be878c4b5a52692f9e17206247a6c3cc41c1dbd234340160945d39b47ede4df247076768ff328bc36fad51e34158c1ffdd38083a6145dbb0b99ebbb1406ef804756ec22625d88", 0x5c}, {&(0x7f0000e88000)="111cde8d867d0f9249f1eca1e96113dcf5ab0a21f6f94a8bcdffe7dc41d9fb03d702e0e248054ac0e8e0196ad5e675a0a5f94e0dbead79eaf199781501ca355d069d1994fee91145c78a582e4daef65b53bee4455455c42475", 0x59}, {&(0x7f00005e4000)="0754062ca4a0bdb211967465b0582082eac74418a6ad4bd6c22bdfb713534da1c284cab6562dbbdad7308142b8cf1e362eb57c3c604d48a3db5bf74079446cd883de318087e475a3e7291927d4650d6137439fd16d40eb2937078cd1c7fb467f82859b2e465bd363568c03f1878dabffe33977c5be856afbed998b84f1dbf1f5aa0719253656aca31f071840dc", 0x8d}, {&(0x7f0000cf3000)="b03d817d58be4429e133353ea994d0158a1a8d69adabb545dae63c4d55c4a309a9aa94f54230529b9b6f3845e100db402b77f06c9d53a839cd28c63c5de322aad0bea5a3c0", 0x45}, {&(0x7f00006a2000-0x1e)="1a70f5ca181bcc79c58624284a6ab043a99eb48fe37d8d555b130031f00a", 0x1e}, {&(0x7f0000565000)="09cb78e3c2b3153045e37ccf10eae7a104305bb774ce6e1d9cb23af890bfa6f89f568aac3981a7eb0bf80e67dbdda83987393f922bf17c07e3cb8721304a79ccdfa7a1d26e5bbaaa0f664b6949f45b622ded46df1a8cc4255194a5def9aa1e1c49b8ed6e479366ba54e90117ad51342b5dbb13500428e8b7", 0x78}, {&(0x7f00001a0000)="a2b1be36f8321d685012cb0c7cd4111ced117fb46a9e4e909242e2f41e0a78eef400fbaadb389deb1aefae2ffecdf3fe4f3923290c64285675e272605a6b6de01ec05ce91e76e66eb112ff5495dcb2797e187c47c9250b9b61e214e39b61895fc1117c173836efbb792343759e0bd42ab35bb1df1e0b4dc11b72468ba8f389c3203d61e8f59a6ce3e29110c339fcd0ebdbc49b55ff778305b8ac5fbb13e363ab52c4e3a5db333b9abdd4b8de8493546365a51c99454fd9b9f82e21d6fd92877cdda8dd978dd659272adb8e4caa56df507ef86f2733658617c2b07fce84b73d25b58162b6331aeb7fd83ed5bbc6f955361a2c09e48dd1", 0xf6}], 0x8) r5 = getpgid(0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000468000)=0x2, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00002cd000)=0x0) fcntl$setsig(r3, 0xa, 0x12) dup2(r2, r4) fcntl$setown(r4, 0x8, r5) tkill(r5, 0x13) 2017/12/14 11:57:37 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000419000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f000026c000)=[@ptr={0x70742a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x0, 0x11}], &(0x7f000000b000-0x30)=[0x0, 0x28, 0x48]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$packet(0xffffffffffffff9c, &(0x7f00004ec000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00004ed000-0x4)=0x14) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00004ee000-0xb)="0000000000000000000000") mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00004ed000-0x20)={@generic="d78b31c127939766c8478f37c97b45eb", @ifru_addrs={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/12/14 11:57:37 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000005000-0x5)="6365706800", &(0x7f0000004000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000004000)="6b657972696e6700", &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000004000)="636966732e69646d617000", &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000004000)="76626f786e6574306574683100", 0x0) r2 = request_key(&(0x7f0000004000-0xc)="636966732e73706e65676f00", &(0x7f0000003000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000001000-0x2)="2100", r1) add_key$user(&(0x7f0000003000)="7573657200", &(0x7f0000004000-0x4)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000003000)="9fd1e0a6a7573b9c3f68018ab83b1c695f736fa4dab676ca933712704e999b58de5cb2030b991cb4b10f6b0e923c09795ed2f9e9b5082b87e21194e475a1f706088cd8b04a4733f8ae6c8bf64db513e64f83da2bb634f80e7ada3a252c7326b67ebbe4a35435070c02f8918ed99da72c6c1f3d5bb05910b877adfa5fe12181e1ea44f4a862a3a47e4db2afa4729cf1e4c76bcd3ff002c6aeece964e6fef08e6b39ce4a5970f84fa225fa2eef01769ff4755a18", 0xb3, r2) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000004000-0xa)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002000)="2f73656c696e75782f636f6d6d69745f70656e64696e675f626f6f6c7300", 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000006000-0x4)=0x0, &(0x7f0000004000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x8010, r0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000004000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000004000-0x14)=[@acquire_done={0x40106309, r4, 0x3}], 0x1, 0x0, &(0x7f0000003000)="e3"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) [ 82.189578] binder: 9665:9679 transaction failed 29201/-22, size 24-16 line 3008 [ 82.207115] binder: BINDER_SET_CONTEXT_MGR already set [ 82.207119] binder: 9699:9703 ioctl 40046207 0 returned -16 [ 82.210293] binder: 9699:9703 ioctl 40286608 481014 returned -22 [ 82.221925] binder: BINDER_SET_CONTEXT_MGR already set [ 82.221929] binder: 9699:9703 ioctl 40046207 0 returned -16 [ 82.221951] binder: BINDER_SET_CONTEXT_MGR already set [ 82.221954] binder: 9699:9709 ioctl 40046207 0 returned -16 2017/12/14 11:57:37 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005000-0x14)=[@request_death={0x400c630e, 0x3, 0x3}], 0x0, 0x0, &(0x7f0000008000)=""}) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0xdd, 0x0, &(0x7f0000002000)="b15eeabf520001c79d69724fca1a167f23f7655c5dc60e70ed3ec0f0bac34e9676848dc99cd8ada7463a411f988b4675ad9a4376b057c15f729b8bbe04c5af34e1ee298fd9d4758cbf2a6ee35182a1fa0845b547eadb1e6365281d2b8e5e8b70920dc629fd19eef433596feab3ab84b6652e74b24851465bf14f176b689f524c97f4b87b26cd0be6515390479287bc7abd2461f95c089fd4578acd6707ffdea15e1c75dadfa65d45db9333f46649fe35f6b971e98c265fcdeaa4fc6b20c4b32039c24e78d6606b604688a0aebc0c51715b1b4deaf26a3817e0887163b6"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000)="2f6465762f62696e6465722300", 0x0, 0x800) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0xa4, 0x0, &(0x7f000000b000-0xa4)=[@register_looper={0x630b}, @free_buffer={0x40086303, r4}, @exit_looper={0x630d}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x48, 0x8, &(0x7f000000a000)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x0}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f000000b000-0x8)=[0x18]}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x70, 0x20, &(0x7f000000a000)=[@ptr={0x70742a85, 0x1, &(0x7f000000a000)="8e", 0xa, 0xd801, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f000000a000)="d8", 0x72, 0x20, 0x4}], &(0x7f0000005000)=[0x18, 0x28, 0x38, 0x48]}, 0x8000}}], 0x54, 0x0, &(0x7f000000a000-0x54)="312b2b9c8485c3ba0627aa80b832f25173322e933b88748c035f56460f14860c469429c22330abf5433c3750569b0af43059e93cb16dba5f6080ca7f48ce2833a25e7373e50aad38d6d3b090900b9c4e247663d3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x40804, 0x401) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f000000c000-0x4)=0x0, &(0x7f0000006000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x50, 0x0, &(0x7f0000004000-0xd4)=[@free_buffer={0x40086303, 0x20400000000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000-0x1)=[], &(0x7f000000d000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4f)=""}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x7fe) [ 82.233298] binder: 9710:9715 ioctl c018620b 20009fe8 returned -14 [ 82.233901] binder: 9710:9715 ERROR: BC_REGISTER_LOOPER called without request [ 82.236329] binder: 9694:9716 ioctl 40046205 6 returned -22 [ 82.285051] binder: 9694:9700 unknown command 0 [ 82.289521] binder: 9721:9728 not enough space to store 7 fds in buffer [ 82.289570] binder: 9721:9728 transaction failed 29201/-22, size 72-24 line 3273 [ 82.292404] binder: 9721:9728 ioctl 80386433 204edff5 returned -22 [ 82.294197] binder: release 9717:9725 transaction 1372 out, still active 2017/12/14 11:57:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={@generic="14204b56ba0caa3a0313cedfc69c4afd", @ifru_flags=0x0}) mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000017000)=0x0) r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x1e, &(0x7f0000002000-0x10)={0xf, 0xc5, 0x6, 0x81}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)="636f726564756d705f66696c74657200") ioctl$TCSETS(r3, 0x5402, &(0x7f0000005000-0x24)={0x3, 0x81, 0x1, 0x101, 0x200000000000009, 0x2, 0x9, 0x9, 0x1, 0x3, 0x100000001, 0x4}) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000005000)=0x0, &(0x7f0000018000-0x4)=0x4) pwritev(r3, &(0x7f000000d000)=[{&(0x7f0000014000-0xa8)="39", 0x1}, {&(0x7f0000015000)="28", 0x1}], 0x2, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000007000-0x8)="6b657972696e6700", &(0x7f000000e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000013000)="6c6f676f6e00", &(0x7f0000018000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000011000-0x20)="21b050998b40a5a64f072d90fdd84d8cebe1775d3a88f0c6a21a1960d7d19643", 0x20, r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000014000-0x4)={0x1, 0x0, []}) 2017/12/14 11:57:37 executing program 5: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000077c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x804) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) syz_open_dev$binder(&(0x7f0000216000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000055a000/0x2000)=nil, 0x2000, 0x0, 0xc011, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x1000001, 0x24012, r1, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x80000) r3 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f00000e9000-0x78)={0x2, 0x78, 0x100000000, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x3, 0x6, 0x200, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x691, 0x0, 0x6, 0x1000008, 0x200000000000010, 0x0}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f000048c000-0x8)="2b63708773657400", 0x3) mmap(&(0x7f0000293000/0x1000)=nil, 0x1000, 0x3, 0x810, r4, 0x10000000000000) ioctl$sock_netrom_TIOCINQ(r4, 0x541b, &(0x7f0000288000)=0x0) write(r4, &(0x7f0000baf000-0x14)="c5faca0456f17838854c0000000000000002aacf", 0x14) sendfile(r4, r4, &(0x7f00006a7000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) r5 = socket(0x18, 0x0, 0x1) read(r5, &(0x7f0000c74000)="00", 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r5, &(0x7f0000001000-0xf)={&(0x7f0000000000)={0x27, 0x6, 0x4, 0x7, 0xffffffff, 0x5, "fbdfd0076a7353f9e140c99b870da16bb9ce9a18248a50a42f91fbde683be8243d15b25866e62a08edab0ddbb25b4e7ae69a1dc2b820412c77a1148e2eb186", 0x2}, 0x60, &(0x7f0000000000)=[{&(0x7f0000398000)="859e5b52ae8dffc38f844c3edd7c00e310c37ea2163d997ee84265ed3875739d727f3169158a12f8eb4e1a0a56603f3e1f1b0505fb123bbcb4b97a712608fdd154134139626c04c1a8cd72c7b51f8d98059fb3bdeb5a", 0x56}, {&(0x7f000073f000)="4c3d7c6d68e1b12b9eea31980e966cfda052925880d044e17e802a71715d307964814feba4f63b22d1d6d09ba6868a43e66cf908d76d7f4c2e2454686a6335d46edd46362cd060b932f3609b9a85c794cb74cc966dc7d7180017cae0b504b5d057538bfefce90e0d4dab39fa514730a8dc5fd9b9d2555258d48468259484ffce4c5cbea2222f7d09f8041a59e77f065b137c7c9b1b9a1cc357d2c2b370c2", 0x9e}], 0x2, &(0x7f000015a000-0xf8)={0xf8, 0x7099a36323139935, 0xfff, "31bedde66778649889d8b8860e9482ac42809e5e90c267697ee3f229ef4b13bbea843828619f878ce287acdf42921c1e7931f6f76d39babe38c034d0be07f99d9265f18ac3e4498da5bc4fdc913daad392699b8b0dfc78da000000000000000881e5651e07f639060241650f391e3ed8d2bb91ff73138b1336fe05848e20e301217ab00d22c4a1996221b1c6dad0287bed1a2a2df4d119f7061dbd6cffffff7f00000000941c7f9c0fc5b502027c88d5a6ab94d51d72c0d27befeb3914fca083dfe23305e1203c1960c120c6d689ef63dad0065f678a50bd736c3cde89c396b15f57"}, 0xf8, 0x10}, 0x4000) unlink(&(0x7f0000001000)="2e2f66696c653000") socket$inet6_tcp(0xa, 0x1, 0x0) 2017/12/14 11:57:37 executing program 6: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00004ed000-0xb)="2f6465762f6877726e6700", 0x4000, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f00004ed000-0xc)=[{0x0, 0x0}], 0x1, 0x800) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40286608, 0x20000000000405) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) syz_open_pts(r0, 0x410000) close(r1) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f00004ee000-0xe2)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe2) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3) [ 82.294200] binder: undelivered TRANSACTION_COMPLETE [ 82.294389] binder: 9717:9725 transaction failed 29189/0, size 0-0 line 2948 [ 82.294393] binder: send failed reply for transaction 1372, target dead [ 82.295732] binder: 9718:9729 ERROR: BC_REGISTER_LOOPER called without request [ 82.300386] binder: 9723:9731 ioctl 4020940d 20001000 returned -22 [ 82.300411] binder: BINDER_SET_CONTEXT_MGR already set [ 82.300413] binder: 9723:9731 ioctl 40046207 0 returned -16 [ 82.303084] binder: BINDER_SET_CONTEXT_MGR already set [ 82.303087] binder: 9723:9735 ioctl 40046207 0 returned -16 [ 82.303796] binder_alloc: binder_alloc_mmap_handler: 9721 20000000-20002000 already mapped failed -16 [ 82.304225] binder: 9720:9727 ioctl 40046205 2 returned -22 [ 82.305735] binder: BINDER_SET_CONTEXT_MGR already set [ 82.305738] binder: 9721:9728 ioctl 40046207 0 returned -16 [ 82.305774] binder: 9720:9727 ioctl 40286608 480802 returned -22 [ 82.306298] binder_alloc: 9721: binder_alloc_buf, no vma [ 82.306329] binder: 9721:9732 transaction failed 29189/-3, size 72-24 line 3131 [ 82.309683] binder_alloc: binder_alloc_mmap_handler: 9717 20000000-20002000 already mapped failed -16 [ 82.311717] binder: BINDER_SET_CONTEXT_MGR already set [ 82.311720] binder: 9717:9725 ioctl 40046207 0 returned -16 [ 82.311757] binder: 9721:9728 ioctl 80386433 204edff5 returned -22 [ 82.313419] binder_alloc: 9717: binder_alloc_buf, no vma [ 82.313450] binder: 9717:9733 transaction failed 29189/-3, size 0-0 line 3131 [ 82.316896] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.320913] binder: undelivered TRANSACTION_ERROR: 29190 [ 82.338714] binder_alloc: binder_alloc_mmap_handler: 9741 2055a000-2055c000 already mapped failed -16 [ 82.344269] binder: 9723:9735 ioctl 4020940d 20001000 returned -22 [ 82.345382] binder: BINDER_SET_CONTEXT_MGR already set [ 82.345385] binder: 9723:9731 ioctl 40046207 0 returned -16 [ 82.360137] binder_alloc: binder_alloc_mmap_handler: 9718 20001000-20004000 already mapped failed -16 [ 82.368871] binder_alloc: binder_alloc_mmap_handler: 9741 20005000-20009000 already mapped failed -16 [ 82.369080] binder: 9746:9748 ioctl 40046205 3 returned -22 [ 82.373564] binder_alloc: binder_alloc_mmap_handler: 9741 20d07000-20d0a000 already mapped failed -16 [ 82.376400] binder: 9737:9750 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 82.376529] binder: 9737:9750 ERROR: BC_REGISTER_LOOPER called without request [ 82.376534] binder: 9737:9750 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 82.376539] binder: 9737:9750 BC_INCREFS_DONE u0000000080000000 no match [ 82.376541] binder: 9737:9750 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 82.379570] binder: 9746:9749 ioctl 40046205 3 returned -22 [ 82.389424] binder_alloc: 9718: binder_alloc_buf, no vma [ 82.389454] binder: 9718:9729 transaction failed 29189/-3, size 0-0 line 3131 [ 82.389459] binder: send failed reply for transaction 1377 to 9718:9738 [ 82.397233] binder: 9694:9716 ioctl 40046205 8cf returned -22 [ 82.417510] binder: undelivered TRANSACTION_ERROR: 29190 [ 82.417526] binder: undelivered TRANSACTION_COMPLETE [ 82.417536] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.431997] binder: 9718:9738 ERROR: BC_REGISTER_LOOPER called without request [ 82.443758] binder: 9737:9751 BC_FREE_BUFFER u0000020400000000 no match [ 82.448030] binder: BINDER_SET_CONTEXT_MGR already set [ 82.448034] binder: 9737:9750 ioctl 40046207 0 returned -16 [ 82.449285] binder: 9737:9750 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 82.450506] binder: 9737:9750 ERROR: BC_REGISTER_LOOPER called without request [ 82.450512] binder: 9737:9750 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 82.450517] binder: 9737:9750 BC_INCREFS_DONE u0000000080000000 no match [ 82.450519] binder: 9737:9750 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 82.454125] binder_alloc: 9718: binder_alloc_buf, no vma [ 82.454157] binder: 9718:9729 transaction failed 29189/-3, size 0-0 line 3131 [ 82.455597] binder_alloc: binder_alloc_mmap_handler: 9718 20001000-20004000 already mapped failed -16 [ 82.460463] binder: 9694:9724 ioctl c018620b 2042cfe8 returned -14 [ 82.462298] binder: 9718:9754 got reply transaction with no transaction stack [ 82.462302] binder: 9718:9754 transaction failed 29201/-71, size 0-0 line 2924 [ 82.463461] binder: 9710:9722 ioctl c018620b 20001000 returned -14 [ 82.464680] binder: 9737:9753 BC_FREE_BUFFER u0000020400000000 no match [ 82.464721] binder_alloc: 9737: binder_alloc_buf, no vma [ 82.464751] binder: 9737:9753 transaction failed 29189/-3, size 0-0 line 3131 [ 82.474524] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.474548] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.475150] binder: 9710:9722 unknown command 1951336409 [ 82.475154] binder: 9710:9722 ioctl c0306201 20009ff4 returned -22 [ 82.477748] binder: 9710:9715 ERROR: BC_REGISTER_LOOPER called without request [ 82.477755] binder: 9710:9715 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 82.477758] binder: 9710:9715 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 82.477814] binder: 9710:9715 ioctl 40046205 4 returned -22 [ 82.478429] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.478635] binder: release 9737:9750 transaction 1383 in, still active [ 82.478639] binder: send failed reply for transaction 1383 to 9737:9751 [ 82.478662] binder: undelivered TRANSACTION_COMPLETE [ 82.478673] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.491108] binder: 9694:9755 ioctl c0306201 205b4000 returned -14 [ 82.493547] binder: 9694:9755 ioctl 40046205 8 returned -22 [ 82.506901] binder: 9694:9755 ioctl 40046205 7 returned -22 [ 82.509337] binder: 9694:9755 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 82.509341] binder: 9694:9755 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 82.509343] binder: 9694:9755 unknown command 0 [ 82.509347] binder: 9694:9755 ioctl c0306201 20416fd0 returned -22 [ 82.509434] binder: 9694:9756 ioctl 40046205 6 returned -22 [ 82.531297] binder: 9694:9756 ioctl 40046205 8cf returned -22 [ 82.542219] binder: 9710:9722 unknown command 0 [ 82.542223] binder: 9710:9722 ioctl c0306201 20008fd0 returned -22 [ 82.542270] binder: BINDER_SET_CONTEXT_MGR already set [ 82.542273] binder: 9694:9756 ioctl 40046207 0 returned -16 [ 82.556529] binder: 9710:9715 ioctl c018620b 20001000 returned -14 [ 82.557312] binder: 9710:9715 unknown command 1951336409 [ 82.557315] binder: 9710:9715 ioctl c0306201 20009ff4 returned -22 [ 82.557386] binder_alloc: 9710: binder_alloc_buf, no vma 2017/12/14 11:57:38 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00005f4000-0x16)="2f73656c696e75782f636865636b72657170726f7400", 0x101000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000000)="690810fd9f50d116371dc9e43c5672c5cc62d125bcfb0bb1befff493be7ec3502e575c8f2d29ee29cefd707fc2e81a2cc60922070798f284cac26bdfe2ea8edb8d313ab41f7714ed2e34d7e1d6b20b2fa1189ab997b443", 0x57) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000402000-0x4)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000ff2000)="6175787600") r3 = geteuid() fstat(r0, &(0x7f0000f50000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000241000-0x38)={0x0, 0x0, &(0x7f0000cb8000)=[{&(0x7f0000ee1000-0x3f)=[{0x3f, 0xe205, 0x101, 0x6, 0x5, "8b09842220245c85ca290dd3562e3948bbd6201e20bfda4c59860417fbd5128c8b8098afe7c529465385fc09809aad"}], 0x3f}], 0x1, &(0x7f00009b3000-0x50)=[@cred={0x20, 0x1, 0x2, r1, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r2, r0, r0, r2, r0, r2]}], 0x50, 0x4000000}, 0x40) sendfile(r2, r2, &(0x7f0000b1a000-0x8)=0x0, 0x401) 2017/12/14 11:57:38 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)="2f6465762f73657175656e63657200", 0x183000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$netrom(r0, &(0x7f00000ba000-0x38)={&(0x7f0000290000-0x10)=@ax25={0x3, {"609373c70dfd48"}, 0x8001}, 0x10, &(0x7f00001d2000)=[{&(0x7f0000000000)="2f58933540c5f94650573bd111ef6e05a1b9d91ad8d2b0f2f64d0654eddadd44a8c6c56882a24c1bbce27051d115439c52586ea244113c6c1bc15dad21fe7b22b3859c33219c6c270d90237484b6c8ebf5af554863a374859044920d23575353824ca20e57942bebc22346ad63e49fab2f1a2c2fa56cdb170178afb212fc10f88a918d98059c60630a04976b06eaba2894275fcdf8eb464272ce15dd65def3cc45e7db6e02ffa5d2ba9ca0172ecf3bbe02f759ddbb69980e0c9c29061a02a975dc55842acd61696f2a2c7cf1fed5095f81", 0xd1}], 0x1, &(0x7f000066e000-0x60)=[{0x10, 0x13a, 0x3f, ""}, {0x50, 0x10e, 0x0, "9677d92a833106023e8783d5c37e63cc7c89f186b2db68f77fe06086853a3c05d8bd3f856a3b8817926851d6a2b921b03af8529a8a7801d381b2"}], 0x60, 0x40}, 0x40) r1 = getpid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000001000)={0x63, 0x7f}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000002000)=0x200, &(0x7f0000002000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000004000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001000)={r2, 0x80000, r0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000002000-0x50)=[{&(0x7f0000002000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca}, {&(0x7f0000005000-0xb7)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb7}, {&(0x7f0000005000-0x14)="0000000000000000000000000000000000000000", 0x14}, {&(0x7f0000001000-0x94)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94}, {&(0x7f0000004000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xad}], 0x5, &(0x7f0000004000)=[{&(0x7f0000004000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfa}, {&(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000005000-0x95)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f0000004000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2c}, {&(0x7f0000005000-0x15)="000000000000000000000000000000000000000000", 0x15}, {&(0x7f0000005000-0x13)="00000000000000000000000000000000000000", 0x13}], 0x6, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000002000)=0xa4) connect(r0, &(0x7f0000002000-0xa)=@un=@file={0x1, "2e2f66696c653000"}, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000002000-0x8c)={0x5, 0x5, 0x6, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005000-0x11)="2f6465762f7667615f6172626974657200", 0x0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000006000-0xb8)={0x0, 0x1, 0x2, 0x4, 0x9c, 0xcc41, 0x101, 0x0, {0x0, @in6={{0xa, 0x2, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xf0e, 0x0, 0x3, 0x2, 0x7ff}}, &(0x7f0000002000)=0xb8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000005000)={r4, 0x48, 0x20}, &(0x7f0000005000)=0xc) 2017/12/14 11:57:38 executing program 6: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000023e000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006cc000)={0x0, 0x0, &(0x7f0000548000-0x2c)=[], 0x1000, 0x0, &(0x7f0000086000)="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"}) r1 = syz_open_dev$binder(&(0x7f000077c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000077b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x812, r2, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000369000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f000077a000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000077a000)={0x7, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x6) mmap(&(0x7f0000776000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000f65000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x136) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) 2017/12/14 11:57:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000e24000)="00", 0x1) ftruncate(r0, 0x2df2) pipe2(&(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) sendfile(r2, r0, &(0x7f00003b9000)=0x0, 0x6) 2017/12/14 11:57:38 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x20000000000405) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) close(r0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000026d000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f00003b6000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x32) r2 = syz_open_dev$binder(&(0x7f00004ee000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3) 2017/12/14 11:57:38 executing program 0: mmap(&(0x7f0000000000/0xd2f000)=nil, 0xd2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d2f000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000945000/0x4000)=nil, 0x4000, 0x8, 0x48010, r1, 0x0) mmap(&(0x7f0000d2f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x80000, 0xea, &(0x7f0000ce9000)={0x0, 0x0}) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000d30000)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x7, 0x1, 0x40, 0x45}, &(0x7f0000a9f000-0x4)=0xa0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000d30000)={r4, @in6={{0xa, 0x2, 0x5d2f, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x6, 0x9d7a, 0x4, 0x80}, &(0x7f0000d31000-0x4)=0xa0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000d2f000)={0x18, 0x0, &(0x7f000027e000)=[@acquire={0x40046305, 0x4}, @clear_death={0x400c630f, 0x2, 0x0}], 0xf9, 0x0, &(0x7f0000d2f000)="f62b3ebc118cf66164f2db86729594add7b5ef8a33e097ba1cbe560b525d6f4fac41b4e5403199c2c5f9071494d73d84e05f7413441229db287ff7fd96653c06d6a43d5b8d0d56a8f97c2935d20c9fecbfe5b5f44eff0a3d712e16b0166744d106ef6836815faccddf083db07950ed2c1226e97143a17414dc48fade5a48e7598514a7e62722f1576a8abf3108ef8c513365c876f2d71443986a8407a9db8901e708f74e61807f1e4deceb213ad81c8c1f6f44bed72770cd1cbf2421234dc8cd655899a8bf588d9616ed2b742662c4aad1787bf45720af9f16c2885f511074c84e971ad09c9e395da8c1ee7e98554918cb81bd270446d9149d"}) r5 = dup(r1) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 82.557416] binder: 9710:9715 transaction failed 29189/-3, size 0-0 line 3131 [ 82.557573] binder: 9710:9715 ioctl 40046205 4 returned -22 [ 82.566770] binder: 9694:9755 ioctl c018620b 2042cfe8 returned -14 [ 82.596868] binder: 9694:9755 ioctl c0306201 205b4000 returned -14 [ 82.598111] binder: 9694:9716 ioctl c0306201 20276fd0 returned -14 [ 82.953989] binder: 9694:9700 ioctl c0306201 20416fd0 returned -14 sendmsg$netlink(r5, &(0x7f00005ab000-0x38)={&(0x7f0000d31000-0xc)={0x0, 0x0, 0x4, 0x8001}, 0xc, &(0x7f00006b8000)=[{&(0x7f0000671000)=[{0xe3, 0x7, 0x401, 0x9, 0x3ff, "9365758234467a5ede96e95abb763c53d673fa2dee26230d8da08db18a2de22eca7be9c9fe8309aeac958f49d3bfd394607eba21f469ef5e8eb32d0ed3a2e552f3b4c783b5b73a30639b7087791225a2be45becf9c19196564c3f98a3ba4b9b447ce35b0dea1bbfa7951bec8d7458e87b2ca3c9f1a3825fda45e6e7a161f6f35a6f54d7f2ad49bd326b0a594a095ebf3b8a1d055205a895148d1951f2d0159e65547378dabdc52337d4b2b34599bc5976c32702cd300375fa4ac9bdd7d7d1d1736daa8e95e151d99727a2cc01eaaf8f72b3500"}, {0xc5, 0xfffffffffffffff9, 0x202, 0x6, 0x7fffffff, "c8cc692be15064daf3c482bd4ff603a7aa14f7ec7b8b07fe84f1cdbef6e91dceb5927ac8c743d4f221d52ffe8ccf49210fc2b90d25794e2ea48403a3893d7cd97a9eb2b480a504ba02cb53940e852619402de7227cb0b73604ecf84a8946906e9e1e68edf487d4a7a342fa3388cfe9e68d2a64565320d975f8119050fb28f3b111812d29311629480488f989b2370ebe1ded138bacd2686b77141604cd251c243759ed7370570a59111ecc54a5940fa3b7cc4d2c44"}, {0x1010, 0x1, 0x302, 0x8, 0x6e, "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"}, {0x1010, 0x1, 0x0, 0x0, 0x8, "17de00a1e7b6c8ee91d78d2570a296bc82c8f37687b1366fc161242be037dc14c60c0d000462f5c6f8f5b272b5bb52bc12c57acf52b45ff9dae607252ab6068c4f04b3f214cc4faa9a4ae2dd005619f7347517148e03035a5fee659e3b3fa10e51cba55897d60ea9000a9e4e9aac199e5234bbadd74e1c04d1b9a4362e70463dfc34f5f7e6765f3ff2d7b03d67c7de76f0b1f86bc3eb975480497aca37f1938187369500a6389f4ad6de6e8c291c493dde89681fe98bb3395ebc8be349b6745b568cb9e1fc1ea6f3116d0b80b91623ba5a8cbc8ce9fcdc757a6041656ee1a91fb2cffcec761cf85230d87b4f0ec92ae714b4bdbdb727b7b0f02d9570ef3ac390ab518b9e92066c31ba318e652f9e5ac76077cd244d071ba38962310914ad5f7b6c11bc6ab824643324127cbf2e848b237cb0bb63c1632e5aafa251d6f4fe9c292952e258743964fb3e2c610324827891168d92837a00abcb776d3689f61ad69a1d74e6fd5b0aa12d9d2adb90a19fe94bce1ff24308d5522304b1fb24c977e80b1badb0f65aeddddfda5629a0aac41567ac1692ec595d8b699c936109958383889b4c31876a65162fc76e9960a229a79fa50c8b0d0753685aeb0297995b3e99581047fe468811ab822e36e89ac7ba5b7b617acda4d69c0f1e829c64e91b0d05c75eafb744a7d0b8f2fde5160ae87732295bbaf3a824f3d7b7d15339ba444a828578ac5d40e8228e0810023b1ed1494a34534b4e8daadb25f0c201ced1fc0276c83a18e29df5ea7ba137dcabdd2e16eb60f7c7adee9b3aeca2b5b8b670430e9343cf2f88e3b55edb079be03f0af1fcdaca8801d2f84e9b20829524d37bbd03ae9070162f793942ef3da30493a72c8cd6586310eb6eaf9179638ec156bcc77eb4b058dc1ff7a5fe9b4b19b723b0e01b34fbd1967d02abbae6b8c6e27b5456b151656c6008a6b8a80825b47f70625fae7ab7feb260c08b6dc0761d2d0dd59f4337f86b4a6423e315fc69648950324675ddeb8ccbf5d695a4157c3bd36d170a0df757b05672b41a35dc02f532daccb1fa83f578561b7b2f3e24393c77af4efc7bf8ba5ff1ba99e1c43dae9540df62d68e88610fe0cb47cb9b5cedc59be585d546a5a1c10d2c4aab50cf375ece8287e81fbcd154f6a4cc99d260f50279421abfd7369d2ff4b3230a948d1c7a3107c43a6df6a8f88dec400b6d0ecc3430502f44b58c851b14a065ffbbcddab32389031a17ca0f073d3b7c8155e6789fd40da7548b084269207ba49213c59d760a81844052a23060133fe15bd3584bed6a8d17af7d455d4db4eef13c0fb524e528e5a0d6cf4367f2fee382a764747f92eb08677c3649972ce5b0bbca2d9a5da0f9bdaf74888f06175d8d6df83539011b5fae19a92f81f9993dc250c37284efd3647418dc2075a36e4243cb11a69e7995563b704f34821e41aadd86e0466deca7d5d85177a31a9dc7ebffc2ed4a1e28b02dda3ba170e798a90d275458771d8b23ae35ad3f30c2061b8eb102e7bb6f51d4c3b89d95ede61a810c3b4b9c52c45dda18832a91f2009157239dd816e14b5e70b3ec4c0ebcf36e5456cdd46299751fcf704f22788feae0d069a24a4125ab90dc82f4860591e00427e9da3067fcf61d554bb23cbd40ecff09170e17df7eb57b562c7bc493d396725fe8f7f53f37daf32b2c747e148948ce5e20ac3d8d5c924a49b8a4a2a4855fb37e22781dc596a21783269235f4538eaca818535f4c4490291ef7b5842d2838e7e23754336b948053b83e108e35de2a538f163f6e0aaa2b4bd14fb9cac92d85e10376e8fc7419cb53f806b89b1fc9ec81d1a16a69f3a1bd8b19b4aa7795af9c85e82c0ee2d7eab483b1015f20b07f5b73649ee4bcf96ef3585e90c540ba3688725d8d42cc38c3be6483af8f699819e25f719d876b89c18b00d58a6780a58aac608312bd7f9c548fe19e5016c2da961e024e209d996fbf863bbab4f525681d30abedfdb44d9b105c095e5e0adca5c26334fbcbb57403c8f2f89797667113f4dd1bf4bd3b18ab6c9a30ac5ef0b531897c8eff4c2802624e030f247c5bb933a10e63e3ff85acf85a37466dd2bcbeb96e9466f1b99ff972ac0e42ec91cde7c0fc95f8cc24bce57312e10633a07bf6d7d05998fb2218b006c3df6ebd4556bf0c7b3b78077e087b7dbfce1073b7f08f9a0c9478e0e7f98f60e8995e3e006d35d169611866815c35968efe5e85d6641f0024b5b4e37699061811ebcfe35f1b09503178f4b127eea72f7e5ec7bdd3a8a1612fdaf6b4a0595472d63c53bbbf1fdf9e1b3824094f2368b1f7ad33d6addcde24c027744b82d4aac9ba7c400e788bb733c12ec7107575f5108d4aaae9f06135562a244c399f009b090a6131cc17fca0ca8bdde541371652c6c726cd101bc1f7631485353f919552faf6ca0be498aafe7225f8d1e4cd208b9cd86dd27f739fd4481e81dfcd8549c6d1a4eb13c86259c1509973bb50ccea06f668ca648d9fcd8b27acfb9f10da3b9b64298d3833af640fca6d42b981f21758e7e1b70b9b32c46a48544a9a99b4bc95d80f0917c917599414f9c0139b5804bf2602001c84d036618860150a30b9e0a97927b71d553b5b9148380b98ec38a9049a9964a30df3ee51e77a85080bf095f9515ac93016769e72cee711de6d9d9dce6e3d293459745b3fa98a9c09c574b817096e83c7e88125718dc0460fa05a65ac947d3e2e426e993c368e359365f4316e6303e6a93bae311c6bde9d82da7c6b385ec76ee5e05c8194b9adea4e82c9a2a01452c8fc57779b668110750948fc1031a68ad7695bfa5b8494902746f18166904a23132887759908f179c96edd82d3e5d62ead4a72d33ffe84b3ce6f870640edcfe86161fbf311e17f04c8f05c4bf3e607ff593a962365959846fb4105aaf579a6eaf0db88f7ecf80b57b82d991e60b4f00f5577ea85d61202a860b1cc3a51776c3544edad52b7f65e1e58e22eed9f54bc5b2debbdd1313361a2d107ba05e8b0c87a0822e963b2facd23f38c87136c13b8206a3ce70606387f635ff1c6672dfdb7079c6735c7a92ca80ba3038a22a94ea508cc089e4ca025954375298639617dbd804c218e5d78e96daf83e6ba549c60edc1cba37ce350924c46d5512233d0dd0f9b1b2aa4003c1faff1d1f49da5315498c1859eaa3356bf27a984c08b1ca7daec23cae6e2e6b28e46c35738bc6777761e95cdfc19e9aaef3316c5020dde1edcef385f7a616e730989619910a69d5907b5f6b5727cbdeb75f6053a0881f29eedddd20a3ed34022d7bb9117e00f2635915114bd704f27cb35168c3785b3e3e53258db231ed9434726ac7664b07eb74147e03699d28c7bdddfa35abe68bd6a88047d4993609a21e0fba0a45b53f9d15dcf917f85a355adcefa4f17bd8c4043a94523c2383454409b1a313f76fb49ca265300b72320386b29318dbe15d3bd6bcb22755d252243f9dee95ea1dc61612f3efc1722245a147dae5f64f3b78ed74f4deebbb6f2e11a1a561e795d2442efc0023e1b39cf759e003fe5aa4cfa966855bc3bc21b896e20cfa5e4806db9251af0c93c572a520c557b22e81d7c56bd2deed6da7a043e08ab4a0516ced0989f7f79167ca45e1d3fd7e3032db674b01bd9493e6d5a7ef30dea18246d856b0e820592234477b53b65392fc5b668e3d7096175b680b4653c45e5e830bdaedffb140886c8bb60062595f21942cbda7be5ebb7bfa51030419895c69d5d5de46c4a1ab4b0509003d7842a84ffb779419ce660fdef4b04ba825b0e9a41a6d952074557aba1f79954783a23b92a539dc391f143359b42928845a4d173f0628750e5a143c15cbf887da348e3f3752c408b2fa896664adf07761f440dbec6787c83587f3fa14463060e26f3d9e82052d582d94febaa1cbdb945b7a1043c472ce8f04d4f85b811a462448f2427bac1f53a28f5973f5e7c6e87bda44be06acd659097a1621011ca4fc39c45a8baecfbdc515ca422bbd34f572618bf88c23f1302b21e87684dc10b9dd62fe01d9d4140d84b160a2c9a9fac6c1068419c1e4cebbd0c7abf1b9470d8ebd5158262552e8fd863d474e209f22663b7f4c08187046522cb2d738b8c8910c65a07e6b31452b11253631e74cb0d529d2e620e15576aa6d7720a597cf58732809d1978f3ab366676bc66898df83a90d35075789714660050001327426ffa76e222c92118314d51cf05e10e4e5ead49603cd11104e304d370cde4e682a268c4197187fcc399bb8cc1c79341e4bf824b8986c9475a4719833b8415f8d498b5d16fbe7069d8d96f6579baa606210cf184331abf69b1682199aa53dc0456f96f9d7885aae1fe605d192dc9834f2f3a605fb80a7a8e26c2d5421a56af81e7117bd58e735fe73426c27ff9adfe191ed0a37e475ff2b84e3d6de62558b9d030478a69e9c33aba4ef2996ed3db88d07d498347b366d9538b0ea034a5a7336c14618209a308151100586a0792d940dd8e65d5c77d20d8faf39d2c761f98be72a1795d309714e49e734e86305d3f55e262de6a3eb3350355bdd8936624259c629e957f024c34569b0e892da8cc2a7bf912f92f9f87126361b6decfaaafb4722b29030efeda6413563b88e3bb4db169cb478092b4c8d4f4e20a5edb626613ced99890607ae4deff036a13726d21fe15063b0934f863f804153b4ccad1edc99f4749e269b00cb1bd084ca4dd4ed93582859bbd434ea4eea5eeefbc26d695b021028ed17ec466c7316e670ee328189c2ffe6c912d398fd32b00eb716def67eafa4e9fd7e147e08bef16e009fe62214d4e500f8ec3f8f0a667869ab8bffefe6b7cebe18f13d20a50ab810e770a7d86024b5627e8b1da30bbc79dd43f6c6db9b161a82b5070729ead00f59735de05c236a3ea0c4026ca40ff5680bcbf39443cd7ff7177d3b65613c8b865abec686cc9f8997f6b91bbe3ba40f4d72312ef5074fa9e07859b0af5fa8ef817760990e2fd12d2e7f73655ac2d3d7229ada52fba2e570ae6c0ceb21252e14ce78d40c4511ecd9c5bd1d32034ca5a569617d114c26d352558763580171a2d1a1c46889d9ad7ced8eea6f72ccaeddec2c2eb51784d1cbe1c052804815dc02bea6888ab49e89d28f106c2111c074a2f0e8bb581921eac2d94049722629df8ff3d03da5bd7e7a90df01c5b905b1561a0f4a17f02a2a8b5fd52a5497e2b3b7d9a8766e6f8d1edc882bbac2642eeccdd85ded244e4ba24d335833267a3bd3f4d8fa2fcc496be661ab8cb7f78ceceb7d290654f33051b045d7b06d33296a9108d7bb9a573562e0d20c5a87cbafa1a69bcec1c43734c200e13fd64ade1ee9a5febd052f4308d1a8229b4d72d6c5a638816d388ecb5a27faf7bbc8573615566edc111dce67834d68cfa843a6dc42b0c664855370abf21a6e977bb2f3af051d56d6820f56520457ae1ede92e3851a5d5072a7e8ed1fa16324c4e4afa01f1b5f6062f0134fd4bce0dc6ff85896485bab84931b40df5c6640db0fb6b018a97238b01e64932799f27efb31dc234d00dcb1ac695fc157850a42dc4b149553afec44168c61fa841455c507cde3883ed628ccdd029238977220dce669eea854a7da40655930ef346e1280cd2c10333f0c394dc4d1378908e6d3286265015066a565a15ae42c1a7465831673c52accb1662f58f9ab6f501545e32552d799db1890ccecc25ba676e2bba7dc9a6105e538c9592c8cb1ab36d26349cfbd3338b5c037dddcc013517c8202193a841e51ea791b4871fa7ec189299a6b1791364f9f5b1407b"}, {0xbe, 0x4, 0x20, 0x6, 0x7fffffff, "5df818770f95eedb8bf1b3d35c9bcf96239604da8af8305f2131f13747612344a12be2a37a893b1e096c4a3238cd0a2b7e9b9b368bb52c7d97c6d35db757555b3ce04a4ab3ea5ce8421aaa068ee235f3b0185c01ed3f05938938fb322b8f2e4788e19492bea96d3afb3eabf1e3e98dfb148b12226cf56b8f90f1485b99ac5084a299a8c87347b8ff5607ca122632d44c507c6bea44193033413261fab26f774f37622748fada1d3aa45214958e30"}, {0xca, 0x80, 0x720, 0x80000001, 0x2, "3053d1155bbdaf32bdf302168cfe0ad5d14b949e929b66fb263d9706bcebf2d9285e97ac22a5bd05efd4bf9ad80c76b0ab5be53e0c4b442e301636a16d46be1b89660b1f60005228a69291bfa3b3b85e0e37e4b2a21f0f4ba75a3973ece49592479e3423352088a317790783c0587730753f9f155f63895bbcdc742de7add2b7243325c07651a2008fc495d846167a6c50db950cb382811272333a8d4f8e8b2ab02832be307c852c63a084a9f3c45fc465aa2d1b42090a52762f"}], 0x2350}, {&(0x7f00004e5000-0x14c7)=[{0x72, 0x3ff, 0x520, 0x1, 0x1, "c9cc101709cb79897c30263b1b3596f879a8839977b855bd92b4a1625e5a30beb57ef61b96be083580c67cd3502eb99ddf1adb1b4763a10f84554f0ca0e48eeb4c1c644319532c9368612fe7fad7603ae1bf2d8d7ae9b2880155ceb7f84ea224f91b"}, {0xe3, 0x4, 0x10, 0x1a5fd90d, 0x80000001, "54ae523126d3ce2686c5a266c54a00b6363bdb3919c96b4031de4f9c1f929375491a6646213bc8b92e55918c6b7db609b7acf65fcd161a477f834a4d563d22489e6359c3d31d6f6a1a1025b3716337ca4ec8ebab2c2f49875c9d6a6499ae8180c372124c76605b5f28a6ecdba2b25f0e91fd32b5599adda440dd2c5b99899d657840c33cf6cf7a0266ecbb140ea695de2da47862e078e9becab94f1c9c55b284ae5cb66a62bd788c0b672d06b2b3946884988af05a6fbbd0d8eaec87264ef97ddb602824d4d05346a88e22d446b9a8da967b82"}, {0xca, 0x3f, 0x8, 0xb0, 0x8001, "07abb58e049d96e4ffc42c8cfd0d464b5863b16f8061637e19232a37df2d85744e9798da917c03a77f688ce48200e47ac8b8f2c454d58881d07acbb43067666e7655590a846c9ea7b11369c7f9cea903142b6578f466b51391346b185b487796baecbb9dfb3ed2046f7924d36f9811aca2e456241c95d986ad9d4e4b3f942eb6d7dd507d4313c762a6358196e8ff76a1ae709cfb2a9083d19c4814bd2338611d525943475b558aab6584b348717a912a82935a2521012e093a85"}, {0x53, 0x80000001, 0x200, 0x2, 0x3, "a4f0abecd6f9761358ce2ec6a63263790d460706dd5eb86981e9c2fbbbbe8cec8c165fb4874f7ae0be70c3684ab24ffed6674d6a49eed6118f1b9e2fd4f542886be5c4"}, {0xf6, 0x3, 0x20, 0x8, 0xffffffff80000001, "ef46dd36ce47dcc717fa09a1bbb138a85ee7cc104864f678309e6427931be4852db6056f7ca7da0696f095f3e96008e10cda3b559f00b58dc01506ee044e62ef0e77e52d9330dae68e5af4715301ec7c714fec2536964cf3faf65db312672e56db53d1b4bfc667ba8b70737e52f66fe4f38d2d2da8c8714a501754082e1aee5204e13c7a30695e2f04a2bcac6aa997658ff9b9e36f38a222b28b8ab6ddf3f792f070c91ab466b55fea56999b628c8bedaba34e472304d5f63d6b4bdd878e895985a55500e320401007baeb7363a066fc1de1c2adfef28a388e5379d274c32ee4590d62e92549"}, {0x1010, 0x9, 0x400, 0x5, 0x81, "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"}, {0x88, 0x7fffffff, 0x1, 0xdf0e, 0x1, "27f8f939e0ee0657235f86885b8628469ae3dfa48616f279f5bb725693f803f04dae344d7f7e73161fb54ec985ee4c859940e8006ba2d721563900ea85329dd3eddca1a6aaf72b92fde7ee15dda3e244b503130069607bc94638d6b8274f89d36aeab832c2d907146e49b64fb430d1044be4ff0481c8f64f"}, {0xc7, 0x1f, 0x921, 0x2, 0x3, "1cc789073be6ddfb91ad3bf1e832bb0f545f414c115280183e96e8b3776c8d7559fdfcb0947a40d8888a751a1c10f39cbd89fecb7248d05021dbc4a8cc1abab776bc8b4510b2e31b1656033c9325fbc5e68ecc7b389b24f0446980eb5c7cd8a37a2f0dfb1265c7644f6c121f34f5b81456af54d0961412fddda3c614d5bb6ea81242d4514a176f3ffb5115ea0b1998e58004c240582ac2023210d26c2595275e9b57ab2a077ba8813e5ecf970b05c327f2d188eba678df"}], 0x14c7}, {&(0x7f0000d31000-0x1085)=[{0x1010, 0x4, 0x800, 0x7, 0x7, "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"}, {0x75, 0xb5, 0x501, 0x800, 0x1000, "6fbfe5fd45108ab2e5aa9dd182ce3ba0687d9d6f97ae5571dfbf984509e32f2bb4b916b06c59b44bf5be4ffe5a050dc21c9526493f6214bf09f382de400de46f05f9f8aeb0c54f97bc7b47b92aa4025638fcb7c42738554866dbd7cd80b7f3afde8d00afec"}], 0x1085}, {&(0x7f0000d30000)=[{0x2f, 0xdf3, 0x401, 0x8, 0x6, "ea062619f0ba59c58bef2e4c37f960184ff2cbc3ab2f92172309b5766d24cd"}, {0x8c, 0x2, 0x0, 0x7, 0x3, "4d87cbe73ebff46d42e72b9401830dc465f18f5fca76a54efabdaa975be13b21c8b494838a36cd799fd122e810f1274f8caa4acd3ab650c07cbfd79e6669d4fcdd975a929e259fa827a901b3919136ce14bbac7e1778c093eb19fd8b02e7e55243e7e21564e0e507b3847835d76ccff7e4ef74913fa18c99c189acb2"}, {0x104, 0x5, 0x2, 0x10001, 0x757, "7c82057ff53ce356aed3ce177640bdb1c0eb914d5a2946be09a2744e1a1c81fa9b7b558918da3a35bfc7385fbb79f5e6612698ccf9b42d1f591112d84ed0c69cdaefecd9019689c6d8e9879f86a703b536312702dcdaf206df2c9199a8c5796fe84d0b382c7c5c07738c115f8f6558fff9579c20210428da9a21035225198ff50e1ab4896b669681e134ca785c2d5234145242eb5da3b6ddc6e5cd6cf68d5d106684373097fbec8a7ee2f8d6b9bfc6ff096df68a4ad455f10b6101db132e45beee785a7b6640e76a5d1a48ee629d1a63c03a01eb5e118676d5b2ca939f7b4c7b60172b03db49d3706ad7032b7e6d69e9966925bc"}, {0x99, 0x8000, 0x0, 0x6, 0x200, "be3b4d06bca7fe52fda095879b39d1bd55b79132f0a52c70a5e8d75ee4dc2c68a774f61c56bcea7839ebec376d4b1af4580d4243eba5aa9f77d60425ad0022dea80f6dde5b92e33101382b3b165593ba5bc7c8ac6a1708af2edfd7c72c71ae8226e6bc3eaa1bb16b9f12337082c4c3e34b5991168214378cfa078842437b577b3af6145041b14fe624"}, {0xa2, 0x6, 0x100, 0xff, 0x80000001, "e42afede2d85457f28d411b4c948ba04a101eb07c6d8ec32aaa0c12ee85a76b750f1ce3a415761b611a52d374fe9a92712fe5e9e56b3c78ea9c28bb0a63a58cf300e309305b4672fe0feeb4ef97d7b1bf6587bc82b7b0a18b3b7d01f767c68a14cdf30858a072f7a5e07d432c6dbb8485cce1b4f711c1a77547c6976602973b5375cbf3d9ce375d78841d586cedf12695561"}, {0xab, 0x3, 0x902, 0x7, 0x1, "a6c0bc0215e433c052cbc42900014f0f6536802d681e6d036688723e08691cd7f4407c3a010eea7b51f67501d8bfa5b72dc1282a0dabb8848a1bab150a0c69755d24c6013d6f63d5688d1344e517dd8c3ed3fd7455a7c327eaaa28fd289bfc6aaa7406e977a3ef7210bc9787f2feb56875e04ae045a4c1782d124a972b31eb2c023de24fed82505171f520605be656c42b59b6a3b57f2a0847c9d7"}, {0xa6, 0x1, 0x0, 0x176b4df8, 0x2, "65361ce5f4690599d8515182ea420a2220ad5b6a4ad15aadaee00b98b84ced69d662509806c223a577160ab10f367e388e7d55d472afea8ae92752dc1830f038a06dd86117b282d42c646c91b157eadb9aa074c75bfb3ac11382483151780f3ba9cdf34da170ffbc7e8d19cbe6a800a10c06cc08c9a1ef2a591e1aa42fad968d7ddc18db1fdd3a5322c5ed915795a91df018ae609859"}, {0x10a, 0x6, 0x12e, 0x7, 0x6, "0f8d77ff388aab3a7d82b272d4683fa4ac98894cce15e9527199f779d6320eb020078713bb630a67a4c487a36119406878260ac6249369d9cc8c680a71a10d363de99e19d3a0047f4d91be496f42b87e48a708a128f6dcd56194f50822cf133a4ca819ff64a0f90b0685df172a6e1cecabe34e96b5e101224c7be82163fa6e5e93960eb139422dd52104156cbd799ddf40c33f24902c41e0f8bb7c2d07434811ef24ee6656dc33a8db4ff58fe79cca0aa2acba16f030fc4719f2990c5060ccd71710dc93cf06eacdced8ceff35e55efc7c0b8267f57b7ed84cea97bafe190735d76203abf7ed89329b933609db929cc725d5cb9134598f5192ea"}], 0x555}, {&(0x7f0000d31000-0x33d)=[{0x77, 0x1, 0x101, 0x3f86b72, 0x1, "56f8afa106f5f17a3e851699ec15c44ddcff64a4670ef85195d7c5dde230b221671b8ef2c0709dae6d83b6c59ded0b0393f63e425aa0acef887f997510e6136e7a642b69f7b9bc710b3f2228bdadf118cce54ee61d2b7cfb21847baf2df3fa450862713919d077"}, {0x60, 0x1, 0x4, 0x8, 0x401, "338aec4cb267b86c361cebdb11f1c27440db453a4c6e8163d7f6d35806c018bbde762540d45bc0e2cc812ca1777a29a7ec2b4f072461c28aaaf6fafe32c59d4e35ad7960759a91299044e4e2800e6c63"}, {0x55, 0xff, 0x0, 0x1, 0x8, "3b65c2aa6f5d5f00ffc8bb337c7861c64992ec2f9451651433ec584a9841f52bbef7d7afd19e7d71270d88a3f390936612176e08462209bf20992027d513947505f0e32b16"}, {0x6e, 0x81, 0x9, 0x0, 0x3f, "248da4f9c7daba422438bbba55914c67828f27ec0f1f9d1ab5e1ae1b6a8e25b0afebbbb2097c06021e56e7dd9602ae09d1a5823740ae5d50700636c1bc319083c3d370f9aeeb31ec12fedffc4c0deb8a7f8e1c280520526b37bac8da344b"}, {0x62, 0x10000, 0x200, 0x6, 0x3, "08878f25a47454cbe9526144cbe5971652cf7ae6bd0662e4d625de1c612c34fbe1ccbc2b99b7c8664b945a519ff9ac4ba45aca1ff1841b855dc43ea043b81a3ff964c4ab9141f5534bad548fe664853e1e24"}, {0x5c, 0x8001, 0x200, 0x7e, 0xe845, "705df3e6a0709c16cd0792ece1930ca07a1eb3285dad759721fdde6d5db2e5bd743032ecae65ca8187c4eadacdbfb22690f0e7a5aa82584e3005ab9c400846fe5c50853beee3d53691777695"}, {0xe5, 0x3f, 0x300, 0x0, 0x7f, "e89785cfaf88b3e9621579de62c7a65e6a9f143989705d05b27e282a545880a83c956a24f59e033b749bb797a1b28196a65693cb697a95d5002f27993de29768d79c5b4f02357a896badd7c6050222d8872740e0053a961869f538b57818c22899ab7d6785ce196f925123ff8236706b42626eec27e995178d72e7f27c311d44615c74f9b51ea499075224c2d4784fcc09100c71696e2c403efc4d936da84231e6219c5acf28b246591f2651c18459cd7fc9577d2b6bfd6da7acf8f6a30649154c4dbe6834f2b1fce3a74ecbbdb2e5862f63af6410"}], 0x33d}, {&(0x7f0000d31000-0x1469)=[{0x8d, 0x1000, 0x0, 0x0, 0x2, "3bbe796e0be4f479cc8149e74dff7fbcb8d316093e2d0ca2bd5bbeddc15b836f58ee2e129525d0d77a85a5184434dd42414aede505fdc9c4a2dd833837bff4a361e60fae12f5a317fa4be1ae23d98f509846bd1c0fbb57067e871c8411db024e7e801a789916e16d01d2397628e7bb1dddfcc6be54690beb1350ffe981"}, {0xd7, 0x8, 