x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x77359400, 0x0}, 0x10) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000694000-0x4)=0x9, 0x4) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000001000-0x4)=0x889c, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:00 executing program 0: mmap(&(0x7f0000000000/0xf85000)=nil, 0xf85000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00002de000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000f86000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f85000)=0xe8) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000f86000-0x14)={@loopback={0x0, 0x1}, r2}, 0x14) socketpair$inet6(0xa, 0x1, 0x7, &(0x7f0000a03000)={0x0, 0x0}) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000247000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000f85000)=0x14) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000f86000-0x18)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfff, r4}) sendmsg$key(r0, &(0x7f0000d0e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x2, 0x13, 0xb9, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000440000)='/dev/vga_arbiter\x00', 0x80004, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000d1a000-0xc)={r3, r4, r5}, 0xc) getpgid(r3) 2018/01/26 09:48:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) 2018/01/26 09:48:00 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f97738795af87125e", 0x10) r0 = userfaultfd(0x80000) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000008000-0x10)={&(0x7f0000002000/0x3000)=nil, 0x3000}) r1 = socket$unix(0x1, 0xa, 0x0) r2 = socket(0x18, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000009000-0x4)=0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x200, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000009000-0x4)=0xffff) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind(r2, &(0x7f000000a000)=@vsock={0x28, 0x0, 0x0, @host=0x2, 0x0}, 0x10) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f000000a000-0x10)={&(0x7f0000002000/0x4000)=nil, 0x4000}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000003000-0x5c)="ba68482fde98f55708c4178ac5db2421ee70df2540c3899c9ab7cbe46588dfae2259b5675d745774d3348db0e261655191120a5c4e37df372c4fab5d90dc33d8c40eff29999dfc6ddbbff576c2ff4b6b2b503f25f2d0ce759e03a738", 0x5c, 0x8000, &(0x7f000000b000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x3, {0xa, 0x2, 0xfffffffffffffff7, @loopback={0x0, 0x1}, 0x9}}}, 0x3a) connect(r2, &(0x7f0000007000)=@sco={0x1f, {0x400000000001, 0x40000000, 0x0, 0x3, 0x0, 0x100}}, 0x8) getpeername(r2, &(0x7f0000007000-0x1c)=@in6={0x0, 0x0, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000005000-0x4)=0x1c) 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000178000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000062000-0x8)='./file0\x00', &(0x7f00002ef000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000f75000-0x8)='./file0\x00', &(0x7f0000840000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f000010d000)=[r0, r1, r2]) r3 = syz_open_dev$tun(&(0x7f00009a9000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000533000)={@generic="0d807c0342ca294a5cb17bb69ce9afb7", @ifru_mtu=0x1}) 2018/01/26 09:48:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)='\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f000015c000-0x10)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x805, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f000014b000)=[], 0x0, 0x1) [ 72.190991] binder: release 14525:14526 transaction 76 out, still active [ 72.197874] binder: release 14525:14526 transaction 75 in, still active [ 72.228094] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x77359400, 0x0}, 0x10) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000694000-0x4)=0x9, 0x4) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000001000-0x4)=0x889c, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 72.236452] binder: release 14525:14541 transaction 75 out, still active [ 72.255128] binder: 14553:14571 got new transaction with bad transaction stack, transaction 80 has target 14553:0 [ 72.265757] binder: undelivered TRANSACTION_COMPLETE [ 