0x100, 0x7c3b65ff, 0x0, "5d6abcbfeca32bd30bd0f859d8c8ac5e680d981a36af7c804543480e5c1d0d1536bc1bb1a0265e41e355e946a0e124b94cc4a35d1b1c7e268b544bfd218671e61cd6f9c62b15fbd8f68beef1c23256bae1a78dcd678cb7ccf99e433ed9fa99791142cceab4a1cd892c084dd65d6c2c6f32f66a610d5b2f39706ca342c9311db20beacbffcb94ea699717efe0ec614fc5749027f1566a4f33f3dfdaa0c8e1213eaca242c8117f3d45072ddd2e0eab02f4707dd5eda27347fa2bb33de35b35aca8e46bff973091fb"}, {0x79, 0x6, 0x10a, 0x8001, 0x0, "123c76f061319cb11c898623d83e609a80a5a22429f47e457484ae059b0072805d90151da0647e4720aa88ea48d578952b9048f4111252b70da669e0d0288171068ef5d1e4347585b1b2faceaff5e522230f370f4442f2812c99d7fcbedf7f565a3c7b745e4fdb83a2"}, {0xc5, 0x1ff, 0x20, 0x7f, 0x100, "ae87d82609ea416041d67092a595629ccf11c8dd4cdcf7260b3cb56c464a24f0dad4b163dd8bfe672a58ebb6c5c2691bf3a10bd86a955749bf566604be9bd8e204560e89dd75b0be9e41e5f0c382ee939ed32332d2a677768f68581ba1d2ad39ded6da8466106d8912f41071bbf26096f42616f050f311fd1245b7d072a556282cbd8a28f80d7f247a0e341aee5fda3958404f0c1531091736c2a2ca57b681a2e46d8ba821f2b82022f7bce5c48fa3d3666c3e2812"}, {0xe3, 0x9, 0x60a, 0x1, 0xfff, "7600f221078fe7c6a27658eb2823b66a13c31fe9ce8c784f2d05d12c82594514e8b6eccfa14a878279e607502079bce526ffe76613124805ff60eb47b66666f1298413179470413f99bee1861ab9a101b36fb106cee48fed025567ee919fb3e62b48a9279955c0f8a77c8eb6ac37b4e749db021078049f95aa5222b5e154f581ce2f9de6fe9c574401678b97df282e9d7d880cb015f01d874845ffbb70a6f2fe3fdaa810cc44e6746b9cc28361b4b384247e49ff10e2ef1c87fb67aa5ca7b05e06a5eda04eb21a4e77ce586eee0fbab640fb77"}, {0xd4, 0x1, 0x300, 0x3fd9, 0x1, "65ff1b4eaafac920c54f7b4bd73dbf43d5774816747f453330cd93c6b3ae351687682997bd06e59d3c883d691168c18477bf00de0f016116049369c10df780f694a28a7f311d59b895454602ec42af05c99a91903a694f357b5290305a24259bbd0d065527878ee8622f1309e879a5b7c54b71db55c9af8624d67fe9151227826e2eef3feb507e323d8685259cf8a49b7b49c9ceb193d4d507528359999260d4ade63890c2fab5ce367cb6750c088699a5433efb2a85bd913a4d99d58d61cc14ad5381b5"}, {0x1010, 0x9, 0x318, 0xff, 0x6, "47664652cdae1b4389410bfcfc292b27ca0c16103d5eb191a84adecf9b37b4384b9d40aeb5599252a69f405a71da5271024d78f42cbf65ed2ab7b975923b2830d141e8bcffe6e6249b5c5d8b1defabbcb53b02775eb1ac66c0d694c88c76279aca9cae81a2a866b8e2b9e800f4692fea3917b7994665f5adfd8bfbb1842afe862c7e5d9bea3bfe407447573a3d890a8c3f6cfc3731d0e35a05e855501a99d040472e1e379aff0b33c24a43bf4d768d625587405b7198306566e92a552670237a1e82839ae9486e79fbd5efb8966ce1975f35992eeef629ebde534a944be64d481f5886ca58b5cb867101eb5368b91d4ecf6a15421354dc9d1c5e994148af34a277616a4da1e4ee0dc0f9a22998597710229988fc3322a49d11b8dff1fb998170283298adf0668c4f0f30568fe58b553b81909dfc1f5b4b919280475027b6c0c6dc9e0ffb55e073ea11a800b886752b44b8cda89219a797452b4049fdd9d009f933849370656d6b63a6bc4e99ab1e4a4e4b11f9ec7222a1cc1a66503eec55fff45038330644402f16724c074789c2ea425ca4c673106980327142da1eedecbf2114a79694f538b680968e26be62835a55b7062efc469c60223856b305cd45f684f7f711bf8c8ff2e9faac2f2c41691f2944b81313d45297a4f54d651f13bb917c556c3cee567585124e0e66537dc48b050e6bc9621f226452ab4780d5687be09fbdfe59542d64d30fdba2e3bedd4153d01dc12a38fe35b8c315127dfbc22ab94bbe08d218bf2dd773d38e6f54fe031f1a166c7093d875231e895cca2b1d475869e8d4125224d64c6180ab30a1c4d186a5a27393bc357c58918b2ac8559001ed72aaff1f754135ea2087373d462705f7d4064a94d1ce16ff14ad858bead15f5796ec8cc0ae450475486b5bc0c2183ec60141c82d5fc6aa2d59cd2bc29a83b1f3bb834561c65af78e1b8ecfcdf80d99a8745d161ef445a19e76572b56b234891e25f16688d1a5ad5443dc2157a86efd30309caf915825813cef75f55db45740ef4ca8a154fe4ed3930ceb4d88a3a91e47d0e951a46dbe39d08afba35f81ec4d05d3332ca263612b56269dee07ce4bf6dd3527fd59cbed5ec93af805f70a2e00bb7252a05b14806daeb49804cb1368a4c219805737c10ee919b6c61d22ba3b4b4c3f729c36c948a3fc951f75af32e43a9627d4fe1626a7017368c019ec7950f873fd060cc034a1238a188a2e5361ae07120f0c32fb5298e6d2fbd9662838dfa97620069ef784375b660e4504147176269bd8278988df0a909507c9b3abe778d805a3a050c3824039953f02cde44910aef5ab882cd77b6df13cb95cd7cda7c81792dcf8f1868361b1054432a6c502d17fd86a36ea52fbf3477a6fa92c5f43fd6ef18068cfb5d5995498af3c7d3de77741824cf06e156468cf05054ec66b758f68405b787fe699a574ba67182162c10547a2bcda6129e8ffc24e8e7c50f3d514427bd52c39bde55adf47c3e6283139734d2aff2a66b330671711a401fe24decef9201785bd458d3794fb67c52d719f7fc7505aaa3bff56ecadf6a7dd9f4a18adc5da54252d52448b7b104e0ba4d7c9baa4c890bf3144bf695ae79f2a072a168c6853d017df4abb80705aa58948bb263cffc38c8c7732cffa5b79ef6a0f2f31b9ce9084ad3adcadb556f116b3f9546fb8fe7ea716330df8ff98cb216acb23754bfd21a0aaa7a219b05712c4f19a1ef4acc0eb99268dc2559a61c5b2cabe9196612916c4f7f69997ff688fe6ca6aee7781c46f3348952f7b80c6ae65dafe17c0986afc06915234705bf6eb93d41bbe790f38dc9d7297732b3b43ea12936fd3974b236c94236332ce9654062ab0d3f962d244721784bd91e26797cebcb944dc887a639ad2a17f650203fb23fdf18aa1cdfd16ca0a692a2a04c7071ef60b24af5ded849a84864c9f608142d39396e46e960f8bfa02517ef840a254b6085403ae05ca75171b311b46c52c180e7fa4f61b92ba4e81d4284fa059a4992720c3ac03f672893e3529c3417b73f7f098651a42146c50f56482c46084ae29bfb22fa072a5682bfc85b3d768af1b89b0554fbd2cd17c5d0c2ed3a6fa3a008253ec2a19d3fe9d23e0f2371e12f9b001700bb6de2f07bdfc023d4e7fd6a3279570589976516650876810840b186fb51606b133bf48276f8e16853269cda26198b0486ba1c38790a115d58ef81bd5dd41881cb95871a517248ea27e755e261510c4af561017f7d0c4c4dbe739932a37ff460b39f62b54cafdb08a41b6e4cdd2080072c35d0031363d7243894fc4d078826e37186ee6b4a58f4175e6af359f22cfd150e489b982d98a60273b0e64531fea179d30863c2253f5754282e54baddc3ebc107dc9d5ea8cdb6607916ddcd7ed9f00ec4e344b82bdc3e3e87128192d28699ecd38b033efda47a41b92d408ecffbf78ca56076a2d4a30bcbbb6f896d1090229db5d7ad4b83ad02e240d1e617aaa5a28dc34e5400ffd61af6d696aee0c552af1db1ae610e9d54d80af772a2d8cfa19ab2352eee60965cf2e7f44910318078037707c56349325902fc12dd5837df9745ca1e289966f477c3b3b62514db637a3f452db4aefd3cf2de98599180c5d8fa5f68f1a448899bb40f70d7116b514f1e664210a51b6c4bec70341dd762640c4bd9cd58d82d70f6a12dbe4dafd7b0014639501a6ec0532d8112464d8197ecbf328f98224ddeb8cc74ca2e5e5cdf1cbeaeea6d1e10d0fb686edc816c1e7e74ea8003bae9a1f97d20156e5cf31bc72a3de0c960c11fe92390758476a3510899a70fcfc34b2a647427bd549f5998b14aa40b5c7cccd050d35a2614cedd6fdbdc2ea1882ced1780c8e07bba45673ae770514d17bec8938dcb2993b97d930abe5620345c356f55cfb7c39cbb20373d8aedcb6b9cbdbc3c5944f356154e256ac411ea2b8d5872ea928b1f131bf0267280f83004c6087bbb5873493286e735a744afeb7a7aeab310b51acd0d16a370570bb34f3fffe8f066babd82024507b188a866a2af89798e052792653d54d36aaaa1888d875060777500a68b07fe86addf6d359419c804e5a18911d5666b3a3d9363f94dbb8d850923bd4bc508c28891f79f829ca31f9e0c70d61d9b336780acda5b5b957a972ff0c9a51cd10739a6f1ff68cea254d43ae7af7b237c948cd2e1a6aafac6a414ce0be6c2920ccdbfc8404fdde34955853f7520a27602a18a4ced222aa9a00a6290098a76298696dc236c44f8565a515beca20d4ba99767c24080149d80ecba213fc06284cd5c3dde644d77cc4ae9b2e8322e22ef2de80f21d0bdbec7e4b21cc933301026262811f56cd20c9a3bade2829956cfbc584954296d8dd49819f28a882c99142f427fa5181e26132fcb54d9e22507eed7510a84ea3940d1ca28deb616914ef14e59eb782967a0b2d2811fd3516e8910ec051e4ebbb4abb2aac0afc35ef5b9949eb604a3feb4dbbe694cf39d247f2951ad590fc489999a0d48dea0f2f5203327ed220a0b7775680f4e57977f47f0082e3a9bbe0eb58756c9af6a04eba4fea9a80298b49edada5479835a3d464c371bdaaf8f06d6ec0e252f6c9c9233c29350461c1ae4ef32e65b5ba71539a3c55c31f2f7964ef4f3cf4f236f364723b21cfc8b30ec1f2bde759198ae4480ac8d7c6a34d6bc7aa0dd380cfec27056463fb5127ef639540cce0f40898af6863a39a65ab0d91691e2676ca7b98cfb78c5914b2cd48ae5ec02c1cc683c3ab85e5ebff78258dbe2ef2ac54f5bb100fb26e197ae616123cab72fc31fa404e3a4546c1e897bd17c6d7d07684fea21bb1285e5dbdd29e1942537a535f15bf052864b2aae02166eaf6bc32b576f0bd761a87ce37614e5e41f3f5b44cc3b124273fb7e2a7c83356aca425f5edee2200987dbeee7dfbf6508c4b5a3ac855356b40f3373dce09aa032b9d80f1fd9087dc872d115badb556ad9266497c95f8df5b4a1f94fa1c1cf142663b75e4c7fdfc0b6a74c8fc0c3b615e70fc8ad789be5cea7f2119b2b6e99bc77bebd70abfeb01c3c9364f8a57a99632cc6e37a3a791d87eae21bc5db75a4d5b4f508eade49ab316b333b00f8da3320c0ea6fbd6e15c3b1a00fe74cc4a23358788e224dbe4351d105cd17728f9e705a17263820cd8f02c7180beabe1f23b5c1408f0bc9d8f080ce7be9a5b11daf4e99a207a47f72743a4c745d58f5188f229ce649ed896102b3c5f41a5510c347372635b12f00db398d823ba2c6826f188df3bd4519b4458e0d1cdc7b52b194bbcb7483b4a5ba78c68fa5029a97af405668d0511dd3046f5131060184af06d2d2aa2f4ee8ce7c0dd4a4b6e705666e3a3a04a7082226291152f99b4e9342fc44d204f701486dc2c5c1d7df0f0e4ecbd7c0cbd44082cdd7630ff2af7e01f70d401a0841bf10634c4b865339af96d0bb44ec867402bbddba6638ae3ce477744f887ec5faf1dfd9f81dc4a4f6d8706cdec6451c2628672954a13d54f720d6570b0ee1aece99549d4e2c33e4ea8f5a5db3f00bf8a520c390e8fe059bf189885220edc43624c779e31887e8411a59627feffac3f9ff72c89996d6df1be3d97fd61e9653bc0727cc35e05b2d7afff0ac68b3d0bad99ff2289049c61a853e8336c9b81a0d89ff2777fc49875532120080cfbec01e379cf0e131bd22c8a0b15015108d8b1d705a647655883a50bd316897cfc9b4e4f918deaabbe9c36ce08c288f7249e45f1ff8b6377d7ae55c753c0f3a116d78c8076fb153a7cc91b7e1e166eafd36ab8735d49906366a5cc666a6aea185d3fddaca3b0b872f831543f41bac80bc9b969a475f9a67439719f43e52eeedc726115792ec6eb92e2667fd855bae25003da27c5af335f104a1f096fbfce94261726998ae267d56c5494cec50218df452f33e896f157c144dcb521b8d76e3a55e3d9682a9fb19c064b1523319ac4d846368ba2df4cae9d285f7acaa90bbf3b0bcaac0d9bc24855a19e433ad0e70bd181ef8425114f0b63a595dd8d8e1ad4a7de4d8ebcfdeca7e2341d54a1813ae0ba641ed5e0eb7d994a550a4216d15250eb91a290cbdba6694420fb68afe26a14bcda89310fc0b3ec9fdbb872350ff2c2eff11e1627252dd3ddffbc308f26951a751fba629343c8b24671e1083215cf47c0e8a3d8d045786f27c0a95cb9ddc682b5db868b6980a0923ca032d57ca0adb1102eee6c5ab315f81c08064fa138f7cf621ea0bf8164e9434cc7bf3e84fdc8469fce0d7fe7e50ab85f3c877a1e3466a0ee04fb19c71ea6d36e09310dfa0260fc85ebf97efc50d61d149dea403f05871fe57e4d6bc5c8dabcaf3c87275f739f21caa5329bdc6541d3203373724f191b1924acbbb8c7f98458922a8462818979ddb0adc1ef43af645b45713575374da6b35ac9ec2ad11f49644614bc9bd8b227d007b863ca1580e2aa23e3c37734d40ee94e4d7b08cc8b4d222ca225ae3f5ee274db471795dfa8c0d676a4781a1b89f8252f8a72beeec617a453a2973183b0469e27710bbb450d13d6c562430d933d2bd199c8c055b0d5ebc0d47f434f678df34fffb276d4dafa0d8b3efb3d69a4846336a935cd335e593f786ff3b65b17f4f9eb7079f52c3ff85ffe7dc891dabda21336f57238c6f2452f9a1bc6e253e0899f51b94b43d8c56bce5f45663b854c3bbc28074ea5622371497c914e0e8983253375fb57df62e4f48ec54e91a207ffb52d8172ce805a618c99a0e46a537ce20fe7af403cd25543a96159c5e7be532784a15922e0e0aa85350725a02126572e0ebb"}], 0x1469}, {&(0x7f0000223000)=[{0x53, 0x9, 0x100, 0x4, 0x5, "06aa622f80d2825d8d203f9449f518f988a38ed3a3c4cbe6607f2769b3f6cacb3ca62eb4237b0b8205a8355d9f047d182fbbdb6efad870f638b3bd9000024546eca7c3"}, {0x4f, 0x4, 0x0, 0x2, 0x5, "30e0d0e8f232d1a1b02a88e485948ee7ad66f66d727896475227c74bf4598b2d1c772b244581ac0f6f0a2adb887008aaa6705fd1c3f08cead31f994b090c6a"}, {0x4c, 0x7f, 0x200, 0xffff, 0x7, "b826faedcd56f5bb0016386a6685979eafc27bf596949b1761c7ce38db8c0ed02704c8fbcd4f7f4d67406b45f8dc6be572b048b0d6b33b559a73e97d"}], 0xee}], 0x7, 0x0, 0x0, 0x10}, 0x40) setsockopt$ax25_buf(r5, 0x101, 0x19, &(0x7f000050b000-0x38)="243535802fbf3572f8beb1c55e074730509e41c2c3e68f7c1099f9fb6beae0b6ecd077ba84fa4083f7cdf97d5ff8e25ed848f7779600df1f", 0x38) mmap$binder(&(0x7f0000483000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) r6 = syz_open_dev$binder(&(0x7f00003b3000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r6, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000004000-0x14)=[@acquire_done={0x40106309, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000003000)=""}) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000d30000)={0xa4, 0x0, &(0x7f0000d31000-0xa4)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000839000)=[@flat={0x77682a85, 0xb, r2, 0x1}], &(0x7f00001c9000-0x10)=[0x18, 0x78]}, 0x10000}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x70, 0x30, &(0x7f0000902000)=[@fda={0x66646185, 0x8, 0x0, 0x33}, @ptr={0x70742a85, 0x1, &(0x7f0000d31000-0x1)=0x0, 0x1, 0x3, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000d31000-0x1)=0x0, 0x1, 0x0, 0x17}], &(0x7f0000bbb000)=[0x38, 0x18, 0x78, 0x38, 0x18, 0x38]}, 0x7fff}}, @acquire={0x40046305, 0x1}, @enter_looper={0x630c}], 0xe0, 0x0, &(0x7f0000c9c000-0xe0)="a1de87046e0746a26aa8aedefdf10573595e9d9d5b6ccd84c7192a4eca56aa025f5d4410e27a23be6958dc14bf9c4bb372261cdef7b1a5ca54a6b2fd2e831a8f01f1d0634a85dd44a14ec5acddebe57e76dec80604a250e1c2fdb6e74779e90da0883ed29f59bc21384e12fb08e108a0539fd987e387f9950856492e6abc85df82628da7c6298bde0d7140557a90514982addecffed3f4b9ece64fb2f19811ed9da05f5165b7c8bcf366b3c00de2460fa994df8f219b45a3296f2518bdfa39b8e8188c572d88cf1d39b3b6b7d494d85afd3a0986b4f454c2b1ac6fd87421735b"}) 2017/12/14 11:57:38 executing program 1: mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000415000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000415000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000416000)="2f6465762f62696e6465722300", 0x0, 0xffffffffffffffff) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000417000-0x30)={0x4c, 0x0, &(0x7f00003eb000)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40046307, 0x4, 0x4}, @exit_looper={0x630d}, @exit_looper={0x630d}, @release={0x40046306, 0x4}, @acquire={0x40046305, 0x2}, @register_looper={0x630b}, @increfs={0x40046304, 0x2}, @acquire_done={0x40046307, 0x0, 0x0}, @release={0x40046306, 0x0}], 0x1000, 0x0, &(0x7f000007a000-0x1000)="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"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) mmap(&(0x7f0000415000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000417000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000418000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000242000)={0x0, 0x0, &(0x7f0000326000-0x38)=[], 0x1, 0x0, &(0x7f0000419000-0x1)="16"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8cf) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000277000-0x30)={0x0, 0x0, &(0x7f000001a000)=[], 0xb8, 0x0, &(0x7f0000416000)="dd1e871b0791e0dbd0909dabf693209994b5bebc781e2a0c6e74ca9771e6ef27c46b1fc0dfc0a2082d9e134641da778cc287560966a6e5cdba4ae9ca36ed92ac52cd2f890826444bfd0d261feb6dd6e978daceff043c9b1c74255ef53f48542130fe59b6e30f4133b13e09553583d7500746d5df9205b541bb7d7ab511105e9ea2694bde3163727733fc1b16e286754e8dca161d59063af680b6d03aae9c08968a936217c736d014f9670a525d921e9cf3530ee889179235"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000419000-0x8)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000042d000-0x18)={0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00002f6000-0x10)=[{r0, 0x5, 0x0}, {r1, 0x2080, 0x0}], 0x2, 0x1ff) mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00005b4000)={0x24, 0x0, &(0x7f00005b5000-0x24)=[@register_looper={0x630b}, @increfs={0x40046304, 0x4}, @increfs_done={0x40046307, 0x50, 0x8}, @exit_looper={0x630d}], 0xf1, 0x0, &(0x7f000077b000-0xf1)="08351844de9aa25e660f0e467b61d86ea3e0335e4dc8ab87d809bbd33a83730d638d88ee9a1c1e9a607d34fcc51af54bbfac7ea7dfaef4b83933eefd6d2d6f0f79a8c232729ffd4f118879140086260f841cb5801a6c52f6a2ba0ef1feaee46c2c0baf40d649442ae1fe7b25628c9ebba990a3c04cd366902ceb04e380b47ce13e04f77e28b115a27f3cb7f03d953f6bba3a3e2fdc2056f392f40d8197f27fd137053b047158431f359b81d86da2e36e6559185bec6662e94b61fe47261fb01a667bb46af0c9ea178816f0ce48ae8acfb415ff499694ad2725355044b1149f6d1679ffb20462827ed1305adf6600f8a805"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8) 2017/12/14 11:57:38 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000333000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00001a0000)={r1, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ee000-0x18)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00001de000)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x801c581f, 0x800001) syz_open_dev$binder(&(0x7f000003f000)="2f6465762f62696e6465722300", 0x0, 0x800) 2017/12/14 11:57:38 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000009000)="2f6465762f7573626d6f6e2300", 0x46, 0x440000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000004000-0x20)={@generic="c6e24875b8dd2ff852dc0fdac6a348d2", @ifru_flags=0x2100}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000c000)="2f6465762f70746d7800", 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000011000)="3a2483a038e929005dc029c8411fd93bb68b361eedebe237ac36734f718875ad9fd171d674a00864a44badff45cc5661d699b229c0ca9e2dc36198b2a9ae6623c9567b2289f4eb889c4f4a03afff22310a914e00567ea91c535606bda0394bc5bc0cbc2b6cbf8d19516f07d903fb1c633a269e340713093c4d9f39fb368c16d7645a8c93615f2fd09831a8279da090b76e9ab9315eb68249f635f69d9d8a27edaf7ec631b7d701a560fc2250d0") ioctl$TCXONC(r1, 0x540a, 0xffffffffffffffff) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000b000)="2e2f66696c653000", 0x400000, 0xc0) ioctl$TCGETA(r1, 0x5405, &(0x7f000000f000-0x2)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat(r0, &(0x7f000000c000-0x8)="2e2f66696c653000", 0x100, 0x1ff) r3 = dup3(r1, r0, 0x0) writev(r1, &(0x7f0000010000-0x50)=[{&(0x7f0000015000-0x401)="8e85816580cf9a856a60dc009a06e48f88264ce0327ca3327cdc489be9f5111615aa670a05b051eaf3c8eb036c24fa836f516672328c4bd2c7a048c962fefaccafe613be179d45f290c1db06adfd58420e58f5efaf291aaa1e4478fc51256d235db31b1d696650c5c88a4ae3287102599505000000000000007106e14aabda81383338a5cd37d66c36edc074b1835bcc4eb75d8410714a6ab310f6c69144a856236bb9fecf08acd7a71167c1ef8918cc5dcbe6736190676bad044e95689b55dbbbdf8841e202824eec416d24a31e745417d41bf82e99edc075778d888ecf40222c802fe576f82b0e9aadb08d9eeb22cd94dfafedbbdae23af13fa7e1c4db5f7ea8aa8cb7bd4e3829726d046b3c7c409f686aa3f6fbfb167960acb66bff0b821f1c4c2ad619b5669e8e44936e9b131d7e5914ec1ddb351eb178554156890f2e2d67d8965ffe772bfc22d67b210d85070354ed165ff7e871689e7cb9c0fe2a806fcd11f62f7eb1accb2d8413eef64e86fbfa9026c8570582ef725c4d57a00874ba88b4671efea7e6a7a4bba11e1838bcca78f95b800d202dfad7bdc1dc8b0eb64fda6c6f018287bc8e56b1cb63a608159e88df6f3038d19836be0901e5e797c908477c8413b33f0ce445255e34e3655b178d75304b7a488f8e4ab44d40fd044da71325af30ae7e76f958f4ceead6dd268a9f24834c814e9b5771d767360bbe10539ad4c492188b73db8411fcb1631911e7be8bf99a8ea435b21fa9321326e8fc2a9f26273657618cb8c1907aebe17febd0032f468f42872088136fd3028232eb1918ffa0972cf9e3266a94b7766c665816d262afb72cba6c095368535fd8117d9589d552972e916ddbc97b7c54c7e2ba089619f129ac21e328a77520fde407659ba6619a2b78a8ef75b75d5fba7c9b8be30cef2799aa4979ad47ed84041c13056bb18cb7721d5313bdbbb3c46edae351c4a7cf5b1f2a9ceadad2ceae1c89142c7251a4fcd896899660c108ed2957e9f15e0b6fb4fe94797540554b06a9dfbee7944ac51bfe8350b5c57c0a29ffc459d19b5f70a9bfa1f9e929094fbb5f2e7f344af6592253542d254369d89957c0238b6d1f814725237ff720dfd2a6654cb8f4ccc646ecdb9c11f321f38ccdd6329a3d14ffbb1f56d04522022f4f1909bb22a118513214bd876d96bb35c3fc71eea5017ff8c8ed5c710f33d46612757b52cbe401c05e196c0664e4df7757d490db18b1e6002ccc4e93440bce877fe67b5f4902d654c0ef4adf12bf716d3ae3bb100286beb0937f7661975967caf9b4e8caabc8f2bba24f2511d5459c84c30e918924165a58c8ebaf5b8ebcb1397573c2995a531ed59efedad0d7675f5ee6bda46b0f0f2603786c54dd187909bd0f608d32cca47913738db2a67b2019fbf76a1fe29c885f8da646281fb04b8c833de7b40d7aa8ab08", 0x401}, {&(0x7f0000004000-0xb2)="6f82a3915eb8b653e8e2a18a98a4a2f0a6e249013c3dcd53e3060056db45c31db7d45ebf2b8e267af7a52aa2c03f838badc700f2e84b9b03d5887c6ab5e1886cfe5353e98cc987149938f06d7dca24c1934d6bcb4f4f09004e296ae28fd0c93ee2fce701f196767385562d26b211a8a1c74b73dadba3828ccdd017008bf3616cd9b1814868fe3393a79b23d29be88897fe36d7277ea161dc7c6b828ea4afe38cec4dd705c60e138b092f56d34c0004443d81", 0xb2}], 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00005ad000)=0x3fb, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1ceb1bd9023cd809, &(0x7f0000709000-0x4)=0x2, 0x4) pipe(&(0x7f0000de6000-0x8)={0x0, 0x0}) bind$inet6(r4, &(0x7f0000b52000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r4, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000036000)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000ec5000)={0x0, 0x7, 0x30, 0xffff, 0x6}, &(0x7f0000999000)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000699000-0x6)={r7, 0x80}, 0x6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000c51000-0x4)=0x0, &(0x7f0000375000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000184000+0x6ed)={0x0, []}, &(0x7f00002ed000)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00009fa000)={0x0, @in6={{0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6275, 0x100000001, 0x3, 0x6, 0x2}, 0xa0) sendto$inet6(r4, &(0x7f0000fea000-0x62)="b692c0c9609b0927370957c4a9175423c6bf3ce6c0b11b3018b993e9f5e78778f11c5d8f4c01419b259620362bf9adb47a215258ff8ea0ddcffbf7d0804c628ad779dd9d7404b2c83f860af0637fb6bae9ae589bcf748d06f5047e486facea9aab54", 0x20fea000, 0x4000, &(0x7f0000609000)={0xa, 0x1, 0xd5, @loopback={0x0, 0x1}, 0x1}, 0x1c) ppoll(&(0x7f0000013000-0x10)=[{r1, 0x2181, 0x0}, {r1, 0x40, 0x0}], 0x2, &(0x7f0000005000-0x10)={0x77359400, 0x0}, &(0x7f0000013000-0x8)={0x3}, 0x8) fcntl$getown(r5, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000380000)={0x0, 0x80000000000007f}, &(0x7f0000059000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000a0b000-0xad)={r9, 0xa5, "b0fe56d97e386501bea52697f411b0021e07b2169b51958e9b6a0000000340cbd172a54ee7ac0267d12c597a6bf6fcc3855120f466ccfdb579016cefbb5dbd791580b07d563cc577d8071232b73cb983654accfd5e5a1b956f75e0c0d7a4a5f0a5709d8f8caa4175e8c5fb13a51dc1361d4d9f0edf8a7a3b83d441de1bbe831e730a9b16ee7b8d0b560b2ac4d880b8f6f7f0d159e58c7997b33a678e0c6ee48da76b9b6a3b"}, &(0x7f00007ab000)=0xad) 2017/12/14 11:57:38 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000001000)={0x4, 0x0, &(0x7f00004f0000)=[@exit_looper={0x630d}], 0x0, 0x0, &(0x7f00004f1000-0x2c)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00002dd000)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x4c, 0x0, &(0x7f000000a000)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000006000)=[], &(0x7f0000002000-0x8)=[0x0]}, 0x9}}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000009000-0x48)=[], 0x0, 0x2b) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000d000-0x10)=[{r3, 0x0, 0x0}], 0x1, 0x28) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x18) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00003e0000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 82.969079] binder: 9761:9762 ioctl 40046205 3 returned -22 [ 82.977696] binder: 9765:9767 Acquire 1 refcount change on invalid ref 3 ret -22 [ 82.991786] binder: 9759:9771 ioctl 40046205 6 returned -22 [ 82.994896] binder: 9764:9773 ioctl 801c581f 800001 returned -22 [ 83.004154] binder: 9765:9767 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 83.014649] binder: 9783:9785 ioctl c018620b 202dd000 returned -14 2017/12/14 11:57:38 executing program 7: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000307000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00004ed000)={{0xffffffff, 0x2}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40, 0x20, 0x8f7, 0xffff, 0x8, 0x0, 0x1000, 0x0, 0x7, 0xc9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0185879, 0x400008) [ 83.021453] binder: 9765:9767 unknown command 0 [ 83.022103] binder: 9763:9766 got transaction to invalid handle [ 83.022107] binder: 9763:9766 transaction failed 29201/-22, size 24-16 line 3008 [ 83.034834] binder: 9765:9784 ioctl 40046205 6 returned -22 [ 83.048720] binder: 9759:9771 Acquire 1 refcount change on invalid ref 0 ret -22 [ 83.051384] binder: 9765:9767 ioctl c0306201 20416fd0 returned -22 [ 83.053013] binder: 9783:9785 got transaction to invalid handle 2017/12/14 11:57:38 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00004ed000-0x9)="2f6465762f70707000", 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x69) r3 = mmap$binder(&(0x7f0000045000/0x400000)=nil, 0x400000, 0x2, 0x40012, r0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f000008e000/0x3000)=nil, 0x3000, 0x2000000, 0x21011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000038c000)={0x98, 0x0, &(0x7f000009f000-0x98)=[@increfs_done={0x40106308, r3, 0x2}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0xc3, 0x10, 0x0, 0x0, 0x20, 0x18, &(0x7f00003a9000-0x20)=[@fda={0x66646185, 0xdb8, 0xcf6, 0x4435}], &(0x7f00004ec000)=[0x20, 0x30, 0x38]}, 0x7}}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r4}, @register_looper={0x630b}], 0xb6, 0x0, &(0x7f0000305000)="a040dadf725b6c88ac0fef54634c8a036002c3ee6e1e14d9444e6e96e301cda6783c0c3276a190cea4581ca95e2a1c1e6bd1853bece3abc3095949eed0cf6293c6f630ebfea68dfda0522cb4c280ae62738760b991b8f79c097a412036b6396b62440ef161d3fd53e3f1266b5b40d4c5e9a4081568bcf3be0148d366ee3fd31f07b1edbf042e0bed36292516271ec6e1b8eeac106700f291fa5718b7c75e0240deed6ecb026e6728bcec4eec80158393e498b6c5390a"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40286608, 0x480002) 2017/12/14 11:57:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000cd000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000997000)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f000000d000-0x10)={0x0, 0x20, &(0x7f0000b26000-0x20)=[@in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f000056b000)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f000004c000)={r1, 0x8}, 0x6) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f000080d000-0x8)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000db8000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000a0e000)="6e65742f736e6d703600") readv(r3, &(0x7f000054d000-0x50)=[{&(0x7f00009fd000-0xde)="00", 0x1}], 0x1) 2017/12/14 11:57:38 executing program 5: mmap(&(0x7f00004eb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff16) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc028660f, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1) poll(&(0x7f00004eb000)=[{r0, 0x8400, 0x0}, {r0, 0x4000, 0x0}, {r0, 0x600, 0x0}], 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40286608, 0x20000000000405) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) close(r1) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readahead(r1, 0x79b5, 0x4f4) mmap$binder(&(0x7f000026d000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r1, 0x0) syz_open_dev$binder(&(0x7f00003b6000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ee000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f00004ee000)="2f6465762f6e65742f74756e00", 0x0, 0x30000) 2017/12/14 11:57:38 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000-0xb)="2f6465762f6877726e6700", 0x200000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fchmodat(r0, &(0x7f0000003000-0x8)="2e2f66696c653000", 0x8) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000001000)={0x2, 0x80000000, 0x5, 0x3, 0x4, 0x6f}) r1 = getpid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000002000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000001000)="6175746f67726f757000") preadv(r2, &(0x7f0000001000-0x10)=[{&(0x7f0000002000)="00", 0x1}], 0x1, 0x0) [ 83.053017] binder: 9783:9785 transaction failed 29201/-22, size 0-8 line 3008 [ 83.059951] binder: 9788:9794 ioctl c0a85352 204ed000 returned -22 [ 83.069872] binder: 9763:9782 got transaction to invalid handle [ 83.069876] binder: 9763:9782 transaction failed 29201/-22, size 24-16 line 3008 [ 83.069917] binder: BINDER_SET_CONTEXT_MGR already set [ 83.069921] binder: 9763:9766 ioctl 40046207 0 returned -16 [ 83.076044] binder: 9759:9786 ioctl 40046205 136 returned -22 [ 83.077697] binder: 9798:9799 ioctl 40046205 69 returned -22 2017/12/14 11:57:38 executing program 7: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000123000-0xd)="2f6465762f62696e6465722300", 0x0, 0x20000) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ed000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000f000-0x18)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f000002b000-0x10)="2f73656c696e75782f63726561746500", 0x2, 0x0) connect$unix(r2, &(0x7f0000240000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffff9c, &(0x7f0000227000)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00004ee000-0x4)=0x10, 0x80000) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000463000-0x4)=0x0, &(0x7f00004ed000)=0x4) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x8, 0x0, &(0x7f00004ec000)=[@decrefs={0x40046307, 0x1}], 0xdb, 0x0, &(0x7f00004ee000-0xdb)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332c0000000000000006fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480675c6ff71dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d78454fc614000059839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33c936ba"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480806) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xcbe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000178000)={0xc, 0x0, &(0x7f0000265000)=[@acquire={0x40046305, 0x1}, @register_looper={0x630b}], 0xf7, 0x0, &(0x7f00004ef000)="0a8843e2567d074401dbf1b2d809b6680f8bdc82e0c153608ff822e8eb7cea7599b5df7cda8b3f77d7fffe8250a520bafee0a2dfb73f497df90a79e7f8b85fa9b128d13f95dfd0db6cef67b493f7712934661e4853aab449ed196531c8e8030ed89637169b66738a3ed3a06c3b317be8757fc5ae7f6417c9d846af4c1371e13a480cb0011de2eaee50a824e0bc4926bd26cb6cfbf2c8b88c05946a204a4f948a0d3f18cebca1d0380e7a7025e19a78c71fb6384fd503601b0023112373b2bfcc92fdb88a0c87806be9f97a541feabf4d20d543cf13f5af1f38c0dc7963eb43769938b41cd88de5da4890945e007aabf33e343eb0fbd4d8"}) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ee000)={0x84, 0x0, &(0x7f00004ef000-0x84)=[@request_death={0x400c630e, 0x4, 0x4}, @clear_death={0x400c630f, 0x0, 0x4}, @reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x50, &(0x7f00004ef000-0x58)=[@ptr={0x70742a85, 0x1, &(0x7f00004ef000-0x1)=0x0, 0x1, 0x28, 0x12}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f00004ef000-0x50)=[0x20, 0x0, 0x0, 0x78, 0x38, 0x48, 0x48, 0x60, 0x40, 0x48]}}, @decrefs={0x40046307, 0x2}, @dead_binder_done={0x40086310, 0x1}, @increfs={0x40046304, 0x4}, @register_looper={0x630b}], 0x60, 0x0, &(0x7f000008f000)="814304ce022b1a74f5523f97684c2e9ba3ff0c6688cb31c41e118f5938f0aacba64da2803174587e692118b4e4502f508fe5611a0cef1e4551c56dfc88c6f70d5964370ba095e944831dc74d8e1882844fbeb3eece10b74c2f0bbbcba50a0f76"}) 2017/12/14 11:57:38 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000009000)="2f6465762f7573626d6f6e2300", 0x46, 0x440000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000004000-0x20)={@generic="c6e24875b8dd2ff852dc0fdac6a348d2", @ifru_flags=0x2100}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000e000-0xa)="2f6465762f70746d7800", 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000011000)="3a2483a038e929005dc029c8411fd93bb68b361eedebe237ac36734f718875ad9fd171d674a00864a44badff45cc5661d699b229c0ca9e2dc36198b2a9ae6623c9567b2289f4eb889c4f4a03afff22310a914e00567ea91c535606bda0394bc5bc0cbc2b6cbf8d19516f07d903fb1c633a269e340713093c4d9f39fb368c16d7645a8c93615f2fd09831a8279da090b76e9ab9315eb68249f635f69d9d8a27edaf7ec631b7d701a560fc2250d0") ioctl$TCXONC(r0, 0x540a, 0x500) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000b000)="2e2f66696c653000", 0x400000, 0xc0) ioctl$TCGETA(r1, 0x5405, &(0x7f000000f000-0x2)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat(r0, &(0x7f000000c000-0x8)="2e2f66696c653000", 0x100, 0x1ff) r3 = dup3(r1, r0, 0x0) writev(r1, &(0x7f0000010000-0x50)=[{&(0x7f0000015000-0x401)="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", 0x401}, {&(0x7f0000004000-0xb2)="6f82a3915eb8b653e8e2a18a98a4a2f0a6e249013c3dcd53e3060056db45c31db7d45ebf2b8e267af7a52aa2c03f838badc700f2e84b9b03d5887c6ab5e1886cfe5353e98cc987149938f06d7dca24c1934d6bcb4f4f09004e296ae28fd0c93ee2fce701f196767385562d26b211a8a1c74b73dadba3828ccdd017008bf3616cd9b1814868fe3393a79b23d29be88897fe36d7277ea161dc7c6b828ea4afe38cec4dd705c60e138b092f56d34c0004443d81", 0xb2}], 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000c3d000)=0x101000000007f, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1ceb1bd9023cd809, &(0x7f0000709000-0x4)=0x2, 0x4) pipe(&(0x7f0000de6000-0x8)={0x0, 0x0}) bind$inet6(r4, &(0x7f0000b52000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r4, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000036000)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000ec5000)={0x0, 0x7, 0x30, 0xffff, 0x6}, &(0x7f0000999000)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000699000-0x6)={r7, 0x80}, 0x6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000c51000-0x4)=0x0, &(0x7f0000375000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000184000+0x6ed)={0x0, []}, &(0x7f00002ed000)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00009fa000)={0x0, @in6={{0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6275, 0x100000001, 0x3, 0x3, 0x2}, 0xa0) sendto$inet6(r4, &(0x7f0000fea000-0x62)="b692c0c9609b0927370957c4a9175423c6bf3ce6c0b11b3018b993e9f5e78778f11c5d8f4c01419b259620362bf9adb47a215258ff8ea0ddcffbf7d0804c628ad779dd9d7404b2c83f860af0637fb6bae9ae589bcf748d06f5047e486facea9aab54", 0x20fea000, 0x4000, &(0x7f0000609000)={0xa, 0x1, 0xd5, @loopback={0x0, 0x1}, 0x1}, 0x1c) ppoll(&(0x7f0000013000-0x10)=[{r1, 0x2181, 0x0}, {r1, 0x40, 0x0}], 0x2, &(0x7f0000005000-0x10)={0x77359400, 0x0}, &(0x7f0000013000-0x8)={0x3}, 0x8) fcntl$getown(r5, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000380000)={0x0, 0x80000000000007f}, &(0x7f0000059000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000a0b000-0xad)={r9, 0xa5, "b0fe56d97e386501bea52697f411b0021e07b2169b51958e9b6a0000000340cbd172a54ee7ac0267d12c597a6bf6fcc3855120f466ccfdb579016cefbb5dbd791580b07d563cc577d8071232b73cb983654accfd5e5a1b956f75e0c0d7a4a5f0a5709d8f8caa4175e8c5fb13a51dc1361d4d9f0edf8a7a3b83d441de1bbe831e730a9b16ee7b8d0b560b2ac4d880b8f6f7f0d159e58c7997b33a678e0c6ee48da76b9b6a3b"}, &(0x7f00007ab000)=0xad) [ 83.078853] binder: 9759:9786 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 83.079583] binder: 9798:9799 BC_INCREFS_DONE uffffffffffffffff no match [ 83.079589] binder: 9798:9799 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 83.079593] binder: 9798:9799 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 83.079597] binder: 9798:9799 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 83.079601] binder: 9798:9799 got transaction to invalid handle [ 83.079605] binder: 9798:9799 transaction failed 29201/-22, size 32-24 line 3008 2017/12/14 11:57:38 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x4)="2400", 0x0) fallocate(r0, 0x0, 0x0, 0x10001) write(r0, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002000)=0xd2ff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003000)=0x0) sendfile(r0, r0, &(0x7f0000001000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000001000)="2e2f66696c653000", 0x4) faccessat(r0, &(0x7f0000003000-0x8)="2e2f66696c653000", 0x2, 0x1000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000005000-0x8)="2e2f66696c653000", 0x3) getpid() getpid() ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000002000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000006000-0x8)={0x0, 0x0}) fcntl$getown(r0, 0x9) getpid() mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005000)={0x0, 0x0, 0x0}, &(0x7f0000003000-0x4)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004000-0x4)=0x0) getpgid(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(r1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000006000-0x18)={0xffff, 0x7a92, 0x4, 0x8, 0x2, 0x5}) ftruncate(r0, 0x1) perf_event_open(&(0x7f0000002000-0x78)={0x0, 0x78, 0xfff, 0xc00, 0x2, 0x6, 0x0, 0x8000, 0x8214, 0x1, 0x208fe7d4, 0x5, 0x1000000000000000, 0x8, 0x0, 0x80, 0x7, 0x378, 0x1fffc000, 0x1000, 0x5, 0x3, 0x6, 0x2c18bda0, 0xfffffffffffffff9, 0x2, 0x0}, r2, 0x3, r0, 0x1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000003000+0x95d)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000") renameat(0xffffffffffffffff, &(0x7f0000001000)="2e2f66696c653000", r0, &(0x7f0000001000)="2e2f66696c653000") mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000007000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa) renameat2(r0, &(0x7f0000001000)="2e2f66696c653000", r0, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x0) close(r0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000006000-0x8)=[0xf77b, 0x8]) connect$netrom(r0, &(0x7f0000000000)=@full={{0x3, {"a590bfcb9186ac"}, 0x5}, [{"44324b6b89de18"}, {"2280809542ab41"}, {"68df1943a5f10d"}, {"5b8ba4e96ffa24"}, {"18945b7af674a8"}, {"7309d8c7d9d5a1"}, {"dd046b95199f90"}, {"b086afb2536c5c"}]}, 0x48) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)=0x0) [ 83.079642] binder: 9798:9799 ioctl 40286608 480002 returned -22 [ 83.100668] binder: 9783:9785 got reply transaction with bad transaction stack, transaction 1396 has target 9783:0 [ 83.100673] binder: 9783:9785 transaction failed 29201/-71, size 0-0 line 2939 [ 83.102057] binder: 9798:9800 ioctl 40046205 69 returned -22 [ 83.112889] binder: 9798:9800 BC_INCREFS_DONE uffffffffffffffff no match [ 83.112896] binder: 9798:9800 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 83.112900] binder: 9798:9800 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 83.112904] binder: 9798:9800 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 83.112910] binder: 9798:9800 got transaction to invalid handle [ 83.112914] binder: 9798:9800 transaction failed 29201/-22, size 32-24 line 3008 [ 83.131570] binder: release 9783:9785 transaction 1396 out, still active [ 83.131574] binder: undelivered TRANSACTION_COMPLETE [ 83.131586] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.131626] binder: send failed reply for transaction 1396, target dead [ 83.141421] binder_alloc: 9783: binder_alloc_buf, no vma [ 83.141454] binder: 9783:9785 transaction failed 29189/-3, size 0-0 line 3131 [ 83.160213] binder: 9783:9810 got reply transaction with no transaction stack [ 83.160217] binder: 9783:9810 transaction failed 29201/-71, size 0-0 line 2924 [ 83.175155] binder: 9765:9809 ioctl 40046205 8 returned -22 [ 83.179611] binder: 9807:9813 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 83.179614] binder: 9807:9813 unknown command 0 [ 83.179618] binder: 9807:9813 ioctl c0306201 204ec000 returned -22 [ 83.179942] binder: 9807:9813 ioctl 40286608 480806 returned -22 [ 83.182437] binder: 9804:9812 ioctl 40046205 3 returned -22 [ 83.183086] binder: 9807:9813 ioctl 40046205 8 returned -22 [ 83.183121] binder: 9807:9813 ioctl 40046205 cbe returned -22 [ 83.183546] binder: 9807:9813 Acquire 1 refcount change on invalid ref 1 ret -22 [ 83.183550] binder: 9807:9813 ERROR: BC_REGISTER_LOOPER called without request [ 83.191532] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.191558] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.208107] binder: 9765:9809 Acquire 1 refcount change on invalid ref 3 ret -22 [ 83.208112] binder: 9765:9809 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 83.208114] binder: 9765:9809 unknown command 0 [ 83.208119] binder: 9765:9809 ioctl c0306201 20416fd0 returned -22 [ 83.208391] binder: 9765:9821 ioctl 40046205 6 returned -22 [ 83.215548] binder: 9804:9812 ioctl 40046205 3 returned -22 [ 83.216885] binder: BINDER_SET_CONTEXT_MGR already set [ 83.216888] binder: 9765:9809 ioctl 40046207 0 returned -16 [ 83.222100] binder_alloc: binder_alloc_mmap_handler: 9759 20005000-20009000 already mapped failed -16 [ 83.249756] binder: 9807:9823 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 83.249770] binder: 9807:9823 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 83.249776] binder: 9807:9823 got reply transaction with no transaction stack [ 83.249779] binder: 9807:9823 transaction failed 29201/-71, size 0-120 line 2924 [ 83.264538] binder: 9759:9803 ioctl 40046205 6 returned -22 [ 83.269103] binder_alloc: binder_alloc_mmap_handler: 9759 20f65000-20f68000 already mapped failed -16 [ 83.272616] binder: 9807:9827 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 83.272620] binder: 9807:9827 unknown command 0 [ 83.272623] binder: 9807:9827 ioctl c0306201 204ec000 returned -22 [ 83.272918] binder: 9759:9808 ioctl 40046205 136 returned -22 [ 83.273923] binder: BINDER_SET_CONTEXT_MGR already set [ 83.273926] binder: 9807:9823 ioctl 40046207 0 returned -16 [ 83.273938] binder: 9807:9827 ioctl 40286608 480806 returned -22 [ 83.274168] binder: BINDER_SET_CONTEXT_MGR already set [ 83.274171] binder: 9759:9786 ioctl 40046207 0 returned -16 2017/12/14 11:57:39 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002000)="6879626c6100", 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000-0xb)="2f6465762f6877726e6700", 0x400, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000001000)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f72746300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0x100000000, 0x0, 0x100000001, 0xff, 0x0}, &(0x7f000085c000)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000004000-0x6)={0x100000000, 0x20000000000000, 0x1}) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r3, 0x9, 0x1, 0xa5}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000437000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f00000c9000-0x4)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000fe3000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00002a0000)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000127000-0x28)={@common="69726c616e3000000000000000000000", r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_procfs(0x0, &(0x7f00000ec000)="6e65742f69705f6d725f76696600") socket$inet6_sctp(0xa, 0x5, 0x84) dup(r5) preadv(r5, &(0x7f00007ce000-0x20)=[{&(0x7f0000986000-0x35)="00", 0x1}], 0x1, 0x400000002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f000042f000-0xc)={0xd0000012, 0x0}) 2017/12/14 11:57:39 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0, 0x28, 0x48]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) 2017/12/14 11:57:39 executing program 5: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f000026c000)=[@ptr={0x70742a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @fda={0x66646185, 0x7, 0x0, 0x11}], &(0x7f000000b000-0x30)=[0x0, 0x28, 0x48]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00004ed000-0x4)=0x3) 2017/12/14 11:57:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000009000-0x11)="2f73656c696e75782f72656c6162656c00", 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000008000-0x6)={0x0, 0x9}, &(0x7f0000005000)=0x6) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000008000)={r2, 0x6}, &(0x7f0000008000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x20, 0x0, &(0x7f0000005000-0x20)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x3}, @enter_looper={0x630c}, @enter_looper={0x630c}, @acquire_done={0x40046307, 0x0, 0x0}, @enter_looper={0x630c}], 0x8f, 0x0, &(0x7f0000004000)="2fd13ce360012f614ab22e8678092979973247353767a6d30192641df8cf53459d745fc4977ef1699fc9552cc414fea7e457e45a70e9b562b3b5d3d6117fb225ec8c146ffe8e36721254952a64938e8b9d3c142b795419e8357fbe46c3f00de319502dd0d9db38eb11117423dc97fd824e39f57cfbc3ab353acb259dc7fa5cbb93679bffb970eb90ff249d0533e252"}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000009000-0xc)=[@acquire_done={0x40486311, 0x0, 0x0}, @increfs={0x40046304, 0x0}], 0x2, 0x0, &(0x7f0000009000-0x2)="c55b"}) 2017/12/14 11:57:39 executing program 1: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00004a6000-0x8)="2e2f66696c653000", 0x200, 0x20) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00004ec000)=0x80, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40086607, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004ee000-0x19)="2f73656c696e75782f6176632f63616368655f737461747300", 0x0, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f000037b000-0x4)=0x1, 0x4) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00004ee000-0xc)={0x0, @rand_addr=0x0, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f00004ee000-0x4)=0xc) r4 = geteuid() mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00004ef000-0x20)={@common="67726530000000000000000000000000", @ifru_addrs={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00004ed000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1, 0x0, 0x3, 0x7, 0x8, 0x80, 0x80, 0xfae0, r3, r4}, {0x7fffffff, 0x80, 0x80000000, 0xfffffffffffffffb, 0xfff, 0x10000, 0x9, 0x400}, {0xcc, 0x8000, 0x6, 0x6}, 0x7, 0x80000001, 0x5, 0x0, 0x10, 0x2}, {{@in=@empty=0x0, 0x8, 0x7f}, 