72.271305] binder: send failed reply for transaction 76, target dead 2018/01/26 09:48:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) 2018/01/26 09:48:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) [ 72.276073] binder: 14553:14571 transaction failed 29201/-71, size 0-0 line 3031 [ 72.302037] binder: send failed reply for transaction 75, target dead [ 72.310967] binder: BINDER_SET_CONTEXT_MGR already set [ 72.310975] binder: 14577:14580 ioctl 40046207 0 returned -16 [ 72.323718] binder: release 14553:14559 transaction 80 in, still active [ 72.331375] binder: send failed reply for transaction 80 to 14553:14571 [ 72.338197] binder: undelivered TRANSACTION_COMPLETE [ 72.343980] binder: 14577:14586 transaction failed 29189/-22, size 0-0 line 3004 [ 72.351856] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.357301] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.362991] binder: release 14530:14534 transaction 78 out, still active [ 72.369842] binder: release 14530:14534 transaction 77 in, still active [ 72.376585] binder: undelivered TRANSACTION_COMPLETE [ 72.381730] binder: release 14530:14548 transaction 77 out, still active 2018/01/26 09:48:00 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000001000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000012000)=0x8, 0x80800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000012000-0x6e)={0x0, 0x66, "bcfe461bad5c011192088272ebad8380b7c9589e127d5242af33f5c7080b9cdfec085d8026d41c6573b1bd1dac52d73a6c6812ae204945b4a28709bb3c321d7cb2b4266de15f3e762fa0ac8b8b2c88dd465c250a166c6dd202a7c1cf385a0982019a70dae938"}, &(0x7f0000002000)=0x6e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000003000-0x8c)={r1, @in6={{0xa, 0x1, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x1f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r3, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r3, &(0x7f0000001000-0x64)=""/0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000004000)=""/95) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000ff1000)='/proc/self/net/pfkey\x00', 0x101102, 0x0) 2018/01/26 09:48:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000006b000)='/dev/vga_arbiter\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000002000-0x10)={0x20000000000001bd, &(0x7f0000003000-0x18)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000002000-0x10)={r1, &(0x7f0000000000)=""/0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001000-0x40)={&(0x7f00009c2000-0xc)=[0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000-0x4)=[0x0], &(0x7f0000000000)=[0x0, 0x0], 0x3, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) unshare(0x11fffff) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x10000427, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, []}], 0xfffffffffffffeab, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in={{0x2, 0x3, @rand_addr=0x1000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x1, 0x200, 0xffffffffffffd5a5, 0x101}, &(0x7f00006f3000)=0xa0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000087d000)={r1, 0x6, 0xfffffffffffff800, 0x9}, &(0x7f0000519000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000f7e000)=0x0) fstat(r3, &(0x7f00006ca000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f000015d000-0xd2)=""/210, &(0x7f0000d18000-0x4)=0xd2) lstat(&(0x7f0000655000)='./file0\x00', &(0x7f00004f5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x39f, &(0x7f00002a2000)=[@cred={0x2d7, 0x1, 0x2, r5, r6, r7}], 0xfffffffffffffea8, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000720000-0x4)=0x56) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000a29000-0x4)=0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000b59000-0x8)={0x39980732, r4}, &(0x7f0000b53000-0x18)={0x101, 0xf5, 0x2, 0x7f, 0xffffffffffffffff, 0x1ff}) r5 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000b54000-0x4)=0x4, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r5, &(0x7f0000b53000-0x15)=@known='system.sockprotoname\x00', &(0x7f0000d84000-0x1a)=':!uposix_acl_accesssystem\x00', 0x1a, 0x1) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) 2018/01/26 09:48:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:00 executing program 0: mmap(&(0x7f0000000000/0xf85000)=nil, 0xf85000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00002de000-0x8)={0x0, 0x0}) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000f86000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f85000)=0xe8) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000f86000-0x14)={@loopback={0x0, 0x1}, r2}, 0x14) socketpair$inet6(0xa, 0x1, 0x7, &(0x7f0000a03000)={0x0, 0x0}) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000247000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000f85000)=0x14) mmap(&(0x7f0000f85000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000f86000-0x18)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfff, r4}) sendmsg$key(r0, &(0x7f0000d0e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x2, 0x13, 0xb9, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 72.388686] binder: undelivered TRANSACTION_COMPLETE [ 72.395413] binder: send failed reply for transaction 78, target dead [ 72.408340] binder: BINDER_SET_CONTEXT_MGR already set [ 72.408347] binder: 14598:14600 ioctl 40046207 0 returned -16 2018/01/26 09:48:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000579000-0x18)={0x0, 0x40, 0x10, 0x2, 0x10001}, &(0x7f0000259000)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000def000)={0x6, 0x8000, 0x800, 0x3, r4}, &(0x7f0000e3f000)=0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000815000+0x439)=0xd1, 0x4) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) 2018/01/26 09:48:00 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x0, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x6, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r0, 0x4, 0x40001) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000b00000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x14) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f00007fa000-0x2e)=""/46, &(0x7f0000431000-0x4)=0xfffffffffffffede) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0xfffffffffffffefe) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f000014f000-0x4)=0x0, &(0x7f0000f02000-0x4)=0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00006ac000)={0xa, 0x3, 0x2000000000000, @loopback={0x0, 0x1}, 0x3ff}, 0x1c) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f0000b54000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000b52000)={0x4, 0x1000, 0x6000, 0x30b, 0x0, 0x4, 0x2, 0x38, 0x1, 0xba2}, 0x10) 2018/01/26 09:48:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002c5000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ebe000)=0xc) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x0, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 72.439452] binder_alloc: 14578: binder_alloc_buf, no vma [ 72.439470] binder: 14598:14614 transaction failed 29189/-3, size 0-0 line 3127 [ 72.472282] binder: BINDER_SET_CONTEXT_MGR already set [ 72.472290] binder: 14623:14625 ioctl 40046207 0 returned -16 [ 72.475035] binder: BINDER_SET_CONTEXT_MGR already set [ 72.475041] binder: 14627:14628 ioctl 40046207 0 returned -16 [ 72.509410] binder_alloc: 14578: binder_alloc_buf, no vma [ 72.509428] binder: 14627:14636 transaction failed 29189/-3, size 0-0 line 3127 [ 72.529338] binder_alloc: 14596: binder_alloc_buf, no vma [ 72.529358] binder: 14623:14637 transaction failed 29189/-3, size 0-0 line 3127 [ 72.550603] binder: send failed reply for transaction 77, target dead [ 72.557280] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.563031] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.568604] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.574117] binder: release 14596:14601 transaction 89 out, still active [ 72.580970] binder: release 14596:14601 transaction 88 in, still active [ 72.587705] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000a3a000-0x10)={0x3, {"0e8d03eeb00850"}, 0x0}, 0x10) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000edf000)={0x3fe, 0x5, 0x7fffffff, 0x5, 0x4, 0x1}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f000003a000)=0x0, 