0x8, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x84, 0x1, 0x3, 0x9, 0x401, 0x6000000, 0x2}}, 0xe8) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f00004ed000-0xa)="69645f6c656761637900", &(0x7f00003d5000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00004ec000)="3801a3865b915b233e49d10e941414c6400b9345424be7f39eb9f1b86b4d4c2512423eea814e2bac619bf41db928689f7c5aa6923aa9a4875d0ace073e48c11936db69facf89b48e6e917317ed98f4f91b66556decdd4c2683f142ca482392a336ea6d2a3b2b801be7a893b9d39767519ddcf1077ec073095fafc0fe82a0bee696aa24890ed77e5c8d0138ee37560e71c06afc4f370b4a5adc9cf604a55608a9639c5d68c96470", 0xa7, 0xfffffffffffffffb) getpeername$netrom(r2, &(0x7f00003f9000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f0000466000-0x4)=0x48) keyctl$revoke(0x3, r5) 2017/12/14 11:57:39 executing program 0: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000193000+0x67d)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r5 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000006000)={0x4, 0x0, &(0x7f0000007000)=[@exit_looper={0x630d}], 0xff8, 0x0, &(0x7f0000002000)="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"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000006000)=[{r3, 0x0, 0x0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000046e000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) r6 = syz_open_dev$binder(&(0x7f0000216000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000055a000/0x2000)=nil, 0x2000, 0x0, 0xc011, r0, 0x0) mmap(&(0x7f0000776000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:39 executing program 7: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f00004ee000-0x8)={0x0}, 0x8) rt_sigpending(&(0x7f00004ed000-0x8)={0x0}, 0x8) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:39 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)="2f73656c696e75782f7573657200", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00001c8000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @rand_addr=0x0}, &(0x7f0000001000-0x4)=0xc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x9, 0x3, 0x101}, 0x8, 0x9, 0xb72, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r0, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000-0x4)=0xc) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000-0x4)=0x14) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000003000)=[{&(0x7f0000003000)="000000000000000000000000000000000000000000000000000000000000", 0x1e}, {&(0x7f0000003000-0x7e)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7e}, {&(0x7f0000003000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f0000003000)="00", 0x1}, {&(0x7f0000002000-0x2d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2d}, {&(0x7f0000003000-0x51)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x51}, {&(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x91}], 0x7, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001000-0x8)={0x7f, 0x1c373916}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003000)=@assoc_value={0x0, 0x0}, &(0x7f0000005000-0x4)=0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000005000)={0x0}, 0x0, &(0x7f0000001000-0x10)={0x0, 0x0}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000007000-0x58)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000006000)=0x58) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000008000-0x48)=[@in6={0xa, 0x2, 0x84, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xab7}], 0x48) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000007000-0x62)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000008000)="2f6465762f696e7075742f6576656e742300", 0x7, 0x0) [ 83.278862] binder: 9807:9823 ioctl 40046205 8 returned -22 [ 83.278877] binder: 9807:9827 ioctl 40046205 cbe returned -22 [ 83.280167] binder: 9807:9823 Acquire 1 refcount change on invalid ref 1 ret -22 [ 83.280170] binder: 9807:9823 ERROR: BC_REGISTER_LOOPER called without request [ 83.282551] binder: 9765:9767 ioctl c0306201 20276fd0 returned -14 [ 83.282651] binder: 9765:9809 ioctl c0306201 20276fd0 returned -14 [ 83.559774] binder: 9759:9771 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 83.568495] binder: undelivered death notification, 0000000000000000 2017/12/14 11:57:39 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000a000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000008000)={r2, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000009000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f000000a000-0x48)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={r3, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0xc)={0xd0, 0x0, &(0x7f0000009000)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x1, 0x10, 0x0, 0x0, 0x18, 0x48, &(0x7f000000a000-0x18)=[@flat={0x776a2a85, 0x0, r4, 0x1}], &(0x7f000000a000-0x48)=[0x0, 0x0, 0x78, 0x18, 0x40, 0x20, 0x38, 0x78, 0x78]}, 0x143d}}, @clear_death={0x400c630f, 0x4, 0x1}, @request_death={0x400c630e, 0x1, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f0000009000)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x40, 0x5, 0x3}], &(0x7f0000009000)=[0x30, 0x70, 0x40]}}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x4}, @exit_looper={0x630d}, @free_buffer={0x40086303, 0x0}, @register_looper={0x630b}], 0xcd, 0x0, &(0x7f0000009000)="d9074f74b50291cabab83ae2f7fd638b18f19665cf247c2b15e203efeb26eb3dde0ddf775815f0031e2e727d53b4375ca0cb632ed882efdb83533efa3880adb7924518e10804662b0682834c16050df803aadef08624ecb5e2a481a4daaf27e5b6bff40d053b9037abea2fe8612953950392492c901066bfe3ebd9e354384da289689c17013c000e4898c03f2839693031bd5eb810274c246394fc36b1695bc5b00afdbe2e2e4f00b030472fb1f922b0f5da5e06872344798c052aa53e2dd0f5e038bf99121ea6ef9fa1301558"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000b000)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x3}, @exit_looper={0x630d}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000c000)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1, 0x0}], 0x68, 0x0, &(0x7f0000007000)="2013943a3fe15cef000060911547e33f000d486fea3c2b3ca527fd34a6735e9ba569c03b0fc89b7ba8cb2e0e9d246da8d83a755efc044cb58d1f9712fdda6b5ca0b9904bf7e8372e34b3830917355477749b07c7bc0f44e26b11a0ab2376f2816d1aceb2fd999492"}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x6d, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86e80167fa02e3e40a76e46a2ce3429950b25fc59de79fd800b5eb848533b81d8200dbb46cd9"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/12/14 11:57:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x4, 0x2, &(0x7f0000d18000)={0x0, 0x0}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000bb2000)={0x8, 0x3, 0x7fffffff}) r2 = syz_open_procfs(0x0, &(0x7f00003e3000-0x7)="6d6f756e747300") sendfile(r2, r2, &(0x7f0000dc0000)=0x0, 0xff) ioctl$TCSETAW(r2, 0x5402, &(0x7f0000322000)={0xfffffffeffffffff, 0x2, 0x7, 0x9, 0x7, 0x8, 0x5, 0x0, 0x1d5f, 0x3}) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000ef4000-0x1e)="000000000000000000000000000000000000000000000000000000000000") pread64(r2, &(0x7f0000824000)="", 0x0, 0xfffffffffffffffc) ioctl$TIOCGSID(r1, 0x540f, &(0x7f000032d000)=0x0) getsockname$ax25(r2, &(0x7f0000940000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000d0e000-0x4)=0x10) [ 83.586474] binder: 9840:9849 not enough space to store 7 fds in buffer [ 83.588443] binder: 9839:9853 got transaction with invalid offset (0, min 0 max 0) or object. [ 83.588712] binder: 9839:9853 transaction failed 29201/-22, size 0-24 line 3194 [ 83.595939] binder_alloc: binder_alloc_mmap_handler: 9839 20000000-20002000 already mapped failed -16 [ 83.597198] binder: BINDER_SET_CONTEXT_MGR already set [ 83.597202] binder: 9839:9853 ioctl 40046207 0 returned -16 [ 83.597538] binder_alloc: 9839: binder_alloc_buf, no vma 2017/12/14 11:57:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000d6a000)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000580000)=0x0) getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000b27000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000f1c000-0x4)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000f4a000)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00008ed000-0x9)="2f6465762f72746300", 0x4000, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000654000-0x8)={0x0, r0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000737000)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000f13000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ad9000)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000048a000)={0x0, 0x0, 0x0}, &(0x7f0000f88000)=0xc) r2 = getpid() getpgid(r2) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000c7e000)="7374617400") preadv(r4, &(0x7f000032c000-0x40)=[{&(0x7f0000363000)="00", 0x1}], 0x1, 0x2) ptrace$setopts(0x4200, r3, 0x1, 0x4) 2017/12/14 11:57:39 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000a000-0x30)=[{r1, 0x0, 0x0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x28, 0x0, &(0x7f0000005000)=[@exit_looper={0x630d}, @acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x1}, @register_looper={0x630b}, @release={0x40046306, 0x0}], 0xf, 0x0, &(0x7f0000001000)="f1e4ee1be5ad2888f321c2380c1766"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000004000-0x1c)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000009000-0x4)=0x1c, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000001000)=0x14) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000008000)={@loopback={0x0, 0x1}, r3}, 0x14) [ 83.597568] binder: 9839:9855 transaction failed 29189/-3, size 0-24 line 3131 [ 83.634136] binder: 9860:9868 ioctl c018620b 20009fe8 returned -14 [ 83.634403] binder: 9860:9868 ERROR: BC_REGISTER_LOOPER called without request [ 83.654778] binder_alloc: 9845: binder_alloc_buf, no vma [ 83.654809] binder: 9845:9864 transaction failed 29189/-3, size 0-4 line 3131 [ 83.660658] binder: BINDER_SET_CONTEXT_MGR already set [ 83.660662] binder: 9845:9864 ioctl 40046207 0 returned -16 [ 83.663081] binder_alloc: 9845: binder_alloc_buf, no vma 2017/12/14 11:57:39 executing program 3: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000d000)="2f6465762f73657175656e63657200", 0x0, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f000000e000-0x10)={0x77359400, 0x0}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={r3, 0x0, 0x0, 0x0}) close(r1) syz_open_dev$binder(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x48, 0x0, &(0x7f000000d000-0x48)=[@exit_looper={0x630d}, @enter_looper={0x630c}, @exit_looper={0x630d}, @clear_death={0x400c630f, 0x1, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper={0x630c}, @acquire={0x40046305, 0x3}], 0xbb, 0x0, &(0x7f000000c000)="4159895b9255b3da0e1c8567855c4b1c4e0a5a2b22e6bff2176876e964fc93dd16637121620869d06bf6c2680f4aae385511e95c35b730456f95d3b55b3078d9dd6e57b9c94310dca3e10d673b28128a58605d3fce740c8989ab206c1554b4cee74945aab000baa489a9a77aafc058751ae981e17bcd76de3feda92594095e7fda5d45f492c866c269df283e96ec820142f84f1ea4b9c249479285c85d5c8272a0af4607f6d7f9c6f02419f2efb0cac57a98a16c9561103e008cf3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) [ 83.663112] binder: 9845:9864 transaction failed 29189/-3, size 0-5 line 3131 [ 83.664895] binder: 9860:9876 ioctl c018620b 2000afe8 returned -14 [ 83.680764] binder: 9860:9876 ioctl c0306201 20009ff4 returned -14 [ 83.684983] binder: 9860:9868 Release 1 refcount change on invalid ref 3 ret -22 [ 83.684987] binder: 9860:9868 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 83.685042] binder: 9860:9868 ioctl 40046205 4 returned -22 [ 83.686272] binder: 9860:9868 ioctl c0306201 2000c000 returned -14 2017/12/14 11:57:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x8, 0x0, &(0x7f00004ec000)=[@decrefs={0x40046307, 0x2}], 0xda, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480675c6ff71dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480802) close(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r0) poll(&(0x7f000010f000-0x20)=[{r0, 0x44, 0x0}, {r0, 0x42d6, 0x0}, {r0, 0x8, 0x0}, {r0, 0x200, 0x0}], 0x4, 0x6) r1 = getpid() mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) wait4(r1, 0x0, 0x8, &(0x7f00004ee000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/14 11:57:39 executing program 7: mmap(&(0x7f0000000000/0xb22000)=nil, 0xb22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b22000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b23000-0x4)="00", 0x2) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000b24000)="7472757374656400", &(0x7f0000b25000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b24000)="add212f135243be077d68343009ccd20d367bece9a41c026ff183f69cb4d949eca0af505b6e2559022edb2a93bf35446fc3de8330683915fe24cc4c562cd1c93c7a98fdcb9c388a45c9f6e6f67aefdfae288c2e699eae541f7afd4205d522d93f27a7b62af85f86db808c008969a92e4694eaeb6c8e448e6eaa934edcb502d2f282686e474f893701f1a192663fb9034394b68946d7a224925797411b8414e9927ee0366c6d59f8ab6e60f636b595ad920ad3e18b66d1ead83cc1e51f409ea65ae45161723d7fe2f51763c392f6e9744", 0xd0, 0xfffffffffffffffa) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000b25000-0xda)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) mmap(&(0x7f0000b22000/0x1000)=nil, 0x1000, 0x3, 0x50, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x4) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000b22000)=0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001000-0xa5)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000340000-0x20)=[{&(0x7f00006ad000)="85f0c47d4c63a832378f32584f", 0xd}, {&(0x7f00000b0000-0xe)="327f0088ed3a0cace9a73dab4557", 0xe}], 0x2, 0x6) recvmmsg(r0, &(0x7f0000b23000)=[{{&(0x7f0000b24000-0x10)=@ethernet={0x0, @random="000000000000", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000b23000)=[{&(0x7f0000b23000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42}, {&(0x7f0000147000)="0000000000000000000000000000", 0xe}], 0x2, &(0x7f0000b24000-0xc4)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc4, 0x81}, 0x100000000}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000000)="82", 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x0, 0x45) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000b24000)={0x22c4, {{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f000085f000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt(r2, 0x3a, 0x1, &(0x7f0000001000)="", &(0x7f0000001000)=0x0) 2017/12/14 11:57:39 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000008000)=""}) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0xdd, 0x0, &(0x7f0000002000)="b15eeabf520001c79d69724fca1a167f23f7655c5dc60e70ed3ec0f0bac34e9676848dc99cd8ada7463a411f988b4675ad9a4376b057c15f729b8bbe04c5af34e1ee298fd9d4758cbf2a6ee35182a1fa0845b547eadb1e6365281d2b8e5e8b70920dc629fd19eef433596feab3ab84b6652e74b24851465bf14f176b689f524c97f4b87b26cd0be6515390479287bc7abd2461f95c089fd4578acd6707ffdea15e1c75dadfa65d45db9333f46649fe35f6b971e98c265fcdeaa4fc6b20c4b32039c24e78d6606b604688a0aebc0c51715b1b4deaf26a3817e0887163b6"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000)="2f6465762f62696e6465722300", 0x0, 0x800) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0xa4, 0x0, &(0x7f000000b000-0xa4)=[@register_looper={0x630b}, @free_buffer={0x40086303, r4}, @exit_looper={0x630d}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x48, 0x8, &(0x7f000000a000)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x0}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f000000b000-0x8)=[0x18]}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x70, 0x20, &(0x7f000000a000)=[@ptr={0x70742a85, 0x1, &(0x7f000000a000)="8e", 0xa, 0xd801, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f000000a000)="d8", 0x72, 0x20, 0x4}], &(0x7f0000005000)=[0x18, 0x28, 0x38, 0x48]}, 0x8000}}], 0x54, 0x0, &(0x7f000000a000-0x54)="312b2b9c8485c3ba0627aa80b832f25173322e933b88748c035f56460f14860c469429c22330abf5433c3750569b0af43059e93cb16dba5f6080ca7f48ce2833a25e7373e50aad38d6d3b090900b9c4e247663d3"}) ioctl$void(r0, 0xc004587f) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x50, 0x0, &(0x7f0000004000-0xd4)=[@free_buffer={0x40086303, 0x20400000000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000-0x1)=[], &(0x7f000000d000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4f)=""}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x7fe) 2017/12/14 11:57:39 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x800001) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) close(r0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004ed000-0x8)={0x0, 0x0}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00004ec000)={0x0, 0x9, 0x3, 0x9}, &(0x7f0000105000)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000034f000-0xc)={r2, 0x6, 0x0}, 0xc) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00002df000-0x8)={0x0, 0x0}, 0x7, 0x7) syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ed000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x3) 2017/12/14 11:57:39 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000038d000)="2f6465762f6175746f667300", 0x1214c0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00004ec000)={0x0, @in6={{0xa, 0x3, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00004ed000-0x4)=0x8c) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000299000-0x8)={r2, 0x3f}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x20000000000405) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) close(r0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000026d000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00004ee000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000049000)=0xc) syz_open_dev$binder(&(0x7f00003b6000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ee000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x3) [ 83.686429] binder: 9860:9868 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 83.708793] binder: undelivered TRANSACTION_COMPLETE [ 83.708805] binder: undelivered transaction 1420, process died. [ 83.711601] binder: BINDER_SET_CONTEXT_MGR already set [ 83.711605] binder: 9840:9866 ioctl 40046207 0 returned -16 [ 83.711883] binder: 9880:9884 Acquire 1 refcount change on invalid ref 2 ret -22 [ 83.711887] binder: 9880:9884 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 83.711891] binder: 9880:9884 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 83.711894] binder: 9880:9884 ERROR: BC_REGISTER_LOOPER called without request [ 83.711897] binder: 9880:9884 Release 1 refcount change on invalid ref 0 ret -22 [ 83.711904] binder: 9880:9884 ioctl c0306201 20002fd0 returned -14 [ 83.719320] binder_alloc: binder_alloc_mmap_handler: 9840 20000000-20002000 already mapped failed -16 [ 83.720212] binder_alloc: 9840: binder_alloc_buf, no vma [ 83.720244] binder: 9840:9866 transaction failed 29189/-3, size 72-24 line 3131 [ 83.728088] binder: BINDER_SET_CONTEXT_MGR already set [ 83.728092] binder: 9845:9882 ioctl 40046207 0 returned -16 [ 83.729382] binder_alloc: 9845: binder_alloc_buf, no vma [ 83.729412] binder: 9845:9882 transaction failed 29189/-3, size 0-4 line 3131 [ 83.733352] binder: 9880:9887 Acquire 1 refcount change on invalid ref 2 ret -22 [ 83.733356] binder: 9880:9887 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 83.733360] binder: 9880:9887 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 83.733362] binder: 9880:9887 ERROR: BC_REGISTER_LOOPER called without request [ 83.733366] binder: 9880:9887 Release 1 refcount change on invalid ref 0 ret -22 [ 83.733372] binder: 9880:9887 ioctl c0306201 20002fd0 returned -14 [ 83.735149] binder: BINDER_SET_CONTEXT_MGR already set [ 83.735152] binder: 9845:9882 ioctl 40046207 0 returned -16 [ 83.735183] binder: BINDER_SET_CONTEXT_MGR already set [ 83.735185] binder: 9880:9884 ioctl 40046207 0 returned -16 [ 83.735243] binder_alloc: 9880: binder_alloc_buf, no vma [ 83.735272] binder: 9880:9887 transaction failed 29189/-3, size 0-0 line 3131 [ 83.736655] binder_alloc: 9845: binder_alloc_buf, no vma [ 83.736683] binder: 9845:9882 transaction failed 29189/-3, size 0-11 line 3131 [ 83.744700] binder: 9860:9876 unknown command 0 [ 83.744704] binder: 9860:9876 ioctl c0306201 20008fd0 returned -22 [ 83.744801] binder_alloc: binder_alloc_mmap_handler: 9845 20005000-20009000 already mapped failed -16 [ 83.746414] binder_alloc: binder_alloc_mmap_handler: 9845 2055a000-2055c000 already mapped failed -16 [ 83.747364] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.747447] binder: send failed reply for transaction 1422 to 9880:9884 [ 83.752182] binder: undelivered TRANSACTION_COMPLETE [ 83.752193] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.757427] binder_alloc: 9860: binder_alloc_buf, no vma [ 83.757459] binder: 9860:9868 transaction failed 29189/-3, size 0-0 line 3131 [ 83.758769] binder: 9860:9876 unknown command 0 [ 83.758772] binder: 9860:9876 ioctl c0306201 2000afd0 returned -22 [ 83.759900] binder: 9860:9868 ioctl 40046205 4 returned -22 [ 83.769434] binder: 9886:9889 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 83.769449] binder: 9886:9889 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 83.769465] binder: 9886:9889 Release 1 refcount change on invalid ref 4 ret -22 [ 83.769468] binder: 9886:9889 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 83.769472] binder: 9886:9889 Acquire 1 refcount change on invalid ref 3 ret -22 [ 83.773376] binder: 9886:9893 Acquire 1 refcount change on invalid ref 0 ret -22 [ 83.773391] binder: 9886:9893 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 83.784745] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.787574] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.787895] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.788057] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.793649] binder: 9886:9893 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 83.793665] binder: 9886:9893 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 83.793679] binder: 9886:9893 Release 1 refcount change on invalid ref 4 ret -22 [ 83.793682] binder: 9886:9893 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 83.793686] binder: 9886:9893 Acquire 1 refcount change on invalid ref 3 ret -22 [ 83.798667] binder: 9896:9901 ERROR: BC_REGISTER_LOOPER called without request [ 83.798672] binder: 9896:9901 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 83.798677] binder: 9896:9901 BC_INCREFS_DONE u0000000080000000 no match [ 83.798679] binder: 9896:9901 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 83.799032] binder: release 9896:9901 transaction 1434 out, still active [ 83.799035] binder: undelivered TRANSACTION_COMPLETE [ 83.800142] binder: 9896:9901 BC_FREE_BUFFER u0000020400000000 no match [ 83.807138] binder: 9898:9903 ioctl 40046205 3 returned -22 [ 83.807597] binder: 9902:9904 ioctl 40046205 3 returned -22 [ 83.810362] binder: BINDER_SET_CONTEXT_MGR already set [ 83.810367] binder: 9896:9901 ioctl 40046207 0 returned -16 [ 83.813748] binder_alloc: 9896: binder_alloc_buf, no vma [ 83.813779] binder: 9896:9901 transaction failed 29189/-3, size 0-0 line 3131 [ 83.815198] binder: 9896:9901 ERROR: BC_REGISTER_LOOPER called without request [ 83.815205] binder: 9896:9901 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 83.815209] binder: 9896:9901 BC_INCREFS_DONE u0000000080000000 no match [ 83.815212] binder: 9896:9901 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 83.824578] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.852732] binder: release 9896:9901 transaction 1435 out, still active [ 83.852736] binder: release 9896:9901 transaction 1434 in, still active [ 83.852739] binder: undelivered TRANSACTION_COMPLETE [ 83.852772] binder: send failed reply for transaction 1435, target dead [ 83.852782] binder: send failed reply for transaction 1434, target dead 2017/12/14 11:57:39 executing program 5: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000c000-0x30)={0x14, 0x0, &(0x7f0000009000-0x14)=[@dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305, 0x1}], 0xd9, 0x0, &(0x7f000000b000-0xd9)="ba90675fb803f023d62de349e3b27f47e83805236badd487d74fbff0589d983c232b2baddf028477acec07b3018d4683eefd622e7799f48f250ef563e39fcf0ea19228bb29adfdcd3b1e038946293e921abc5fc186bf3676be849c467faa80cf4e101577f2d4768016f6f0ae831023b68cbf874dfe9dd9d1b374598602ff56a6e14e984f6ad4a2e8e4d8eaa37b487fc1ebecc6177bad818c13059eefa135b5b57dbeecda40a67d3cc912aa0c0c91a2a57130d85fe9fb2eabbfdceb98743da4db14cf1c06a4c59d03b9f0325dacadbfddfbfe5d566ec7ad1d66"}) r1 = syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000002000-0x8)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f000000e000)=""}) close(r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000f000)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000009000-0x18)={0x0, 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000008000/0x3000)=nil, 0x3000, 0xd, 0x31, r1, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x40, 0x0, &(0x7f000000f000)=[@acquire_done={0x40106309, r4, 0x4}, @request_death={0x400c630e, 0x3, 0x4}, @clear_death={0x400c630f, 0x2, 0x2}, @dead_binder_done={0x40086310, 0x4}], 0x2f, 0x0, &(0x7f0000010000)="a96d7858771fe0105c65cc90da4a63d3f65ff4c1c5953bd440ddf528148d4b5b2bec0548af4d540d57ea1afe3659f4"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001000-0x30)={0x74, 0x0, &(0x7f000000e000)=[@exit_looper={0x630d}, @release={0x40046306, 0x0}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x7f, 0x11, 0x0, 0x0, 0x40, 0x28, &(0x7f0000004000-0x40)=[@ptr={0x70742a85, 0x0, &(0x7f0000008000-0xa7)="4d", 0xa7, 0xcf, 0xffffffffffff8000}, @flat={0x776a2a85, 0x100, r4, 0x0}], &(0x7f000000f000-0x8)=[0x20, 0x48, 0x28, 0x20, 0x38]}, 0xe4a6}}, @increfs_done={0x40106308, r5, 0x4}, @release={0x40046306, 0x0}], 0x6f, 0x0, &(0x7f0000001000)="b881049b2361421e19924e6caab6d721f780f1763be9f86d1d2535d9a2465a0e3fda5cafe6a3d19a3aebbb33d43c83801c62c0d701b3f310d6dd2be43090d1f8a1def5ca8b269dc442bb5cb520951408284e9f477d067e9cd4b8581dc65a55d777c0354a37cbe3045b47c658d3d2fa"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2017/12/14 11:57:39 executing program 7: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f000000a000-0x5)="6174747200") mkdirat(r1, &(0x7f0000008000)="2e2f66696c653000", 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000a000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000-0x4)=0xe8) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000003000-0x1)=0x0) getgroups(0x3, &(0x7f000000a000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f000000b000)="", 0x0) fchown(r1, r2, r3) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chdir(&(0x7f000000a000)="2e2f66696c653000") openat$ppp(0xffffffffffffff9c, &(0x7f000000a000)="2f6465762f70707000", 0x2, 0x0) 2017/12/14 11:57:39 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x20, 0x0, &(0x7f0000005000-0x20)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x3}, @enter_looper={0x630c}, @enter_looper={0x630c}, @acquire_done={0x40046307, 0x0, 0x0}, @enter_looper={0x630c}], 0x8f, 0x0, &(0x7f0000004000)="2fd13ce360012f614ab22e8678092979973247353767a6d30192641df8cf53459d745fc4977ef1699fc9552cc414fea7e457e45a70e9b562b3b5d3d6117fb225ec8c146ffe8e36721254952a64938e8b9d3c142b795419e8357fbe46c3f00de319502dd0d9db38eb11117423dc97fd824e39f57cfbc3ab353acb259dc7fa5cbb93679bffb970eb90ff249d0533e252"}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000-0x10)="2f73656c696e75782f706f6c69637900", 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000009000-0xc)=[@acquire_done={0x40486311, 0x0, 0x0}, @increfs={0x40046304, 0x0}], 0x2, 0x0, &(0x7f0000009000-0x2)="c55b"}) 2017/12/14 11:57:39 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000013f000)="2f6465762f7667615f6172626974657200", 0x10000, 0x0) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f000075c000-0x30)={0x8e, 0x3, 0x7f6, 0x2, 0x9, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000013a000-0x1a)="706f7369785f61636c5f61636365737374727573746564257d00", 0x0) gettid() r1 = gettid() capset(&(0x7f00001b5000-0x8)={0x19980330, r1}, &(0x7f0000afd000-0x18)={0x1, 0x3ff, 0x2000003c, 0x6, 0x8001, 0x2000000003}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000ca9000-0x10)={0x2, 0x0, @rand_addr=0x2b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) prctl$getname(0x10, &(0x7f0000873000)="00000000000000000000000000000000000000000000000000000000") r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f000088c000)={@common="6c6f0000000000000000fffffffb0000", &(0x7f0000ab9000-0xc8)=@ethtool_rxnfc={0x32, 0x1, 0x401, {0xb, @tcp_ip6_spec={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, 0x1, 0x2, 0x81}, {"ac23", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, 0x5, 0x6, [0x81, 0xa52a]}, @ah_ip4_spec={@broadcast=0xffffffff, @multicast2=0xe0000002, 0x5, 0x0}, {"6387", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, 0x7, 0x4, [0x2, 0xc3]}, 0x0, 0x2002}, 0x3, [0xd69d, 0x40, 0x9]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x831000)=nil, 0x831000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x43be, &(0x7f0000316000-0x43be)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x20086dd, @ipv6={0x0, 0x6, "a228af", 0x4388, 0x3c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[@dstopts={0x2c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @hopopts={0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @routing={0xff, 0xc, 0x1, 0x2, 0x400000, [@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x89, 0x634, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xcf, 0x1000, "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"}, {0xff, 0x7b, "c5dde25fd7aafddf635d580133542c2476bc1ab75dd1ee25295eafb3327dc6504925dde915a0014456e709000824d3d41ec38f2ddf3b417ffe785415fb5576f34ed57c40dbfe5a28585e089c1d06db0ab76da5d60d5527dcfd88bea97fa7f098dd50c24eb6d33828ffdf7ca2a1ad33cda80bc4459282d93df7da09"}, {0x0, 0x76, "ab23267431bafe828a17c2f7d886ee480df6d3e59bebe987b0d9bb405d0fe2d538f2dbc4584e8b3e05542bb26d0deea36da12c5603be5c218072ab8fdce0ff76ce846aff0e0b72a18cde0949eb977e7f5317d7605ff77c2c801f25c383ce96641a22c257bd5633f43641e2856699f8010f528921f330"}, {0x5, 0x0, ""}, {0x0, 0x1000, "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"}, {0x0, 0x5a, "69aba925faf65a2aeff429f16fad6f5631821d290a0b519f3b62016552951a99bf770a8f489190f441bc6381120cebe10a35c5b984b0681a5e0eed824a5251536f8ce02d8e3f8e418841bf0e03c1c5731d87f830a2643c1ff5cf"}, {0x4, 0x2c, "925092d63f0277ca2d4f7835420d2b1bdc8c5d0a4da2b2513d77ff35fe2fcea8e0ff4e14182a2976aaa86332"}, {0xc2, 0x1000, "8f531a838a62f4e1657bde98d8a236297bc5436b9e21e7c4cd392638af9c19541c64c09daea1c693e28adad5adbd3b443ba8e4e8f504fd0fe9132ec209f19fdfc105d8b4d3de8992de7b960175843a249de69d3786cedd7b74dba99631bafe17496e69fdc0201097b908280425b7d8f69e89c82092e0c95b9f810ff75f5dc54a2ff07ebe1798f23e6e14a9bbe84ad34b35794fb67802bf8331d80a70e31e7c434c88aa8e6976409debff7f21642c5ad3b7d20c3c27a2774ca2800f15881c4e066e513effc74777d1ec565a0093096cdc7cb713cc8081666c7e7a9e0bd0fa21f8a3841d0fd469573633a176c98c495f8b7e3bed1313f261ab3acf9d294df3ae30fdfaa2833495b555aac9e60944005aed9d83ed1fb850814c4f0ed66144d6d49f0c33eebc1cc02347923e615b577343c201726a5d4c174876f787bf27eeaf37e6ca9bb185d9d74e2c6313b921c44119815acd360708bac1300d58d75e42811af48d8748f4615b6d76a4d5c73e7422374cf3382f86092fa240f19e2608e8af0a380b6a45792f6e28ea9a1b81000b5132ebd9bab58e438e782b7b75d204c40984e3ce975bb1b96a432eba856aa5f1dafcbd60fd44756e5d5fa7726d231895e4948c1f6e5a3db81dc0a520a2eedc24fc76b8b1187739f5227166c51647c9ae025f9d5e9ae11ed7d221a1cf7fe0f0a1ea94e170ad1366a1645d98f2962389d6782b69c143f571c47c0cbfba2752e87b9e461ebcde2831c3c2d73d966ad8eaca0a73777595b38f83f56f761c5d6601d171692431e272f033e7ed72bfc7816e87734fcf200bc00c0f9d55c0752c85eff5968f3635deb3dbae4f81f69095990e401f08a9d47551c06afc9b26acebf1b00079ab95b9d0f3e716481f3ab0cb0d77da8e7653b0b3d5dd28d0c385cbcc73d4c624f346e0ef533b7d2d7d11fdc8de8bf1ab31f4f1b16f886ccd2057a612774889fe2e21c96ccfe28097e6b80a631c9b5feff2452cc9fb04967ff419b09b7248d06dda3216e78fed1d82795f272f9a4e3ae946a5a830d78ed1e861df7b6fd12f14814e9517ae515a219755527ad9f0c40e1e2de0691a3b7ddce102499872b887b5314be23cce7f1d143bc8af40c93ddb04caa5b46ffbddf0783a93c493f16b6bf436e6f02f89623411ea61edf1ba6837fcf3690ca84ff247598b1d211436910eb7e7ffce0b0d1fd4ff71498f8f1355d3e2a4c68d31d762e77163a42cc0779ede0e9a0da62cc2940910eb49ea35824c3687d418b8c9a88d10a73a90b279112765ea1d5178c61b1021f57147ba0d8af36283fd0abee191752c12cb59e025b6e9a2cc0b2c8cc227b978432dfe2eb07e70bacaa3f2bba91261303dee0d8b8dd1a290be973be57e5b50053439bfe5b7d7a45bf7daa6e59d5b61bf5b466c137ba92fa5a06dd51f605dbe1a1d4913dc554e73963999641d2d73600bc464c610d7e47fe19f0bdc8ddeae90aada3b8974b7bb8b4d6b4abd6a51970b383ad4e1e8512fa661d77a8356cde734d212e9a159dadbba196e53d4458b10a73a06328c306dd1aa0a2190d4dababcb693abb72410b737bf6886e351c012007fe3500c3103b7e2fcd17128c2836b590825aa49a13b97986168e88212823cdf5218fe7f6266479c841ea7f0f94a9b3c98c1f795ad4f7afb7faed83aed7183862820bf4a31bce69279e8f813343f9c946d237b94c1e975bec42ac2d5b4010113e72474de54aa19a12e71337539ac8c9df977785d28be569b487c1e34eaec98543979d5f8be8ab12bab6a7feb2187d4f096deecd95769dc59342151d161c6d1cfe62be83ea1b9efcc96fc9467ba2e89fc55e0a2ab1cd074f380dfd191510857d9b22729ce55391029035bbb457dd352e08429bbb3340818eb7ee04a1e202b87a47505ba73c81dc8ac0acf9abce9ecf3dc6bc9d25c85060a5d96b9284f713ef5f6399275ad00bc826fbf7599d1c58d8f921d931e18bb72cdf4bd009c16dd327e484980603d0d352c0204559fce73410c9f136302606d5320b0d3811211fda29a8d83f24c15b6c1850c093796d708f87ea25a279108dac0d03c655c8dbfa16516ff7cdf8720c18160149dd3c4d07ce0c3961cf70fbec98a2d66d7b6454b2e035419aea1b2080fa2cf7d00339a6facb108a8762fea1db2cb15a58d2e6889a902184a1ca9aa46b97c20c6fc002c7e5d24ed8b472959e66c51385f8660a087226440ea2c93ceb036aaa216843e760d76cf64a8dfe760e9b40c10b484fb36612b1b2fb39fdf6f28c7b0b147911e4d1f3d818946bf934fcd501d6b3c424468ffd9176054e72f2e986c5cea893f35c505dd4fec85a114cefe22b7770dbc2ac0573c16259acb5868ff010da17355947b1f6daa1ab21b5c690296e810e71c72a97414fe52b3da1a968e90db24cbbbf512e7ebb85f50212fa970266ef94574901ae7981bf8fe85aa34c20c91a3cc0ed78450420cbf1e252628295c581ac27c8555d653b9c015ae1b7772241126b1857fa73f95c93feddba6365f588a9d4e2bd86d88e0303730c935791bd9995e8f8d86429dc94697866e983e6c2f2f3be4f0bfd6e07f5f37d5afbc08ad9185f267d0b9d6d934af023a62a5f0f76e8c45ea93a37261fa0e249e21b5df1f746538bb1f04e657e8000cc6928cb9c792a309e668e3efafe60f507071a7d1f0873fea0238d7ab232d6213b6358ada4b69e0506a6811c6160d35299faccbe2233832e17b6977703e2b8ef6a9c4860c9d0719f81f54a0b29c4bf44f90b8d6d0321f5f941bb7b62f936008dabd7dac761b949a38ba85e4458325e0af98e296dda92da8ddb8bb0e62df7527ad1692a3c3f034d98560cdaaed6282c155099f8564365e895a1e181c54c9185f58d479b07be5c544c1fa329890a5e12f56c2df28bbed20de96a786c2b076805fd391585b3e54dcaad6c4eb1b45e303df461365f5b9ffee9044d8b7b49052c143f554cdbf7ad137beecca1d160504dd88c9b0db14adff9a3e09451d2d121f1202b79acd0cd292ea890ac5ea878d8f59014a29703cd27343b26906e694614dd3d49a989aca8e3d42bf9f7162d95ece886e4d4049043b11f50bf7d5a8de1e3ce672dd08870db4963048e765769fd99c595b42968933aed34db9618a3da2c0f01dd53b0e2307a420508a9bd65f1fb609aac15cc2edab44e2787f2478f04ae922d3126651adb194ff60a5b69ae37c659ef69ac2786efaa3c4fdd64ddbf549ca5b0d9c7371650988fa1e6e717691c29069c76a1333ee0f3e0cc0ea107df0457f7c5d407f78f28898e15b1a230a37a1aa4891795d593b8c1e4ae57f76e49b706b87f0c2fe6b3a8d1f15570853c05e0d8be30b8258a37044319ee25e707249c4559ace1c75a4571273068a378d351e8bb5f350493280cf4728ab2b4918984c2c2557d6f187b8c1aea801a27e975ac6bd75e1ac0ba94a54a2781fc334266f2b39b3927d8aa8afe539fbaa9d3af58a781b40184b0a10ffbd662c28fc680406695cf6c29c6522d42242fa4177579fc96d2d51a6006e46acb6f4f82b603b8cd4ae0a42e46cbe77914cc8f6adc3c9ea8c89b661f757fdb2131c8fd5cd3241201f1254ba912ded4486fe7a98abdef5f6a27ba8e615505c2c2c47363ca75ab289282dc155f171a22890df642bd3a7f9a5956135c9a45d0dd9620ecf31c68a39d2df1899801f6f3e8feffdff7c52246be0438e89d2ed4845cc9ef19ec47d9eb2276cddb2d7a4436456d254eb2af6e3a458a30ad96a37ca25df54cc13ff94e420df13f8ce01365323db8adb0d9b0455020d04b3910f28361c04edae7bad9692e7574e0f560f3724a15f7609cf73afdeafff4486303e901b463b84c3933996e8a77f13b88b3b521b03a4dd0b8ff917b2072eef8ef7ec50c3e68f9210f4b53ef3e15e865ece7a257a9a06e07745313aebffacefad0cd9ca52b9fec09587d9ebb9ba9e926ba8f2476935063920d126051619a796beebf014ec6f83cdbaad4ee5643f8034443c9904eb8b6b5034eb568c32f589e847e4ca00b2cd65153b2447a352cb7195e04b579db7c35e8614a3cf926b41d3b55b7e3877ba32b7feeaa0c479297247d68d59e4df8abcb732a77999e2eb1029b82e6d1b9e0f569844e193f8eae0f42148e88956c8784a9dd1dd65f45aae082a16b4a21792afb17d1716f9588184cce6a8741e18ffeb35883f7acd90059ee6a8b55c9b3a1bb97d45cfbb3b6d560e4e224809dccb0cad91eb92963799c3ce75dd9e9e6d7e8c9c4d847424343b2560caa07a1bb34ec3414b9e5141b8f658bd8a3b2443d4af273024e55b83ef64f56f126fd729609f5655fb69e3fa91327725ae4517aeabc13e527a34c49f4df9236e1a2011f3b5ad8c7a0e43a610b5eec53d0409ed6196e29972313822442c17b6c7beca37f38ac836be295fb2de31d20b6d3d57fb4b4142af9a69d67a16e97001d48b60e60a160f6564feb8b579824ba26f1f14c27f736f353cb7e8fe68e320f39575385779845f8d4137e777a90d669fe3868a827eb12eb3d551adaba00e2b7f9380e743b035c187d13fa17a16934c7ded65107532460c6145b7d479dd3f4a2fb7c6528568333f7d80104f99bbe53251fa66f12c22731396318ce6b7a595cb7de3ad89d56ca0a4d2b077d86082c03891276dce530b2bdb85e045384dccef4e893f14d94a7a520bd4c9909aef2af79f43a56f56f50867f1bb9d907f2d7633271a1ea5c2fda2eafedc41f75840549964ac2a9c0aae09e005717309a1539bc6f3e2a79b8a67bcdcbc5d347911af67766703b674ae7744cd551aefbceaf439b71d8bc60bcfc3a33e89ace5a0a2f74b3def861b7c221fd2fa2afbd5e8cc7263c768b0e2ef5458fe19775ac0a7071deabe7053e91e5d803b4484115aa74d239cf1b0b96a551b6acdd64ee57633d8c14e6fa197c0673643c1e9ac7cb9883e8b1ada0d76f0343c9dce1726971efce97cf37621363fe17e81f384d24ed41855312cb3d013451bafdab6793b8ce0ce5ec31d9af07a860ec33e77833353832d8fef5ada42bd5e0d164372242bc7bb6885b31a5df4ed70e7ca35e5b46ec5510e60562a984dad91c7b860d2d4749e4c882316640ff7f590fc43616b21769b2ac56b7d758fbec476ca16266158a446bc125ae20c921fb16ce2c0cd3b6c04ed8119d5949fcc6bd716254cd7d8e423aa1659a0e4866b2f433a0b227e6f657cdb261a65424445605da13b8d16d57f87a40a188edd28528da5b4ebddb6efe1b2ea8bf9c94c4a02753811b356510a037a433bb9592b556efd1ef6c25066ab1085e94f4daeefabbf717523214d4159d04e117b713eb70e657d7c9604f7bb113d4c624f07fb5160146ab7ab7838f80552111486bb8fff3e9353b399cf9e2d8ce42c11de8e7afed1491a83fb6e517474390a049324a7a582a7582f226e8249897f86717e8fe262f2648dacb3c26d32692532eed5a0a81c3b5de9471483f4dad3e66aa52a3240c8ab308ddba319d1b0010ff326130225ed3dad21e532451e22513ddd848cf45f26d15b1b5ec6462d3a204740cd7d1c09ff8b3e0f10466d1b543fc99fc13b96861618ae864de8fc09c5686d41bed37f5bb9dba9f28af9abe997f7daf1fbadab6c2aa31c3535413e539a92ab3fe7649da831c3b1062cacc02b9a1e5f1e6a0025ae93e372f9c329c685f4a535bc6b8af245fa2c9a458cf145411f3c83cb23f948e4a27f76155f6cea5df6d489980c0a5724e610d06753d508f8733d8a646cbbd4df2bf0ef4dbd09b43a6c03dacaa245b650c96e73e0daeb31b1125d21b5c38dd2"}, {0x1, 0x1d, "48635e0c5160af16a46e670cd5d9139acc8d324460b73c7406072ad1d5"}]}, @dstopts={0xaf, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xfe, 0x2a, "ca0920feae6e2a4f2f9c0096af329fd1122ce978823d6ecdfa3dde664f5c034eab844e7ff0db77fc5b59"}]}, @routing={0x3f, 0x14, 0x1, 0x800eca, 0x9, [@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}]}, @dstopts={0x3f, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0x1000, "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"}]}], @udp={0x2, 0x1, 0x7c, 0x0, "3c67c0154aad8b5f43ee48db9eb1db6f92c76715246d73e828401bd0b953006abd867a0a58e7361b427946d095368a3fbd5be815e6447c7c3f9ce2054dfbc15791bc8474f7dd4663ed627d8d1e0672649ed57e8f737c904af75a8560649114676f4bafa964722d27ebe82f3c6382ba48780c60df"}}}}}}, 0x0) mkdir(&(0x7f0000304000)="2e2f66696c653000", 0x23) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00004ff000)={0x10, 0x0, 0xfffffffffffffffe, 0x5}, 0xc) socket$inet(0x2, 0x3, 0x2f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000506000-0x9)="2f6465762f73672300", 0x8, 0x0) symlinkat(&(0x7f0000ae5000-0x8)="2e2f66696c653000", r6, &(0x7f00004e4000)="2e2f66696c653000") r7 = socket(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$nfc_llcp(r7, &(0x7f0000eb2000-0x60)={0x27, 0x9, 0x1e, 0x2, 0x0, 0x0, "ec16ec5fc266f9e29fe9745f0e797302ce2f9c92a504fd487f599b93d4afd509f648d4f94a116455765f3d0c9df7b8c40a110a795ba5fb8e26bc20758befe9", 0x8000}, 0x60) mlock(&(0x7f0000900000/0x4000)=nil, 0x4000) iopl(0x20000000000b) 2017/12/14 11:57:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f000055e000)=[{&(0x7f0000894000)="965634f7cc14edb70e2a2327bc5203c3", 0x10}], 0x1) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00006e0000)="00000000000000000000") setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000b1f000-0x1)={0x5}, 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)=0x0) recvfrom(r4, &(0x7f0000013000-0x8d)="", 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}, 0x0}, 0x10) writev(r0, &(0x7f0000572000-0x80)=[{&(0x7f000088b000-0x9e)="82670a592b5bd51d8f03ced0dcf01f575abff92b35762906b04729cd5feaa1a4842b0f4ed71d6bc36720daf99f3536e28824ca54ece676bbc8759b4f4c08f457a0ed91a9ada878eb5531fb6d626c8af071097a16f5556a68ad9a04dfafaead7bc4d2d6b80fe881a9ce752625ce2bb1f98bdb8a38e5de398db4d6e18de3c318472c041a24133614f8a6a3928c60108e3a8597fc368ebfbf96346a5bec3551", 0x9e}, {&(0x7f00001e9000-0x5c)="61c8f2f3ecad98715671baa311ca19fa79943b4e9d3be878c4b5a52692f9e17206247a6c3cc41c1dbd234340160945d39b47ede4df247076768ff328bc36fad51e34158c1ffdd38083a6145dbb0b99ebbb1406ef804756ec22625d88", 0x5c}, {&(0x7f0000e88000)="111cde8d867d0f9249f1eca1e96113dcf5ab0a21f6f94a8bcdffe7dc41d9fb03d702e0e248054ac0e8e0196ad5e675a0a5f94e0dbead79eaf199781501ca355d069d1994fee91145c78a582e4daef65b53bee4455455c42475", 0x59}, {&(0x7f00005e4000)="0754062ca4a0bdb211967465b0582082eac74418a6ad4bd6c22bdfb713534da1c284cab6562dbbdad7308142b8cf1e362eb57c3c604d48a3db5bf74079446cd883de318087e475a3e7291927d4650d6137439fd16d40eb2937078cd1c7fb467f82859b2e465bd363568c03f1878dabffe33977c5be856afbed998b84f1dbf1f5aa0719253656aca31f071840dc", 0x8d}, {&(0x7f0000cf3000)="b03d817d58be4429e133353ea994d0158a1a8d69adabb545dae63c4d55c4a309a9aa94f54230529b9b6f3845e100db402b77f06c9d53a839cd28c63c5de322aad0bea5a3c0", 0x45}, {&(0x7f00006a2000-0x1e)="1a70f5ca181bcc79c58624284a6ab043a99eb48fe37d8d555b130031f00a", 0x1e}, {&(0x7f0000565000)="09cb78e3c2b3153045e37ccf10eae7a104305bb774ce6e1d9cb23af890bfa6f89f568aac3981a7eb0bf80e67dbdda83987393f922bf17c07e3cb8721304a79ccdfa7a1d26e5bbaaa0f664b6949f45b622ded46df1a8cc4255194a5def9aa1e1c49b8ed6e479366ba54e90117ad51342b5dbb13500428e8b7", 0x78}, {&(0x7f00001a0000)="a2b1be36f8321d685012cb0c7cd4111ced117fb46a9e4e909242e2f41e0a78eef400fbaadb389deb1aefae2ffecdf3fe4f3923290c64285675e272605a6b6de01ec05ce91e76e66eb112ff5495dcb2797e187c47c9250b9b61e214e39b61895fc1117c173836efbb792343759e0bd42ab35bb1df1e0b4dc11b72468ba8f389c3203d61e8f59a6ce3e29110c339fcd0ebdbc49b55ff778305b8ac5fbb13e363ab52c4e3a5db333b9abdd4b8de8493546365a51c99454fd9b9f82e21d6fd92877cdda8dd978dd659272adb8e4caa56df507ef86f2733658617c2b07fce84b73d25b58162b6331aeb7fd83ed5bbc6f955361a2c09e48dd1", 0xf6}], 0x8) r5 = getpgid(0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000468000)=0x2, 0x4) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000d4c000)=0x2) ioctl$int_out(r3, 0x2, &(0x7f0000f82000)=0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00002cd000)=0x0) fcntl$setsig(r3, 0xa, 0x12) dup2(r2, r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f000001a000-0x50)={0x1, 0x9e6b, 0x4, 0x0, 0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sched_getaffinity(r5, 0x8, &(0x7f0000382000-0x8)=0x0) fcntl$setown(r3, 0x8, r5) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000f1b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") tkill(r5, 0x13) 2017/12/14 11:57:39 executing program 1: mmap(&(0x7f0000000000/0xd2d000)=nil, 0xd2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000448000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80006) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ec000-0x2)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d2c000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000d2d000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x5) r4 = syz_open_dev$binder(&(0x7f0000e9a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000012a000/0xc00000)=nil, 0xc00000, 0x0, 0x13013, r4, 0x0) getsockopt$inet6_buf(r4, 0x29, 0xd2, &(0x7f0000080000)="000000000000000000000000000000000000000000000000000000000000", &(0x7f000086b000-0x4)=0x1e) 2017/12/14 11:57:39 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x2) syz_open_dev$binder(&(0x7f0000296000-0xd)="2f6465762f62696e6465722300", 0x0, 0x801) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0xff, 0x0, 0x0, 0x0}) r1 = syz_open_dev$binder(&(0x7f0000802000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x958000)=nil, 0x958000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x8006, 0x6031, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f00000a8000)=[{r1, 0x8, 0x0}], 0x1, 0xffffffffffffffe0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) poll(&(0x7f0000003000-0x10)=[{0xffffffffffffffff, 0x4000, 0x0}, {r1, 0x40, 0x0}], 0x2, 0x20) mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000402000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff2000)="6175787600") sendfile(r1, r1, &(0x7f0000b1a000-0x8)=0xfffffffffffffffc, 0x9) [ 84.284954] binder: 9840:9849 transaction failed 29201/-22, size 72-24 line 3273 [ 84.307548] binder: 9915:9920 ioctl 40046205 80006 returned -22 [ 84.310977] binder: 9913:9918 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 84.310982] binder: 9913:9918 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 84.310987] binder: 9913:9918 DecRefs 0 refcount change on invalid ref 0 ret -22 2017/12/14 11:57:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bc000-0x4)=0x0) r1 = creat(&(0x7f00008b8000-0x8)="2e2f66696c653000", 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000b5a000)={0x0, 0xffffffffffff8001}, &(0x7f00004e5000-0x4)=0x8) r3 = add_key(&(0x7f0000e79000-0xc)="636966732e73706e65676f00", &(0x7f00004eb000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00001e6000)="", 0x0, 0x0) r4 = add_key(&(0x7f0000372000-0xa)="73797a6b616c6c657200", &(0x7f0000303000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000fca000-0x6c)="f87a50bfca02bc5ab78ce6af3ddea0a493f0ffbf3949498120f969a804de12c223be4fc06d3eba64ccf63bf59505a9447442cc719d9f34a6d5c8bbcbd3ee555a19edbd435ede3f9df5891b9be1882a3f006bf644aebfbe549a0fde1deafc0fdeee09c9a3f3c785b2ede3e04b", 0x6c, 0x0) r5 = request_key(&(0x7f0000a22000-0xb)="636966732e69646d617000", &(0x7f0000ca7000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000105000-0x4)="5f1c", r4) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f000034b000)=0x0) keyctl$invalidate(0x15, r5) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000bc4000-0x10)={r2, 0x6aa2, 0x28000000000000, 0x0}, &(0x7f0000cb8000-0x4)=0x10) r6 = syz_open_procfs(r0, &(0x7f0000a70000-0x8)="6f6f6d5f61646a00") exit(0x0) pipe(&(0x7f0000155000)={0x0, 0x0}) readv(r6, &(0x7f0000766000)=[{&(0x7f0000a91000-0xdb)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb}, {&(0x7f0000ae6000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f0000965000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9}, {&(0x7f0000d77000-0xe7)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe7}, {&(0x7f0000f47000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000836000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f000005c000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xee}, {&(0x7f0000d80000-0xcd)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcd}, {&(0x7f0000a5d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6}, {&(0x7f0000f9a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x31}], 0xa) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00002dd000)=0x6, 0x4) getsockname$netrom(r1, &(0x7f0000c07000-0x48)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f0000eae000)=0x48) sendmmsg$nfc_llcp(r6, &(0x7f00009a3000-0x118)=[{&(0x7f00008d4000-0x60)={0x27, 0x3ff, 0x7e, 0x0, 0x5, 0xffff, "948dec2664eedcd6e902c0e7ba1f289af869cc5273ae962094c9feaa60f68f9f3297433193b239d8a0fddacd90f5a1ac60d8946f8960dc1c6fadf4239ad4c5", 0xe8}, 0x60, &(0x7f00008fa000-0x50)=[{&(0x7f0000a3d000-0xbe)="0607965efa61422f7b13335b7294b2e99c921994c8f777358ac975bb184e5e396b84547029aedd480bcfbb186efaadf97ac1ff0884dd17b0d0e4d55fff7669ea437eaf117de11b15b6d0cb4ce01a75c4f40d7972a71ba5bdaa7f213fa7e90adb3821599820d3cfa8de627d9b267e287ae8a7e16dc0ef4927e873b1c097e2f8024ef78babc032b14d5255f5dc559d96c6b6f6fd5ef4c12d34eaa92e529fd03601190b0a6f66ee6b3840cc7556e5e4951f5c2f6e205e7bdd7601cc23179b8d", 0xbe}, {&(0x7f00000c4000)="", 0x0}, {&(0x7f0000307000-0xc3)="af12350b050eb10938991ee4b390412f0e8355e0d1b0121fd6f14f5190f410630cb4f3ef691eac384aab73a94a2122cad8c08b8b2fb198d35921c5095994cb210808adbfb4a88bdeda5e2e5d97083854ab8c9ceca39d2bd071d0da46af1b26f25f7d3a4b8f17bb14108c1c38438b49ca7efed298bfcb2bbf1803dfeccbd86557b3df81a748937d1e72c19392613c96f00a297c85d49af97fdfed53c6c6920489c19da56370b2d0999b6908f5f2a7f4a15c01566d9d27df179c5616cd4bfb841b45eac3", 0xc3}, {&(0x7f0000e69000-0x57)="5ecbba6c4f18c2dc9788531131773f6d824d42bb755f7370bacd186411592cc7b6be69d4f431be799cc9221609ff9189c40589eff894ba079b4bfd50c4116f5b53c90197a65842ff834999b991d8b73eca30cbf214fdf8", 0x57}, {&(0x7f0000a08000)="dd8f883eeb3a185059c562dc7c46b7a15d4efec71e36d7df7fd1fbab2792", 0x1e}], 0x5, &(0x7f0000e9f000)={0x68, 0x11d, 0x800, "9729e97be6ebcc2066ea4dfe21601003728ae0afd92b381d37265ca8b1b5bcedf5ccb215a9a79a6d808de2660085526ed54ecf5187cea6cfda654f9a147d6d23d6c2dd50c94b7cbd2f6f702c1214a8e4cafc515c7945"}, 0x68, 0x2000c080}, {&(0x7f00009b2000)={0x27, 0xf2e9b6c, 0x9, 0x7, 0x8, 0xffffffff, "d440e6d0231fe30ebdb2fd17063ef0b2159df2ff65f481b218a4d8f39d33b3c5e88a8d12b356af59a01af19cffb1e1ff49b44fb1d86b467a9f7e43009fbb9d", 0x0}, 0x60, &(0x7f0000061000)=[{&(0x7f0000203000)="5520e0606f87d615338b5dffdcbd2b4aa1b438a1c929e7feef2d5772591ccf", 0x1f}, {&(0x7f0000cbe000+0xffb)="13d0cb6e5d43fbadd9aba2e897382af3492ee960d8fe01c63e44a8cc33eaf8be30a59c4425590a286b198a6941acf217fd6dd413af6194669a44bb8d1f278755d294f25c28653716ef7ced6a32269c3125b6c0214a5cc86a1af05a907b658383f02d7572ab", 0x65}, {&(0x7f0000c04000-0xe7)="6960cd9a409de3eeef93e52243bbf67f257b1b58f048b125fe5a7187c9f4ae8c63bbcf92d701e2ff0dff07e3739439fceca9bf6366afaee467a22366132a0d8b43869810851edd05db638404eeb61e587b158ac436cf1ccddd7c340754b2b0af0db8187c164d371516ff4b35f3b1303d9a82023dde12fce5d7f2c966acd8e5a7a83112d7aff558627547d35e502ee618b9184afaf5f19dbd58014ba417966ce469d71b65a4598f74e633f44293b33d339489ee05b98a3d2ada96a71f81432b16cca48a97e7e36774f04c1f25631b6d6be15c10f48cf613ffea7ae4bf5fa6970a65de28b22093ba", 0xe7}, {&(0x7f000008e000-0xc0)="789891c45ced5487dbecd79d524963d4ee39832be51fe79b34eac943f4a45ae11ec8764e54aecbbca0aee660797494fb6ef314b64cd7c409a5049e1aca0d8631718f1c0df09e36925d5451d55bce586b423a09d651f85a77e31dd1ba298073305ea6cabab2f6c42399c7c2cfd7b4e07d33900a5c18f1c2e83f9534b21c7baab70e7cacb373d0015b366e6b44941c2c906ff690697fca3f2a2ee73ccca816e94aba9597a4bf3750c8610af65575acc8df03478af0adb57dadbbd9284a6ab5a153", 0xc0}, {&(0x7f0000cb6000-0xd6)="cc47a3a344c4970b60880d52bc779529a9a2d4a6c3a42980a36da0984cf72d14126dfd17f2d2ef29dc51aebc21a482263adb8be540565dd3018f7bee581bcbf2f97d8ff0fd770d17c339a810d1bbb8a61b3ee7b4ebd964908e0ba121247be916c484e05944d36b5fbee44a5f746965511ca0d0500f7ac713b850898d1b9b0b1e6cb666ce69d631b98a739ba4b5b83e1655f6b4a8b11a3f75bfb3fcbea08c5a4226d0ea8ee78c9824b36f8646102b884d37620688b655b5faf79c73b2b6857770e10a9a64938f24a3459f669bdf678306a8033e367b6a", 0xd6}, {&(0x7f0000af1000+0xc57)="e33a29e330efd8124edff00e29135746d81d3dd0bd6fa666e659d9799b7efe5bc39f7b71ec4dca88b7a57f7109540321443fee82ed197fb9b9430fcdff12b94bec3e79d207bc9eba7eb66e902c7b5247407e0904c307c65f8c39a54e790b38c6753aee7d1c2b79483d42a2", 0x6b}, {&(0x7f0000668000)="3197520d04d7306c50aa7677dca55aa9bd5fa57b118f81818311d137b8eec80680fda8eb544991f291c3d951b640d17a59de12b3d03a8a", 0x37}, {&(0x7f0000e74000)="93f3fac4bd3fff71e12ea7edc77a020c2c6911a6939d30e38c460363a24aaeec7fe985ab41de5abab3d2dc30f205d137fd9564da5309d810ede82fca4af566908869025d3c79870e387f5d9daad4b62e82a9d006b99906578f0bd639a3e3d2fbd2423432835b130caacc785f633f87ba22018b1401f457376836be0ebaf7cf0f09b8db913e5a2be2ff3bd3202a2918d0b0d4b810efde2387eafd4e603b5d6e084ab56c08b8fc35a3db8726cc58dae711eaec00b65acc2512bdb402e66d2d7d52c2b722f06c2bd705a193a8f743545ccf82355e0603783af551c86e3cccd9b8c833533a83536034", 0xe7}, {&(0x7f0000701000+0xe1c)="24", 0x1}], 0x9, 0x0, 0x0, 0x80}, {&(0x7f000048f000)={0x27, 0x81, 0xffffffff, 0x7, 0x6, 0x401, "b0002213dde721b7c1d185e5ce65aa93f2aeebd010fbd39b70c6beb4ff873e3ceed74f31ab66fab6f6f3da292068b043829a7ff4ab237421c9f2df56780fb0", 0x8}, 0x60, &(0x7f00007d8000-0x70)=[{&(0x7f000072d000-0xe6)="5bb04dae08a94a4cf956df909b5f9c76585445a2f336659c12d2c5cdca4d89d84c63fadfedbdecb805566b82c68e304c7348f490758f5f7765c98fb4b01757beb8f21c5a035448c6effc27daeb84de4f39a7d547f2bb7735f56c322dea0729d073ca738cf8168e7c82ec2cd815623394dcb9f65fbd46131a0197587d14c123e1f41df7f4af95d83c3bde9204b571cc0c8a0fffeecaf425482da043f9ab02b920a01fb55a4c17cc8734db1b390bae4a4014dfaeb33536c89949f9114ea56fe6f0831048d3c79fc48c692777feb83891df17674c977450e62da5c4e6a4bfd901539919b113fe90", 0xe6}, {&(0x7f0000739000)="717de0549409", 0x6}, {&(0x7f0000033000)="37b6e28213e7a6e73261c964c1851ffc78912a2b9bc3f5e17b838c94d9f40c0ded97a7435f7a210bde55b30ef974d06757a1e40ac3622f28dce22474e8c81d8736ae6ce7f3ebc8ec6cc6fa572d0fd32c0a4b1cf8125d801e1157be4aab65da8eecaac2f7fa1c20b762ab4cb37f146a1bda747c26542e751c2bc4ca02dbc2b625487351fc3590f1f371ee089cf59b90673d441a680851ccd113bf17a5e2f1fef5139aaae7dcb9227a8409c0b3da75f1c07e2315b12de5abb814edc531720e4ffe3ab5b12ddef02e", 0xc7}, {&(0x7f0000c8d000-0x1000)="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", 0x1000}, {&(0x7f00009d3000-0x20)="b33eb0a52b9cec11156506817f883a62e3bd0d87dc3867efd0106fa0e1ef7885", 0x20}, {&(0x7f0000ef0000-0xb7)="ca62a2f8c380d1d02a93ff225ea7e3ce6e8d809df164b7abfdad906eb57dda3e2f90d9e4af91fc0d643b62bcd1578f45b068bad4f65ed2356c8f7c216c8912b7111996b9a86dabdf68b866c5ee8d6c9f1ddea07e40ab954c6b92545e286a14732448f74e938c7a0fc4ad660a6b22677dfe91b9a161d62612bad296306372ba669cf29f0ce693267b5db2719501c3214acecd4a996f61639b9f6164c9275918987c51c933d4b25ec3af99a830c58998198d2f9aa1c635b8", 0xb7}, {&(0x7f00003fb000-0x4a)="e2afba497d480d65fa04bcc9b7aa8fddb15b9c305c64db1467ca525c90018ecc4e648a3ad03bcdc474fd0e74df8e304a62128ea38d6d2f3db04d406cb28eac1e9146bd4ff41ca8ab503b", 0x4a}], 0x7, &(0x7f000011a000)={0xd0, 0x102, 0x3, "2ec9fa697fe83649d4b2ec0bb41b71003dfccaa1855d001cba1800da87a16dc7fde7aa7ccd0652242bbcd34f76436fdc0feb9602ff0ea9a013700278ff2a58f53b6ccb42d7f8fe63ec9abb16f72ab8552fc45662f37ebe72db63df775ae210f057d2f89e6f5281956051c54e69b7e7f9d0548421994b0dc3be4615f4015f8f976955d9399b127c082545dd3186999d32a06f8e413afd06f09596e18c6cb512d4a8fe05d3e4fea928392307a729308c0b17a460eae00b4d3e7d02c44cbb"}, 0xd0, 0x8080}, {&(0x7f000017d000)={0x27, 0x20, 0x2, 0x3, 0x8, 0x4, "87290a4cb2983218cb02e75863c871a4881d69bdab0d08075d3c61260f07921164f653fc57c1454092a29d192fd437f094c0966390c50838fef62a9118d40b", 0xa2ea}, 0x60, &(0x7f0000f60000)=[{&(0x7f0000bc8000-0x32)="201f815910dbcfaabbf53258056d41f53b2c743065bcf5e80eaa0e51b6d90b430b34834ad055ecf45eca7225a5678ce4898b", 0x32}, {&(0x7f00005f4000-0xe5)="9d79d33d31ae4f4bc012707468464b5314a44f2db402ea4f354724209f237776f1c10d33505c275977ef829fe0c847fd2e4467a63b305aa8a48689c6d3053086ff97f955ad214ee8e42a6e077b7ac03ab36a283a61fc3be2da84decd3ceb5ea24707d2a547a840dd89e9587337432ce1622e4e30991fb23dd6193a345f02f5cd0e286de1406b21e1c9de206be537c2b27d7822ca32593182fa29fd2afce3f9cc10f5efb7c2a6b9aa34750197ce2eadfd8b3572a0dcc3fe01f4443c0142f05197f15d146cc339c6665edd480974340e1fe4c60f815ac5d780615dd0cf9a7c8e5e56d9877915", 0xe5}], 0x2, &(0x7f0000153000-0x50)={0x50, 0x0, 0x8, "3a8d316933845e8d83b5eec74a5a5cef3c3fd195403b3ea36562af3eff313d4e69684b9a9912e12f4433fe9071567fd82da62384be67907c33620cf4c01c"}, 0x50, 0x40}, {&(0x7f0000689000-0x60)={0x27, 0x2, 0x7f, 0x2, 0x81, 0x7, "1ffdb2c75c8550176cd1933351d97abbf65d8ca829ee95b435bbb32669a11eb30a6687f27debb802ceac82ba9bc961ada145f81a07a0d4d291a3645c50626a", 0x0}, 0x60, &(0x7f0000b6b000-0x20)=[{&(0x7f0000b61000-0xb9)="e0c1b7515c20745b925489a1532eb608fa9d2dfbd6fb050023bc6e8130e7113dfada889b83c386cf00a8dac507a095ab3551abbb04043ddbcfd0d46bffd0337e81c1b816dfdb83421e3a48d30159ec033a396b5ee1e4b5767c716530f8e1a5afad1ed9edf710dd65576962695ac745f4f1147bf700495186805513ddfa006ad057e20f1e0b207a50818987cdf4a9eeb1d9ff2830e877c4c1ce69d397b523238564410c1b4676f5e8347bccdf39be02e4ca627e3b96c1c73183", 0xb9}, {&(0x7f0000a3a000-0xdc)="e60ed26fb09fbc26636bbec438d0ed9763c0e537837e8e7ca54692d4cc498db92bacad74349cf27ada64dd76741dcb8049cbdbc622420591084aea7ea4ce74d90317a2fc55a50f8c3619e5e3315dc6503ef4932bdf8bbd1daf3d6dd9686e8f1a15aa42a500a01da346ddada5c7f4682b3d1e5d08d6cb1de3380cd6c215fa67a28b79437a189d45705fbc98aff4d6e508f630ff39dbe11234b5c4186346fdfe3ce5d04a2f5b16a38a6f21b0e666c7c60f53ac39544b8ed4d3db674cae9f6b9cb8968ce2719064c38218ecdf325ce66e3478ef3ba91fa066e652d0e2e7", 0xdc}], 0x2, &(0x7f0000ef1000-0x10)={0x10, 0x109, 0x7060, ""}, 0x10, 0x24040814}], 0x5, 0x20000000) keyctl$clear(0x7, r3) r8 = socket(0x9, 0x0, 0x11) read(r6, &(0x7f0000463000)="", 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00006a0000-0x4)={0x7, 0x7, 0x40}) getpeername$inet(r7, &(0x7f00008a6000-0x10)={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00004fe000-0x4)=0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000d91000-0xc)={0x0, 0x0, 0x0}, &(0x7f000048f000-0x4)=0xc) 2017/12/14 11:57:39 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0x3)="2f6465762f62696e6465722300", 0x0, 0x7fe) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40086602, 0x47bfff) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x8d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00004ec000)={0x0, 0x80000, 0xffffffffffffff9c}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)="2f73656c696e75782f636865636b72657170726f7400", 0x48000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000002000-0xc)={r3, 0x80000, r4}) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001000-0x20)=[@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x772, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}], 0x88) 2017/12/14 11:57:39 executing program 5: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000)="6e65742f70726f746f636f6c7300") readv(r0, &(0x7f0000009000-0xa0)=[{&(0x7f0000009000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x76}, {&(0x7f0000007000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000d000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000004000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000000e000-0xb5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb5}, {&(0x7f000000a000+0x454)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfe}, {&(0x7f0000004000-0x38)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x38}, {&(0x7f0000010000-0xfa)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfa}], 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000007000)=0x9, 0x4) 2017/12/14 11:57:39 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000007000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={r1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000000a000)={0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r3, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f000000a000)=0x14) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002000-0x4)=0x0, &(0x7f000000a000)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) 2017/12/14 11:57:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000001000-0x8)={@multicast1=0xe0000001, @multicast1=0xe0000001}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000e66000)=@known="73797374656d2e706f7369785f61636c5f64656661756c7400") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f6, &(0x7f0000f91000)={@common="73697430000000000000000000000000", @ifru_ivalue=0xb0}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00003e7000-0x8)={0x0, 0x0, 0x0, 0x0}) sync_file_range(r1, 0x7fffffff, 0x0, 0x1) [ 84.311324] binder: 9913:9918 ioctl c0306201 20007000 returned -14 [ 84.313900] binder: 9916:9925 ioctl c018620b 20002fe8 returned -14 [ 84.314302] binder: 9916:9925 ioctl 40046205 2 returned -22 [ 84.315437] binder: 9913:9926 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 84.315441] binder: 9913:9926 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 84.315445] binder: 9913:9926 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 84.318227] binder: 9919:9923 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/12/14 11:57:40 executing program 7: mmap(&(0x7f0000000000/0x69000)=nil, 0x69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000065000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000048000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000067000-0x4)=0xc) mmap(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f000006a000-0x8)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000006b000-0xc)={r2, r3, r4}, 0xc) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000005b000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xdd2d, 0xc) poll(&(0x7f0000001000-0x28)=[{r6, 0x4, 0x0}, {r0, 0x8010, 0x0}, {r6, 0x6104, 0x0}, {r1, 0x4008, 0x0}, {r6, 0x2000, 0x0}], 0x5, 0x227) epoll_create1(0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000017000-0xc)={0x18, 0x0}) r8 = dup2(r0, r0) fcntl$setpipe(r7, 0x407, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r7, &(0x7f000000b000)=[{&(0x7f000006a000)="6ce700", 0x3}, {&(0x7f0000067000-0x1000)="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", 0x1000}], 0x2) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r6, &(0x7f000006c000-0x3e)="02e112f50ec7a40ba62779b1bb33b89c8b5d9d3ea5ac5664669360fc97e01a350ff003bff50cd3a7298c6e435f276b88e82a602445957d17672a42ef8094", 0x3e, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f000005a000)={{{@in=@empty=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000069000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f000003d000-0xe8)={{{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x2, 0xeaf, 0x0, 0x5, 0xd, 0xa0, 0x80, 0x5, r9, r3}, {0x4, 0x6, 0x80000000, 0x0, 0x7ff, 0x702b, 0xf5, 0x6}, {0x5, 0x6, 0x7f, 0x2}, 0xfff, 0xfffffffffffffff8, 0x101, 0x0, 0x28, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x3, 0x0}, 0x13, @in6=@loopback={0x0, 0x1}, 0x9, 0x0, 0x0, 0x6, 0x7, 0x6, 0x4}}, 0xe8) read(r6, &(0x7f0000043000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xaf) dup3(r6, r0, 0x10007ffff) ioctl$TIOCEXCL(r6, 0x540c) mmap(&(0x7f000006d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r6, &(0x7f000006e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) fcntl$setsig(r7, 0xa, 0x5) writev(r8, &(0x7f0000051000)=[{&(0x7f0000058000-0xe9d)="ad", 0x1}], 0x1) [ 84.318232] binder: 9919:9923 Acquire 1 refcount change on invalid ref 1 ret -22 [ 84.322588] binder: 9919:9923 ioctl c0306201 20008fd0 returned -14 [ 84.322657] binder: 9919:9923 transaction failed 29189/-22, size 64-40 line 3008 [ 84.323579] binder: 9919:9928 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 84.323583] binder: 9919:9928 Acquire 1 refcount change on invalid ref 1 ret -22 [ 84.336137] binder: 9919:9923 ioctl c0306201 20008fd0 returned -14 [ 84.336152] binder: 9919:9928 Release 1 refcount change on invalid ref 0 ret -22 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getuid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000676000-0xa)="2f6465762f70746d7800", 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000fdf000)=0x0, 0x80000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000dc0000-0x4)=0x8bafe) read(r0, &(0x7f0000fe0000-0x1)="00", 0x1) fchmod(r2, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fde000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/14 11:57:40 executing program 5: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000193000+0x67d)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r5 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000006000)={0x4, 0x0, &(0x7f0000007000)=[@exit_looper={0x630d}], 0xff8, 0x0, &(0x7f0000002000)="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"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000006000)=[{r3, 0x0, 0x0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000046e000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) syz_open_dev$binder(&(0x7f0000216000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000055a000/0x2000)=nil, 0x2000, 0x0, 0xc011, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:40 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = mmap$binder(&(0x7f0000472000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = getpid() mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00004ed000-0x8)={0x0, r2}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ec000)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000287000)=[@enter_looper={0x630c}], 0x16, 0x0, &(0x7f00004ee000-0x16)="9c725eb3a505c0a462eef0ca6aeb1d5789969d17907c"}) syz_open_dev$binder(&(0x7f000011c000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x20000004) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00004ee000)="2f73656c696e75782f61636365737300", 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f000000f000-0x10)={0x7, 0xffffffffffffff80, 0x6, 0x1}) [ 84.336193] binder_alloc: 9919: binder_alloc_buf, no vma [ 84.336223] binder: 9919:9928 transaction failed 29189/-3, size 64-40 line 3131 [ 84.343918] binder: 9916:9934 ioctl 40046205 800 returned -22 [ 84.357050] binder: 9916:9934 ioctl 40046205 3 returned -22 [ 84.358098] binder: BINDER_SET_CONTEXT_MGR already set [ 84.358101] binder: 9942:9944 ioctl 40046207 0 returned -16 [ 84.358140] binder: 9942:9944 ERROR: BC_REGISTER_LOOPER called without request [ 84.384942] binder: 9942:9944 got reply transaction with no transaction stack 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0xa6b000)=nil, 0xa6b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000775000-0x9)="2f6465762f72746300", 0x20002, 0x0) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$ipx(r0, &(0x7f00005a4000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00004f6000-0x4)=0x10, 0x20000000) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000a6c000)=0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000011000-0x4)=0x0) r2 = getpgid(0xffffffffffffffff) r3 = getpgrp(r2) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = getuid() getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f000001f000)={0x0, 0x0, 0x0}, 0xc) fstat(r1, &(0x7f00008b9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f000047c000)=[r5, r5]) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000066c000-0xe8)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a6b000)=0xe8) fstat(r1, &(0x7f00008a6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00008c4000-0xe8)={{{@in=@multicast2=0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a6b000)=0xe8) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000a6c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000a6c000-0x38)={&(0x7f00009fb000-0x3)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000a6b000)=[{&(0x7f0000a6b000+0x724)="045197d3f9bf9872940efefa03f90092e8bee394ff7bbe110cd6ca4e829848", 0x1f}, {&(0x7f0000a6b000)="585c5750a2375d6e1244279f23396c76e542543938a077a1949d032ef778e146718d3c379c43ac137c6570b27f6fd08f1b92d760cc3783ba09fb9d03c40170dc76d904c9793ee2fd234defd5c8ee054ec5173af0b39661ac3203402ac4f59d", 0x5f}], 0x2, &(0x7f0000a6c000-0xa8)=[@cred={0x20, 0x1, 0x2, r3, r4, 0x0}, @cred={0x20, 0x1, 0x2, r3, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r3, r8, r9}], 0x5, 0x4800}, 0x8000) r10 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r3, r10, 0x20, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x70005, 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00008e0000)={0x6, {{0x2, 0x0, @rand_addr=0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, [{{0x2, 0x0, @rand_addr=0xc6c1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x4d8) mount(&(0x7f0000051000-0x8)="2e2f66696c653000", &(0x7f00009d6000-0x8)="2e2f66696c653000", &(0x7f000006e000)="6a6666733200", 0x280000, &(0x7f0000651000)="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") r11 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000a6c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f000031c000-0x8)={0x80000001}, &(0x7f0000a6d000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000a6e000-0x10)={0x0, 0x0}, 0x8) read(r11, &(0x7f0000a6a000-0x80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80) mmap(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000a6c000-0x8)={0x0, r10}, &(0x7f000098a000-0x18)={0x1, 0x4, 0x80, 0x8001, 0x2, 0x80000001}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000a6a000-0x4)={0x0}, &(0x7f0000a6a000-0x4)=0x4) 2017/12/14 11:57:40 executing program 2: mmap(&(0x7f0000000000/0xf6d000)=nil, 0xf6d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f71000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f71000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f72000-0xb)="2f6465762f6877726e6700", 0x1000000000200, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000f70000-0x4)=0x0) mmap(&(0x7f0000da3000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x669000)=nil, 0x669000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x28000200, &(0x7f0000f3c000-0x4a)="df007efa8a85df15748b0c76130ab1ca1c98e2b30819771c23a6e1a5c2a8c77ae6c74fc62e442b9749fc89e7b078de77d3c7e906a61723d013c62311af8c9eecf75a6506007215ab3382", &(0x7f0000539000)=0x0, &(0x7f000097f000-0x4)=0x0, &(0x7f0000c5d000-0x2)="0900") wait4(r1, 0x0, 0x80000, &(0x7f00000f2000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1, 0x0, 0x7, &(0x7f00008b6000-0x8)={0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000492000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00005a5000-0x8)=0x2) sendto$inet(r2, &(0x7f0000194000-0x1)="37", 0x1, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r2, 0x4, 0x2000) read(r0, &(0x7f000049d000-0x57)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x57) getrusage(0xffffffffffffffff, &(0x7f0000bd4000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r2, 0x1) unshare(0x80000000) mq_open(&(0x7f0000000000)="5e6c7253637770616e3100", 0x6e93ebbbcc0884f2, 0x86, &(0x7f0000665000-0x40)={0xfffffffffffffffd, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0}) lseek(r2, 0x0, 0x20000) mmap(&(0x7f0000000000/0xd3c000)=nil, 0xd3c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f000040c000-0x160)={{{{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x70, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2, 0xfffffffffffffffe, 0x7, "08cf49763f46e535a62fddc552804dbbb42a79a40000000072bce3a2f48b8e3ca8000000039f88ac72227db55f504f6b457def6b687d1f4a4e6d465a9d69194da1a3c8e079964dace5124f2b8acacffa"}, 0x160) [ 84.384946] binder: 9942:9944 transaction failed 29201/-71, size 0-0 line 2924 [ 84.401770] binder: BINDER_SET_CONTEXT_MGR already set [ 84.401775] binder: 9942:9948 ioctl 40046207 0 returned -16 [ 84.415916] binder: BINDER_SET_CONTEXT_MGR already set [ 84.415921] binder: 9942:9944 ioctl 40046207 0 returned -16 [ 84.417472] binder: 9942:9948 ERROR: BC_REGISTER_LOOPER called without request [ 84.421880] binder: 9916:9950 ioctl 40046205 2 returned -22 [ 84.423904] binder: BINDER_SET_CONTEXT_MGR already set [ 84.423907] binder: 9915:9940 ioctl 40046207 0 returned -16 [ 84.433349] binder: 9915:9954 ioctl 40046205 80006 returned -22 [ 84.437926] binder_alloc: 9942: binder_alloc_buf, no vma [ 84.437958] binder: 9942:9944 transaction failed 29189/-3, size 0-0 line 3131 [ 84.442575] binder: 9942:9962 got reply transaction with no transaction stack [ 84.442579] binder: 9942:9962 transaction failed 29201/-71, size 0-0 line 2924 [ 84.443309] binder: 9916:9961 ioctl 40046205 800 returned -22 [ 84.449355] binder: 9916:9950 ioctl 40046205 3 returned -22 [ 84.455541] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.455580] binder: release 9942:9944 transaction 1445 in, still active [ 84.455584] binder: send failed reply for transaction 1445 to 9942:9948 [ 84.460141] binder: undelivered TRANSACTION_COMPLETE [ 84.460153] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.469307] binder: 9967:9968 got transaction with invalid offsets size, 4 [ 84.469357] binder: 9967:9968 transaction failed 29201/-22, size 0-4 line 3167 [ 84.469913] binder: BINDER_SET_CONTEXT_MGR already set [ 84.470084] binder: 9967:9968 ioctl 40046207 0 returned -16 [ 84.470266] binder: 9967:9968 got transaction with invalid offsets size, 6 [ 84.470309] binder: 9967:9968 transaction failed 29201/-22, size 0-6 line 3167 [ 84.470902] binder_alloc: binder_alloc_mmap_handler: 9967 20005000-20009000 already mapped failed -16 [ 84.476564] binder_alloc: binder_alloc_mmap_handler: 9967 2055a000-2055c000 already mapped failed -16 [ 84.496160] binder: BINDER_SET_CONTEXT_MGR already set [ 84.496164] binder: 9967:9972 ioctl 40046207 0 returned -16 [ 84.497731] binder_alloc: 9967: binder_alloc_buf, no vma [ 84.497762] binder: 9967:9972 transaction failed 29189/-3, size 0-4 line 3131 [ 84.500873] binder: BINDER_SET_CONTEXT_MGR already set [ 84.500877] binder: 9967:9972 ioctl 40046207 0 returned -16 [ 84.503506] binder_alloc: 9967: binder_alloc_buf, no vma [ 84.503537] binder: 9967:9972 transaction failed 29189/-3, size 0-12 line 3131 [ 84.511944] binder_alloc: binder_alloc_mmap_handler: 9967 20005000-20009000 already mapped failed -16 [ 84.515342] binder_alloc: binder_alloc_mmap_handler: 9967 2055a000-2055c000 already mapped failed -16 2017/12/14 11:57:40 executing program 6: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000015000)=0x8, 0x4) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) listen(r0, 0xddca) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)={0x0, 0x0}) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000013000)={0x0, 0x0}, &(0x7f000001c000)=0x10) mq_timedreceive(0xffffffffffffffff, &(0x7f000000c000-0xe0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe0, 0x4, &(0x7f000001d000-0x10)={r2, 0x0}) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000006000)="2f6465762f72746300", 0x101200, 0x0) write$tun(r3, &(0x7f000001e000-0x123)=@pi={0x0, 0x200, @ipv4={{0xa, 0x4, 0x8, 0xc815, 0x11f, 0x3, 0x1, 0x9, 0xff, 0x0, @empty=0x0, @rand_addr=0xab5, {[@ra={0x94, 0x6, 0x7}, @end={0x0}, @lsrr={0x83, 0xb, 0x7fff, [@multicast1=0xe0000001, @loopback=0x7f000001]}]}}, @udp={0x3, 0x2, 0xf7, 0x0, "4aaae58b87e06944fe9dc5a212040b908429f65cbf352aa8c37722dff41b05d0b723c1159889551d06e135b6911337b12904c6d23ea41be292ffb83fb5aec4ae001404a202e5984509de14fcac510156e0e0abe1e5abb673a9cea0da1dcbc58a25f7677d1b00a819907b915db9d94a211bce1a88c9985534972bcaa8dd30c5d8d81abaa2a31bdbc1f5e2f409f15ccd9c462bae7e31a7b82990556b63ea89dee56deb0aa1abe7046c244ef0211d91a9152978019e7f958f4ea051d125d3ce6fd154b31fbf4f075cebdaec2123b4046c1a9a04bbafb3d2e8c5ab1da7f36cd27a98768af208ab57e2d92f40e479370be1"}}}, 0x123) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f000001c000)=0x0, &(0x7f000001c000)=0x4) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000003000)=[{r1, 0x1, 0x0}], 0x1, &(0x7f000001f000-0x10)={0x77359400, 0x0}, &(0x7f0000017000-0x8)={0x0}, 0x8) fcntl$setlease(r1, 0x400, 0xffffffffffffffff) setns(r0, 0x4000000) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000020000-0x4)=0x800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f000001d000)={0x4, 0x8, 0x7ff, 0x7ff, 0x9}, 0x14) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f000001b000-0xc)={0x2000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000001d000-0xc)={0x4, 0x0}) 2017/12/14 11:57:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000673000)=0x0, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000638000-0x8)=[{0xb, 0x8}], 0x1) r1 = getpgid(0x0) r2 = getpgrp(r1) r3 = syz_open_procfs(r2, &(0x7f0000c7e000)="7374617400") preadv(r3, &(0x7f000032c000-0x40)=[], 0x0, 0x2) ptrace$setopts(0x4200, r1, 0x1, 0x4) 2017/12/14 11:57:40 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000009000)="2f6465762f7573626d6f6e2300", 0x46, 0x440000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000004000-0x20)={@generic="c6e24875b8dd2ff852dc0fdac6a348d2", @ifru_flags=0x2100}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000c000)="2f6465762f70746d7800", 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000011000)="3a2483a038e929005dc029c8411fd93bb68b361eedebe237ac36734f718875ad9fd171d674a00864a44badff45cc5661d699b229c0ca9e2dc36198b2a9ae6623c9567b2289f4eb889c4f4a03afff22310a914e00567ea91c535606bda0394bc5bc0cbc2b6cbf8d19516f07d903fb1c633a269e340713093c4d9f39fb368c16d7645a8c93615f2fd09831a8279da090b76e9ab9315eb68249f635f69d9d8a27edaf7ec631b7d701a560fc2250d0") ioctl$TCXONC(r1, 0x540a, 0xffffffffffffffff) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000b000)="2e2f66696c653000", 0x400000, 0xc0) ioctl$TCGETA(r1, 0x5405, &(0x7f000000f000-0x2)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) writev(r1, &(0x7f0000010000-0x50)=[{&(0x7f0000015000-0x401)="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", 0x401}, {&(0x7f0000004000-0xb2)="6f82a3915eb8b653e8e2a18a98a4a2f0a6e249013c3dcd53e3060056db45c31db7d45ebf2b8e267af7a52aa2c03f838badc700f2e84b9b03d5887c6ab5e1886cfe5353e98cc987149938f06d7dca24c1934d6bcb4f4f09004e296ae28fd0c93ee2fce701f196767385562d26b211a8a1c74b73dadba3828ccdd017008bf3616cd9b1814868fe3393a79b23d29be88897fe36d7277ea161dc7c6b828ea4afe38cec4dd705c60e138b092f56d34c0004443d81", 0xb2}], 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00005ad000)=0x3fb, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000709000-0x4)=0x2, 0x4) pipe(&(0x7f0000de6000-0x8)={0x0, 0x0}) bind$inet6(r4, &(0x7f0000b52000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r4, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000036000)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000ec5000)={0x0, 0x7, 0x30, 0xffff, 0x6}, &(0x7f0000999000)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000699000-0x6)={r6, 0x80}, 0x6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000c51000-0x4)=0x0, &(0x7f0000375000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000184000+0x6ed)={0x0, []}, &(0x7f00002ed000)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00009fa000)={0x0, @in6={{0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6275, 0x100000001, 0x3, 0x3, 0x2}, 0xa0) sendto$inet6(r4, &(0x7f0000fea000-0x62)="b692c0c9609b0927370957c4a9175423c6bf3ce6c0b11b3018b993e9f5e78778f11c5d8f4c01419b259620362bf9adb47a215258ff8ea0ddcffbf7d0804c628ad779dd9d7404b2c83f860af0637fb6bae9ae589bcf748d06f5047e486facea9aab54", 0x20fea000, 0x4000, &(0x7f0000609000)={0xa, 0x1, 0xd5, @loopback={0x0, 0x1}, 0x1}, 0x1c) ppoll(&(0x7f0000013000-0x10)=[{r1, 0x2181, 0x0}, {r1, 0x40, 0x0}], 0x2, &(0x7f0000005000-0x10)={0x77359400, 0x0}, &(0x7f0000013000-0x8)={0x3}, 0x8) fcntl$getown(r5, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000a0b000-0xad)={0x0, 0xa5, "b0fe56d97e386501bea52697f411b0021e07b2169b51958e9b6a0000000340cbd172a54ee7ac0267d12c597a6bf6fcc3855120f466ccfdb579016cefbb5dbd791580b07d563cc577d8071232b73cb983654accfd5e5a1b956f75e0c0d7a4a5f0a5709d8f8caa4175e8c5fb13a51dc1361d4d9f0edf8a7a3b83d441de1bbe831e730a9b16ee7b8d0b560b2ac4d880b8f6f7f0d159e58c7997b33a678e0c6ee48da76b9b6a3b"}, &(0x7f00007ab000)=0xad) 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x660c, 0x800000) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000039a000-0x11)="2f73656c696e75782f656e666f72636500", 0x88040, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000286000-0x4)=0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00004ec000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00004ed000-0x4)=0xb) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/12/14 11:57:40 executing program 1: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x802) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000237000)="2f73656c696e75782f636865636b72657170726f7400", 0x101000, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000187000)={0x6, &(0x7f00004ee000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000203000)={r2, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f00004ee000-0x6a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") fsync(r0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x660c, 0x800000) clock_settime(0x7, &(0x7f0000397000-0x10)={0x0, 0x0}) 2017/12/14 11:57:40 executing program 2: mmap(&(0x7f0000000000/0xd2d000)=nil, 0xd2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000448000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ec000-0x2)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d2c000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x0) mmap(&(0x7f0000d2d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd(r3, &(0x7f0000d2d000)={0xff}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000d2d000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x5) r4 = syz_open_dev$binder(&(0x7f0000e9a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000012a000/0xc00000)=nil, 0xc00000, 0x0, 0x13013, r4, 0x0) 2017/12/14 11:57:40 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6, 0x32, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000934000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001000-0x1e0)=[{{&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000001000-0x10)=[{&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xac}], 0x1, &(0x7f0000002000-0x66)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x66, 0x9}, 0x65}, {{&(0x7f0000000000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000002000-0x80)=[{&(0x7f0000001000)="0000000000", 0x5}, {&(0x7f0000001000-0x89)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x89}, {&(0x7f0000002000-0x44)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x44}, {&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9}, {&(0x7f0000002000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}, {&(0x7f0000001000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xed}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc4}], 0x8, &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x53, 0x8000}, 0x5}, {{&(0x7f0000001000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000000000)=[{&(0x7f0000001000)="000000000000000000000000000000000000000000000000", 0x18}, {&(0x7f0000001000-0x9c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9c}, {&(0x7f0000001000-0x94)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94}, {&(0x7f0000002000-0xca)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}], 0x5, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68, 0x4}, 0x4}, {{&(0x7f0000001000+0x592)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000-0x80)=[{&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x84}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x76}, {&(0x7f0000002000-0x60)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x60}, {&(0x7f0000002000-0x3)="000000", 0x3}, {&(0x7f0000001000-0x6a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}, {&(0x7f0000002000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}], 0x8, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd, 0x8}, 0x6}, {{&(0x7f0000002000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000002000-0x80)=[{&(0x7f0000000000)="", 0x0}, {&(0x7f0000001000-0x15)="000000000000000000000000000000000000000000", 0x15}, {&(0x7f0000001000-0x16)="00000000000000000000000000000000000000000000", 0x16}, {&(0x7f0000001000-0x2)="0000", 0x2}, {&(0x7f0000001000-0xf)="000000000000000000000000000000", 0xf}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda}, {&(0x7f0000000000)="0000", 0x2}, {&(0x7f0000001000-0x8a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8a}], 0x8, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000", 0x1c, 0x7ff}, 0x8000000}, {{0x0, 0x0, &(0x7f0000001000-0x30)=[{&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd8}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe6}, {&(0x7f0000002000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd}], 0x3, &(0x7f0000001000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd, 0x65ba}, 0x4}, {{&(0x7f0000001000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f0000002000-0x50)=[{&(0x7f0000001000)="000000", 0x3}, {&(0x7f0000002000-0x7c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfe}, {&(0x7f0000002000-0xf7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf7}, {&(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x5, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x52, 0x5c1}, 0x2}, {{&(0x7f0000000000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000002000-0x20)=[{&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb9}, {&(0x7f0000002000-0x5e)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5e}], 0x2, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000", 0x20, 0x0}, 0x7}], 0x8, 0x40000042, &(0x7f0000001000-0x10)={0x77359400, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00004fd000-0x8)="2e2f66696c653000", 0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000707000-0x4e)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00009b9000-0x4)=0x0) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f000059c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000e39000)=0x0) syz_open_procfs(r3, &(0x7f0000d42000-0xd)="6e65742f736f636b7374617400") sysfs$3(0x3) preadv(r2, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x40000000000000) 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0xfaf000)=nil, 0xfaf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() getpid() mmap(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000fb0000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fb0000-0x4)=0xc) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00004b2000-0x8)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000faf000)=0x0) r1 = getpgid(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b7, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tun(&(0x7f000039d000)="2f6465762f6e65742f74756e00", 0x0, 0x2000040202) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00004ae000)={@generic="1f00c83c159db8e5188756000000ff67", @ifru_names=@generic="c246a511631bc37753c023e1c28a1c96"}) r3 = fcntl$dupfd(r2, 0x0, r2) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f0000c9c000-0xd)="2f6465762f7572616e646f6d00", 0x0, 0x2000) getsockopt$netlink(r3, 0x10e, 0xf, &(0x7f0000943000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000fb1000)=0x54) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00003b3000)="fd560c7e2aecb8f19d4de53ccddc31023f2fcf02761cc46685b27ac671f345dacf5e8457a1af223bb2ab8f67317fffffffffffffe5ea3c1d12037d00000000000000601e67b5ba1dee4dc0b8ee205b09811bc09ee0627a606b5e4e2166a4b7ecac9e4a04a5bafc02db76b515749329cffdb4fb9295b2875f54421e8f4a8b0caa792c92000000000000004e65dbfd89eaa75b326764") memfd_create(&(0x7f0000fb2000)="5b00", 0x2) sigaltstack(&(0x7f0000044000/0x3000)=nil, &(0x7f0000c7c000-0x8)=0x0) syz_open_dev$loop(&(0x7f00003c2000-0xb)="2f6465762f6c6f6f702300", 0x4, 0x420000) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000fb1000-0x8)=0x4) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000fb5000+0xcb5)=0x1f) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000472000)={0x1, &(0x7f000005d000-0x2)=[{0x6, 0x8, 0x9, 0x3}]}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000d4b000-0x4)=0x9) [ 84.530592] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.530680] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.538153] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.538235] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.770355] binder: 9991:9992 ioctl 40046205 6 returned -22 2017/12/14 11:57:40 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f61636365737300", 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000002000-0x8)=0x40) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72746300", 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={&(0x7f0000000000)=[0xffffffffffffffff, 0x7, 0x3f, 0x7], 0x4, 0x7, 0x80000000, 0x100000001, 0x8001, 0x8001, {0x5, 0x2, 0x3586f79c, 0x4, 0xa287, 0x4, 0x5, 0x2, 0x1, 0xba, 0x1, 0x2, 0x1549, 0x40, "3778a22e710d1b72159f8bedcf2457d4d305701e1a1ad2ca1845f5bed48aa7c7"}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffff9c, 0x400445a0, &(0x7f0000002000-0x4)=0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000d77000-0x57)="651ea37c0ad89c2f7fb3d38178cb57d08e62b7869b30e17ac5d18523ebd93bd2c0f5cb7a3518fc41888119e5dc7405c96922dded77daedff912efdb3d567ab87e59060e0b5cc7ee024c91eca29ad4258e07b27af2823db", 0x57, 0x0, &(0x7f000047e000-0x1c)={0xa, 0x3, 0x8b, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000001}, 0x1c) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000df6000)=@generic="00000000000000000000000000000000", 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00009c5000-0xa0)=[{&(0x7f0000eef000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000092f000-0xbf)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbf}, {&(0x7f00002dd000-0x2a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2a}, {&(0x7f0000d55000)="0000000000000000000000000000", 0xe}, {&(0x7f0000856000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x54}, {&(0x7f0000bf3000-0xfb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfb}, {&(0x7f0000b9f000-0x7c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c}, {&(0x7f0000f17000-0x7c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c}, {&(0x7f000004c000-0x96)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x96}, {&(0x7f0000021000-0xec)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xec}], 0xa, 0x0) 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)="6d61705f66696c657300") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000007000)=@assoc_value={0x0, 0x5}, &(0x7f0000006000)=0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000009000-0x108)={0x0, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x7, 0x8, 0x1, 0x552, 0x1ff, 0xfffffffffffffff9, 0x8000, 0x4, 0x9, 0x1000, 0x5, 0x7, 0x6, 0xfffffffffffffff9]}, &(0x7f0000008000)=0x108) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000008000)={r2, 0x7, 0x7, 0x1}, &(0x7f0000009000)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000008000)={r1, 0x7, 0x9, 0x6, 0x3, 0x9, 0x5, 0x5, {r2, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0xea6, 0x7f, 0x200, 0x10001}}, &(0x7f0000009000-0x4)=0xb8) getdents(r0, &(0x7f0000001000)="", 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f000000b000-0x10)={0xce, &(0x7f0000007000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) mkdirat(r0, &(0x7f0000007000)="2e2f66696c653000", 0x4) 2017/12/14 11:57:40 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={r3, 0x0, 0x0, 0x0}) close(r1) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000d000)="2f6465762f73657175656e63657200", 0x2, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r4, &(0x7f0000008000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f000000e000-0x4)=0xc) syz_open_dev$binder(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) sendto$inet6(r4, &(0x7f0000006000-0xb6)="4b88d673855c889fe9682e72d845f244a3af3b6fffaca86d1f1400cd9b00fa93862ba4f7950acce2270b5b31232515cd8c7ea179b0fc983ae6d9ab9470238d522ecf4a104e16b326af95c66c52be9e67f767219b77d243f35f543836883c8077b64700611f92e98e25fe328f8cfe996efa71fbbe695789c49448b3464e06029fb9997ce30fe3bddd9ad9c81417365cb3bf895b300a6ad4ee531dec1cd6da6775e42c3a37c888da6f98caf3903940159ba7942b5ae8d0", 0xb6, 0x0, &(0x7f0000005000)={0xa, 0x1, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffff8}, 0x1c) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x48, 0x0, &(0x7f000000d000-0x48)=[@exit_looper={0x630d}, @enter_looper={0x630c}, @exit_looper={0x630d}, @clear_death={0x400c630f, 0x1, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper={0x630c}, @acquire={0x40046305, 0x3}], 0xbb, 0x0, &(0x7f000000c000)="4159895b9255b3da0e1c8567855c4b1c4e0a5a2b22e6bff2176876e964fc93dd16637121620869d06bf6c2680f4aae385511e95c35b730456f95d3b55b3078d9dd6e57b9c94310dca3e10d673b28128a58605d3fce740c8989ab206c1554b4cee74945aab000baa489a9a77aafc058751ae981e17bcd76de3feda92594095e7fda5d45f492c866c269df283e96ec820142f84f1ea4b9c249479285c85d5c8272a0af4607f6d7f9c6f02419f2efb0cac57a98a16c9561103e008cf3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) 2017/12/14 11:57:40 executing program 2: set_thread_area(&(0x7f0000a87000-0x10)={0x0, 0x1000, 0x400, 0x80000000, 0x0, 0xffffffffffffffe0, 0x36, 0xfffffffffffffff8, 0x2e, 0xfffffffffffffffb}) [ 84.789469] binder: 9995:10003 ioctl 660c 800000 returned -22 [ 84.800058] binder: 9991:10007 ioctl 40046205 6 returned -22 [ 84.809152] binder: 9995:10009 ioctl 660c 800000 returned -22 [ 84.815124] binder: BINDER_SET_CONTEXT_MGR already set [ 84.820395] binder: 9991:9992 ioctl 40046207 0 returned -16 2017/12/14 11:57:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f000073a000-0x4)=0x2, 0x4) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0x0, 0x0}, 0xc) socket$inet6(0xa, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00007c8000-0xc)="2f6465762f6175746f667300", 0x82000, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f000063a000)=0x21430330, &(0x7f00003e0000-0x4)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f000072c000)=0x80, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000000)="51", 0x1, 0xfffffffffffffffc, &(0x7f0000789000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/14 11:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000840000-0x11)="636d646c696e6500") preadv(r0, &(0x7f00007ce000-0x20)=[{&(0x7f0000986000-0x35)="00", 0x1}], 0x1, 0x400000002) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000f09000)={0x0, 0x5}, &(0x7f0000501000-0x4)=0x8) modify_ldt$write2(0x11, &(0x7f0000be1000)={0x8, 0x20000800, 0x7400, 0x200, 0x6, 0x28ff, 0x1, 0x3, 0x3, 0x10000}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000070000-0xa0)={r1, @in6={{0xa, 0x0, 0x16cc6000, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x400, 0x5, 0x9, 0x1, 0x1e}, &(0x7f00008fc000)=0xa0) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) linkat(r0, &(0x7f0000f41000)="2e2f66696c653000", r0, &(0x7f0000d94000-0x8)="2e2f66696c653000", 0x400) fcntl$setflags(r0, 0x2, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000027b000)={0x1, 0x7, [@random="1a411bdf356c", @random="496602cf434c", @random="700e3fabf3a1", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}]}) get_thread_area(&(0x7f0000111000-0x10)={0xff, 0xffffffff, 0x2000, 0x2, 0x3, 0x9, 0x7fffffff, 0x7f, 0x70d3cb4a, 0x800}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000e58000-0x8)={r1, 0x2}, &(0x7f0000e03000)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000409000-0x1c)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000b49000)=0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000d1f000)={0x9, 0x2, {0xffffffffffffffff, 0x3, 0x9, 0x2, 0x3f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000c7000-0x15)={r1, 0xd, "bdee83c8a5eab2fcf4c2495f35"}, &(0x7f000040c000)=0x15) 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x8, 0x0, &(0x7f00004ec000)=[@decrefs={0x40046307, 0x2}], 0xda, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480675c6ff71dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480802) close(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syncfs(r0) close(r0) poll(&(0x7f000010f000-0x20)=[{r0, 0x44, 0x0}, {r0, 0x42d6, 0x0}, {r0, 0x8, 0x0}, {r0, 0x200, 0x0}], 0x4, 0x6) 2017/12/14 11:57:40 executing program 7: mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x8006, 0x6032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x7, 0xcf, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f0000003000-0x28)={@common="62707130000000000000000000000000", @ifru_ivalue=0x1000}) r1 = syz_open_dev$binder(&(0x7f0000841000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x40) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000005000-0x18)={0x4e, 0x0, 0x0, 0x0}) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00001a0000-0x11)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000005000)={0x5, 0xfffffffffffffffe, 0x1f, 0x9}) mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:40 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000003000-0x15)=@known="636f6d2e6170706c652e46696e646572496e666f00") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000c50000)={0x0, {"00000000000000"}, 0x0}, &(0x7f00006a9000-0x4)=0x10, 0x80000) fdatasync(r0) syz_open_dev$usbmon(&(0x7f00002b1000-0xd)="2f6465762f7573626d6f6e2300", 0x7, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = accept$packet(r1, &(0x7f00007fd000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000480000)=0x14) recvmsg(r2, &(0x7f0000774000-0x38)={&(0x7f000049c000-0x8)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f000088a000-0x50)=[{&(0x7f0000de8000-0x73)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x73}, {&(0x7f00007b7000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4}, {&(0x7f00008bf000-0xc7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc7}, {&(0x7f00002a4000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf5}, {&(0x7f0000b44000-0x1a)="0000000000000000000000000000000000000000000000000000", 0x1a}], 0x5, &(0x7f0000d10000-0x14)="0000000000000000000000000000000000000000", 0x14, 0x7}, 0x40010000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f6, &(0x7f0000f91000)={@common="73697430000000000000000000000000", @ifru_ivalue=0xb0}) sync_file_range(r3, 0x7fffffff, 0x0, 0x1) [ 84.842575] binder: 10019:10022 Acquire 1 refcount change on invalid ref 0 ret -22 [ 84.853023] binder: 10019:10022 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 84.870110] binder: 10019:10022 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2017/12/14 11:57:40 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000646000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0c0583b, 0x20400006) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000001000-0x1c)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f00003b3000)=0x1c) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000594000-0x8)=0x0, &(0x7f00007e3000-0x4)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000c5b000-0x4)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00007b6000-0xd)="6e65742f72745f636163686500") fcntl$setflags(r2, 0x2, 0x1) preadv(r2, &(0x7f000032c000-0x40)=[{&(0x7f0000d50000-0x1)="00", 0x1}], 0x1, 0x102) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000c1e000-0x4)=0x0, &(0x7f00000fd000-0x4)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00005ab000)={@generic="5f867da3dee2d04c9132b70330c1ccdb", @ifru_flags=0x1000}) connect$ipx(r2, &(0x7f0000ce3000-0x10)={0x4, 0x80000001, 0xfffffffffffffffa, "9a256e76ebf1", 0x9, 0x0}, 0x10) 2017/12/14 11:57:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002b6000-0x10)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000a0d000-0x20)={0xfffffffffffffffb, 0x0, 0x1, 0x7fffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000fa7000-0x20)={0x10000, r1, 0x10001, 0xfff}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000c0d000)={0x2, 0x200}) r2 = socket$inet6(0xa, 0x1, 0x20000000000) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x30000000000008, &(0x7f0000670000-0x4)=0x3fb, 0x4) bind$inet6(r2, &(0x7f0000524000-0x1c)={0xa, 0x0, 0xfffffffffffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000f62000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001000)=0x9, 0x4) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000925000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000d1b000+0x252)=0x48) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000d1e000-0x160)={{{{0x2, 0x3, @rand_addr=0x27, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x1000, 0x6, 0x4, "7f56b22a2237ff2392e04121b7d9ec8a85d84f9a5f2d63b223796e1327f1ef0154558d0317016c820c10e7d8ee5cf31170f5ce05edb807975b0c30270323ec391a87de9a6f0395cbdf748e05655572b9"}, 0x160) [ 84.889218] binder: 10019:10022 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 84.911159] binder: 10032:10043 ioctl 40286608 480802 returned -22 [ 84.913176] binder: 10019:10022 Release 1 refcount change on invalid ref 4 ret -22 [ 84.913180] binder: 10019:10022 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 84.913184] binder: 10019:10022 Acquire 1 refcount change on invalid ref 3 ret -22 2017/12/14 11:57:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001000-0x88)={0x939, {{0xa, 0x1, 0x10001, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) pipe(&(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000002000-0x8)={r3, 0x3}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x100000000}, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000002000)=0x1008) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000002000-0x6)={r4, 0x6}, &(0x7f0000000000)=0x6) socket(0x11, 0x6, 0x0) 2017/12/14 11:57:40 executing program 7: mmap(&(0x7f0000000000/0xd30000)=nil, 0xd30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5d) syz_open_dev$binder(&(0x7f0000004000-0xa)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cba000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x802) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d24000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000a4a000-0xd)=[@acquire_done={0x40106309, 0x0, 0x3}], 0x3, 0x0, &(0x7f0000d31000-0x3)="bdd3b9"}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000d10000-0xc)="2f6465762f6175746f667300", 0x101000, 0x0) mmap(&(0x7f0000d31000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f0000d31000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000362000-0x4)=0x14) linkat(r2, &(0x7f0000522000-0x8)="2e2f66696c653000", r2, &(0x7f0000554000)="2e2f66696c653000", 0x1000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f000093f000-0x50)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1, 0x40, 0x91b3, 0x500, 0x40, 0x2, r3}) mmap(&(0x7f0000d32000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000d33000-0x8)={0x7, 0x2, 0x401, 0xd6}, 0x8) mmap(&(0x7f0000d31000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000d31000)={{0x80, 0x6}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x14, 0x40000, 0x6b, 0x2f32, 0x9, 0x8000, 0x1, 0x0, 0x1, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000d33000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000ceb000-0x10)={0x0, 0x0}) mmap(&(0x7f0000d33000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r4, &(0x7f0000d33000)="e3", 0x1, 0x3, &(0x7f0000d34000-0x10)={r5, r6+30000000}) close(r1) 2017/12/14 11:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) pipe(&(0x7f00007ed000)={0x0, 0x0}) r3 = add_key$user(&(0x7f0000bcb000)="7573657200", &(0x7f000079c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f000090b000-0x36)="4791ac9e28b03ee256f80ec9b30578c2b20b1ed3624eed54e33bfdffdc58dff194069bebe5e7f3b616f82ad2d3b088f655120ea4b961", 0x36, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000d58000)="69645f6c656761637900", &(0x7f0000908000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000218000-0x1)="00", 0xfffffffffffffffd) r5 = request_key(&(0x7f0000d1f000-0x6)="2e6465616400", &(0x7f000018d000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f15000-0x14)="5e73656c696e75782f2a2d216367726f75705d00", 0xfffffffffffffffa) setns(r0, 0xc000000) keyctl$dh_compute(0x17, &(0x7f0000824000)={r3, r4, r5}, &(0x7f0000226000-0x3f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3f, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000e58000-0x38)={&(0x7f0000161000)={0x27, 0xffffffffffffffff, 0x0, 0x7, 0x6, 0x7, "2fda4b2e08b5b38544fc2b96e6bb4d45315a39b9373502f57bea96449c10b5d4f83ffdf59ee7902c1c51457a55c73e8c42d3d9f2b8276f100d03a922144976", 0xfffffffffffeffff}, 0x60, &(0x7f0000459000-0x50)=[{&(0x7f0000260000-0xc3)="d928f49b9e0808052a34b4a4957aae75925707a9900f75896ff4e72e5bfafedba990f4a9f9bc6a33fad2c8fcd43c068e446b5ea32a8d0917739d98b274e60bb74504a9e3b0baa31ac4974bab360baaf57ac44c58e467c3a7caa32f59151ad689098600854cd99cf138c9f54707ea751509629cd8eb12d0bb20e9dedcab28cbdd31fe86a0a15ff6a64a139c47c95875ec8f3afaeb9a39d1a8eb8372c34bb3e5e9686bd78e081eaf85fc7d29a208171c87de88c51a76e631b4995ffd686044e0cce0eb7d", 0xc3}, {&(0x7f0000595000)="bf599dee32f4424462b1f4300f29a9368ca87e4010e5c69a52cd409aaa3334eabe31d66021b8a12753157603264ce6cd8015f0fb5c595e7e43e2f1833d1ed03a24d883eb42f0ee410bcc8912993ffd0fe28cc420deacb265e45649b8895c53c4b4a69ef6a7302e5b3925a757fbcad896097b9d43e6de34c0f75b961a90a6b834a7b0292274984e14206037bd40f1ebac7035745c75ed00ee888dff5e5c2a75b2e97691a7036fbac50685ddde2ccb31f8d3b4da2efba18c0d34357089730925cd2e8d983d97a146b265949ac25a60a77fafe552", 0xd3}, {&(0x7f0000bd2000-0xc6)="dc22c9e26b3f16a3c2dbe6246acd6f53a6a26640eb19caa4bedac0db1c29d2901ca5076bca1593d648878a3e7c6c6977008581515a39057bbda236c7186765ff630e7cccc014ca8b76bd8587b2b25a9915ac5772c770e11f13976f1e63284cb4ca791400ec74f74f46d6f5ebb9c5160a23319b215d894cd8efd75dc8e76d87d4fc5811bb6dd3f83544e582400b74f04f76992a42f78751f1ab45d3bb47edab832378b1ea2ad5bd91be788bab469001480a6edfe08358a4bb0a879497d437717609bbff40c545", 0xc6}, {&(0x7f0000285000-0xee)="0aeb7f58f5321d0fd3e59a6a9918d18ca5df194abaaf7f994860c503c0cf88173589e5f76cd75ffe928a7cc366e1027e484ee64b5b4945556674243ecb5a1c5ef9dc1dce13350630a5120ab9d21bf101fbf4d6f5532bef40dddc51939a05e2ab513233352df4911a3b86357cb52533b20a5a9d68fda026e14800831917056b8f3c04f6a0f94fa9b69d68004dfd3908396c9b1ac671a3b476214c6c5f49b59f873beb06d479e5f0fa32a10d574caf3639cc85a50287f57214be655d0b318dc690bd2ab2ea86f18920e5160984ddc3259226d10e431cb633d5752c71102282a6f474e914ff99997cd83611a23ea6af", 0xee}, {&(0x7f0000da7000)="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", 0x1000}], 0x5, 0x0, 0x0, 0x8000}, 0x40) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000c53000-0x10)={0x5, 0x8, 0x3ff, 0x9}, 0x10) sendto$inet6(r0, &(0x7f0000d46000)="", 0x0, 0xfffffefffffffffe, &(0x7f000039f000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2017/12/14 11:57:40 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000ab6000-0xd)="2f6465762f7573626d6f6e2300", 0x8, 0xa0000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x14) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x10000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xdba, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002000-0x20)={0x5c, 0x2, 0x1, 0x9, 0x96, 0x1, 0x7ff, 0x0, r1}, 0x20) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002000-0x12)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x40000, 0x0) r3 = dup(r0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002000)="2f73656c696e75782f636865636b72657170726f7400", 0x2000, 0x0) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) getpgid(r5) epoll_create1(0x80000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={r1, @in6={{0xa, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfffffffffffff348}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000003000)=0x8c) chroot(&(0x7f0000003000)="2e2f66696c653000") getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000003000-0x70)={r6, 0x68, "d810db251acf75a21e259c31407a9f6e88ec9aa897df78ec27a8deba12600a54f1ce76739f40943c159f20a00bced75704b8f25a9c90cf428d1cfc7eab6e27efcadd22a125edb97ead4df5d1ceab9113de849c535dc83c5ea9179af8c35ff0552bad2ebc2b991a14"}, &(0x7f0000001000)=0x70) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000004000)={0x80000001, 0x9, 0x5}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000006000-0xc)={0x2, 0x4a79, 0x9, 0x4, 0x218bee25, 0x2}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000007000-0x8)=@assoc_value={r7, 0x3}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ipx(r4, &(0x7f0000007000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000002000)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000005000-0x38)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}], 0x38) syz_open_procfs(r5, &(0x7f0000003000)="73657467726f75707300") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000008000)=@req3={0x8, 0x0, 0x2, 0x7, 0x5, 0x1ff, 0x3ff}, 0x1c) 2017/12/14 11:57:40 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f000037d000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x200, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000002000-0x50)={{0x3, 0x3, 0x4, 0x3, 0x3}, 0x9, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003000-0xf)="2f6465762f73657175656e63657200", 0x20400, 0x0) fcntl$setpipe(r0, 0x407, 0x6) r4 = getpid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000004000-0x6)="736d61707300") syncfs(r3) fcntl$F_SET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000002000)=0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000005000-0x8)={0x20080522, r4}, &(0x7f0000004000)={0x4, 0xfffffffffffffffc, 0x7, 0x0, 0x100000000, 0x8}) read(r3, &(0x7f0000002000-0xf2)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf2) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000006000-0x6)={0x0, 0xfffffffffffffff9}, &(0x7f0000004000)=0x6) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000006000-0x8c)={r6, @in6={{0xa, 0x3, 0x1000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000005000)=0x8c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004000-0x11)="2f6465762f7667615f6172626974657200", 0x800, 0x0) delete_module(&(0x7f0000003000)="766d6e65743100", 0x800) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000007000-0x8)={0x0, 0x0}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000007000)={&(0x7f0000006000-0x10)=@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000007000)=[{&(0x7f0000002000)="6f2757cec5e2e7fd2c7fe6a0548aba829b9b7a", 0x13}], 0x1, &(0x7f0000004000-0x90)=[@init={0x18, 0x84, 0x0, {0x1, 0x7fff, 0x0, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x1, 0x5, 0x9, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x3, 0x8000, 0xfffffffffffffff9, 0x2, 0x1, 0x8, 0x0, r7}}], 0x90, 0x0}, 0x0) [ 84.929721] binder: 10019:10049 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 84.929737] binder: 10019:10049 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 84.929755] binder: 10019:10049 Release 1 refcount change on invalid ref 4 ret -22 [ 84.929759] binder: 10019:10049 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 84.929763] binder: 10019:10049 Acquire 1 refcount change on invalid ref 3 ret -22 [ 84.929806] binder: BINDER_SET_CONTEXT_MGR already set [ 84.929809] binder: 10019:10042 ioctl 40046207 0 returned -16 2017/12/14 11:57:40 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={r1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40d, &(0x7f000000a000)=0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f73656c696e75782f61636365737300", 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000006000)={&(0x7f0000002000/0x4000)=nil, 0x4000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000023e000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006cc000)={0x0, 0x0, &(0x7f0000548000-0x2c)=[], 0x1000, 0x0, &(0x7f0000086000)="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"}) r1 = syz_open_dev$binder(&(0x7f000077c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000077b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x812, r2, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000369000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) r3 = syz_open_dev$binder(&(0x7f000077a000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000077a000)={0x7, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x6) mmap(&(0x7f0000776000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000f65000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x136) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) 2017/12/14 11:57:40 executing program 6: mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x8006, 0x6032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000841000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x40) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000005000)="aa1aca24f25d71099c920bb7f3b88c9289723f8447a30acba6381ab74a250c77224564d46add6d3ce72cda88f5a7e2089bad88d56d50523d5e8db916895affe4f999ca2e369b76530eefefd9cb46b7ce68bd8e92e7c3af4b966e7cbf42693358c535a64f3a7d066764dc788f60ce010e7c49cdea7d1a21706197ba33834fb4e35be278a2131fb303c8612cb8cf2268b1ea", 0x91, 0x49) rmdir(&(0x7f0000004000)="2e2f66696c653000") r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000006000)="2f73656c696e75782f6d656d62657200", 0x2, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000006000)=0x1ff) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x400031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000005000-0x18)={0x4e, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 85.002851] binder: 10074:10077 ioctl 40046205 5d returned -22 [ 85.032348] binder: BINDER_SET_CONTEXT_MGR already set [ 85.033279] binder: 10084:10087 ioctl 40046205 6 returned -22 [ 85.035244] binder: 10084:10087 Acquire 1 refcount change on invalid ref 0 ret -22 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f00004eb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f00004eb000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff16) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000001000)=@known="73797374656d2e706f7369785f61636c5f64656661756c7400", &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5c) syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x802) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00004eb000)="2f6465762f72666b696c6c00", 0x10000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001000-0x10)={0x4, &(0x7f0000000000)=[{0x3e6f2494, 0x7, 0x7, 0xfffffffffffffffe}, {0x8, 0xfffffffffffffff8, 0xbbdb, 0x8}, {0x44a6158e, 0x70c, 0x6, 0x9}, {0x9, 0x101, 0xa2, 0x45368e4}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc028660f, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000002000)="2f73656c696e75782f7573657200", 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000003000-0x10)=[{r1, 0x200, 0x0}, {r0, 0x2405, 0x0}], 0x2, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2017/12/14 11:57:40 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000000000)="2f6465762f72616e646f6d00", 0x0, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) r2 = dup2(r0, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000002000-0xc)={0x40, 0x1, 0x1e4b8a39, 0x7, 0x85f, 0x8000}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000002000-0x4)=r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x960f, 0x40, &(0x7f0000002000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000002000)=0xb3) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000004000-0x4)=0x0) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x4) pread64(r0, &(0x7f0000002000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40d, &(0x7f0000003000-0x8)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000003000)={0x0, 0x0}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001000)={r3, @in={{0x2, 0x1, @rand_addr=0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffd8, 0x4}, 0x98) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000)=0xe8) sendto$packet(r2, &(0x7f0000004000)="b263748d350ea94682eae1eb15b0d02543771190d104e63af210a9c374bc2a2b30cb03b97c08b49766d5588dace1cb7c0ab2e11a041d93760712fc117c4cf618e52afc926bdc96d7a6b880a1b44fb982e71e025c52a5b3f579961eb1172a10cedf03ea742506df6fec09047674ec44a6bac6ca9af3c6b440af6749c7a3e8956d9d3234d4bc37c827a815a796143cf04086fa860560314b55f7055c722e80df650d3165034e1be65a6a0398e5fca3d17ca30b6755bc1899776a571e6eb4533b585811ef7edf18159cd6", 0xc9, 0x8080, &(0x7f0000003000)={0x11, 0x1e, r4, 0x1, 0x2, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) getsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000002000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x96) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000004000)=0x2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0xfffffffffffff3f6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000005000-0x4)=0x0, &(0x7f0000003000)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000004000-0x8c)={r3, @in6={{0xa, 0x0, 0xcbd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x10000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000006000-0x4)=0x8c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(r1, &(0x7f0000006000+0x37b)={0x30, 0x5, 0x1, 0x1, 0x8, 0x9, 0xb, 0x74ae6710}, 0x0) [ 85.035260] binder: 10084:10087 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 85.035300] binder: 10084:10087 ioctl 40046205 136 returned -22 [ 85.036603] binder: 10074:10091 ioctl 4020940d 20001000 returned -22 [ 85.047850] binder_alloc: binder_alloc_mmap_handler: 10084 20005000-20009000 already mapped failed -16 [ 85.059841] binder: 10084:10094 ioctl 40046205 6 returned -22 [ 85.062861] binder_alloc: binder_alloc_mmap_handler: 10084 20f65000-20f68000 already mapped failed -16 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)="6d61705f66696c657300") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000009000-0x4)={0x0}, &(0x7f0000009000-0x4)=0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000008000)=0x8, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x8, 0x6, 0x1000}, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000004000-0x4)=r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000006000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000007000-0x4)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000007000)={0x10000, 0x1000, 0x5, 0x9, 0x1000, 0x1, 0x2, 0x9, r1}, &(0x7f0000003000-0x4)=0x20) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000003000)={0x5, 0x1ff, 0x3, 0x3, 0xbc5}) execveat(r0, &(0x7f0000009000-0x8)="2e2f66696c653000", &(0x7f0000008000)=[&(0x7f0000009000-0xa)="6d61705f66696c657300", &(0x7f0000009000-0xa)="6d61705f66696c657300", &(0x7f0000009000-0x1)="00", &(0x7f0000008000)="6d61705f66696c657300", &(0x7f0000003000)="6d61705f66696c657300", &(0x7f0000008000)="6d61705f66696c657300"], &(0x7f0000005000)=[&(0x7f0000008000)="4000", &(0x7f0000004000)="6d61705f66696c657300"], 0x1000) openat(r0, &(0x7f0000001000)="2e2f66696c653000", 0x0, 0x0) 2017/12/14 11:57:40 executing program 3: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000844000)="2f6465762f70746d7800", 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f0000898000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x5, 0x80000000, 0xfffffffffffffffd, 0x965}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fe7000-0x4)=0x3) 2017/12/14 11:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgid(0x0) socketpair$inet6(0xa, 0xa, 0x8, &(0x7f0000168000)={0x0, 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000c38000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f000036f000-0x4)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000adb000-0xc)={0x0, 0x0, 0x0}, &(0x7f00000ed000-0x4)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000551000)={{{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x0, 0x8, 0x0, 0x0, 0x1b, 0x0, 0x20, 0x778, r1, r2}, {0x8, 0x80, 0xff, 0xffffffff, 0x432, 0x70, 0x3, 0x5}, {0x1, 0x4, 0x1, 0x401}, 0x0, 0x6, 0x1, 0x1, 0x11, 0x2}, {{@in=@empty=0x0, 0x9, 0x4}, 0x9, @in=@multicast1=0xe0000001, 0x7, 0x3, 0x0, 0x9a9, 0x6, 0x101, 0x5}}, 0xe8) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000c7e000)="7374617400") preadv(r4, &(0x7f000032c000-0x40)=[{&(0x7f0000363000)="00", 0x1}], 0x1, 0x2) ptrace$setopts(0x4200, r3, 0x1, 0x4) [ 85.066004] binder: 10084:10094 Acquire 1 refcount change on invalid ref 0 ret -22 [ 85.066019] binder: 10084:10094 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 85.067277] binder: 10084:10087 ioctl 40046205 136 returned -22 [ 85.108301] binder: 10074:10091 ioctl 4020940d 20001000 returned -22 [ 85.126506] binder: 10074:10102 ioctl 40046205 5d returned -22 [ 85.133022] binder: 10083:10113 got reply transaction with no transaction stack [ 85.133076] binder: 10083:10100 unknown command 1816046399 [ 85.133081] binder: 10083:10100 ioctl c0306201 20008fd0 returned -22 2017/12/14 11:57:40 executing program 7: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000307000)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f00003cb000)="2f6465762f73672300", 0x40ef, 0x8000) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00004ee000-0x8)={0xaf, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f00002ea000)="2e2f66696c653000", 0x404000, 0x98) setsockopt$inet_tcp_buf(r2, 0x6, 0x16, &(0x7f0000154000)="eca48d6381d76baadc770aea9b25a84e8f22d26ceaa0278e46b48ec4a90dd29848b2db398a90912e7ac15d58f5910765d52519451a0836a2b1e5720841aa3643fed9c87f58cfa5ad611401783a37451d6c89564972a8638cdb700b9ff2373045c68121e2ea6366ab22b0e9c2948e933d9888f9166448ab203bcb0f8ff8fd6d3c0d41ff0b075e4d7e8f7695e6bce1c2ee302953019d2b40b39011666c8b61471809f85216ed53346776b339b93c1d382541af222b10178a50bce21ca1", 0xbc) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000298000-0x10)=@req={0x1ff, 0x3ff, 0xe83, 0x217b}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00002d0000-0x7)="2f6465762f6877726e6700", 0x42080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00004ed000)={0xdb9, 0x5, 0x8, 0x48000000, 0x88}, 0x14) getsockname$llc(r2, &(0x7f00002e2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000075000)=0x10) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0185879, 0x400008) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00004ee000)=0x5, 0x4) r4 = gettid() sched_getaffinity(r4, 0x8, &(0x7f00001d3000)=0x0) 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000209000-0x15)="2f70726f632f73656c662f6e65742f70666b657900", 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00001c0000)="0000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x0, 0x0, &(0x7f00004ec000)=[], 0xd9, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480676ff11dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480802) close(r1) r2 = syz_open_dev$binder(&(0x7f00004bc000)="2f6465762f62696e6465722300", 0x0, 0x805) openat$selinux_load(0xffffffffffffff9c, &(0x7f00004a0000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r0) r3 = dup3(r0, r2, 0x80000) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000418000-0x4)=0x6) poll(&(0x7f000010f000-0x20)=[{r0, 0x44, 0x0}, {r0, 0x42d6, 0x0}, {r0, 0x8, 0x0}, {r0, 0x200, 0x0}], 0x4, 0x6) 2017/12/14 11:57:40 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x7fc) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x10, 0x0, &(0x7f0000001000-0x10)=[@acquire={0x40106308, 0x0}, @release={0x40046306, 0x3}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/14 11:57:40 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={r1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) [ 85.144389] binder_alloc: 10083: binder_alloc_buf size 536879104 failed, no address space [ 85.144392] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 85.144424] binder: 10083:10104 transaction failed 29201/-28, size 0-536879104 line 3131 [ 85.144443] binder: 10083:10086 ioctl 40046207 0 returned -16 [ 85.172736] binder: 10119:10120 ioctl c0185879 400008 returned -22 [ 85.192162] binder: BINDER_SET_CONTEXT_MGR already set [ 85.195370] binder: 10123:10124 ioctl 40046205 2 returned -22 2017/12/14 11:57:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f2d000)="2f6465762f72746300", 0x8000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000553000)=0x0) r2 = perf_event_open(&(0x7f0000940000)={0x4, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10000000000000fc, &(0x7f0000c13000-0x2)="20a0", &(0x7f0000a3d000-0x4)=0x0, &(0x7f000092c000)=0x0, &(0x7f0000000000)="33") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000aa7000-0x5)="2f6465762f70707000", 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000989000-0x4)=0xbb, 0x4) r4 = accept$netrom(r3, &(0x7f0000d61000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f00000fe000-0x4)=0x48) gettid() perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000006000-0x4)=0x91) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000c69000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000", 0xe000, r6, r7, 0x2, 0x7fff, 0x408) r8 = dup3(r3, r4, 0x7fffe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r8, &(0x7f0000001000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000003000-0x4)=0x60) llistxattr(&(0x7f0000e95000)="2e2f66696c653000", &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) utimes(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000000000)={{0x0, 0x0}, {0x77359400, 0x0}}) pivot_root(&(0x7f0000f1a000)="2e2f66696c653000", &(0x7f0000414000-0x8)="2e2f66696c653000") mmap(&(0x7f0000666000/0x2000)=nil, 0x2000, 0x3, 0x34, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x320000)=nil, 0x320000, 0x0, 0x32, r2, 0xfffffffffffffffa) r9 = socket(0x10, 0x802, 0x0) dup2(r9, r9) 2017/12/14 11:57:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00004ab000-0x4)=0x8) fcntl$addseals(r0, 0x409, 0xa) pause() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000-0x9)="2f6465762f73672300", 0x4, 0x50000) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 85.196503] binder: 10123:10124 ioctl 40286608 480802 returned -22 [ 85.199638] binder: 10083:10113 transaction failed 29201/-71, size 0-0 line 2924 [ 85.224994] binder: 10083:10086 ioctl 40046207 0 returned -16 [ 85.225028] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.226454] binder: 10083:10100 ERROR: BC_REGISTER_LOOPER called without request [ 85.227794] binder_alloc: 10083: binder_alloc_buf size 536879104 failed, no address space 2017/12/14 11:57:40 executing program 4: mmap(&(0x7f0000000000/0x69000)=nil, 0x69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000065000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000048000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000067000-0x4)=0xc) mmap(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f000006a000-0x8)=0x86b2) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000006b000-0xc)={r2, r3, r4}, 0xc) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000034000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r0, 0x0, 0xdd2d, 0xc) poll(&(0x7f0000001000-0x28)=[{r5, 0x4, 0x0}, {r0, 0x8010, 0x0}, {r5, 0x6104, 0x0}, {r1, 0x4008, 0x0}, {r5, 0x2000, 0x0}], 0x5, 0x227) epoll_create1(0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000017000-0xc)={0x18, 0x0}) r7 = dup2(r0, r0) fcntl$setpipe(r6, 0x407, 0x0) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f000000b000)=[{&(0x7f000006a000)="6ce700", 0x3}, {&(0x7f0000067000-0x1000)="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", 0x1000}], 0x2) mmap(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r5, &(0x7f000006c000-0x3e)="02e112f50ec7a40ba62779b1bb33b89c8b5d9d3ea5ac5664669360fc97e01a350ff003bff50cd3a7298c6e435f276b88e82a602445957d17672a42ef8094", 0x3e, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000006c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f000005a000)={{{@in=@empty=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000069000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f000003d000-0xe8)={{{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x2, 0xeaf, 0x0, 0x5, 0xd, 0xa0, 0x80, 0x5, r8, r3}, {0x4, 0x6, 0x80000000, 0x0, 0x7ff, 0x702b, 0xf5, 0x6}, {0x5, 0x6, 0x7f, 0x2}, 0xfff, 0xfffffffffffffff8, 0x101, 0x0, 0x28, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x3, 0x0}, 0x13, @in6=@loopback={0x0, 0x1}, 0x9, 0x0, 0x0, 0x6, 0x7, 0x6, 0x4}}, 0xe8) read(r5, &(0x7f000005f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xaf) 2017/12/14 11:57:40 executing program 0: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000003000-0x18)={0xff, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000aac000-0x10)={0x4, &(0x7f00006c0000)=[{0x7fffffff, 0x8, 0x6db, 0x3}, {0xfffffffffffffffa, 0x3c, 0x1000, 0x8}, {0x100000000, 0x5, 0x6, 0x5}, {0xcdb, 0xffffffffffffffb9, 0x7, 0x100000001}]}) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x958000)=nil, 0x958000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000003000-0x10)=[{0xffffffffffffffff, 0x4000, 0x0}, {0xffffffffffffffff, 0x40, 0x0}], 0x2, 0x20) mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 85.227797] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 85.227828] binder: 10083:10104 transaction failed 29201/-28, size 0-536879104 line 3131 [ 85.231173] binder: BINDER_SET_CONTEXT_MGR already set [ 85.231177] binder: 10126:10137 ioctl 40046207 0 returned -16 [ 85.231855] binder: 10126:10137 ERROR: BC_REGISTER_LOOPER called without request [ 85.276850] audit: type=1326 audit(1513252660.868:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10149 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x0 [ 85.282174] binder: 10126:10156 ioctl c0306201 2000afd0 returned -14 [ 85.286663] binder: 10126:10146 transaction failed 29201/-22, size 0--1 line 3131 [ 85.299578] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.304637] binder: BINDER_SET_CONTEXT_MGR already set [ 85.304643] binder: 10126:10146 ioctl 40046207 0 returned -16 [ 85.305781] binder: 10126:10137 ERROR: BC_REGISTER_LOOPER called without request [ 85.305850] binder_alloc: 10126: binder_alloc_buf, no vma [ 85.305880] binder: 10126:10146 transaction failed 29189/-3, size 0-0 line 3131 [ 85.307215] binder: 10126:10156 ioctl c0306201 2000afd0 returned -14 [ 85.318770] binder: undelivered TRANSACTION_ERROR: 29189 [ 85.357932] audit: type=1326 audit(1513252660.