0x4) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) getresuid(&(0x7f0000ec0000)=0x0, &(0x7f00003e7000)=0x0, &(0x7f00005c2000-0x4)=0x0) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0xff9d) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f0000b52000)=[], 0x0, 0x0) 2018/01/26 09:48:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000996000)="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", 0x1000) pipe2(&(0x7f0000de3000)={0x0, 0x0}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000092e000-0x4)=0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000f67000-0x18)={0x0, 0x81, 0x30, 0x3, 0xb794}, &(0x7f00005dd000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000fb6000)={r2, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f000095e000-0x4)=0x8c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000b1c000)={{{@in=@rand_addr=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000204000-0x1)=0xe8) syz_open_dev$usbmon(&(0x7f0000198000)='/dev/usbmon#\x00', 0x8, 0x200800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fca000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000206000-0x4)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000818000)={&(0x7f0000afb000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000af1000)={&(0x7f000090e000)={0x1370, 0xb, 0x5, 0x404, 0x0, 0x3, {0x6ffa1cda4bca1a91, 0x0, 0x2}, [@typed={0x64, 0x94, @binary="1a6495b0992d50a40315157478005f5f8b9197eb8d1d510e75a862a3c0875bddb18ad5b456aefb86ca4d3c38d12b53375ff50739fe1979272ff39b900f45a008927ad76fa88f9ec19fce59039e72d23489e2b4c9df04225cb1"}, @nested={0x1e0, 0x5f, [@generic="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", @generic="6bbea91838f525ba3f0c6c44b260591e68c6ef70499392facd1f053dfe71f9df50596625556da9e127dfce6aeaaf301966233e6f07398347824ab925a3e45fc66340f4893740922ca47d0be6e7a2c92e02d941c43261b91cce2967b3514c3ab20c5395c28668da5cb283ead8a635a70187e588bfe26e54762f8ad484da30b5c2b1dd3d65c1dbc25912208910402e106dc67c5512b9127e6eb23834d2cce219e1500fc55b1d70091c71e833c4e39b12a62b8f1d97a480df98061980f8ad77c8c9d939a41f1e37e5ea91dda1482dc2a9b352f2adf06ec93f8b1cb46f287a8284ea"]}, @typed={0xc, 0x25, @pid=r1}, @typed={0x10, 0x79, @u64=0x5}, @nested={0x10f0, 0x74, [@generic="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", @typed={0x10, 0xd, @u64=0x4}, @typed={0xc, 0x1d, @uid=r3}, @generic="eb1852e8dd62ee05b8fdecd45a25668e67783be13843aa5b572cd775de217413761d3ce627802eaa676990aa6208a3084ef00d81707bb4029f08aef6ae1d2d1cbb76a90bc08e6e90f6268a9903fc330afb88e8863e306158b7a2b692bc6ef5d88a58a9bbb38b3b82093f16bc92118953f303aefda87d772e09e826a18c6bcd65aa2701f0b38f3f34d6a5252f5fc5de2c3f314bf88de7a75efe70fa421dc5cf6dbc1c9382442ec944dfc1cf8ee496c1fa7268f1d4c137140abc99db", @generic="f6d5b47d1eb0f3cecba949ade074297cb85791"]}, @typed={0xc, 0x52, @pid=r4}]}, 0x1370}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) unshare(0x28060400) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r9 = getpid() ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000aae000-0x4)=r9) sendmsg$unix(r6, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r5]}], 0x1, 0x0}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1e, &(0x7f00003f0000)=""/32, &(0x7f0000fe9000)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000b76000-0x14)={0x0, 0xf3, 0xc1, 0x6, 0x3da, 0x1000}, &(0x7f0000bfd000)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00001e7000)={r10, 0x4}, 0x8) recvmsg(r7, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x105c, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0xfffffffffffffffe}, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000440000-0x10)='/dev/sequencer2\x00', 0x101000, 0x0) fcntl$setpipe(r0, 0x407, 0x2) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) 2018/01/26 09:48:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000090d000-0x8)={0x0, 0x0}) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000f8c000)=0x3) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f000001e000-0xc)={0x0, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}}, &(0x7f0000b31000)=0xc) connect$packet(r3, &(0x7f0000455000-0x14)={0x11, 0x0, r6, 0x1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x16}, [0x0, 0x0]}, 