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10149 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x0 2017/12/14 11:57:41 executing program 5: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0c0583b, 0x20400006) r1 = socket$inet(0x2, 0x5, 0x1) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000244000-0x10)={0x0, 0x8207, 0x81, 0x7, 0x0}, &(0x7f00004ec000)=0x10) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00004ed000-0x10)={r2, 0x2c, &(0x7f00004ec000)=[@in={0x2, 0x1, @rand_addr=0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xffffffff, @loopback={0x0, 0x1}, 0x9}]}, &(0x7f000017f000)=0x10) 2017/12/14 11:57:41 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f6175746f667300", 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000002000)={{r1, r2+30000000}, {r3, r4+30000000}}, &(0x7f0000005000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000005000-0xbd)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f0000004000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf6}], 0x2, &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x83, 0x4}, 0x6}, {{&(0x7f0000000000)=@un=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x44, &(0x7f0000005000)=[{&(0x7f0000001000-0x32)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x32}, {&(0x7f0000003000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000005000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x59}], 0x3, &(0x7f0000005000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd2, 0x7fffffff}, 0x7f}, {{&(0x7f0000000000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000007000-0x40)=[{&(0x7f0000005000-0xc1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1}, {&(0x7f0000006000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x35}, {&(0x7f0000004000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000005000)="000000000000000000000000000000000000000000000000000000000000000000", 0x21}], 0x4, &(0x7f0000007000-0x5e)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5e, 0x8}, 0xac}, {{&(0x7f0000007000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000004000-0x60)=[{&(0x7f0000007000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2f}, {&(0x7f0000008000-0xc8)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8}, {&(0x7f0000001000-0xcf)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf}, {&(0x7f0000007000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6e}, {&(0x7f0000005000-0xa)="00000000000000000000", 0xa}, {&(0x7f0000008000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9}], 0x6, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa7, 0x400}, 0x7fffffff}], 0x4, 0x40000042, &(0x7f0000001000-0x10)={0x77359400, r5}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0xfffffffffffffff7, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f000055e000-0x8)="2e2f66696c653000", 0x48) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000707000-0x4e)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00009b9000-0x4)=0x0) ioctl$TTUNGETFILTER(r6, 0x801054db, &(0x7f00001e8000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r7 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000a02000-0x4)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000bfe000-0xe)="6e65742f7564703600") sysfs$3(0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r8, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0185879, 0x400004) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ed000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000149000)={0xa8, 0x0, &(0x7f0000319000-0xa8)=[@transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x18, &(0x7f00004ed000)=[@ptr={0x70742a85, 0x1, &(0x7f00004ee000-0x1)=0x0, 0x1, 0x0, 0x35}], &(0x7f00004ee000-0x18)=[0x18, 0x30, 0x48]}}, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x20, &(0x7f00004ee000-0x28)=[@ptr={0x70742a85, 0x0, &(0x7f00001f5000)=0x0, 0x1, 0x0, 0x8}], &(0x7f00001be000)=[0x20, 0x48, 0x40, 0x40]}}, @free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x2, 0x3}, @exit_looper={0x630d}], 0x38, 0x0, &(0x7f0000279000)="1cfeb1a68a0b1d84bd393c854d6fc0aabe80c1efdeebe3d1dab8877b0989d62d29b6e273c8cc4e6865b452ec3f3a1a5eb13f1f1a0b1b8bee"}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000026e000)={0x18, 0x0, &(0x7f00004ed000)=[@increfs={0x40046304, 0x2}, @dead_binder_done={0x40086310, 0x0}, @register_looper={0x630b}], 0x1000, 0x0, &(0x7f0000378000)="1c68b06fc476ef9ffe92962111612a81a2991e5e3da2a0d5b0ba2fba2f89a0e38efab152e8c68b5b6b5c8efa6b762ec253efb8cdd61c9a67fa99b581dc8cbb484be48ef6f6d6f9a9d8d058d4e10a23867915d842fef86c05ecc988d14686d9faa86957950d4136f7bf3499efb96a958f3f3054c3726450094d40a2a9f61235ab68ebffe795e2994f732c6e02e66ddc35df0e6b3c46e80373b38a387276030415847adbc7db74a70864f48a9c0ac3a35fd3cc3bb4963b778b82df20b00e49edb751af61b780c19ab336ead09177d419fe01ff3b32c3e8966609ab5fedb8d0fd943b33cba2b4acbdf030fc8d769e68b81ac2c01daa22c722b08a64f914d757693437bd245beabccf47c1440346be4f4df64ccbd1d0d21779753f3db8196f3bd6b96ea402b9fb8bed9f689b0fee60b0100a65ac18076b05b86bb5059de8dae35586b0a111a4fb3a202c2a812505b88158d183b5217388bde3f40b1b72c8798729f1b80b3d995670dc00740bcdb5fc14409e1e864c0b9497d5d789daae41e94081954dcd5bb313e71768543d59154b349924da75ef80336f989d1d9f55140bf06caff9d4e63858f9752787137a55d8a88509fa144ce88c0dc69908c651e9a9e4487bdec003350427d0ef0f7962fdf435047d38ca5ce55907d9f2ca6cad0e531af78b71f1ad7c53827ac474343cd54c7065d142ff17e16843f7969e48bad7b2be4514291cf053cd8d77a9e50e40be630d0e3ce5e541b804695ab41377d77d7927505ab7974946266eb13657c5de7d3d516765880cbcd738b8f516566030710a9b2b6ca177ca1dd23228b9d6e2992b758b32a40cc7f9ab00af04bafe732779587be775393325e6ea785ce187a23c8329a408cc8ad76a7a3bf7458dbba4c6fd3f9df8cf98cfd934d120f3413418d419b81702d485069b31cfae4e11010abe36a2077ce508696be6562c19716d7574371f2f76e6c4d216e430c4ff62f10fe4c1dbb2a22e7351aa5a29c20486cda1b60a533f7387ac3383769955311d2fb12359102ae06c6837b2f2c7f2564c1f396e947c2f50d799dc2ef36556f62e4fada6b3d85085e94c1ec6f355104c5b8a29e4c49a561e18e065d1878f4518f98906bf4f0851c45fec469cc1799e1c919ee4084f519226515af3c90c2fbcd5bae2b7b2974d3be5a39853ae7084f5a92513e3d6cedac2b6ed2dbf21ede5f5e2b21dd0f77182dfbf69613023e367cff6c6ff01bae6c9a57134400b04f8fe63ed9c1f3fbbacbf005d77718d9166052996ae28cb9226ad50a85d7bb1d7443a8a8ca847d201affd0d9eb37697aa966cefda7993270f77b7fbd9009b2adcf4a33a20258c0300edbe49202ff2016b6d550dc5736dbec4e1d61c50c0b4bf5c3ff1ff9a8e607be2a04ad5d4c15507e6975db0bd855b89c76f8daa4ebbe257b7e562609073ec754d7a84e9de49ac801586edda7e7d42ca037f5b5e5a7ffe990652001caa5422db128ea9e2d2fdd8e49bd5ae5f342873eb04b4840ccefd2a492bf6c85391e7fd4cf25b69491e9843076f1d8faa814aef1f8cff07b30d28a2b03517b47b8c486dcdbb898d1fd7e00a1d13ef7b5c9fc8c15e8f5a7e911ca54ea3e8284cc283093ed67f330d1a0029cb8a512a67af9a4562febcf9fe2666e6832d65ca1ffb3fec0e583c9dc2d9bc49d546ceaa776244638be0fd763a2fb1aa7a6f43ab4571a9d9ecbaa168f39f701333c111c66c001ca7c7c9646791c716ab075c7ca7649b9a811733bb037fcfebe9908df32d60e441cea635959bb84da95ac8f139b546acc2bf8f1abf6a760a9057244d3e0e127bd2fee960ac6da9fbcfa31cc364454bec3d6f8c268cde32fd8ccdd0a9f3301504a377f5d9e666cd1d6a7e305c5b342bdf7d64da964514de65793734dd3bf3e91e9fb0206ce06e8bb921b77472fbd47485d8d1f795d265508c9c594669a38b2800d71672529155e0ab38b846dba4a234945528cf80ad97ac43f008ebeb6462c6695422ed4725d0c6346c5a1d959781e73c697dfc14950a34e3cafe39329de9c0c92052d0e527165f78c7ea09f634b39f5914613382528055fa9913db9e52aa7a3c37a8daa6a06a0d64d3b11e37b90f2a5a9c3ce783762468ef3e873899c381d0fb49c34caa5a6953272c679a68d22eb8ec8d88a1a7e492a8560020f17287a5a4212555e69f9277654f0a2c810142e14933a05ede274d6ab6ca2bc1a58730ba53115faa2e510863fb83be418c2ce9e42faf9203f3d879313ba2dfc08517f4b8e5e865d9eda206d2be2c205b8eecc39d5379928b266ee664576a03cd3789f8e8aff2031a9cfa152dc3aa0c9bf24cbca3a7d254f9f284e13b38b2a8119de1b0530269bcc914d33432a47a411b5117e22db55851526ee0a38f1ae4ccb0618db2262b6986589c89149cbd410c6cae6f4a51654c128e1f8b6fb4363759d1081ce6af0f3e21d5c0c2ddd111719fe8b6c4c69f6dfe46767f59daae850d8e9e3b706221bfc4a0fe3aa37c744aced5c2b59e63e27c0fe7581c88471d42107101ad69124990fc4f18699f1d1ec159017b8f341dcd164efa121088078516d6623eed92c7afe165db6828438fdf31cc75321e212f9555ee9277dee9548832e66c4ecf805a49c8707e38398873317ee5fca7b1bfcc3a65a7a8f4f3ad0c7ddd4e8445a9cdfbd51825777bebd2db9060270d1f909ccf44d5ec628f4128d9482a5078dc45e57cd1a74a4a4ad2d8ebae58a230d96ef815db3380cd976059e713971db175f88c0acb4c550971bf4f4f2e493b9b41225d6226ac033a7dee6eef64295a9b52d652fa72523c6284e1b1e04f5f6fef9facadbf1a446567f0566e5a8914027a8bd31b278d08c12033bda42aa0e3f167ab34d2f14a5d29419d13d0aeb05714cd0ff5538723ac9d62b73e449fa7960afb7af8e21cb2a3a55e839bbb2073195b6ddd1ae1df980a4ef7d4b9b1f215eae9888176a7a2f20a7ea2c2eb9e67f7ce7054aecce1a3ff919fb2df213952a8b05e4e07b7a1ae123656f91fe01e1b1c887f05ee1a3964715c8bfd8e94862472cde87a0546ecae4408b98456a2393c915a8be9b3a7c1562255349790e14a8bd4cbe99204092ecaac813a4e3e234c0a26513762b6f062b1fbc49859bb39662ca540b8794062bb2a5e45dee02fe0a5b4a7984c08d3ca1b461119b01ed677049bb30f35f58e9f92f5a145a6365508c2ed180108808c805c00c183002e7bc38ba0fe03551dcba2b648dde55a148f1460344484b0a1c938e6f91db3e481de27276d6bf263817b7e3fa5ed6fbe2c8242adf8d5deefdb0397df922cf1c57b1e46788c32e5b84323a1e1814d9650c4762e936078237888c3f1d8c861b6aa7cdc656712b2c5a432094c2fc4200f79f7ce67685695b92160fb70c9eb3f0e866e62bffe3ddd768afb942338077abf569d0d169b0c3b48302668980e9b8faae321ac9931186e5ecfbe07d5d657ac10e7ac767936d2bdbb383861856478931d007388c7977e890c4edf1475bd9d16a36c8c4d6946e309f4c4fd230d5e914284bc59cc01bb3614cea66c996f9a5f1bfe7b405fff504cc60487123a741c649dec90f1092ef47045bb32e1ee849638334251988fd5ab9f381cb5cb1558ad819432eeccd3de638f7d8020f1c4279a0da621ee62704c168b96c68db658ce78b2f729d2420d3423fd5845cd8f87b056f9d69158b6d28ca002a1345f43173ec96e890fb783811b583343698b24bc96e222268af84790ac14186ac792b4285cd45370be72303612070fec9fb49c59de8d7c8ee46c0a0a1edf715638e367157602d011c8b72b56bf09b0f625d0b19c0f3a00a50d4ca60c4b0129e7dfb27e8be979d6e84bc2c6cdb0ccde821c093fef033376aee9161f53a6e2b30709123cf94dda2ef9a1a0fb20d48eb8b0f26ec9430fbba299fb0813fc063d4d90a0b759145ac6bcb450960b21a98a2517af968c1c693ec8e5d73ace1455381ac27d1ee9d1503691fccb9b0dd1f50151dff096f52ed1820bc672131eac79920a27ca89f4bcdf6dac26563fc5da75e8c99accbb1b55eac31af89e60284bcf213cff60c5590fe4b1177dd7c0d47a5d2d9f06f7522ae6cd86a654e4234798e14f9db8f40b555da39000d60a0cd66fb7197f0ace480e336701c1c32feaf473e40bddeddc7bb7333870b96d54608b5082aa11560e7b0609f6f74f67618c2d59ea1f81d46fad94a275d89cb7508a290b735db3ef8c11bccbbbad99e56143912e35066298a47c05b0b9ee7385355879de51e3c0299104a75f315455ee4f3fae12bce0c901e018d66252ab4b4d7d1db5ac2e1facac605fbe2febb173cd9cfc0c85577c48e04fe7f71180e1d1e6e54ac396abd4c227105c325f8fee4c356958e97617d90b45a3eeb9038c62c58f83cce01f68afa7d9ce362263563e89aba2969fc42ac1afcd22dff68f724f6106888f69563f4067f73141b4dea51de45acf6f50a925fc66bcbbc26883934f1bd943b0f625fb71cd1dd9e6cf7cf8b03621c46d7d238543b0459784a0dcab19f9eb9671f82897e16322bb6b02688a32464bc50a3218f1844c45b5529345d265815e1ee50e49b11e63eb5f936a2b8598fe27b0971bd6208bc87a824039189f0e1e5857927aa43645f3024d40d6e33d357d57f23f6297bec239f80df8191d6201651da57a966e1b6dd6eed291b5e69d5250599a232900ae57078b5edeeaa8a8c199be9063c9bc5236fe64ea8fd6fa45f78fbbfc059e69785fdbcb394d557f39bde7eed66479bd04d08afdb46d31c9bf2ffcc19896c9e65db53f4790284b7c2a13f3d941adb7494f50d95e64aefb5fce3a34394156a3bf8f5a02e4161b130514371ab0f5dc4145ab76dc5652b1f139069f158eec615c6fb8069997a6cda2aeeaa5d78d608a47f20c4fde7d01b3da8ba0c611974bbebcc74ad3e0c3e8157be719a1af1d0c9a849045918b4397e03860cc79ba6582657df0994ed757f6b4f10dbc856e09348707d2f09f9696c39073a11a60d24d434c065eaf1332cf7d04740e53f7a2d1b87d8fe542cf19487413011015b269c6aad3d3808d9d41459c66342abe390aa0e4c32f9d5e6247939d1aa9a55542a6fb022291ffc3b4cea3e1ef3f90e9b87cc41375e4ef4c38886ccfe0ad87d48eac362e8476359dced16b168bcf84740b7d7ade4e43f7050961a0a74f57362e9de18fd64e330ec5973029465bbf7b409f211a8304ed4f9351811341487aa2f3616d8309df52581fb7bb80440cb57d9bcb2f985acd80c41f60df67cec831f9ed73507a23004e72b4bb1d005cf8434cda01cd9a26b515fb08b1cb12059cf32004fefc7e8d5c44a98dab4d4605ff64ccb0e752fd15788b7861666cb03dc631e9bef2a63376b1aa8c16a0e52e1b646d1fbb144c68bf3b749d401336ed3b806dfe419a4368dbea9581698e15cf9b0759d476971187abb91d859ef089a0d90692b9c2bd61ba38ff994f2927dcc9d4d73349b4749afe8d7cc7c844b6b61be3b7d37dc5670f6f04750da2b286319665e9fe0f8939ac52b1c4f392a274bca3fdcc716dd7c564179e084ff14f0c95c07e91f7fff7c85c71f3a00a8544c4fc1bb91d550573d05a1d20226e65ae6f1cbb6097c8b360da5043e8829d5729aab570ed76d574ad978dc82f24b3de7a5ea8708f19455b0ce04d9127da499ec28e1a81af585811870f3a0ff1ca74a4560a96e12e18a108581faff15bcea2ef1f69029ff8f7396a6bc5753e5f72e8447ffafd127de0741b8e967f07bdbda4b6dcf51ee7e1f6f00ee6cdab97277b03bf7120d61e03b66786"}) syz_open_dev$binder(&(0x7f00004bf000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00004ee000)="2e2f66696c653000", 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000168000)=0x7, 0x4) 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001000)="2f73656c696e75782f6176632f63616368655f737461747300", 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc0185879, 0x480004) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xd2) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r0, &(0x7f00000f7000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f00004ec000)=0x60) 2017/12/14 11:57:41 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f000028c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) r3 = syz_open_dev$binder(&(0x7f0000001000-0x3)="2f6465762f62696e6465722300", 0x0, 0x7fe) r4 = mmap$binder(&(0x7f0000733000/0x9000)=nil, 0x9000, 0x0, 0x4010, r3, 0x7fffffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r3) r6 = syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) r7 = syz_open_dev$binder(&(0x7f0000003000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r7, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000006000)={0xa0, 0x0, &(0x7f000057a000+0x937)=[@acquire_done={0x40106309, r5, 0x4}, @transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f0000006000-0x18)=[@flat={0x776a2a85, 0xa, r5, 0x4}], &(0x7f0000006000-0x20)=[0x40, 0x18, 0x30, 0x18]}}, @register_looper={0x630b}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x58, 0x48, &(0x7f000057b000)=[@flat={0x77622a85, 0x100, r4, 0x4}, @fda={0x66646185, 0xa, 0x2, 0x33}, @fda={0x66646185, 0x9, 0x3, 0x5}], &(0x7f0000008000-0x48)=[0x58, 0x78, 0x18, 0x78, 0x38, 0x58, 0x20, 0x28, 0x38]}}], 0xf7, 0x0, &(0x7f000057b000)="bb5827b7cc7fd2c8b880838b49dd6bc3ab1f3a2fb92227a4b3bbc423032ea5617d49d6f610037cff2d4e5da6a4c4dfc6c76427885eabc229349aa759489c2739573ae1d2e25fa38921a2ba2ce3646982ff097fe5b86ae8a46037d9a8d5897304faf4cb411495d3a377583327a24f1402b713e49470ae82c15c14e1e50d2bfa6035f3b06ff2c68020797104ba59e67b3022de6b303d91b9ba7feb581b021184b26e74c9beb92d21fb2d9e836ccfa68e30b015e9af1512426b7e2022d347f9174eb03d43a77c81cec8e46cbc7eda157f7c1c8348402e7170012be340c6928ebea25edfa2f95898c1671bf73bafe857d313f5ecbf8fd14009"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f000057c000-0x18)={0x7fc, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$binder(&(0x7f000057d000-0xd)="2f6465762f62696e6465722300", 0x0, 0x77e) close(r8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000009000-0x48)=[{r6, 0x400, 0x0}, {r0, 0x4, 0x0}, {r8, 0x1, 0x0}, {r7, 0x2000, 0x0}, {r8, 0x8048, 0x0}, {r6, 0x88, 0x0}, {r2, 0x0, 0x0}, {r7, 0x2, 0x0}, {r0, 0x4008, 0x0}], 0x9, 0x3) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0xffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x40000000006) 2017/12/14 11:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c4e000)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0xf, 0x30, r0, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004eb000)=[], 0x16, 0x0, &(0x7f0000000000)="9c725eb3a505c0a462eef0ca6aeb1d5789969d17907c"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x1) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000314000)={0xc, 0x0, &(0x7f00004ee000-0xc)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f00004ed000)=""}) poll(&(0x7f00004ed000-0x50)=[{r1, 0x0, 0x0}, {r1, 0x8006, 0x0}, {r1, 0x402, 0x0}, {r1, 0x4101, 0x0}, {r1, 0x6060, 0x0}, {r1, 0x4000, 0x0}, {r1, 0x4100, 0x0}, {r1, 0x2c0, 0x0}, {r1, 0x0, 0x0}, {r1, 0x2, 0x0}], 0xa, 0xfff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x7c872, 0xffffffffffffffff, 0x0) poll(&(0x7f0000331000-0x28)=[{r1, 0x100, 0x0}, {r1, 0x2002, 0x0}, {r1, 0xc018, 0x0}, {r1, 0x100, 0x0}, {r1, 0x80, 0x0}], 0x5, 0x1c5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00003b5000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000356000)={r2, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4eb000)=nil, 0x4eb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:41 executing program 0: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000077c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x804) syz_open_dev$binder(&(0x7f0000216000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000055a000/0x2000)=nil, 0x2000, 0x0, 0xc011, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x1000001, 0x24012, r1, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x800) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x4000003) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xa052, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000005000-0x30)={0x10, 0x0, &(0x7f0000003000)=[@exit_looper={0x630d}, @acquire_done={0x40046307, 0x0, 0x0}, @release={0x40046306, 0x3}], 0xf2, 0x0, &(0x7f0000005000-0xf2)="e67dbdce520ad8a5d0f2a742dc0d1d720d320aa16f899ba359b02a7d0b2a8d2023e2816be7a8dc2ca20528f0ac21f7e51af6eb25f0310d45a79cf05c9afae8d5ec17a0d1be707ad5478a41d8cfa1b1bcdb1bf32efa66afd2cd6495b358985169eb657b2661210f5a8dec5d208273ca6d045e096843368ffaf850dbd07464fd6f63c4456d39192478e0765d9da7c42fde963647b887c87753a0ac6dbb7ba62d098c9bf3eab452612658881773567a636fc178d81f46a533d6cd6423d6568f45591ef2c1959fa2febca28ebafdbb849784fe02bf93b4aee44f9e2e0af9b6e48c1aa828c710ddcae0a43488490549153bcc2c32"}) r3 = syz_open_dev$binder(&(0x7f000077c000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x418000)=nil, 0x418000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000416000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000418000)={0xc, 0x0, &(0x7f0000418000)=[@increfs={0x40046304, 0x0}, @enter_looper={0x630c}], 0xf7, 0x0, &(0x7f0000161000)="4a785a7b1299ba6b25f1f175f668b97b4fe7ec6a38fa10bb06c86d863d12ffc65f9f8c515d4a7528341cb9be4dddbc2f054cd4f790aef4c2cd2470d5568ec598c8739b38d43df6aa47c5ca148645f3ee7104c8d9d0cda357a6553386455361004f9d23cb789083ae5e6a22aadf24dc34e05927f28c624bb4edf2b9441405018c7c926916aefeb0d959e7c62d45da07b475ae8d75464dc48ec2d4e7e6631dfb9ae7fc7b94dd4f8cef3a813dd4f0d68a6689b65a6e31cbb706d531bc187ae0396d51f08765c63ea1f76d3f3abb9c03d856e41efe7d7d9f31e81ff2751a8b16969ab71516189c05eb107fa974589d3f026464b5dfc00330a1"}) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x51, r3, 0x0) mmap(&(0x7f0000278000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x0) mmap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000041a000-0xd)="2f6465762f62696e6465722300", 0x0, 0x810) mmap(&(0x7f000077c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000077c000)="2f73656c696e75782f6d6c7300", 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00004f0000)={0x0, 0x70ee6aa4, 0x6, 0x400}, &(0x7f0000744000)=0x10) mmap(&(0x7f000077c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f000077d000-0x98)={r6, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xee3, 0x8}, 0x98) mmap(&(0x7f00000f8000/0x2000)=nil, 0x2000, 0x1000000, 0x5070, r3, 0x0) mmap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000043c000)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00001da000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x481014) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ec000)={0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00003e0000/0x4000)=nil, 0x4000, 0xfffffc, 0x12, r0, 0xfffffffffffffffc) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00002e6000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 85.400707] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.419829] binder: 10165:10166 ioctl 40046205 d2 returned -22 [ 85.435522] binder: 10167:10174 ioctl 40046205 40000000006 returned -22 [ 85.437083] binder: BINDER_SET_CONTEXT_MGR already set [ 85.437086] binder: 10180:10182 ioctl 40046207 0 returned -16 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) pipe(&(0x7f00007ed000)={0x0, 0x0}) fcntl$addseals(r1, 0x409, 0xe) r3 = add_key$user(&(0x7f0000bcb000)="7573657200", &(0x7f000079c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f000090b000-0x36)="4791ac9e28b03ee256f80ec9b30578c2b20b1ed3624eed54e33bfdffdc58dff194069bebe5e7f3b616f82ad2d3b088f655120ea4b961", 0x36, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000d58000)="69645f6c656761637900", &(0x7f0000908000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000218000-0x1)="00", 0xfffffffffffffffd) r5 = request_key(&(0x7f0000d1f000-0x6)="2e6465616400", &(0x7f000018d000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f15000-0x14)="5e73656c696e75782f2a2d216367726f75705d00", 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000824000)={r3, r4, r5}, &(0x7f0000226000-0x3f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3f, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000e58000-0x38)={&(0x7f0000161000)={0x27, 0xffffffffffffffff, 0x0, 0x7, 0x6, 0x7, "2fda4b2e08b5b38544fc2b96e6bb4d45315a39b9373502f57bea96449c10b5d4f83ffdf59ee7902c1c51457a55c73e8c42d3d9f2b8276f100d03a922144976", 0xfffffffffffeffff}, 0x60, &(0x7f0000459000-0x50)=[{&(0x7f0000260000-0xc3)="d928f49b9e0808052a34b4a4957aae75925707a9900f75896ff4e72e5bfafedba990f4a9f9bc6a33fad2c8fcd43c068e446b5ea32a8d0917739d98b274e60bb74504a9e3b0baa31ac4974bab360baaf57ac44c58e467c3a7caa32f59151ad689098600854cd99cf138c9f54707ea751509629cd8eb12d0bb20e9dedcab28cbdd31fe86a0a15ff6a64a139c47c95875ec8f3afaeb9a39d1a8eb8372c34bb3e5e9686bd78e081eaf85fc7d29a208171c87de88c51a76e631b4995ffd686044e0cce0eb7d", 0xc3}, {&(0x7f0000595000)="bf599dee32f4424462b1f4300f29a9368ca87e4010e5c69a52cd409aaa3334eabe31d66021b8a12753157603264ce6cd8015f0fb5c595e7e43e2f1833d1ed03a24d883eb42f0ee410bcc8912993ffd0fe28cc420deacb265e45649b8895c53c4b4a69ef6a7302e5b3925a757fbcad896097b9d43e6de34c0f75b961a90a6b834a7b0292274984e14206037bd40f1ebac7035745c75ed00ee888dff5e5c2a75b2e97691a7036fbac50685ddde2ccb31f8d3b4da2efba18c0d34357089730925cd2e8d983d97a146b265949ac25a60a77fafe552", 0xd3}, {&(0x7f0000bd2000-0xc6)="dc22c9e26b3f16a3c2dbe6246acd6f53a6a26640eb19caa4bedac0db1c29d2901ca5076bca1593d648878a3e7c6c6977008581515a39057bbda236c7186765ff630e7cccc014ca8b76bd8587b2b25a9915ac5772c770e11f13976f1e63284cb4ca791400ec74f74f46d6f5ebb9c5160a23319b215d894cd8efd75dc8e76d87d4fc5811bb6dd3f83544e582400b74f04f76992a42f78751f1ab45d3bb47edab832378b1ea2ad5bd91be788bab469001480a6edfe08358a4bb0a879497d437717609bbff40c545", 0xc6}, {&(0x7f0000285000-0xee)="0aeb7f58f5321d0fd3e59a6a9918d18ca5df194abaaf7f994860c503c0cf88173589e5f76cd75ffe928a7cc366e1027e484ee64b5b4945556674243ecb5a1c5ef9dc1dce13350630a5120ab9d21bf101fbf4d6f5532bef40dddc51939a05e2ab513233352df4911a3b86357cb52533b20a5a9d68fda026e14800831917056b8f3c04f6a0f94fa9b69d68004dfd3908396c9b1ac671a3b476214c6c5f49b59f873beb06d479e5f0fa32a10d574caf3639cc85a50287f57214be655d0b318dc690bd2ab2ea86f18920e5160984ddc3259226d10e431cb633d5752c71102282a6f474e914ff99997cd83611a23ea6af", 0xee}, {&(0x7f0000da7000)="2bfbf11dfe5392c8938e73d787c2797c4293ce987fc354feac2635a99abd5164af3feaa76b26aa4f10380e79bdd43a527062077a6421f6ce7e5d136ff56a4adc5302f1f0a44bbe23738f047617976306ac93068546512195733fb6924bf9caa65b1393635b1ac5f43064c3f471b5b9dd7a31091c0b0fd425477534dd4cde3f676b9d7e05236154630a4d62ca53510c03fc98638041ef8032fe6a53523246cbd2c2c23115f5b40bc329e35d7206dbefc069d7e49f90ecf12b3a0991bcb10e7b237a8150ba10c57756ded6edb3a536fca5870947cd4dc3e01aae6854def7222915f802be4935afa17f41624ad745816b23f07329fb45574b85a792a0091dc09ddf78ae9a694c2e60e9149b9b2cad1aaf3276c61d4fa74a2b81a0f1565a440f9776d5544e3b6b77f899e32f67411d8b0cc7fed981e22ebd175694e3f4566669585dcb224c324f22b2b4460a095a00f7b3544a33e375494806c9ab0827d8ae880d6cc1abd3cccb627182aa3e2dc07dcb52c0d978226749f5855e0c02f069d48a00738dfaca527cd01295f5d08c6a6732d5ac3ecb9b108fa024ba440cccab19399c684c42eec9f5662d4b8d1bc94c2f5014de08c9f3d628006eddde1ae55966ddd043ec5818c27ce17f8c301cb5e2eee443a8180b9b8b4045422d7b1189f80d439efa46aeea8fced1dcf81f1af791e3eec32364a2b95cb236fd9fb9499cb6735f47dcc7a5ea4b48b2b6953a4719dcf4239517c469a9cc0a5a85ad984bd567b2531d3727e8dbdbb404565d0f67811385f7f91d685e75345275fbd55d09c18d122ccf287e32aef70f9fcd3ad83ad869407b68f1f748fa8243f2605964baf20dff0f3bde503c51e1c9db1199571edfaf9b280550008f43528f20601ea8e0e7c87dce3001ffc4208d8df34495971b7bae3d0edd70d594742f73739f91f3083f81d4b10f29af30bb405b4ec3984a4883e4427d4048fb53c7351b17fca18a43ad1546f9f770f19c2c4ff1edf49e41a20f560e20ba4b74f57424d15107c60165fa01c02e4bae469610beed94a94c7bdedcdc491a479b92a92f2c7e4e04db63736c2ad8aec085e696b8ae11bdf9268317bca2926220b0b3ac447a3739ddf09fcb03caea70460f981423b99182b0648486fe7b9daff9a4416eb6299e951e04c563467936af0cf22026a8aae3f4f53c38a8e0060e7e50bf9ca72df44e5b2474cc7844f52add5ae19f91b147b1a4db75f5ffe7a028ae41b1a56d8bf82cf45db28aad7924be329edba44fcbafc988b9434d0f2105548a962edb80a74e4ba549d9798b71e217966ca89222c7c4512628e59cfc623f7988055a5c92a5048962186fa07121316d50ea01f4ce2093978d9aa6e0b8042ae098b9d0e913037544764c01a1320ce3e00f9448453e48f1f5e4e6fc968dcf613496da8a7ae2a6a05e114eee594889f616e58294dd81732593ac9a91f72cbf9c7aec8dc94fda6de0af7f9bd8416870227f62a50c09cc6fc15cb6c60e0d54aef2af2e195f1b33a064ffd4b02c760d7e0cbf3ca93f522bfd84fa7b8d3e1ebdf42967f9d27195d9825ae1e094ae85d55f5466565a176486f275a605f05fbbe6543819bff51e4a495dbca2365274c0ca6699f345e5689a80483ffc82526c190cc1fe1bb850063919831e24c45e174d0f9d343123b215608a77b6ee18df211451f4b15e808763f08da50ab6b2808c9f8e09614fb4665696ad746fe09bfc6f8e8020bc5972a0ea913820b0b3f7ab4287c88181f9119ab99509a19069890ce31c1ce14af2bd806adcba6ebb649475d904d60fa41243c089ba352302ef22a99837dc2ccc73562e7de7a5b68f3c8f4d25d5a4410695725d7e657c295ecda41edc7b50bf7f433aae19027ef04112637cc77307566f20fadd5ff52cf28df9a8212b0a52e9c82606d73ce982587cd3ff57f1b18be7ccd7287fb8074d889318da0717c54177f1b686070dc4a90029af84f68f2bbfb03fa860cf8e336e02ef3f539bd6fabf460348ece926d750a9e7d51b8718cf5f86f8ae28ab712de1c466131a0097bf2d16acb281e34fbd8e7ec611138dab9a58471f8fb86127f5a2d456af9227758b862e310f90660bc321a6a1643d4d871d07a4dfeff84d45395de7e9386d3bf952a9cdd50c9040753a3c57ec35b363856f8efff8e05f66138ca47ebfe28c7911d66616882d189d1c1c603aad6507924a0a580e991c5d58224b08384d1cd6362eddd9cf229f4f43469268f16ed519a5bf0f87349f8ed882f3584a6fe525f85f135543688a06fb8557429ccc519f48977a74944800ada99ab5bd5ca7ec286d914e1d712762b964f1ce92742d3813b3b2487f3664f7545c9310da336a5ce0759203e4dab1606dc2bfebc1d3d201c4ef7f11e479cc0540f22b3c52d4d5a4636259a5d5c488edf18099404baf3ca547a7c8866c1f817c020c9948d5b00325cb01734991ef9061de84d7ab70535e768c0206e840f1202177f5f9008c0c61a223b6a96793df06c09740ff875ebc7b0cae97848808f0ddfff9bfa5a1ffb2f2460514d477d7643f5d7868c357a031ae3472621819a0e0c8653d936e33ca90cf1b48617620ca2a15680cbd47ea5a6cb8ec45c819bdf65f5bc8333909d84f33f85bf8e2fdc2dcf0d1275d0e425faec606d37a9ad263ea65e87bcec684408d669fbb7348e1ce57a060bb56dc26825a74ebe37b769366f35f77bdd416e3574abcd3fbdc31902d993eb5a8310275958fca747cc05d3d050a3a49d25b4a22b517b460ccaae51b8964ce41f20c172e14bfab51a8a4bb540a31bd9160157139a18dd443547f4ebe8ec8e41038030a1a5df1d6dab3a9c1919e09422e39c2ae130a1973439dc928d900a886f5690e601bd15135f336bdabcf79c719d7b4e842b12c6923238e26af2e44b61f9c9081dd0e632f7d78035993c06fcf1f83cf16d990b8f975885ec69ad8a3a0cf12d7f6a39f32557031335896e894286f0905605a0280474256f15981c26c66c335675973ae4314a6202e0e5b686c50dce9b286c321cf032c86e860f4aca8ca00ee15936be2a1a0c81304c30593eb27653a7d19affe728a93c108bab2a4713fc281170c175c75bf3c2aa91581f19fb5cede4380b3f6cedffeb09a751f70924973c54fcde0a26451e305001442608f1dacceef9ba6cdec7166977916350a717b581f4bc50740cb16bb0c560732973ec42cdb6494961bf4915c33ba283bc57579baa39cfb8299d4deec75078d4939bd79748c355b399d6ea626da57991650a53e4f07c8358283fddba5c86b35ef359a64389b9f9d1a26e41333a34405cddd525e60816254ee85010c58eb1560cc831995c1f189cdefa42c3eb61355ea02fd7c732f2fa0455fe2613dc34e0488de0aca5c44c32f26fe15aef507ed2543e3d23fd09039611a491ac201b261f84b780d4c8992662ba9029fad3170e35c653a265d153dcd473b609959df437f07d0d46f9ad09b8bb55015efaba9b898238b1244cd9086f53b52c313a494e5d22a3447835bf731ee931552202fcaf09f7949f610b72f7e6825cbc22928605d4a13efa99cfdd1f216f361a85e8a88eab7e8889760307d79d40d670a2baabf06d9f3176541d0b0c28dfee71d37b0893fb820eda8d29d8bba67984d8a4e5c19f7cf7e12ed208262d0b01c3a6e2410d11ffa48baf47dfd7f74709fa9b77817bbede64c05966be6958d99441067f89e744ff6b53d3acd2ba08a2affeae9c0f66132ecd000b97cc4954ae318e3f78b4b84615174b4b623c1eaf9d4440c3562442c6d0a47b90452a25f535f503baa02143789112893241cae1b9b6a5ccf4934f41e63a43cf24ece4ecc1f422ea13de1e19b3534d9899340d65e0502e429ff590452c9e7a67ef37f94a979387bff749216d01bce321ee1f04e5be64782fff8f3c1f7def4627fdce1381d6afc82d4ca35b4bb226604c5931adcc05209220bbe1e1ec7b293cc6a793715fe5bbd55c15dd80ba870a04e1388f88a4376125bde898288948e3fcd624d37f04a5aaa033f1a76c0c3b170e5b31c5f9cda821b75247a3a3bccdd75017b5132412a5ad90535c4ac0a74eea80f88cb0ce4a1382a95c6aa3cd68bea5783ff76f7469f2cc085388857661d3c8985e7515ebb149d13199b66f467f14ccc8763e95187f98698715f32197577cfb20f149657b102e0b5b33ec1ab0e6c239f71f5163db16f0d24374c747573aa31b88f3ff0ca427dfcc0878e839e1fa4ea3abcb7945d9d1a223429e33ead4e0b40ef2a8951334f24e3db53c5193694c832141aaa2c2e7ae0c212f0859ea62532db3a5a9da53af776ebb137e26d2414f73b2937d8342eea774c075a38fa6ac7d65fd61fdfae47c79cf4971018d4016cf07a9ad59697e3f0bc320928aefeb84d79340888c37305676fb37f75c56942d61d0dc45f8f4f1a308ff1767d1e8305c22583c5fe99db81afbbff68400f616e6c104de2c074c99bbca72e3611b3fd5ac515440a452bd114830106c50d1087e4715decba9b7308d3c18bc5ba4d87c077c586eb95867be1e7d0fc6a254229d84ad5635d1cb8a67f7dec3f9c25c61a375f205e63d8dcacc241dd3c9a0c0e210d6bd7a59702b948bcb5608c6115a37f1acf2280f65eee73db554896ef66415e4682dabc1687a82fdcf493a3843417fdc72e6d1ed95aa73ec7da4a154b1ee13ab993c488d6172da86bf40716b8195274c44ec04a2c15b3ca190b8df07931315992ffbd90bd0654135f43f140d5709684abead288bfacb9b687e53fd603b40921a2c0b02c6d978764a5ac23d16b355340fb1dfef9831289f3aa2cdb839913813c3da1cc75b9502f77d1f1800b7955299ee76c17dcb19cf6486d54df32b98a159a3686ef5455116d9263c25eddab0905288648a822ced26db8d2a4ae43a63bdec7c1fb44a2fced10d8ae23122bd56f5b06d6e2bfc40c6da483b2641e256932eb70560eeb0ab5e6d753a309e10afd204597787488132e1de90aa777cafda07ab00a7381c06f4d7dc2d8c5624fce2f61c67378bbfaa96e269b3f868ef674583773d8a9d59b90bd4b4fbe7c794a573a836b56af2c3ef54165561e73ad7103d640a8d613e3f3aa85e8cc4727b626af24a3156f07e10afd7fe890a647ae68d41c2835b0bb40b3049cd957e5e401c602e8f439a8c7c7f28b66c8342d9f9c220e82a218c1640f153a23bbebbe2295a3278bf34c7ca604782c4bd930debf988d74a2896dfda0545d917786338e2c5d10113ce238145383ff235cddd5e098ca31125d21cf6e6b5d65b5e72d61bdd303339fb9245a61cc8420c868fa87eb595ede1293167ebc7542f30ca7cce16d1e6f0c4d5c7be5e9ca1c242f15fa12a967260be8cf0b30cc7bead274cdca90f1dd69028fb7ed0270823808ac04d4f9a3c0965eb9f3728a9ebe4d1f58c626cc1abc73cd93991f52aa37c933fe699af7120059b5e56349a478c187d2d6f8faae12d3d33ad3197abfc2a53664e909745ca89c704d151665015bf2e29d218428176d9ada52ec093326fcde285e8d5f43181fc02e161221ca2ff33b8b50c8a294719f21a6b3da28d517dc10245a414fd68504caaf851d59bc4ddf7b64943533a0ec8f21b0d963e4380e19e872dc1c3e303dba736c3414c64603dbd403af6dbae4427a8dbb9c9d47b061ca8b6a56e9c871210ceaae86ccb33b60970399f9da18977258dcda695867bdb566298c1ea5a99d154fc1fda2c5d771151b70ba707940828d756cc504b6f1d433b714240ca0463b8263968cada9ca96b5c36cc7db049914aca8c6d3c234294f7960817d11", 0x1000}], 0x5, 0x0, 0x0, 0x8000}, 0x40) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000c53000-0x10)={0x5, 0x8, 0x3ff, 0x9}, 0x10) sendto$inet6(r0, &(0x7f0000d46000)="", 0x0, 0xfffffefffffffffe, &(0x7f000039f000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f000053f000-0xc)={0xd6ee25d, 0x1, 0x101, 0xffff, 0x7}, 0xc) 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00003ae000-0x9)="2f6465762f72746300", 0x8000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000553000)=0x0) r2 = perf_event_open(&(0x7f0000940000)={0x4, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10000000000000fc, &(0x7f0000c13000-0x2)="20a0", &(0x7f0000a3d000-0x4)=0x0, &(0x7f000092c000)=0x0, &(0x7f0000000000)="33") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000aa7000-0x5)="2f6465762f70707000", 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000989000-0x4)=0xbb, 0x4) r4 = accept$netrom(r3, &(0x7f0000d61000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f00000fe000-0x4)=0x48) gettid() perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000006000-0x4)=0x91) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000", 0xe000, 0x0, r6, 0x2, 0x7fff, 0x408) r7 = dup3(r3, r4, 0x7fffe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r7, &(0x7f0000001000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000003000-0x4)=0x60) llistxattr(&(0x7f0000e95000)="2e2f66696c653000", &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) utimes(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000000000)={{0x0, 0x0}, {0x77359400, 0x0}}) pivot_root(&(0x7f0000f1a000)="2e2f66696c653000", &(0x7f0000414000-0x8)="2e2f66696c653000") mmap(&(0x7f0000666000/0x2000)=nil, 0x2000, 0x3, 0x34, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x320000)=nil, 0x320000, 0x0, 0x32, r2, 0xfffffffffffffffa) r8 = socket(0x10, 0x802, 0x0) dup2(r8, r8) 2017/12/14 11:57:41 executing program 0: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00001ed000)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000e9e000-0x10)={0x0, 0x0, 0x9, 0x1}, &(0x7f0000097000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x1}, &(0x7f0000001000-0x4)=0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000001000)=0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000002000)="2f6465762f696e7075742f6576656e742300", 0x100000001, 0x4c0000) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)="2f73656c696e75782f636f6d6d69745f70656e64696e675f626f6f6c7300", 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000002000-0x10)={0x3, &(0x7f0000004000-0x18)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000003000)={r3, 0x2}) r4 = getpgrp(0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000005000-0x8)={0x399f1736, r4}, &(0x7f0000005000-0x18)={0x9, 0x5, 0x1ff, 0x27, 0xffffffff, 0x5}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r2, &(0x7f0000006000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$netlink(r2, &(0x7f0000007000-0xc)={0x10, 0x0, 0x0, 0x1ff}, 0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000008000-0x9)="2f6465762f72746300", 0x101000, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004000)="2f6465762f6175746f667300", 0x400, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000009000-0x8)=0x7) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000001000)=0x6) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000009000)={0x6, 0x800000, 0x0, 0x3}) [ 85.438661] binder: BINDER_SET_CONTEXT_MGR already set [ 85.438665] binder: 10180:10182 ioctl 40046207 0 returned -16 [ 85.439765] binder: 10180:10182 ioctl 40286608 481014 returned -22 [ 85.442004] binder: 10164:10175 got transaction to invalid handle [ 85.442008] binder: 10164:10175 transaction failed 29201/-22, size 40-24 line 3008 [ 85.447368] binder: BINDER_SET_CONTEXT_MGR already set [ 85.447372] binder: 10180:10183 ioctl 40046207 0 returned -16 [ 85.458070] binder: 10178:10188 ioctl c0306201 20004fd0 returned -14 [ 85.461090] binder: 10178:10188 unknown command 0 [ 85.461093] binder: 10178:10188 ioctl c0306201 20418000 returned -22 [ 85.461340] binder_alloc: binder_alloc_mmap_handler: 10178 20278000-2027a000 already mapped failed -16 [ 85.471489] binder_alloc: binder_alloc_mmap_handler: 10178 20d07000-20d0a000 already mapped failed -16 [ 85.476842] binder: 10178:10191 ioctl c0306201 20004fd0 returned -14 [ 85.484351] binder: 10178:10188 unknown command 0 [ 85.484355] binder: 10178:10188 ioctl c0306201 20418000 returned -22 2017/12/14 11:57:41 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000a000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000008000)={r2, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x20000000000009, 0x10, r1, 0x0) r5 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000001000)={r3, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={r4, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0xc)={0xd0, 0x0, &(0x7f0000009000)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x1, 0x10, 0x0, 0x0, 0x18, 0x48, &(0x7f000000a000-0x18)=[@flat={0x776a2a85, 0x0, r7, 0x1}], &(0x7f000000a000-0x48)=[0x0, 0x0, 0x78, 0x18, 0x40, 0x20, 0x38, 0x78, 0x78]}, 0x143d}}, @clear_death={0x400c630f, 0x4, 0x1}, @request_death={0x400c630e, 0x1, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f0000009000)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x40, 0x5, 0x3}], &(0x7f0000009000)=[0x30, 0x70, 0x40]}}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x4}, @exit_looper={0x630d}, @free_buffer={0x40086303, r6}, @register_looper={0x630b}], 0xcd, 0x0, &(0x7f0000009000)="d9074f74b50291cabab83ae2f7fd638b18f19665cf247c2b15e203efeb26eb3dde0ddf775815f0031e2e727d53b4375ca0cb632ed882efdb83533efa3880adb7924518e10804662b0682834c16050df803aadef08624ecb5e2a481a4daaf27e5b6bff40d053b9037abea2fe8612953950392492c901066bfe3ebd9e354384da289689c17013c000e4898c03f2839693031bd5eb810274c246394fc36b1695bc5b00afdbe2e2e4f00b030472fb1f922b0f5da5e06872344798c052aa53e2dd0f5e038bf99121ea6ef9fa1301558"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1, 0x0}], 0x68, 0x0, &(0x7f000000b000)="2013943a3fe15cefd8cf60911547e33f000d486fea3c2b3ca527fd34a673119ba569c03b0fc8967ba8cb2e0e9d246da8d83a755efc044cb58d1f9712fdda6b5ca0b9904bf7e8372e34b3830917355477749b07c7bc0f44e26b5ea0ab2376f2706d1aceb2fd999492"}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x6d, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86e80167fa02e3e40a76e46a2ce3429950b25fc59de79fd800b5eb848533b81d8200dbb46cd9"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2017/12/14 11:57:41 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x20, 0x0, &(0x7f0000005000-0x20)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x3}, @enter_looper={0x630c}, @enter_looper={0x630c}, @acquire_done={0x40046307, 0x0, 0x0}, @enter_looper={0x630c}], 0x8f, 0x0, &(0x7f0000004000)="2fd13ce360012f614ab22e8678092979973247353767a6d30192641df8cf53459d745fc4977ef1699fc9552cc414fea7e457e45a70e9b562b3b5d3d6117fb225ec8c146ffe8e36721254952a64938e8b9d3c142b795419e8357fbe46c3f00de319502dd0d9db38eb11117423dc97fd824e39f57cfbc3ab353acb259dc7fa5cbb93679bffb970eb90ff249d0533e252"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000006000)=0x0) getpgrp(r1) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000-0x9)="2f6465762f73672300", 0x5, 0x800) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f000000a000-0x10)=@req={0x2, 0x1, 0x101, 0x6}, 0x10) fcntl$setstatus(r2, 0x4, 0x2c00) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000009000-0xc)=[@acquire_done={0x40486311, 0x0, 0x0}, @increfs={0x40046304, 0x0}], 0x2, 0x0, &(0x7f0000009000-0x2)="c55b"}) 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x800) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b657963686f726400", 0x200, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000007000)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000007000)=0x14) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f0000009000-0x4)=0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000005000-0x30)={0x44, 0x0, &(0x7f0000003000-0x44)=[@reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000005000-0x40)=[@flat={0x77622a85, 0x10a, r2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000006000)=0x0, 0x1, 0x1, 0x2f}], &(0x7f0000007000-0x10)=[0x30, 0x48]}}], 0xc5, 0x0, &(0x7f0000007000-0xc5)="e67dbdce520ad8a5d0f2a742dc0d1d720d320aa16f899ba359b02a7d0b2a8d2023e2816be7a8dc2ca20528f0ac21f7e51af6eb25f0310d45a79cf05c9afae8d5ec17a0d1be707ad5478a41d8cfa1b1bcdb1bf32efa66afd2cd6495b358985169eb657b2661210f5a8dec5d208273ca6d045e096843368ffaf850dbd07464fd6f63c4456d39192478e0765d9da7c42fde963647b887c87753a0ac6dbb7ba62d098c9bf3eab452612658881773567a636fc178d81f46a533d6cd6423d6568f45591ef2c1959f"}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000007000)={0x7, 0x8, 0x1, 0x7ff, 0x9, 0x2}) [ 85.545149] binder: 10168:10203 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 85.558446] binder: 10167:10198 ioctl c0306201 20006000 returned -14 [ 85.559110] binder: 10167:10201 ioctl c018620b 2057bfe8 returned -14 [ 85.577941] binder: 10167:10198 ioctl 40046205 40000000006 returned -22 [ 85.578357] binder: 10213:10215 ioctl c018620b 20009fe8 returned -14 [ 85.578868] binder: 10213:10215 ioctl c018620b 20001000 returned -14 [ 85.579671] binder: 10213:10215 unknown command 1951336409 [ 85.579674] binder: 10213:10215 ioctl c0306201 20009ff4 returned -22 [ 85.579877] binder: 10213:10215 got reply transaction with bad transaction stack, transaction 1471 has target 10213:0 [ 85.579881] binder: 10213:10215 transaction failed 29201/-71, size 0-0 line 2939 [ 85.579929] binder: 10213:10215 ioctl 40046205 4 returned -22 [ 85.590035] binder: 10216:10217 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 85.590039] binder: 10216:10217 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 85.590043] binder: 10216:10217 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 85.590565] binder: 10216:10217 transaction failed 29189/-22, size 0-0 line 3008 [ 85.590888] binder: 10216:10218 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 85.590891] binder: 10216:10218 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 85.590895] binder: 10216:10218 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 85.615912] binder: 10219:10222 ioctl c0306201 20004fd0 returned -11 [ 85.616328] binder: release 10213:10220 transaction 1471 in, still active [ 85.616333] binder: send failed reply for transaction 1471 to 10213:10215 [ 85.616386] binder: 10213:10215 ioctl c0306201 2000b000 returned -14 [ 85.636813] binder: 10213:10220 ioctl c018620b 20001000 returned -14 [ 85.666892] binder: 10213:10215 got reply transaction with bad transaction stack, transaction 1475 has target 10213:0 [ 85.666896] binder: 10213:10215 transaction failed 29201/-71, size 0-0 line 2939 [ 85.666948] binder: 10213:10224 ioctl 40046205 4 returned -22 [ 85.682638] binder: release 10213:10215 transaction 1475 out, still active 2017/12/14 11:57:41 executing program 4: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000842000)="2f73656c696e75782f636f6e7465787400", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfff}, @in6={0xa, 0x3, 0xffffffffffffe132, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6dc}, @in6={0xa, 0x1, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x74) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000069b000-0xc)={0x0, 0x0, 0x0}, 0xc) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000816000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ad9000)=0xe8) tee(0xffffffffffffffff, r1, 0x80000001, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00001bf000)="636f6d6d00") preadv(r2, &(0x7f00007ce000-0x20)=[{&(0x7f0000986000-0x35)="00", 0x1}], 0x1, 0x400000002) 2017/12/14 11:57:41 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x76b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x3, 0xa1, 0x1, 0x0, 0x0, 0x58, 0x30, &(0x7f000000b000-0x58)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a89, 0xa, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000008000-0x8e)="c0", 0x8e, 0x6, 0x3f}], &(0x7f000000b000-0x30)=[0x0, 0x38, 0x18, 0x0, 0x38, 0x48]}}], 0x1, 0x0, &(0x7f0000009000)="d8"}) mmap(&(0x7f0000000000/0xd30000)=nil, 0xd30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000004000-0xa)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000b60000-0xd)="2f6465762f62696e64657223f0", 0x0, 0x802) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000d31000-0x10)="6e65742f69705f6d725f636163686500") mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d30000)=[@in6={0xa, 0x0, 0x10000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xc2}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001}, @in6={0xa, 0x0, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x99d}], 0x74) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d31000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000345000)="2f70726f632f73656c662f6e65742f70666b657900", 0x80, 0x0) mmap(&(0x7f0000d31000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d31000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000d31000)=0x0, &(0x7f0000d31000)=0x4) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4020940d, &(0x7f0000001000)={0x14, 0x0, &(0x7f0000a4a000-0xd)=[@acquire_done={0x40106309, 0x0, 0x3}], 0x3, 0x0, &(0x7f0000d31000-0x3)="bdd3b9"}) close(r2) mmap(&(0x7f0000d32000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000d32000)={0x0, 0x3f}, &(0x7f000012f000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000b73000)={r5, 0x77}, &(0x7f000038b000-0x4)=0x6) 2017/12/14 11:57:41 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x70, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x58, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, r1, 0x2}, @flat={0x73682a85, 0x10a, r2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f000000c000+0xb73)="f3", 0x8e, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x0}, @exit_looper={0x630d}, @increfs_done={0x40106308, r3, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = mmap$binder(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1, 0x20010, r0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x5c, 0x0, &(0x7f000000c000)=[@transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f000000f000)=[@ptr={0x70742a85, 0x0, &(0x7f000000b000-0x1)=0x0, 0x1, 0x3, 0x1d}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f000000f000)=[0x0, 0x38, 0x28, 0x48, 0x78]}}, @acquire={0x40046305, 0x0}, @clear_death={0x400c630f, 0x0, 0x0}], 0xd1, 