0x14) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00008c6000-0x4)=0x0) rt_sigqueueinfo(r7, 0x14, &(0x7f000074b000)={0x22, 0x2, 0xb2a, 0x1ff}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x0, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000193000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x0, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00001a3000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16, 0x0, 0x0, 0x0}]}) mkdirat(0xffffffffffffffff, &(0x7f0000966000)='./file0\x00', 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00003de000)='/dev/pktcdvd/control\x00', 0x183000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00002e5000)=0x0) 2018/01/26 09:48:01 executing program 0: r0 = socket(0x11, 0x80a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x4) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)=0x0) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 72.592882] binder: release 14596:14615 transaction 88 out, still active [ 72.599717] binder: undelivered TRANSACTION_COMPLETE [ 72.604815] binder: send failed reply for transaction 89, target dead [ 72.611416] binder: send failed reply for transaction 88, target dead [ 72.620662] binder: release 14578:14581 transaction 85 out, still active [ 72.627632] binder: release 14578:14581 transaction 84 in, still active 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) accept$nfc_llcp(r0, &(0x7f000069c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f00007fe000)=0x60) r1 = syz_open_procfs(0x0, &(0x7f00006d1000-0xe)='net/connector\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000d10000-0x4)=0x0) waitid(0x1, r2, &(0x7f00006c5000)={0x0, 0x0, 0x0, 0x0}, 0x20000000, &(0x7f0000e94000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000fe1000-0x58)={{0x1f, 0x9}, 0x1, 0x10000000000007, 0x7, {0x0, 0x1}, 0x8, 0x8bdcfe6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00006e0000-0x40)=@dstopts={0x32, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@calipso={0x7, 0x30, {0x5, 0xa, 0x4, 0x3, [0x2, 0x7, 0x3f, 0x9, 0x80]}}, @jumbo={0xc2, 0x4, 0xfffffffffffffffc}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x3, 0x800, 0x9, 0xfffffffffffffffd, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000018a000-0xe8)={0x0, 0x0, 0x0, 0x101, 0x6931, 0x0, 0xa, 0x13, 0x8, "747e8365f3721fd8e9a45bb34db0abc549dfb01a0f091bedf759a7c49924e898e18f36a4cb7462967e6dd0993d49ccc9edcd1cf93eda190cfd47acb0951ffd95", "a2543c761681b8245e5d6fc7dd81619aeee06dc6175e8716d0146257017e3b22a6dd296b2bd40031a1db162150f81a5af2bf2971a7af8d51657e5029f30d3e53", "a85016da0f5e98906a0bb23d4d58b523d3edd3021682bafa800068f04e34fa9f", [0x9, 0x2]}) r1 = memfd_create(&(0x7f00005d3000-0x10)='-[}lovboxnet1{!\x00', 0x0) write$fuse(r1, &(0x7f0000325000-0x12)={0x12, 0x0, 0x0, @fuse_notify_poll_wakeup_out={0x0}}, 0x12) fallocate(r1, 0x3, 0x200000000, 0x800000008) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 72.657460] binder: undelivered TRANSACTION_COMPLETE [ 72.664311] binder: release 14578:14587 transaction 84 out, still active [ 72.678403] binder: undelivered TRANSACTION_COMPLETE [ 72.684397] binder: send failed reply for transaction 85, target dead [ 72.694214] binder: send failed reply for transaction 84, target dead [ 72.712930] binder: BINDER_SET_CONTEXT_MGR already set [ 72.712938] binder: 14682:14684 ioctl 40046207 0 returned -16 [ 72.727836] binder: release 14647:14650 transaction 97 out, still active [ 72.734757] binder: release 14647:14650 transaction 96 in, still active [ 72.741601] binder: undelivered TRANSACTION_COMPLETE [ 72.746719] binder: release 14647:14671 transaction 96 out, still active [ 72.757510] binder: undelivered TRANSACTION_COMPLETE [ 72.757756] binder: 14682:14687 transaction failed 29189/-22, size 0-0 line 3004 [ 72.771020] binder: send failed reply for transaction 97, target dead [ 72.777593] binder: send failed reply for transaction 96, target dead [ 72.784448] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.790071] binder: release 14645:14655 transaction 95 out, still active [ 72.796891] binder: release 14645:14655 transaction 94 in, still active [ 