0x0, &(0x7f000000e000)="62164b44a5c310affb2298c00500036e8915400419dae89c450a387ad57900deff08615bd7c2d553000000000000000c0e41a052600c822c2d8d8f871ff1ed244f0f2c000000000000014c001f04317e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c2ab165921f7c0494781ebf9a8702e5c8070000000000000095c0920a655334554a5239e667da00000000000000080001d7cf69ba000000400000000000000c00000004d436e1046a24cde3074a221edb96a57daf9aa006d38701bb5c6f172c6a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x1, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r4, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r5, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7ffd, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r6}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r6, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r5, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r4, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r7 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000)=[], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$llc(0xffffffffffffffff, &(0x7f0000b5d000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000043b000)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d3f000-0xf)="2f6465762f73657175656e63657200", 0x200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000b54000)=[], 0x0) r3 = syz_open_dev$sg(&(0x7f000002e000-0x9)="2f6465762f73672300", 0x0, 0x3e) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000c5b000)={{0x1, 0x6}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40, 0x10020, 0x20, 0x5, 0xda6, 0x400000000000, 0x11, 0x0, 0x3, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000bb0000-0x4)=0x0) ptrace$getregs(0xe, r4, 0x10000, &(0x7f00006c8000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl(r3, 0x227f, &(0x7f000051e000)="") 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000314000)="2f6465762f706b74636476642f636f6e74726f6c00", 0x4000, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f000041c000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000415000-0x18)={r1, 0x0, 0x0, 0x0}) getsockname$netrom(r0, &(0x7f0000041000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, &(0x7f00004ec000)=0x10) r2 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f00004ef000-0x10)=[{r2, 0x40, 0x0}, {r2, 0x2400, 0x0}], 0x2, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00001c2000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00004f0000-0x8)=0x0) mmap(&(0x7f00004ef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00004f0000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000051000-0x18)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x801c581f, 0x800001) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000298000)=0xb38, 0x4) mmap(&(0x7f00004f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00004f0000)=[{r0, 0x8a, 0x0}, {r0, 0x1088, 0x0}, {r0, 0x0, 0x0}, {r0, 0x10, 0x0}], 0x4, &(0x7f00004f1000-0x10)={0x0, 0x989680}, &(0x7f000031c000)={0x3f2c}, 0x8) r5 = syz_open_dev$binder(&(0x7f000003f000)="2f6465762f62696e6465722300", 0x0, 0x800) close(r5) 2017/12/14 11:57:41 executing program 6: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x800001) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x49f, &(0x7f00004ed000)={0x0, 0x0}) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00004ec000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f00004ed000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000356000)=@assoc_value={0x0, 0x7ff}, &(0x7f0000459000)=0x8) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000199000-0xc)={r4, 0x7, 0x30}, 0xc) close(r0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x802) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f00004ed000)="2f6465762f62696e6465722300", 0x0, 0x802) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000036f000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00004ef000-0x50)={0x3c4, @tick=0x2, 0xfffffffffffffff8, {0x6, 0x7f}, 0x2, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x3) 2017/12/14 11:57:41 executing program 5: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = mmap$binder(&(0x7f0000472000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ec000)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) r3 = dup3(r2, r2, 0x80000) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f00004ed000)={0x6, 0x86}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000287000)=[@enter_looper={0x630c}], 0x16, 0x0, &(0x7f00004ee000-0x16)="9c725eb3a505c0a462eef0ca6aeb1d5789969d17907c"}) syz_open_dev$binder(&(0x7f0000242000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x20000004) 2017/12/14 11:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80000) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f00000e9000-0x78)={0x2, 0x78, 0x100000000, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x3, 0x6, 0x200, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x691, 0x0, 0x6, 0x1000008, 0x200000000000010, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f000048c000-0x8)="2b63708773657400", 0x3) mmap(&(0x7f0000293000/0x1000)=nil, 0x1000, 0x3, 0x810, r3, 0x10000000000000) ioctl$sock_netrom_TIOCINQ(r3, 0x541b, &(0x7f00009d2000)=0x0) write(r3, &(0x7f0000ac7000-0x14)="c5faca0456f17838854c000000001f000002aacf", 0x14) sendfile(r2, r0, &(0x7f000028a000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) read(r4, &(0x7f0000c74000)="00", 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r4, &(0x7f0000001000-0xf)={&(0x7f0000000000)={0x27, 0x6, 0x4, 0x7, 0xffffffff, 0x5, "fbdfd0076a7353f9e140c99b870da16bb9ce9a18248a50a42f91fbde683be8243d15b25866e62a08edab0ddbb25b4e7ae69a1dc2b820412c77a1148e2eb186", 0x2}, 0x60, &(0x7f0000000000)=[{&(0x7f0000398000)="859e5b52ae8dffc38f844c3edd7c00e310c37ea2163d997ee84265ed3875739d727f3169158a12f8eb4e1a0a56603f3e1f1b0505fb123bbcb4b97a712608fdd154134139626c04c1a8cd72c7b51f8d98059fb3bdeb5a", 0x56}, {&(0x7f000073f000)="4c3d7c6d68e1b12b9eea31980e966cfda052925880d044e17e802a71715d307964814feba4f63b22d1d6d09ba6868a43e66cf908d76d7f4c2e2454686a6335d46edd46362cd060b932f3609b9a85c794cb74cc966dc7d7180017cae0b504b5d057538bfefce90e0d4dab39fa514730a8dc5fd9b9d2555258d48468259484ffce4c5cbea2222f7d09f8041a59e77f065b137c7c9b1b9a1cc357d2c2b370c2", 0x9e}], 0x2, &(0x7f000015a000-0xf8)={0xf8, 0x7099a36323139935, 0xfff, "31bedde66778649889d8b8860e9482ac42809e5e90c267697ee3f229ef4b13bbea843828619f878ce287acdf42921c1e7931f6f76d39babe38c034d0be07f99d9265f18ac3e4498da5bc4fdc913daad392699b8b0dfc78da000000000000000881e5651e07f639060241650f391e3ed8d2bb91ff73138b1336fe05848e20e301217ab00d22c4a1996221b1c6dad0287bed1a2a2df4d119f7061dbd6cffffff7f00000000941c7f9c0fc5b502027c88d5a6ab94d51d72c0d27befeb3914fca083dfe23305e1203c1960c120c6d689ef63dad0065f678a50bd736c3cde89c396b15f57"}, 0xf8, 0x10}, 0x4000) unlink(&(0x7f0000001000)="2e2f66696c653000") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00002a2000)={0xa, 0x3, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f00004cc000)="636966732e69646d617000", &(0x7f0000b2f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000265000-0x2)="2500", 0xfffffffffffffff9) request_key(&(0x7f000062d000-0xa)="656e6372797074656400", &(0x7f00006d3000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000d10000)="6b657972696e6700", r5) request_key(&(0x7f000040e000+0xfc3)="73797a6b616c6c657200", &(0x7f000028d000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000097f000-0x9)="73656c666264657600", 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f00009f6000-0x5)="68001000", &(0x7f0000c75000)={0x73, 0x79, 0x7a, 0x0, 0x0}, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_gettime(r3, &(0x7f0000635000)={{0x0, 0x0}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000f3e000-0x20)={{0x0, 0x1c9c380}, {0x77359400, r7}}, &(0x7f000059a000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x7, &(0x7f0000931000-0x10)={0x0, 0x0}) nanosleep(&(0x7f00005da000)={0x0, r8}, &(0x7f000053c000-0x10)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000ceb000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}) get_thread_area(&(0x7f0000019000-0x10)={0x5, 0x5, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}) [ 85.682724] binder: send failed reply for transaction 1475, target dead [ 85.781083] binder: 10226:10238 got reply transaction with no transaction stack [ 85.795487] binder: 10227:10241 ioctl 40046205 76b returned -22 [ 85.795697] binder: 10231:10240 ioctl 801c581f 800001 returned -22 [ 85.804568] binder: 10232:10236 ioctl 40046205 3 returned -22 [ 85.814058] binder: 10226:10238 transaction failed 29201/-71, size 2-1144397507205 line 2924 2017/12/14 11:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000a63000)="2e2f66696c653000", 0x40) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f000047f000-0x8)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c91000)={0x0, 0x0, 0x0}, &(0x7f0000d4f000-0x4)=0xc) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000d0a000-0x8)={0x0, 0x0}) getpeername(r2, &(0x7f0000d00000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000e2b000-0x4)=0x10) r3 = syz_open_procfs(r1, &(0x7f00008ae000)="7374617400") ioctl$FIONREAD(r3, 0x541b, &(0x7f000026d000-0x4)=0x0) ioctl$sock_netrom_TIOCINQ(r3, 0x541b, &(0x7f00000d2000-0x4)=0x0) exit(0x8000) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00009b4000-0x4)=0x0) read$eventfd(r3, &(0x7f0000daa000)=0x0, 0x8) [ 85.826943] binder: 10227:10241 got transaction with fd, 3, but target does not allow fds [ 85.838428] binder: 10226:10238 got transaction to invalid handle [ 85.840380] binder: 10227:10241 transaction failed 29201/-1, size 88-48 line 3236 [ 85.840393] binder: 10227:10241 ioctl c0306201 20008000 returned -14 [ 85.850000] binder: 10227:10255 ioctl 40046205 76b returned -22 [ 85.852428] binder: BINDER_SET_CONTEXT_MGR already set [ 85.852432] binder: 10227:10241 ioctl 40046207 0 returned -16 [ 85.853704] binder_alloc: 10227: binder_alloc_buf, no vma 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x3) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ed000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000287000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004ee000-0x16)=""}) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x20000006) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00004ed000)="2f6465762f72746300", 0x40, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00004ed000)={0x0, 0x3ff, 0x8, 0x7fff, 0x3, 0x20, 0x3, 0x2, {0x0, @in6={{0xa, 0x3, 0xa2b8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x3, 0x8, 0x6, 0x7}}, &(0x7f00004aa000)=0xb8) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000272000)={r3, @in6={{0xa, 0x1, 0x101, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x400000004000000, 0xfffffffffffff801, 0x7, 0x7fff, 0x1b3}, &(0x7f00004ed000)=0xa0) 2017/12/14 11:57:41 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000f3a000)="2e2f66696c653000") mmap(&(0x7f0000000000/0x4eb000)=nil, 0x4eb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00001c1000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x800081) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) 2017/12/14 11:57:41 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000197000)="2f6465762f696e7075742f6d69636500", 0x0, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001000-0xce)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000002000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x800) r1 = add_key(&(0x7f0000001000-0xa)="626c61636b6c69737400", &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000001000)="34590a164319aacdd534ffb8869a00aa2e0504070445ab9bda390bee08ae18a85b7311880cd3450ac9063f90d0b2289824caa61797322a38a84112a7cc2f01a1dcdaabb5cf90bdfb3c8b03415d423d1c7fad8f1760be32e15eefce380b4781055e848795bc2b12b314fde19b6be22e33fc422a4a3987222ecd7cbc455213d979fbbe85ffbb5f0e6c6f4e12ea02c5c293396245e6c47f94bb2b344819bd7e4b28fa7ccc6801641bf183dfc08dba26835dd6ac4e7d", 0xb4, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001000-0x50)={0x1a3, @tick=0xffffffff, 0x0, {0x79a3, 0x9}, 0x7, 0x3, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000002000-0xb0)={{0xfffffffffffffff7, 0x200}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8, 0x1c0000, 0x5, 0x6, 0x3, 0x2, 0x8001, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r2 = accept$inet(r0, 0x0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000004000-0x3c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000005000-0x4)=0x0, &(0x7f0000004000)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000003000)=@random={"747275737465642e00", "626c61636b6c69737400"}, &(0x7f0000006000-0x62)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x62) ioctl$TIOCSBRK(r0, 0x5427) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000007000-0xd)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000006000)=0x1c) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCTTYGSTRUCT(r0, 0x541a, &(0x7f0000008000-0x50)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003000)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r3, 0x6, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0}) 2017/12/14 11:57:41 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x40032, r0, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000005000)={0x8, 0x0, &(0x7f0000005000)=[@acquire={0x40046305, 0x4}], 0x97, 0x0, &(0x7f0000002000-0x97)="fb1ab69a287f2ee7ae064e3e914f39409a382082bd7dc20a7c9d92c898cdaf75924fa2bf72ea6886c95a6e45267d860d47c2e89044769e33dbc48c323ca7ed0bea79006211879077feab343e0836765571fa9d5afdfbd2844a2a0e9cde9dcdb1977ce06944c8a31fe8d219ba00a15ab95588e6d297c3387b9ce5fe132f45ab629527afd3a64ffe95b75067f3087eb495ef999c5f4f9e5f"}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000004000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72746300", 0x80740, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000007000-0x4)={0x9, 0x4f2, 0xffffffff}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00004ec000)="2f6465762f6175746f667300", 0x200, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000152000)={0x0, 0x0}, &(0x7f00004ec000)=0x10) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00001c2000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00004ef000-0xc)="2f70726f632f73656c662f6e65742f70666b657900", 0x701200, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000386000-0x10)={0x3, &(0x7f00003ac000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f000020d000-0x8)={r4, 0x3}) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00004ef000-0x4)=0x0, &(0x7f00004ee000)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ee000-0x18)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00001de000)={r5, 0x0, 0x0, 0x0}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000001d000-0x8)={0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x801c581f, 0x800001) syz_open_dev$binder(&(0x7f000003f000)="2f6465762f62696e6465722300", 0x0, 0x800) [ 85.853734] binder: 10227:10241 transaction failed 29189/-3, size 88-48 line 3131 [ 85.896991] binder: 10231:10240 ioctl 801c581f 800001 returned -22 [ 85.902111] binder: 10226:10238 transaction failed 29201/-22, size 64-40 line 3008 [ 85.911749] binder: 10257:10261 ioctl c0189436 800081 returned -22 [ 85.914399] binder: 10226:10248 Acquire 1 refcount change on invalid ref 1 ret -22 2017/12/14 11:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f36000-0x9)="2f6465762f72746300", 0x103000, 0x0) openat(r0, &(0x7f0000d68000)="2e2f66696c653000", 0x481, 0x1) socketpair(0x11, 0x0, 0x0, &(0x7f0000e2c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f000094c000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f000026c000)="2e2f66696c653000", 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000049e000-0xe8)={{{@in=@multicast1=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000)=0xe8) r5 = memfd_create(&(0x7f0000699000-0x9)="2f2465762f72746300", 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000348000-0x4)=0x80000003, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xf, &(0x7f0000d06000)=0x0, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000dd000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00005e4000)={0x0, 0x81, "390cbb0defd4e1b0515bc433e82f899ab90bd65d85fbfb91c57db1e18fed1c18d1cce7475ffabfc5b1b42ca06a5f12c822abe05344bab410dbaecebe418eb10804df8d8d5d6b1d0ff4de73f0202213ad8486c3dedcb272e19475d3b24889c084ca19014338bd82348038eb9a4d2c6898b0e1ca14fece9b4c72d2b2a11bba43b002"}, &(0x7f0000c64000-0x4)=0x89) sendto$inet6(r1, &(0x7f0000f0f000-0x1000)="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", 0x1000, 0x801, &(0x7f00000d8000)={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000a65000-0x6)={r7, 0x7}, 0x6) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000d1f000)={{0xa, 0x2, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8889}, {0xa, 0x3, 0x400, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401}, 0x7d8, [0xff, 0x308, 0xee92, 0x5e0f, 0x9, 0x6, 0x800, 0xfffffffffffffffc]}, 0x5c) sched_yield() sendto$inet(r5, &(0x7f0000801000)="", 0x0, 0x20000000, &(0x7f0000013000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) add_key(&(0x7f000003f000-0x8)="6269675f6b657900", &(0x7f00009f2000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000512000)="", 0x0, 0x0) sync() socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00001fe000)={@generic="b07300000000000900000000000000c4", @ifru_names=@generic="3bf6756a3fe96d616b00000000000000"}) r8 = openat(r4, &(0x7f0000b53000)="2e2f66696c653000", 0x220600, 0x40) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00008f9000)=0x0) fcntl$setown(r3, 0x8, r9) [ 85.914407] binder: 10226:10248 got transaction to invalid handle [ 85.914411] binder: 10226:10248 transaction failed 29201/-22, size 64-32 line 3008 [ 85.917183] binder: 10226:10238 BC_INCREFS_DONE uffffffffffffffff no match [ 85.917188] binder: 10226:10238 got transaction to invalid handle [ 85.917192] binder: 10226:10238 transaction failed 29201/-22, size 40-16 line 3008 [ 85.917727] binder: 10226:10238 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 85.917731] binder: 10226:10238 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x7fe) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={r1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002000-0x11)="2f73656c696e75782f72656c6162656c00", 0x2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r3, 0x89e1, &(0x7f0000008000)=0x6) syz_open_dev$usbmon(&(0x7f0000006000)="2f6465762f7573626d6f6e2300", 0x1, 0x10000) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x58, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x4d, 0x0, &(0x7f0000004000-0x4d)="a4896e5f3b5223d305b48367925bb567742bf9adf5e76123e4b560ba40141832638abfd8f4c220e60241375da32bd50b1c410b4b363fab3e6c74e699ec0962452b000b3bb2e8b6b3a2c23f5c92"}) dup2(r2, r0) 2017/12/14 11:57:41 executing program 5: mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x8006, 0x6032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000841000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x40) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x400031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000005000-0x18)={0x4e, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 85.917734] binder: 10226:10238 got reply transaction with no transaction stack [ 85.917737] binder: 10226:10238 transaction failed 29201/-71, size 0-8 line 2924 [ 85.927776] binder: 10226:10238 got reply transaction with no transaction stack [ 85.927780] binder: 10226:10238 transaction failed 29201/-71, size 2-1144397507205 line 2924 [ 85.927804] binder: BINDER_SET_CONTEXT_MGR already set [ 85.927807] binder: 10226:10248 ioctl 40046207 0 returned -16 [ 85.940568] binder: 10226:10248 got transaction to invalid handle 2017/12/14 11:57:41 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x70, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x58, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, r1, 0x2}, @flat={0x73682a85, 0x10a, r2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f000000c000+0xb73)="f3", 0x8e, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x0}, @exit_looper={0x630d}, @increfs_done={0x40106308, r3, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = mmap$binder(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x20010, r0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x5c, 0x0, &(0x7f000000c000)=[@transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f000000f000)=[@ptr={0x70742a85, 0x0, &(0x7f000000b000-0x1)=0x0, 0x1, 0x3, 0x1d}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f000000f000)=[0x0, 0x38, 0x28, 0x48, 0x78]}}, @acquire={0x40046305, 0x0}, @clear_death={0x400c630f, 0x0, 0x0}], 0xd1, 0x0, &(0x7f000000e000)="62164b44a5c310affb2298c00500036e8915400419dae89c450a387ad57900deff08615bd7c2d553000000000000000c0e41a052600c822c2d8d8f871ff1ed244f0f2c000000000000014c001f04317e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c2ab165921f7c0494781ebf9a8702e5c8070000000000000095c0920a655334554a5239e667da00000000000000080001d7cf69ba000000400000000000000c00000004d436e1046a24cde3074a221edb96a57daf9aa006d38701bb5c6f172c6a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r4, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r5, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r6}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r6, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r5, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r4, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r7 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000)=[], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) 2017/12/14 11:57:41 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x3, r0, 0x0, 0x40000008, &(0x7f0000003000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x2) r2 = syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r3 = syz_open_dev$binder(&(0x7f0000004000)="2f6465762f62696e6465722300", 0x0, 0xf22f2c65fb95fb41) r4 = syz_open_dev$binder(&(0x7f0000004000)="2f6465762f62696e6465722300", 0x0, 0x2) poll(&(0x7f0000005000-0x20)=[{r1, 0x80ef, 0x0}, {r2, 0x400, 0x0}, {r3, 0xa082, 0x0}, {r4, 0x1000, 0x0}], 0x4, 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003000-0xd)="2f73656c696e75782f6d6c7300", 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003000-0x8)={0x0, 0x1}, &(0x7f0000005000-0x4)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000002000)={r6, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x7}, &(0x7f0000004000)=0x98) 2017/12/14 11:57:41 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)="6d61705f66696c657300") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)="2f6465762f73657175656e6365723200", 0x3f8, 0x0) getdents(r0, &(0x7f0000001000)="", 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f000000a000-0x60)={0x0, 0x2f, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000000b000-0x4)=0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f000000c000-0x18)={0x0, 0x7, 0x30, 0x4, 0x7fffffff}, &(0x7f000000c000-0x4)=0x18) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000000b000)={r2, @in6={{0xa, 0x1, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffff9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x2, 0x1, 0x0, 0x317, 0x4, 0xfff, 0x53f, 0x1000, 0xff, 0x9, 0x100000001, 0x7fffffff, 0x9, 0x100]}, &(0x7f0000005000)=0x108) timer_delete(r1) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000008000)="2e2f66696c653000", 0x4) 2017/12/14 11:57:41 executing program 2: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009c2000-0xa)="2f6465762f70746d7800", 0x3, 0x0) r1 = epoll_create(0x9) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000fdd000-0xc)={0x9000000e, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)={0x10000000, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000197000-0x4)={0xde3f}, 0x4) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fdd000)=0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f000039d000-0x8)="656e7669726f6e00") poll(&(0x7f0000ecb000-0x38)=[{r0, 0x10, 0x0}, {r2, 0x4, 0x0}, {r3, 0x100, 0x0}, {r0, 0x5040, 0x0}, {r3, 0x1100, 0x0}, {r3, 0x1080, 0x0}, {r1, 0x401, 0x0}], 0x7, 0xa71e) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000fde000)=0xffffffff, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x4) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000653000-0x4)=0x6, 0x4) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000fe0000-0x8)="6b657972696e6700", &(0x7f0000fe0000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000fdf000)="7573657200", &(0x7f0000fdf000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000fdf000-0x4)="0100675f6b657923", &(0x7f0000fde000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000fde000)="2f6465762f70746d7800", r5) keyctl$set_timeout(0xf, r4, 0x100000000000d) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10900000, &(0x7f0000fdf000)="54119b0bf7ed003c0f40adbce41d534da3499d052cdc9e4920deff8af59719439bbd9fb0b608d4387a2450b18f9d2f5d58073613253a30e2ce897de69e17a5f9a17776060be8aafc192ceffd000ca0b82529e4e7bed7e22e2c83bbeb3e2030bd2ceb857b5954faa9b9149d5faeeb2d0ab2396b52a4845a90bcea5aa508c457b8ec1d4a41911d92e611209f70026d2c2f5c35703291d1961061b04c90fa00ebeb2ff2566fc87ad0c0b189627859127c8421fc571011a44a1b23202d137cafb252c7df7bc4490e483457fe4e4292a71613a50314dd1eba8e1fd075a55be10a885f1e8d3b80ca", &(0x7f0000fb2000-0x4)=0x0, &(0x7f0000fdf000)=0x0, &(0x7f0000fdf000)="e3e8d576d25c104d15aa0a307535a35047c2d5de394b906f33") mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000fdf000)=0x3) 2017/12/14 11:57:41 executing program 5: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={r3, 0x0, 0x0, 0x0}) close(r1) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x6, 0x8, &(0x7f000000e000-0x8)={0x0, 0x0}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000008000)=0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f000000e000-0x4)=0x0, &(0x7f000000e000-0x4)=0x0, &(0x7f000000d000+0xf49)=0x0) r7 = getgid() r8 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008000-0xe8)={{{@in=@empty=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000c000-0x4)=0xe8) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x5, &(0x7f000000d000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r11 = getpgrp(0xffffffffffffffff) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f000000e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f000000e000-0x4)=0x0, &(0x7f000000e000-0x4)=0x0, &(0x7f0000000000)=0x0) sendmsg$unix(r4, &(0x7f0000009000)={&(0x7f000000d000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f000000d000)=[{&(0x7f0000007000-0xca)="fcbc1aa25f2a8db77b163a4c7bba7e42c247714c5cd4e76612cc42a2fa282c41f362421fa613de639b81363c65d0b5221aea83e308be44382b688cd065bd152cf782585130791c3e5d785b4629e31fb99d0570fda0605383fe831ebfcdf4e2384a5e14297b57d67a514aeeba34992df8bb8d9ea7bbc9f84b100d82562bc0984e34edf78f536cd3d1af4b1e29ae7138822551c16443660f316afa7c8058286382ea3533b73ce61405b895cfeb244bb183c9e3d97414a92f58c5c9c88014c899fca641d6f40300fb6a2c0b", 0xca}, {&(0x7f000000d000)="d244a514e31e0f2f724edd19121b3bc98acaf1074f3125d0d0afd35bbd223172f756823e2fb44166927dcf96f8911168684a03f7f21f32971d082210a99fdda80a688e827fa3e8ff8bdc0afe419016fcf984ec062aeece2711b9b62033f1dd8022401471f9888af5666096605432336e22720db3491c990ab530cd002dcd3be21301454d0440f08dbddbfca26c0c3359deb537e5eed645955a85ddf3af40b4e75d915f5ee19b2c253defdc8b2f77ffe321937e18d248288ca3e1bab9d1570ceca081176c65e72f71f2ea86f99b4e67e27f106815e4815aca4a", 0xd9}, {&(0x7f0000001000)="68da9ecd6d9af35b8cfeb6b260239ce91a656347c6e9d3dca3be004f19b42bd625e00746a67de209a2cee899878061876c1d5316aff24ff902d6f5af110a999b67d274ba17bd9d9432bbee23008dccf96773198de56b700f790d9be001a8956a32a419db17684073c890115d6a5a62f2384927d153e3ab2d9323b3fde4606a1286bc0a41b1563809ea76935469fbd9e2bbe2593d885c4b25809ddab391ceb905d1f953890628225ccc26fb51756b0c74", 0xb0}], 0x3, &(0x7f0000006000-0x90)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x10, 0x1, 0x1, []}, @rights={0x20, 0x1, 0x1, [r2, r1, r0, r2]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x90, 0x8001}, 0x4000) syz_open_dev$binder(&(0x7f000000b000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x48, 0x0, &(0x7f000000d000-0x48)=[@exit_looper={0x630d}, @enter_looper={0x630c}, @exit_looper={0x630d}, @clear_death={0x400c630f, 0x1, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper={0x630c}, @acquire={0x40046305, 0x3}], 0xbb, 0x0, &(0x7f000000c000)="4159895b9255b3da0e1c8567855c4b1c4e0a5a2b22e6bff2176876e964fc93dd16637121620869d06bf6c2680f4aae385511e95c35b730456f95d3b55b3078d9dd6e57b9c94310dca3e10d673b28128a58605d3fce740c8989ab206c1554b4cee74945aab000baa489a9a77aafc058751ae981e17bcd76de3feda92594095e7fda5d45f492c866c269df283e96ec820142f84f1ea4b9c249479285c85d5c8272a0af4607f6d7f9c6f02419f2efb0cac57a98a16c9561103e008cf3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) [ 85.940572] binder: 10226:10248 transaction failed 29201/-22, size 64-40 line 3008 [ 85.941720] binder: 10226:10238 Acquire 1 refcount change on invalid ref 1 ret -22 [ 85.941724] binder: 10226:10238 got transaction to invalid handle [ 85.941727] binder: 10226:10238 transaction failed 29201/-22, size 64-32 line 3008 [ 85.945526] binder: 10226:10248 unknown command 0 [ 85.945530] binder: 10226:10248 ioctl c0306201 20003000 returned -22 [ 85.946690] binder_alloc: 10226: binder_alloc_buf, no vma [ 85.946721] binder: 10226:10248 transaction failed 29189/-3, size 0-0 line 3131 2017/12/14 11:57:41 executing program 1: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$getreaper(0x7, &(0x7f00002bf000-0x8)=0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x69) r2 = mmap$binder(&(0x7f0000045000/0x400000)=nil, 0x400000, 0x2, 0x40012, r0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f000008e000/0x3000)=nil, 0x3000, 0x2000000, 0x21011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000038c000)={0x98, 0x0, &(0x7f000009f000-0x98)=[@increfs_done={0x40106308, r2, 0x2}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0xc3, 0x10, 0x0, 0x0, 0x20, 0x18, &(0x7f00003a9000-0x20)=[@fda={0x66646185, 0xdb8, 0xcf4, 0x4435}], &(0x7f00004ec000)=[0x20, 0x30, 0x38]}, 0x7}}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r3}, @register_looper={0x630b}], 0xb6, 0x0, &(0x7f0000305000)="a040dadf725b6c88ac0fef54634c8a036002c3ee6e1e14d9444e6e96e301cda6783c0c3276a190cea4581ca95e2a1c1e6bd1853bece3abc3095949eed0cf6293c6f630ebfea68dfda0522cb4c280ae62738760b991b8f79c097a412036b6396b62440ef161d3fd53e3f1266b5b40d4c5e9a4081568bcf3be0148d366ee3fd31f07b1edbf042e0bed36292516271ec6e1b8eeac106700f291fa5718b7c75e0240deed6ecb026e6728bcec4eec80158393e498b6c5390a"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40286608, 0x480002) 2017/12/14 11:57:41 executing program 0: r0 = socket(0xc, 0x80007, 0x40000000000000) listen(r0, 0x92) accept$unix(r0, &(0x7f000087f000-0x57)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f00006a7000)=0x57) r1 = accept4$inet(r0, &(0x7f0000c32000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d2a000)=0x10, 0x0) clock_gettime(0x5, &(0x7f00005f1000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000455000-0x10)={0x0, 0x0}, 0x10) syz_open_dev$random(&(0x7f00005f2000-0xc)="2f6465762f72616e646f6d00", 0x0, 0x50f340) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000f4a000-0x17)="6e65742f6970365f7461626c65735f7461726765747300") mmap(&(0x7f0000ec3000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) socketpair$unix(0x1, 0x80010000000005, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000cc1000)=[@in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, @in6={0xa, 0x1, 0xfffffffffffffffa, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x401}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @rand_addr=0x100000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x6) fcntl$setsig(r5, 0xa, 0x12) readv(r6, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)="00", 0x1}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000e5b000-0x10)={0x4, &(0x7f0000f22000)=[{0x6, 0x8, 0x7fff, 0x2}, {0x7, 0x1dfef077, 0x5, 0x6}, {0x100000001, 0x4, 0xfffffffffffffffd, 0x43}, {0xfff, 0x3, 0x1f, 0x20}]}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000d3d000)="7e2031d1305a5dcbf383ff402c73c2e66d2a719d3faafd5eabc6b3035d2211dd1bd9e8fa8c95ef", 0x27) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0xfffffffffffffffd, 0x81000002) sendmsg(r7, &(0x7f0000f66000-0x38)={&(0x7f0000f61000)=@generic={0x1e, "daf8ffffffffffffff317a5332b0cfb61b340e63f8ab691822e901e7d64ac8fef95059fc0daec57f844686fbbf268f3d6b53efc1cb2ba30001186a68506776e9eba5ebd039273202a527f2faccec35120ec64fa733c1c99276b26eaece2900727e347f814dc256ce82cb2c80ff58911dbff900000000000000076167b456"}, 0x80, &(0x7f0000e7b000-0x50)=[{&(0x7f000071d000)="7a0aee4606792c41b404ab93f1e7b38274b7f23ebe281c593b068461a8cc039170692a5a16", 0x25}, {&(0x7f00004b6000)="050c077739c25acb368e970012857edb30144d8a8653d35243080f909ac36de0fe2b42a0be03e2044e29476c3b04f662e3b52abaa4631631fdf1793c23cfa997d78b710249e0d0f8438af57316bf0276cce47ed8416b7e400322b303df014ef20d5e57337913a0a0e0d58c41c41cfa65ce55c848bf0dd19d6a04c749e29026f84b083714a7539996fd735e2cbddadf1f9582221839d1c17614cf47d4e79ae354347dbe93fd2eed84699a", 0xaa}, {&(0x7f000001b000-0x29)="dad574befd85150bebefec75fe1ed961e3346160f426afb644b051f898d467e784f879c882331a0a71", 0x29}, {&(0x7f0000bae000)="4cd3106e2877ed4f3f553707b18cffd5f5c805d4de5a15ba0d0253927acd09991fedeab789b5a7f4044606b7ef78aa34709659e4ab9c9355f42d78b51f7b3c3d6f2d59a82b5173160fa4ec5758b244c9112c67ca74b38dbc3cc516c335b09963a3ed445107c0d01b5d4f0e7654ad9bee21b7a0ae441846a9575e67a887cb000000000000e24d7b2bdd4d806b59d2edebb8aeaceb8c1a2119c90ddef36fa455c182000000000000e4bc929f29003ae9c849992124", 0xb4}, {&(0x7f0000fc0000-0xd7)="cb1c8d864c4ca6e5874ce1f85c900754aabc6e199d40ca20aef54a99b5511b24909a683b316f197a03f8807302d798566db2280cc28e82130c505f418c48656917682b043efa9dfb3fcdee548236693eabeaf1c280d2a10af27c7d4711994bffbd33cd06b9419e6a9ed87c5e521b53fc68691645377c853609bc1693992b8bcbf1a0c2d3fee19f9fdff507cae481147020c2cdc710786f8e7e4d0f30e57c6477ee20fdeaf2d185f4f9cdbcc058b1283501732f8fd4ec510ad469274fed91f551418587a9252c635ad79826c3a8267ddba0748eedfea89a", 0xd7}], 0x5, &(0x7f0000f57000)=[], 0x0, 0x80}, 0x0) syz_open_dev$mice(&(0x7f0000511000)="2f6465762f696e7075742f6d69636500", 0x0, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001d2000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00002e6000-0x40)=[{&(0x7f0000eb2000)="87db0ec84ec1b218ed4532aa909f7427f08993b714c9c45863df55497b051206eef20ec82c11fa5239f5fbeec7734293d2947b173910652344d6c1ebc14fb6de052d350d4b6c3d177eb08d0674cb44e0ac1b03eaa09c7a2e16feb5628aa1e5ff9b90eef539fa02958e3e311dcc1d842e241eef82440fb2c95c80a243904c91721b129d068ef15fae", 0x88}, {&(0x7f0000366000)="53842516122b11731b1cd5968a74f471791c718525dbefdadc14d46d7bfd8b5fed12ed6f9bf159e6dfdcd99d7a8cd03d1c30ce56eb6741cc45d3ee7724dbe54771925f36501912514d52c702ee9dc81354f23da8726338ce32b952d8a7979be7f68557fd861e54575d7c4946478fc7007a69aa3058a85d78055c0e12d8beb7fcc684e033a1ed0244f4015811dd3bc9b71e7635a09373c02d7f97ab86808f750efa50819826e1d80866ebe5d71afd81cc664e36451926b76a773b02aea8a0e327f560ad4a30fdb8c3bba5f2d01de0223b43b3ddd4cfbc3f9f14a46ffb6a", 0xdd}, {&(0x7f0000f1a000)="e60b51f6ba0209404f816a5d22063f8a0d3186ddd1701894c87ebba04fec8cee2fa4c632811988ba26c76efa9db56eb7ac5f0f8573bddc04561134bdfa13cca80d3f55602d7b8ba393ff3d90ae6f55db223cf07ed7ba60151c9c666c111a5398f0c01c82ecbb2bb39103761231229510df0da03a384c326a8792f8bb55739be5b94855d62b60c37d", 0x88}, {&(0x7f00006d6000-0xa9)="6bbb19455be37157081705232f32002d1a9bd353acafa95ccce88605074fb82759db334c2b25313df82d836d7104a2b36fe0be63fe3a839ca409faf5a096314069ba357702218642a45858a7db4e2efe14065b4304a99ae75dcc49c59b3253cf02d27ee78859f94c7975d3923803c870c1b06ba4676786d009646d074e50b3ec23678377d91a1a22cbfd5c79447d59249549d25da2ac9e17e1d53cd99e3fa7619ea36af45ddad37eee", 0xa9}], 0x4, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18, 0x0}, 0x0) recvmsg(r10, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)="", 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x4, 0xff, 0x2, 0x5d2, 0x8000}, &(0x7f000070b000-0x40)={0xffffffffffffffe1, 0x6, 0xb4, 0x1, 0xffffffffffffff00, 0x100000000, 0x6152, 0x0}, &(0x7f00008e6000-0x10)={r2, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0xfff}, 0x8}) [ 85.966731] binder: undelivered TRANSACTION_ERROR: 29189 [ 85.966867] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.966881] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.966908] binder: undelivered transaction 1486, process died. [ 85.973813] binder: 10257:10275 ioctl 40046205 2 returned -22 [ 86.009103] binder: 10270:10276 ioctl 801c581f 800001 returned -22 [ 86.037014] binder: 10284:10290 ERROR: BC_REGISTER_LOOPER called without request [ 86.041431] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/14 11:57:41 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)="2f6465762f73657175656e63657200", 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdf) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0x3)="2f6465762f62696e6465722300", 0x0, 0x7fe) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1) r2 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40086602, 0x47bfff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001000-0x8)=@assoc_value={0x0, 0x7f}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001000-0xa0)={r3, @in6={{0xa, 0x2, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1f, 0x10000, 0xec, 0x3, 0x7fff}, &(0x7f0000002000-0x4)=0xa0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ef4000-0x16)="2f73656c696e75782f636865636b72657170726f7400", 0x48000, 0x0) accept4$unix(r0, &(0x7f0000500000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007c6000)=0x8, 0x80800) r1 = syz_open_procfs(0x0, &(0x7f0000ff2000)="6175787600") sendfile(r1, r1, &(0x7f0000b1a000-0x8)=0x0, 0x401) [ 86.050280] binder: 10257:10287 ioctl c0189436 800081 returned -22 [ 86.051512] binder: 10257:10287 ioctl 40046205 2 returned -22 [ 86.059801] binder: 10295:10299 got reply transaction with no transaction stack [ 86.059805] binder: 10295:10299 transaction failed 29201/-71, size 2-1144397507205 line 2924 [ 86.063111] binder: 10295:10299 got transaction to invalid handle [ 86.063115] binder: 10295:10299 transaction failed 29201/-22, size 64-40 line 3008 [ 86.063174] binder: 10295:10299 Acquire 1 refcount change on invalid ref 1 ret -22 [ 86.063177] binder: 10295:10299 got transaction to invalid handle [ 86.063180] binder: 10295:10299 transaction failed 29201/-22, size 64-32 line 3008 [ 86.081938] binder: 10295:10299 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 86.081943] binder: 10295:10299 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 86.081947] binder: 10295:10299 got reply transaction with no transaction stack [ 86.081950] binder: 10295:10299 transaction failed 29201/-71, size 0-8 line 2924 [ 86.091509] binder: 10295:10299 got reply transaction with no transaction stack [ 86.091513] binder: 10295:10299 transaction failed 29201/-71, size 2-1144397507205 line 2924 [ 86.091625] binder: BINDER_SET_CONTEXT_MGR already set [ 86.091628] binder: 10295:10304 ioctl 40046207 0 returned -16 [ 86.092659] binder: 10302:10305 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 86.095863] binder: 10302:10305 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 86.095879] binder: 10302:10305 Release 1 refcount change on invalid ref 4 ret -22 [ 86.095882] binder: 10302:10305 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 86.095886] binder: 10302:10305 Acquire 1 refcount change on invalid ref 3 ret -22 [ 86.096001] binder: 10302:10305 tried to acquire reference to desc 0, got 1 instead [ 86.099488] binder: BINDER_SET_CONTEXT_MGR already set [ 86.099492] binder: 10302:10305 ioctl 40046207 0 returned -16 [ 86.102554] binder: 10295:10299 unknown command 1717854597 [ 86.102577] binder: 10295:10299 ioctl c0306201 2000efd0 returned -22 [ 86.102591] binder: 10295:10304 Acquire 1 refcount change on invalid ref 1 ret -22 [ 86.102596] binder: 10295:10304 got transaction to invalid handle [ 86.102600] binder: 10295:10304 transaction failed 29201/-22, size 64-32 line 3008 [ 86.102779] binder_alloc: binder_alloc_mmap_handler: 10284 20000000-20002000 already mapped failed -16 [ 86.112090] binder: 10295:10299 BC_INCREFS_DONE uffffffffffffffff no match [ 86.112096] binder: 10295:10299 got transaction to invalid handle [ 86.112099] binder: 10295:10299 transaction failed 29201/-22, size 40-16 line 3008 [ 86.113065] binder: BINDER_SET_CONTEXT_MGR already set [ 86.113068] binder: 10284:10300 ioctl 40046207 0 returned -16 [ 86.113886] binder_alloc: 10295: binder_alloc_buf, no vma [ 86.113916] binder: 10295:10299 transaction failed 29189/-3, size 0-0 line 3131 [ 86.115077] binder: 10284:10300 ERROR: BC_REGISTER_LOOPER called without request [ 86.116790] binder: undelivered TRANSACTION_ERROR: 29189 [ 86.116864] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.116889] binder: undelivered transaction 1497, process died. [ 86.139530] binder: 10311:10315 BC_INCREFS_DONE uffffffffffffffff no match [ 86.139537] binder: 10311:10315 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 86.139541] binder: 10311:10315 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 86.139545] binder: 10311:10315 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 86.139550] binder: 10311:10315 got transaction to invalid handle [ 86.139553] binder: 10311:10315 transaction failed 29201/-22, size 32-24 line 3008 [ 86.143860] binder: BINDER_SET_CONTEXT_MGR already set [ 86.143864] binder: 10302:10305 ioctl 40046207 0 returned -16 [ 86.143885] binder: 10302:10307 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2017/12/14 11:57:42 executing program 6: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)="2f6465762f70746d7800", 0x0, 0x0) r1 = epoll_create(0x9) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000fdd000-0xc)={0x9000000e, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)={0x10, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000fde000-0x8)="2e2f66696c653000", 0x1) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fdd000)={0x0, 0x0}, 0x800) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000fdd000)={0x10de3e}, 0x4) mmap(&(0x7f0000fdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fdd000)=0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f000039d000-0x8)="656e7669726f6e00") poll(&(0x7f0000ecb000-0x38)=[{r0, 0x10, 0x0}, {r2, 0x4, 0x0}, {r4, 0x100, 0x0}, {r0, 0x5040, 0x0}, {r4, 0x1100, 0x0}, {r4, 0x1080, 0x0}, {r1, 0x401, 0x0}], 0x7, 0xa71e) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000fde000)=0xffffffff, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x4) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000653000-0x4)=0x6, 0x4) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000fe0000-0x8)="6b657972696e6700", &(0x7f0000fe0000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f000096e000)="7573657200", &(0x7f000010b000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000fdf000-0x4)="0100675f6b657923", &(0x7f0000fde000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000fde000)="2f6465762f70746d7800", r6) keyctl$set_timeout(0xf, r5, 0x100000000000d) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10900000, &(0x7f0000fdf000)="54119b0bf7ed003c0f40adbce41d534da3499d052cdc9e4920deff8af59719439bbd9fb0b608d4387a2450b18f9d2f5d58073613253a30e2ce897de69e17a5f9a17776060be8aafc192ceffd000ca0b82529e4e7bed7e22e2c83bbeb3e2030bd2ceb857b5954faa9b9149d5faeeb2d0ab2396b52a4845a90bcea5aa508c457b8ec1d4a41911d92e611209f70026d2c2f5c35703291d1961061b04c90fa00ebeb2ff2566fc87ad0c0b189627859127c8421fc571011a44a1b23202d137cafb252c7df7bc4490e483457fe4e4292a71613a50314dd1eba8e1fd075a55be10a885f1e8d3b80ca", &(0x7f0000fb2000-0x4)=0x0, &(0x7f0000fdf000)=0x0, &(0x7f0000fdf000)="e3e8d576d25c104d15aa0a307535a35047c2d5de394b906f33") mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000fdf000)=0x3) 2017/12/14 11:57:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={@generic="14204b56ba0caa3a0313cedfc69c4afd", @ifru_flags=0x0}) mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="636f726564756d705f66696c74657200") ioctl$TCSETS(r1, 0x5402, &(0x7f0000005000-0x24)={0x3, 0x81, 0x1, 0x101, 0x200000000000009, 0x2, 0x9, 0x9, 0x1, 0x3, 0x100000001, 0x4}) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000005000)=0x0, &(0x7f0000018000-0x4)=0x4) pwritev(r1, &(0x7f000000d000)=[{&(0x7f0000014000-0xa8)="39", 0x1}, {&(0x7f0000015000)="28", 0x1}], 0x2, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000007000-0x8)="6b657972696e6700", &(0x7f000000e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000018000-0x6)="6c6f676f6e00", &(0x7f0000018000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000011000-0x20)="21b050998b40a5a64f072d90fdd84d8cebe1775d3a88f0c6a21a1960d7d19643", 0x20, r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000014000-0x4)={0x1, 0x0, []}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2017/12/14 11:57:42 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40d, &(0x7f00004ca000)=0x0) r1 = open(&(0x7f000044f000)="2e2f66696c653000", 0x20000, 0x40) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00001be000-0x77)={0x0, 0x6f, "62bf6a44c827a8a364cb16e4791afae245868231d50bc2722b8432b4395231ce4e53e591bfa3d77b31c0b4d2750ad4dbc37c51b63ceac21a669dc7c87e3a2023fdbeee45f66b3e08f9b1b600a6761e0d9586d247468943a77912444b014de3bec3a75e494e9b53d6385b94e231ac79"}, &(0x7f000013d000-0x4)=0x77) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00002be000)={r2, 0x0}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004ec000)={0x8, 0x0, &(0x7f00004ec000)=[@decrefs={0x40046307, 0x2}], 0xda, 0x0, &(0x7f0000257000)="5b0b2d8f69ec8e4eec77f6e5fe9e06ed30ced1ced07891ac5aa68c50f040332cf2999f1912121b78fd1742ff7cbc597ddbb9b1884409a22b81a810dade5d94d288c7bc6e2b80ad3788d47fb7c0b4d786680e2b7537af67bc70a97de2e4ecb608b7484d6c3d56ed7c0b5762ca82240d2c65f313b56454ea48d802fa372ad480675c6ff71dbbbe6c4a95c5e24bb8f26719a490aff0754ebd0fc28d3b8f4ba526558a1da20745cc8b1934f5cb55add0917146d03c6d784a4fc6142dfd59839cc0f6fa2bbdb769b5f2fcc5ded663cd7d159e1ae83b5f09bb0d33b936"}) mmap$binder(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x4fc0c795df9806e8, 0x42010, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40286608, 0x480802) close(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r0) poll(&(0x7f000010f000-0x20)=[{r0, 0x44, 0x0}, {r0, 0x42d6, 0x0}, {r0, 0x8, 0x0}, {r0, 0x200, 0x0}], 0x4, 0x6) 2017/12/14 11:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)="2f6465762f72746300", 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$LOOP_CLR_FD(r0, 0x80247009) 2017/12/14 11:57:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x400000000000, 0x0, 0xffffffffffffffe0}, {0x16, 0x0, 0x0, 0x0}]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000055c000)={0x0, 0x0}) connect$inet(r0, &(0x7f0000a24000)={0x2, 0x2, @rand_addr=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setsig(r0, 0xa, 0x0) syz_emit_ethernet(0xc6, &(0x7f00007d8000-0xc6)={@random="ef84060c29a7", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr=0x0, @empty=0x0, {[@lsrr={0x83, 0x13, 0xd, [@multicast1=0xe0000001, @broadcast=0xffffffff, @empty=0x0, @multicast2=0xe0000002]}, @noop={0x1}, @cipso={0x86, 0x42, 0x4, [{0x400000000007, 0x2, ""}, {0x2, 0x5, "61b300"}, {0x0, 0x12, "de37310fb26a14945d3227ba7eb6de6b"}, {0x5, 0xc, "b7eec7da5bdf94d56bfc"}, {0x1, 0x12, "58c26d387aa116adeac8b90d7400273b"}, {0x3, 0x5, "03705e"}]}, @cipso={0x86, 0x30, 0x6, [{0x7, 0x10, "2cf6e50860e5f349f1b47a261c24"}, {0x1, 0x5, "238bad"}, {0x7, 0x10, "cc1eec3fb64cd8cccee42c6754f3"}, {0x1, 0x5, "ed72b3"}]}]}}, ""}}}}}, 0x0) r2 = open(&(0x7f0000789000-0x8)="2e2f66696c653000", 0x40940, 0x400080) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000a0a000)={0x0, 0x8, 0x8000, 0x1}, &(0x7f0000541000)=0x10) clone(0x6008100, &(0x7f0000f0e000-0x20)="f808b52343d71c42b6aae345c93a4d45fb722bd5cf239bec68d7454b7b57ffd0", &(0x7f0000440000-0x4)=0x0, &(0x7f00005f1000-0x4)=0x0, &(0x7f0000e0a000-0x1000)="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") getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00001a0000)={0x0, @in6={{0xa, 0x1, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x3ff, 0x80, 0x7, 0x4, 0x2, 0x9, 0x1, 0xe4b, 0x4, 0x4, 0x4, 0x0, 0x8a0, 0x0, 0x3200bdd3]}, &(0x7f0000054000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00001ec000)={r4, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000f88000)=0x8c) syz_emit_ethernet(0x42, &(0x7f0000304000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x6, 0x4, 0x0, 0x400000001, 0x34, 0x0, 0x0, 0x0, 0x102, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[@generic={0x87, 0x2, ""}]}}, @igmp={0x12, 0x0, 0x0, @loopback=0x7f000001, "445a4158e90252e50016307a07e27ebf07df9120"}}}}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) fchmodat(r2, &(0x7f0000c3a000)="2e2f66696c653000", 0x21) r6 = accept(r1, &(0x7f0000472000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc7000)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00007e1000-0x8)={r3, 0x8}, &(0x7f0000bb0000-0x4)=0x8) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffc) r8 = socket(0x1d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00004f8000)=0x0, &(0x7f0000d7b000-0x4)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000c13000-0x6f)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x100000000, 0x0, 0x9, 0x8}, &(0x7f0000db3000)=0xa0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00007c4000)={r7, @in6={{0xa, 0x2, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x20}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x2d76, 0x3, 0x800, 0xe}, &(0x7f0000ec4000)=0xa0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f00008dc000)=r9, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00001c6000)=0x4, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000b00000)=0x0, &(0x7f000043c000-0x4)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(r8, &(0x7f0000c19000)="5a21708f7d7bd1dd37bd8453db061eec5df32e0c3b15afce09019a8a18f5229d908a5075a1fda82b3e9b56bbca4bb21e3e0d2dd1356d94584a2621bdc84f642d30645c233d7715f9f80d000000098508191282665c921f28dee17773b82322a1f9eefcbd9c8c93d17971ae65b4325b6517dcc96f1326c7c1c8d291bda520ef03005c4da85399a72534a77bb5b1895c145e65df20ed04876a3709b5bb024496883bbcb68795ec47cea1369a95e10cb00f9649e63d381311", 0xb7, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000128000-0x4)=0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00008bc000)={&(0x7f0000648000/0x2000)=nil, 0x1000000000001, 0xfffffffffffffffb, 0x9d, &(0x7f0000425000/0x4000)=nil, 0xfffffffffffffff9}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00003a1000)=0x80000207, 0x4) syz_extract_tcp_res$synack(&(0x7f0000966000)={0x0, 0x0}, 0x1, 0x0) 2017/12/14 11:57:42 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f000005b000-0x4)=0x0) ptrace$peekuser(0x3, r0, 0xfffffffffffffff7) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000008e000/0x2000)=nil, 0x2000, 0xa, 0x10, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004eb000)=[], 0x1, 0x0, &(0x7f0000116000-0x1)="9c"}) r3 = syz_open_dev$mice(&(0x7f00004e6000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x2) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f00000a9000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000043000)=0xfc) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc020660b, 0x20000008) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00004ee000)=0x0) syz_open_dev$binder(&(0x7f00004ed000)="2f6465762f62696e6465722300", 0x0, 0x2) 2017/12/14 11:57:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000c68000)="2e2f66696c653000", 0x200000, 0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000866000)={0x400000000400, 0xe5, 0x1e, 0x1}) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000dce000)="2e2f66696c653000", 0xffffffffffffffde) unlink(&(0x7f0000af7000)="2e2f66696c653000") r2 = accept(r1, 0x0, &(0x7f00000fe000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000099000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r3, &(0x7f0000c9d000-0x1)="", 0x0, 0x20008045, &(0x7f0000b04000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000b57000-0x4)={0x3, 0x4, 0x2004}, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000b60000-0x18)={0x0, 0x8001, 0x30, 0x7fff, 0x2}, &(0x7f00002d3000-0x4)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000400000-0x20)={0x7, 0x9, 0x8000, 0x1ff, 0x5bd57cd3, 0x9, 0xffffffff, 0x4, r5}, &(0x7f0000120000)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f000054a000)={r6, @in6={{0xa, 0x3, 0x7, @loopback={0x0, 0x1}, 0xffffffffffffff04}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x1, 0x6, 0x800, 0x685}, &(0x7f0000061000-0x4)=0xa0) r7 = syz_open_procfs(0x0, &(0x7f00006e8000-0xb)="6e65742f7061636b657400") modify_ldt$write(0x1, &(0x7f0000ef6000-0x10)={0xaf5, 0x0, 0xffffffff, 0x2, 0x800, 0x9, 0x65, 0x4, 0xdc, 0x0}, 0x10) chroot(&(0x7f00000f4000-0x8)="2e2f66696c653000") acct(&(0x7f0000df5000)="2e2f66696c653000") ioctl$TIOCSPGRP(r7, 0x540f, &(0x7f0000c60000-0x4)=0x0) sendmsg$key(r7, &(0x7f0000bc5000-0x38)={0x0, 0x0, &(0x7f00003bd000-0x10)={&(0x7f00000ff000-0x40)={0x2, 0xd, 0x7fffffff, 0x0, 0x8, 0x0, 0x100, 0x8, [@sadb_sa={0x2, 0x1, 0x2, 0x1, 0x100000001, 0xdb, 0x0, 0x0}, @sadb_lifetime={0x4, 0x3, 0xffffffffffffff46, 0xfff, 0x8, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00006e0000)=0x0, &(0x7f0000738000-0x4)=0x4) remap_file_pages(&(0x7f0000dac000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x40002) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0xfffffffffffffffc) writev(r8, &(0x7f000001d000)=[{&(0x7f000007a000-0x39)="390000001300194704000000000900fff0000100030000006c00ff0000008005110001000400000000000000040000011018e9070000000000", 0x39}], 0x1) 2017/12/14 11:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00003ae000-0x9)="2f6465762f72746300", 0x8000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000553000)=0x0) r2 = perf_event_open(&(0x7f0000940000)={0x4, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10000000000000fc, &(0x7f0000c13000-0x2)="20a0", &(0x7f0000a3d000-0x4)=0x0, &(0x7f000092c000)=0x0, &(0x7f0000000000)="33") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000aa7000-0x5)="2f6465762f70707000", 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000989000-0x4)=0xbb, 0x4) r4 = accept$netrom(r3, &(0x7f0000d61000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f00000fe000-0x4)=0x48) gettid() perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x3f, &(0x7f000085e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00001f3000-0x4)=0x91) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000c69000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000", 0xe000, r6, r7, 0x2, 0x7fff, 0x408) r8 = dup3(r3, r4, 0x7fffe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r8, &(0x7f0000001000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000003000-0x4)=0x60) llistxattr(&(0x7f0000e95000)="2e2f66696c653000", &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) utimes(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000000000)={{0x0, 0x0}, {0x77359400, 0x0}}) pivot_root(&(0x7f0000f1a000)="2e2f66696c653000", &(0x7f0000414000-0x8)="2e2f66696c653000") mmap(&(0x7f0000666000/0x2000)=nil, 0x2000, 0x3, 0x34, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x320000)=nil, 0x320000, 0x0, 0x32, r2, 0xfffffffffffffffa) r9 = socket(0x10, 0x802, 0x0) dup2(r9, r9) [ 86.143901] binder: 10302:10307 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 86.143916] binder: 10302:10307 Release 1 refcount change on invalid ref 4 ret -22 [ 86.143920] binder: 10302:10307 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 86.143924] binder: 10302:10307 Acquire 1 refcount change on invalid ref 3 ret -22 2017/12/14 11:57:42 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000001000)={0x4, 0x0, &(0x7f00004f0000)=[@exit_looper={0x630d}], 0x0, 0x0, &(0x7f00004f1000-0x2c)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00002dd000)={r1, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000009000-0x48)=[], 0x0, 0x2b) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000d000-0x10)=[{r3, 0x0, 0x0}], 0x1, 0x28) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00003e0000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00003ae000-0x9)="2f6465762f72746300", 0x8000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000553000)=0x0) r2 = perf_event_open(&(0x7f0000940000)={0x4, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x10000000000000fc, &(0x7f00007ea000)="a020", &(0x7f0000a3d000-0x4)=0x0, &(0x7f000092c000)=0x0, &(0x7f0000000000)="33") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000aa7000-0x5)="2f6465762f70707000", 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000989000-0x4)=0xbb, 0x4) r4 = accept$netrom(r3, &(0x7f0000d61000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f00000fe000-0x4)=0x48) gettid() perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000006000-0x4)=0x91) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000c69000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000", 0xe000, r6, r7, 0x2, 0x7fff, 0x408) r8 = dup3(r3, r4, 0x7fffe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r8, &(0x7f0000001000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000003000-0x4)=0x60) llistxattr(&(0x7f0000e95000)="2e2f66696c653000", &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xda) utimes(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000000000)={{0x0, 0x0}, {0x77359400, 0x0}}) pivot_root(&(0x7f0000f1a000)="2e2f66696c653000", &(0x7f0000414000-0x8)="2e2f66696c653000") mmap(&(0x7f0000666000/0x2000)=nil, 0x2000, 0x3, 0x34, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x320000)=nil, 0x320000, 0x0, 0x32, r2, 0xfffffffffffffffa) r9 = socket(0x10, 0x802, 0x0) dup2(r9, r9) [ 86.564835] binder: 10330:10348 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 86.572585] binder: 10330:10348 unknown command 0 [ 86.592443] binder: 10330:10358 ioctl 40286608 480802 returned -22 [ 86.603070] binder: 10330:10348 ioctl c0306201 204ec000 returned -22 2017/12/14 11:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f36000-0x9)="2f6465762f72746300", 0x103000, 0x0) openat(r0, &(0x7f0000d68000)="2e2f66696c653000", 0x481, 0x1) socketpair(0x11, 0x0, 0x0, &(0x7f0000e2c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f000094c000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f000026c000)="2e2f66696c653000", 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000049e000-0xe8)={{{@in=@multicast1=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000)=0xe8) r5 = memfd_create(&(0x7f0000699000-0x9)="2f2465762f72746300", 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000348000-0x4)=0x80000003, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xf, &(0x7f0000d06000)=0x0, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000dd000)=0x1, 0x4) recvmsg(r0, &(0x7f0000ca3000-0x38)={&(0x7f0000b47000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000022000)=[{&(0x7f0000a60000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000fa9000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000014c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x3, &(0x7f0000ca5000-0xb2)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb2, 0x2}, 0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00005e4000)={0x0, 0x81, "390cbb0defd4e1b0515bc433e82f899ab90bd65d85fbfb91c57db1e18fed1c18d1cce7475ffabfc5b1b42ca06a5f12c822abe05344bab410dbaecebe418eb10804df8d8d5d6b1d0ff4de73f0202213ad8486c3dedcb272e19475d3b24889c084ca19014338bd82348038eb9a4d2c6898b0e1ca14fece9b4c72d2b2a11bba43b002"}, &(0x7f0000c64000-0x4)=0x89) sendto$inet6(r1, &(0x7f0000f0f000-0x1000)="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", 0x1000, 0x801, &(0x7f00000d8000)={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000a65000-0x6)={r7, 0x7}, 0x6) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000d1f000)={{0xa, 0x2, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8889}, {0xa, 0x3, 0x400, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401}, 0x7d8, [0xff, 0x308, 0xee92, 0x5e0f, 0x9, 0x6, 0x800, 0xfffffffffffffffc]}, 0x5c) sendto$inet(r5, &(0x7f0000801000)="", 0x0, 0x800000020000000, &(0x7f0000013000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) add_key(&(0x7f000003f000-0x8)="6269675f6b657900", &(0x7f00009f2000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000512000)="", 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sync() socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00001fe000)={@generic="b07300000000000900000000000000c4", @ifru_names=@generic="3bf6756a3fe96d616b00000000000000"}) r8 = openat(r4, &(0x7f0000b53000)="2e2f66696c653000", 0x220600, 0x40) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00008f9000)=0x0) fcntl$setown(r3, 0x8, r9) [ 86.612892] binder: 10361:10363 ioctl c018620b 202dd000 returned -14 2017/12/14 11:57:42 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000c2000-0x4)=0x0) fcntl$setownex(r0, 0xf, &(0x7f000009a000-0x8)={0x1, r2}) mmap(&(0x7f0000158000/0x800000)=nil, 0x800000, 0x8006, 0x6032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000841000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x40) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000684000)={0x0, 0x3, 0x59, 0x8, 0x3, 0x666}, &(0x7f0000002000)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f000043b000-0x6c)={r4, 0x64, "264cc4f93b64360a5ab5e17b3d96cd1dfcd5c867d26069e7cf10828f98507b566a295e59dbf10d234f9045710394eea3b6fe97fa3a668ea8a05233125ba49f443c1aa262aa22ece6c41c38cf424091aa0b2cfeba8cd777d0531d77c94c76c2a3dbba7042"}, &(0x7f000025b000-0x4)=0x6c) syz_open_dev$binder(&(0x7f0000002000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x400031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000005000-0x18)={0x4e, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x415000)=nil, 0x415000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:42 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000006000)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x3}, @enter_looper={0x630c}, @enter_looper={0x630c}, @acquire_done={0x40046307, 0x0, 0x0}, @clear_death={0x400c630f, 0x3, 0x2}], 0x8f, 0x0, &(0x7f0000004000)="2fd13ce360012f614ab22e8678092979973247353767a6d30192641df8cf53459d745fc4977ef1699fc9552cc414fea7e457e45a70e9b562b3b5d3d6117fb225ec8c146ffe8e36721254952a64938e8b9d3c142b795419e8357fbe46c3f00de319502dd0d9db38eb11117423dc97fd824e39f57cfbc3ab353acb259dc7fa5cbb93679bffb970eb90ff249d0533e252"}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f73656c696e75782f61636365737300", 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000009000-0xc)=[@acquire_done={0x40486311, 0x0, 0x0}, @increfs={0x40046304, 0x0}], 0x2, 0x0, &(0x7f0000009000-0x2)="c55b"}) 2017/12/14 11:57:42 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000008000)=""}) r2 = syz_open_dev$binder(&(0x7f0000006000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0xdd, 0x0, &(0x7f0000002000)="b15eeabf520001c79d69724fca1a167f23f7655c5dc60e70ed3ec0f0bac34e9676848dc99cd8ada7463a411f988b4675ad9a4376b057c15f729b8bbe04c5af34e1ee298fd9d4758cbf2a6ee35182a1fa0845b547eadb1e6365281d2b8e5e8b70920dc629fd19eef433596feab3ab84b6652e74b24851465bf14f176b689f524c97f4b87b26cd0be6515390479287bc7abd2461f95c089fd4578acd6707ffdea15e1c75dadfa65d45db9333f46649fe35f6b971e98c265fcdeaa4fc6b20c4b32039c24e78d6606b604688a0aebc0c51715b1b4deaf26a3817e0887163b6"}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000009000)="2f6465762f62696e6465722300", 0x0, 0x800) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0xe, 0x1, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f000000b000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10001}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0xa4, 0x0, &(0x7f000000b000-0xa4)=[@register_looper={0x630b}, @free_buffer={0x40086303, r4}, @exit_looper={0x630d}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x48, 0x8, &(0x7f000000a000)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x0}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f000000b000-0x8)=[0x18]}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x70, 0x20, &(0x7f000000a000)=[@ptr={0x70742a85, 0x1, &(0x7f000000a000)="8e", 0xa, 0xd801, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f000000a000)="d8", 0x72, 0x20, 0x4}], &(0x7f0000005000)=[0x18, 0x28, 0x38, 0x48]}, 0x8000}}], 0x54, 0x0, &(0x7f000000a000-0x54)="312b2b9c8485c3ba0627aa80b832f25173322e933b88748c035f56460f14860c469429c22330abf5433c3750569b0af43059e93cb16dba5f6080ca7f48ce2833a25e7373e50aad38d6d3b090900b9c4e247663d3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x50, 0x0, &(0x7f0000004000-0xd4)=[@free_buffer={0x40086303, 0x20400000000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000e000-0x1)=[], &(0x7f000000d000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4f)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f000000d000-0x8c)={0x0, @in6={{0xa, 0x3, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffb87}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000008000-0x4)=0x8c) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f000000d000-0x8)={r7, 0x9}, &(0x7f000000d000-0x4)=0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x7fe) 2017/12/14 11:57:42 executing program 5: mmap(&(0x7f0000000000/0x4eb000)=nil, 0x4eb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00001c1000-0xd)="2f6465762f62696e6465722300", 0x0, 0x1) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x800081) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) [ 86.636509] binder: 10361:10363 ERROR: BC_REGISTER_LOOPER called without request [ 86.662020] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 1 ret -22 2017/12/14 11:57:42 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00008ee000-0x9)="2f6465762f6175746f667300", 0x2000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000000)={0x4, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x1, 0xb1ac, 0x3, 0x401, 0xab81, 0xffffffffffffffff]}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000002000)={0x7f, 0x2, {0x1, 0x2, 0x6, 0x3, 0x80000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000003000)={0x0, 0x1000, "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"}, &(0x7f0000002000)=0x1008) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003000)={0xfffffffffffff8e5, 0x3, 0x100, 0x2, r1}, &(0x7f0000004000-0x4)=0x10) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000001000-0x9)="6e65742f69676d7000") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000005000)={r1, 0x401, 0x3ff, 0x8d62, 0x1f, 0x1, 0x6, 0x3f, {r2, @in6={{0xa, 0x1, 0x401, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x2, 0x1, 0x4, 0x1}}, &(0x7f0000001000)=0xb8) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000006000-0x4)=0x5a) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000006000)="2e2f66696c653000", 0x1) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r3, 0x11, &(0x7f0000007000)={0x3b, 0x2, 0xffffffffffffff00, 0x1f}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat(r4, &(0x7f0000002000-0x8)="2e2f66696c653000", r4, &(0x7f0000009000-0x8)="2e2f66696c653000") fcntl$notify(r4, 0x402, 0x80000018) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000008000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000009000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004000-0x4)=0xb) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000009000)={0xc, 0x10001, 0x2, 0x498, 0x100000001, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000006000-0x4)={0x0}, &(0x7f0000003000-0x4)=0x4) 2017/12/14 11:57:42 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x0, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)="2f73656c696e75782f61636365737300", 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$llc(0xffffffffffffffff, &(0x7f0000b5d000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000043b000)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000a0a000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005e8000)=0xe8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d3f000-0xf)="2f6465762f73657175656e63657200", 0x200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000835000-0x1c)=[@in6={0xa, 0x3, 0x271c, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x80}], 0x1c) syz_open_dev$sg(&(0x7f0000850000-0x9)="2f6465762f73672300", 0x0, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002000-0x4)=0x0) ptrace$cont(0x18, r5, 0x100000000, 0x5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f72666b696c6c00", 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$llc(r6, &(0x7f0000002000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x62, 0x2, &(0x7f0000002000-0x10)={0x1a, 0x19, 0x1, 0x200, 0x9, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000001000-0x4)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000ec1000)={r7, 0x6, 0x0, 0x4, 0x3, 0x7fff}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f000055b000)=@file={0x1, "2e2f66696c653000"}, 0xa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000001000-0x7c)=[@in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x400, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0xfffffffffffffe01, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40004000}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x7) 2017/12/14 11:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d58000)="636f6d6d00") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f000001d000-0x8)=0x6, 0x8) preadv(r0, &(0x7f0000b39000)=[{&(0x7f00003fc000)="00", 0x1}], 0x1, 0x0) 2017/12/14 11:57:42 executing program 2: mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f00001c1000/0x2000)=nil, 0x2000, 0x6, 0x10, r0, 0x3db) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00001c8000+0x223)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00004b8000-0x1e)="87cc8363e5eb41dc14f7fd6e07b089d91077b7e4960cef80d971eab8f0c9", 0x1e) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004ed000)={r1, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0185879, 0x400008) 2017/12/14 11:57:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000c86000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000c2000-0x18)="2f73656c696e75782f6176632f686173685f737461747300", 0x0, 0x0) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00004ec000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1f) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40086610, 0x800000) syz_open_dev$binder(&(0x7f0000119000-0xd)="2f6465762f62696e6465722300", 0x0, 0x2) mlockall(0x1) [ 86.682089] binder: 10386:10388 ioctl c0189436 800081 returned -22 [ 86.699167] binder: 10381:10387 ERROR: BC_REGISTER_LOOPER called without request [ 86.699907] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 86.699954] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 86.699957] binder: 10375:10377 unknown command 0 [ 86.699965] binder: 10375:10377 ioctl c0306201 20008000 returned -22 [ 86.700580] binder: 10386:10388 ioctl 40046205 2 returned -22 [ 86.701238] binder: 10375:10377 ioctl c0306201 20007000 returned -14 [ 86.704450] binder: 10386:10394 ioctl c0189436 800081 returned -22 [ 86.705612] binder: 10386:10394 ioctl 40046205 2 returned -22 [ 86.705988] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 86.705991] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 86.705996] binder: 10375:10377 DecRefs 0 refcount change on invalid ref 0 ret -22 2017/12/14 11:57:42 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x70, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x58, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, r1, 0x2}, @flat={0x73682a85, 0x10a, r2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f000000c000+0xb73)="f3", 0x8e, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x0}, @exit_looper={0x630d}, @increfs_done={0x40106308, r3, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = mmap$binder(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1, 0x20010, r0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x58, 0x0, &(0x7f000000c000)=[@transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f000000f000)=[@ptr={0x70742a85, 0x0, &(0x7f000000b000-0x1)=0x0, 0x1, 0x3, 0x1d}, @flat={0x77622a85, 0xb, r1, 0x3}], &(0x7f000000f000)=[0x0, 0x38, 0x28, 0x400048, 0x78]}}, @enter_looper={0x630c}, @clear_death={0x400c630f, 0x4, 0x0}], 0xd1, 0x0, &(0x7f000000e000)="62164b44a5c310affb2298c00500036e8915400419dae89c450a387ad57900deff08615bd7c2d553000000000000000c0e41a052600c822c2d8d8f871ff1ed244f0f2c000000000000014c001f04317e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c2ab165921f7c0494781ebf9a8702e5c8070000000000000095c0920a655334554a5239e667da00000000000000080001d7cf69ba000000400000000000000c00000004d436e1046a24cde3074a221edb96a57daf9aa006d38701bb5c6f172c6a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r4, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r5, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r6}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/14 11:57:42 executing program 2: getrlimit(0x8, &(0x7f0000ebb000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f4a000-0x17)="6e65742f6970365f7461626c65735f7461726765747300") mmap(&(0x7f0000ec3000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 2017/12/14 11:57:42 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x5, 0x1, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000001000-0x60)=[{&(0x7f0000530000-0x4)="da147bd9", 0x4}, {&(0x7f0000000000)="197d81d80fd3f8e8fd6dfa1850e69cc6c711b0b943cd5e4dad10501f98cacae66eac529b6549a4d00e98fbd8fa2ec2a53c499642256c8f7796def2c9081342e9d46df0fbdc7a6a066f80186dd0a47121104c558da54ef27eb3ecbc69908505c30f5d4ad5f974b66d8c0c22c6ad6bd4e7814aae68be0f41e92fac1d58c0a660a363af4ebc8eee82e0e884699666f7f70588e2a3cb0cf6bb82263bddb2a820edfb47b259f0b421ee31dbaa1254", 0xac}, {&(0x7f0000acf000-0x1000)="91dd96af0e173907705cbe6292ad009ba80ca94e3056a56e0d2e0b6499553c9db5de7f349d86f505d6a0c7ef525d12dcdee41ecd24fd9af3c9582ce609438fa5aa4d78ceb88c90b25c9a564d6e6c9d03597014d27b7901afdce3ab2c37c519052fa815d253663d22465649eb2574352d0c391545a7e7845de4a74bb7ae406a1d198007f73aaa86be7371431dc4e0f3dfde0c8cd6d4d077bc76506bc940d9665f619eb966be7f562576b24583934fa9f0ff7a1c269ed007b4b68f3d84da1ebb23416724a8a94a342fba819ea11d06acc006ef51b9a5b10ba0638bc821b16d586ee1286ebb52c45dc5f7f7f62e87e167854046294cfc4e07b87cee437bf49a575efabcdef1a0cba7b1785b4f322bc8aced1072c9c327375a9ec37d75e51a3e93168a0021013f127261f52554479a69d458e18f941a76b5855771c15a911bdd7bacd30f8eec913f55b62ca850eb2c68f1ccf22dc3aa6f71745af7d92c3d957ae203b112c142a76ca464b05bb1fe0ddef00a0594af8600c244136bede7613a98a814c57fa97bb44e1c1b8c0d1b3cf8acb19ce9f2642f61a04126d95ca8a5601259e7b61abae8dbafe4f395421e4912358680dce376c939b767539271ca96692f167101b03460f4fc1eb5c407aed54ea40429cf930289f14d1b43c8b55a99cfe0abe9099c3277263528a27f5554d135f3572ddbd1244a36bdcacd451064c6d2f90377d196d3cf9befccbaa43957d301fa5e66bc4592d765563934be9b21fd9effaf2e38bfdb87d368218a4ae1d5358c7be2f7c6d9bdafefc1f35ae55fbbba3e916e5c3a845ba0103138ab924f7403b208d8c35e2cff430e807030613ffc2dcb008982a989ddd2c2a879e5b6b53bbeeb96158b105b60f1984cdab293bbbf4b54497ba6e984c94d0cf5c71ab333dd39bf4d7586f8e34dce794e41e573b8f3257f87515bea62c01dbcf2539ec12faa1612fd15b257caed3561dc5ec1d6406e550e2c3bb528f1b6ca2f76daaea9db5cf00a9f5c22aa16f6dc47785a035c0fbe5d16b8c11eaad78b3d33770c8eb40bd31e79c2bf89f5957206479df19ef2ea1f94ab9c53b8cb9538e3ca8de3417f8b93f8167bea03f2eebc719fa3a48249e2bd31f1bc1e9fcee0ee3c229985f3b65d3c3f034bbfb51d89798038df098515130386a2e4e9c420349510734d87ea51dc8d439ca517afa263d158ef17e9b499d5cb689d0a67d3803d1ea00eb532e88bb17228f678ee99f5724d04091d473d622b9b56fd7eada08c315ca0040badd0d8e7035ab428a15d357d9f3f03924c39dc0dc5f8163bf9489687cfdf0dce056e8ec4a31f8e71534489ad0c2f8e314d4b77ee6d3f91f501c7c5190c94a106410f1c883f7c33fe37404ad777b68c738a459c913d9788b2b322a25492aa2a6394e610784cb709c854ab100e07eddd759ee6eb5db13431d3aa75a4af7e4eb52c9186e0113332ca311c2f9b415e719a32e075b24921fd282decebb4264eb06ebe58688af8b80bd6f5e6ee33d06ae0893ddd4da810f60c20af34c9524f019fb5618188da6ae53879fa12c595447fcbce3d1acdfbb6a2603da01de94576326d48bcd28eedf1a8cc63fb712418131583f647eaf083adaf1028a6a72658d0fa206d2ba7921f376027d1df75737949e04c62f765933093a241eb2384dce2911eaf703b3edf8950117801effe587596cade5f7dff67ae8af26f2017f4fdce667fced807170300b2ac58d5a7811122260ba5e17cb8d4cbdcd393c5afa520c4132484ac548e3e797acafce4fe39ac05f0220bf96c49089f049dcc3e5b243e0dd12bc3df311360159574c3324786024092e5df2a14ed67c74f67415e05e64421520b8ee874e18a510f392b9c85509702aa039529c8c1b4784855cec3971390c5be0d9e5896cc91597c2f70cfdf39295fc556483da6ff7372faff90d4ccb2dd5ace284959b17f9a588eafb9db27a30fd702e8d210ec3e1b70aa229989819b3f05064f371d7c3ba04dc0edb25be75bc4b0d15033ff76b0bca622be030cbba496a70e5a539ae9e2b76fbdd73fe703d3273fb3e90dc75aefd8b454b9af8268c27f959336d99391668b1920b3e8e80eb0e9701b6b89ec1f45792f9c09aad783470d437ec60fb08f4d90bcce3787bc670ddb9e63532717f98e6b4c3e72e138de46cf33d5cf2fdaffdbd7cc43232b3e92a0adec1a00baf42c7c8b4e83d505b9330e4b1c4d2687e56c230aef06cb9b409545311c9808980272ba7d1c8fa6c2de4fa7f3eb94552df9beafd22dc5005f971743249fccabeb14f77cb8ee0ab060437a55ddd9dd130b75ce2de085a52cc9c2f1fc4e1fb83fc27c392731e4798bd7e6c813573625b356906854c81429b5f88f6f6fce0f70e6d975facae4b043cd0d628fb1ae14b170069480ff8b278c5b38fd1e813ada27da2891b5b7dd6e121e15df04ec199d722131c999e8dcc95d201dabf38ddb92aa162d207e82e939c830db8e8f3409b96a3bd8b493b264b190c3db8a4df6c15723cb290716227d245e1023ab4143ef6cbd13c46355d817bc5db673d03636bb65fdb32fadda678962beb24342328f6e146be9d9c20b307c3efbdbabac3a45307127f308049e41efe7c39a914ae6b60944411db5ec90b034f7e68c8bc018fcace30da04e9a43c64ed6ca913ebbbb5551f5cb908b1c2757924e62cee2a7c97c9670bfbd3e1f6236f430ece78acea9351da02b4728375dc479401ea5285c3660150239bbdc1f521dcd1169f77890a200358d1d0e3f6f418b2360dfb39ded9bb911736afaadad94f47185261c2f05b0fcdb08037133da114f0f6c1dcbf93d8314c31b8545311d08b55987ecf7a99e463292e2e1e234aa5c1ecfaa277b8cc3ea54e4da0a9e3b4f645058867093cf962ee39ed0b1776513eace923bfc9df7267e6883a255cbdb1e522e8d6b750c39dc93b6cb4f9cd647c1136680a915a79b51f21cff8a7ff5d5f907855f1947a6b32ef44788af3836a397522ffdbd1e4b56f857c1556d976934ae7afcfd726ac8c46907e82f82b33d7b4e761b9392faf5cfd15b68416bf68584b898b3a61523678716b51498e39747a3aa436d26fafc87282014da51b6a9c3499af2dbe009e7e1837803294ba95767b59acf244a9212c98f90d4c69f0239092236ecfa7a2e113ff717437993ef87766f7cda757917b1efdf2101ff1b9448c6ed6d02423489f8f4b1c250db4ae9cedcd59972d1c9823ce486190e154202c8bb572f7440ce137735dd1c749869964b1033bb4eef77e4e1a891ee1768bec5aada091acac73ca459117dfb129705f5c4879474072ff7ea8c92b72c6a6e487666c9f7c543fda049daf1352a86fbd56ac558aa69ab6b37efdc22300025b59fab7a613ebab9d0535ccd41f6973c472d12815ccc8a8691b85a29de98fb9fc34d2c35e2eb55b5ff7d52453e370260ca7dad55cf4790e815f1a2f1ce14c25be685bfd69f4b41eb3254e9948dd20ed61e1f93d35eb0da4b26d2c79572a29b74b00d594aa602f9611efa142450844ae625bb6b92c5254a8e7e48dcfcf4e7c093d9e952acc595d2b2cea566ff3cbe88561f9f47db70fd4b317c83522e2050e82266dd84a5abfc27b740e3337ab575291944a26011082b99ba98a1aec6142278d5860cd390f9bdc8b0c0759d0111ad42eaf370c137ddb51a6ada345a6f534f0010d6b38b3bf5a49d2a61b6e3e13531fd5ffd502a599a7353e312a7c7c466b41f7f6bd6e00900a80fb904f2a783acb85fe3c3855023e07428894b0c50fac5677400bfea83dd5c7a1eb813fd2e6663bb2bb16b13ea037ca3febc35a993f9e0902a1e6054fda32ac84f16472e3848a4fd090ae395bdf67a369e70e9f07334eb862ad02b8bb7fc080c2bd648993d8f5adba983a332c097c5f47814f5b0f50af421e0b32890b2f0177dbefd34946b44840a9cd52cbd8099506fd93fd8c9a2ee275cd262a8d5490b250bf02612856a33b29954126e0f35ec5b46cb4c01d3f5fc094649efb847dc69343e179335c6b2eebd2b66f26875934a0075983d2ad8268de032af410688b887244bb75c9e632c4f20169fdb5bc08167108f176ff4e4f3c8684e4013a10019e5b0c9e894b2251ffca18229b8e80122f13cbcf7ff31e9d450159ad0c7a289302b2cfb3fefc6ef666277c17a0b05b5ae0a72d1824eb0fe89c11d8f259afae279b3fb42e6fc5c7e83842f0a1626f4cb1a554d9374ba4d370b5a79a422bfa98f101f3434ef6ec445beb42a83c371fd3d0c13c89293bc8fa3c21b28557b6dd1d067a3821ba9789148f53341f682ab30d6e68138a865d4eed7863a594666825aec931fe5915b0c94c15d2fc03633f0813ba9a8bbff5716f9da1adcd54d0d041fc85adbee54a8e94716f74681542c6eab24d9a18f7ecc96db12c2a6d57ebf3fdbbb2259dfd32866e391d7634b6989cee14d6428856f7c34dff0914d9f093905b9df652d6438465752275ea93e916885b5021121104984803561ec341f1a58afc5bc921baf056db774ceebe5fd5784c43863c00ee147651924205fb9b178d150bf91f0a3af0ffbe30594e0bff31bef22ea243b14274e25f9a32342ea394f8a82fdd4d41bfe5c4d79adf5bbb713d988e545fab3f1945cbe3b7a1440831c9f83825b811b698de74ba7babd0926d75407e680bcd4e44681d7df222542d5c36c15e3002d79104a88bead03271f2a3762504a1818e20e55830245fc08f649b6eb065e7c3838b1b5e6d69faf366974b87fd1b136e05f1fcf67689d9a3c20ec68610754ff5d15f11e4d7c002b475647b17253ecfc5c5572c9b9130030857fffbf1ecb32a32a58893475968fb94a2443e6f31ba715eecbc1732f85482a482468ef878121cc926b455f28ddba47e74faa60850cc125580693914743988f9b5bcc18ad998b4cf1ebe55998a4037d516f80d051532c1040f90132c67ef0c7f85d480e342e9122040aecdd10e3d81fc320e46d620872841fc611d8f55b7e628145d051e4a02a6f7526dfecd34c842be077b74596ab8938098c8d3a0f36fba6437e27b5fcee01c9f96fcf262d7d345da6aa71e0da9309ae1a83c7a4be430be50e8199cf5921fada2937174345f2c78bbbbc20cc795c049c894b014448a36543725292ca33eca3819d83e23a79e0fae58f6f62e2ea0c382ae5df4d9984216ad8b181b08d17f4aed8907c3a0424c5a7c18eb53f36f20e4d6d4dd314888b8b8f69d326fa91f4f73b706fcaba151b19cc5e228ea5bd1bf62c45a633fac42cbeb8cc0a8e25281fc4e87c47b1e666b9ae262967fea735a17b7ad8b11a7055d6cd83f40e9e0f8909560d0c766e5d3a781dd11826a19bda76b9e49334251b35629018390bf73ffec512cd2e163b751645add04d4e664328d6a8d98e2f83072751ed71a48a9a283016e76a1a29ad3b9c36f23b9086027143a51fd926040d971e4c272157a090e3c16a5c90de83368224f238f000a0c59472583f66f48d1acc7401806cdbcb3ed9bf4ffcb886b7f3d9e890f05e224c9829e7d11a6d5f5582ca6312580220276532cff8cd0c65a4f629d657312591f8dbb912de620dc7ba9ed1be066ac2afb8d76c2a3c518b85a6fe88fb5e2b3bc6d348df7963a52e1bd08f9a227db9b4087f0ef706c470f58a5a975248402de9ff235140977c0bc145d1b97a9f79b9deaca866bdc500d31fa5313a4ee5eb6586ce18528503a5b16cfbd837e18dbfc0471a3c8f91235b978577ff7a8543121cd80089b657c40b86372634aacdbc59dd3d6ba91a7ff0c161f5cb7915dca0cb556ac2140a6b798343f7ab13", 0x1000}, {&(0x7f0000673000)="33edcf10a6723642dd30f0eba7012446e47785fd46c9dde0afa4940e7780709a71467117791383aedc1a6d06a0c085ac4d538384706ad834c112442de91e8b96a1a1744e26d6d2e367cf25a8f8e146b6a8ca99460d62017c27e96c9be8196316331391ab1334d83c36ffd2e117b0cdf57d6cd8a3e58741ed15d1a743d09fc36eae18661212660626cb9fb3ca1302789e4377e1f1e113fc9bdb6aa831d66aab059a81d3de588b2ae452c10cbd9f65217b6c62e79cb0d44d416c78", 0xba}, {&(0x7f0000ddb000)="ce5af412e379fbe021dcc6924cfda68b1f69a9e14cac1988dc2caaf93eb102cbe9e28faedf7789f4027ed81a10866a8007a469504f216c3b3aa6e5e96ab26d4f497961239374d0904f6e197064581fed3ee0d588a9875f56c976034c264e38195e51dbb684c258960bf7eb19aa542550bee9d88999ee22ed11de", 0x7a}, {&(0x7f00003c9000)="312936e87bb39a57d4f35d6e4de164dc5a1b1da413b7f346aff8e8746743f41f029e5639ae5ab169f2e0ff5d6b908d200964b7f8a80403529bcdc950cb46e2981da9c1bc4698f3e23fc7a508aa8fd3c1fde6ba46424de32cd3667c4d6916dc6b0498c6a9aab0e9af20623fd2937e89088f3dfd763ae6bdba98f29ef093cbc40a27d13343ce12d9015fd3e86b00", 0x8d}], 0x6, 0x1) [ 86.705998] binder: 10375:10377 unknown command 0 [ 86.706001] binder: 10375:10377 ioctl c0306201 20008000 returned -22 [ 86.708689] binder: 10375:10389 unknown command 0 [ 86.708692] binder: 10375:10389 ioctl c0306201 20007000 returned -22 [ 86.750719] binder: 10399:10405 ioctl c0185879 400008 returned -22 [ 86.785833] binder: 10361:10363 got reply transaction with no transaction stack [ 86.785838] binder: 10361:10363 transaction failed 29201/-71, size 0-0 line 2924 [ 86.805232] binder: release 10361:10363 transaction 1511 in, still active [ 86.805238] binder: send failed reply for transaction 1511 to 10361:10380 [ 86.815831] binder: 10361:10363 ERROR: BC_REGISTER_LOOPER called without request [ 86.823423] binder: release 10381:10387 transaction 1513 out, still active [ 86.823427] binder: undelivered TRANSACTION_COMPLETE [ 86.828952] binder: 10417:10423 got reply transaction with no transaction stack [ 86.828957] binder: 10417:10423 transaction failed 29201/-71, size 2-1144397507205 line 2924 [ 86.831746] binder: 10417:10423 got transaction to invalid handle 2017/12/14 11:57:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000d58000)="69645f6c656761637900", &(0x7f0000908000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000218000-0x1)="00", 0xfffffffffffffffd) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000715000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000070a000)={0xcd7c, 0x3ff, 0x1, 0x100, 0x9, 0x1475c0f8, 0xffffffffffffd5b4, 0x420, 0x0}, &(0x7f0000135000)=0x20) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000cf000-0x16)="2f73656c696e75782f636865636b72657170726f7400", 0xdc400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000b52000)="00") ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000963000)=0xe228) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00003f6000-0x8)={r1, 0x9}, 0x8) [ 86.831750] binder: 10417:10423 transaction failed 29201/-22, size 64-40 line 3008 [ 86.831811] binder: 10417:10423 Acquire 1 refcount change on invalid ref 1 ret -22 [ 86.831814] binder: 10417:10423 got transaction to invalid handle [ 86.831817] binder: 10417:10423 transaction failed 29201/-22, size 64-32 line 3008 [ 86.914315] binder: 10381:10387 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 86.924966] binder: 10417:10432 got reply transaction with no transaction stack [ 86.932492] binder: 10417:10432 transaction failed 29201/-71, size 2-1144397507205 line 2924 [ 86.938697] binder: release 10361:10363 transaction 1517 in, still active [ 86.938703] binder: send failed reply for transaction 1517 to 10361:10380 [ 86.938704] ------------[ cut here ]------------ [ 86.938717] WARNING: CPU: 1 PID: 8891 at drivers/android/binder.c:2155 binder_send_failed_reply+0x117/0x340() [ 86.938718] Unexpected reply error: 29189 [ 86.938930] Kernel panic - not syncing: panic_on_warn set ... [ 86.938930] [ 86.938936] CPU: 1 PID: 8891 Comm: kworker/u4:9 Not tainted 4.4.105-gb5797f6 #6 [ 86.938938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.938945] Workqueue: binder binder_deferred_func [ 86.938951] 0000000000000000 e4488f8f6940187c ffff8800a9d8f920 ffffffff81cc9b4f [ 86.938955] ffffffff83842ac0 ffff8800a9d8f9f8 ffff8800a9d8f9e8 ffffffff813fc616 [ 86.938959] 0000000041b58ab3 ffffffff83fa57e0 ffffffff813fc48f ffff8800a9d8f958 [ 86.938960] Call Trace: [ 86.938968] [] dump_stack+0x8e/0xcf [ 86.938976] [] panic+0x187/0x2f1 [ 86.938980] [] ? percpu_up_read.constprop.46+0xc3/0xc3 [ 86.938986] [] warn_slowpath_common+0x108/0x120 [ 86.938989] [] ? binder_send_failed_reply+0x117/0x340 [ 86.938992] [] warn_slowpath_fmt+0xa7/0xf0 [ 86.938995] [] ? warn_slowpath_common+0x120/0x120 [ 86.938998] [] ? printk+0x9c/0xc3 [ 86.939005] [] ? _raw_spin_lock+0x3e/0x50 [ 86.939008] [] binder_send_failed_reply+0x117/0x340 [ 86.939011] [] binder_thread_release+0x225/0x590 [ 86.939014] [] binder_deferred_func+0x2d9/0xc10 [ 86.939020] [] ? __lock_is_held+0xa1/0xf0 [ 86.939025] [] process_one_work+0x6b4/0x16e0 [ 86.939028] [] ? process_one_work+0x5ec/0x16e0 [ 86.939034] [] ? finish_task_switch+0x1e7/0x4e0 [ 86.939037] [] ? pwq_dec_nr_in_flight+0x250/0x250 [ 86.939040] [] ? worker_thread+0x248/0xef0 [ 86.939043] [] worker_thread+0xd5/0xef0 [ 86.939046] [] ? __schedule+0xa99/0x1c70 [ 86.939049] [] ? preempt_schedule+0x24/0x30 [ 86.939053] [] ? ___preempt_schedule+0x12/0x14 [ 86.939056] [] ? process_one_work+0x16e0/0x16e0 [ 86.939059] [] kthread+0x245/0x310 [ 86.939062] [] ? kthread_create_on_node+0x3e0/0x3e0 [ 86.939070] [] ? kthread_create_on_node+0x3e0/0x3e0 [ 86.939074] [] ret_from_fork+0x3f/0x70 [ 86.939077] [] ? kthread_create_on_node+0x3e0/0x3e0 [ 86.941077] Dumping ftrace buffer: [ 86.941116] (ftrace buffer empty) [ 86.941118] Kernel Offset: disabled [ 87.207693] Rebooting in 86400 seconds..