72.803648] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80003, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000844000)='/dev/ppp\x00', 0x0, 0x0) r2 = gettid() accept4(r1, &(0x7f0000320000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0]}, &(0x7f0000dc7000)=0x14, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000b01000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000812000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000b5f000)={{{@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x6, 0x0, 0x4, 0xa, 0x20, 0x80, 0x2e, r3, r4}, {0x5, 0x8, 0x5, 0x40, 0x800, 0x1, 0x1908, 0x8}, {0x8000, 0xec, 0x100000000, 0x9}, 0x3, 0xa, 0x0, 0x1, 0x1, 0x3}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0xff}, 0xa, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x51a7, 0xe, 0x8001, 0x101}}, 0xe8) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f0000c76000)='logon\x00', &(0x7f000091e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000e90000-0x3)="892a00", 0xfffffffffffffffa) keyctl$get_security(0x11, r5, &(0x7f000030c000)=""/222, 0xde) sysfs$2(0x2, 0x0, &(0x7f0000176000)=""/0) gettid() seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r6 = inotify_init() r7 = epoll_create1(0x0) flock(r7, 0x2) dup3(r6, r7, 0x0) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000847000)={&(0x7f0000b05000)=@getsa={0x3c, 0x12, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0, 0x0}, [@srcaddr={0x14, 0xd, @in=@rand_addr=0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f00003fd000)='\x00', 0x1) r2 = geteuid() ioprio_get$uid(0x3, r2) syz_open_dev$sndseq(&(0x7f000064b000-0xd)='/dev/snd/seq\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000971000-0x10)={0x5, 0x3, 0x8, 0x7, 0x0}, &(0x7f0000bc4000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000e0f000-0xa0)={r3, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7f, 0x5, 0x1, 0x4, 0x40000000000a2}, 0xa0) 2018/01/26 09:48:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f000089b000-0xa0)={0x0, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x12}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001, 0x4, 0x100000000, 0x100, 0x8}, &(0x7f0000ed8000)=0xa0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00006b4000)=@assoc_id=r4, &(0x7f0000878000)=0x4) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000b34000)=0x0, &(0x7f0000141000)=0x4) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000a3a000-0x10)={0x3, {"0e8d03eeb00850"}, 0x0}, 0x10) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000edf000)={0x3fe, 0x5, 0x7fffffff, 0x5, 0x4, 0x1}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f000003a000)=0x0, 0x4) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) getresuid(&(0x7f0000ec0000)=0x0, &(0x7f00003e7000)=0x0, &(0x7f00005c2000-0x4)=0x0) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0xff9d) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f0000b52000)=[], 0x0, 0x0) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x200800) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) r3 = syz_open_dev$loop(&(0x7f000005b000)='/dev/loop#\x00', 0x8, 0x8400) pwritev(r3, &(0x7f0000e83000-0x60)=[{&(0x7f000099e000-0xf6)="a55eb46f3083dd0add7df846e163a42521f00fd9a22906902559312e93bfd69c1a2537a18a265920b0dbf2f0307435d0b54c057a5c9bcee8bc6439568def50b0d0d351caef7e6a0169c635b148a709782920a9db2d7e14f3d7fffc69de1c100c6321fc9cba756ea8995b72cf7a221094486040b8722d1cb03ed22a4fc00baf3fdd004d418455fffb02b49424513f04884f897af3e33320fd95a5b242d3ed51e24b455ba0fff1557a6197baae62b210a1c21aab5a76e12a35ad03e79f89069f02dfc5af120b5b94fbc57f75c695979005cd5d98c26d48d3dcc9b4ba5209b70f36ad5a11e56a3a0d493bab32bac935fa7482d377ba1122", 0xf6}, {&(0x7f0000166000-0x21)="b25c88513cafc6949dbdccb6eda776ba1c209b59776c4736c185715a29c2e4711f", 0x21}, {&(0x7f0000220000)="535714ebfd7b3d432c7885b9d0f729bdada046081b88d49b1bf43391c06a370f329adbb608d087e9cb86314f8f67e4551df5824d1461b872ca7c3f496b0dc1106eddfcc6f8921034c3518820a24765d28e4b1f42914aceab83b0c09a0710b4e8aacea347a319e379fda69e93f868c4c6b4aeed897de33baa35f8afe0d2223fb7a73d22d4fa2ba78c442efcbdb17e7ed9d61cdb97263b554fc1830344376ac7b13c565fc835eae21021ac70c873b327ddceed2db7b693c1b9f7fb90eccb690d46543eceaf40bb5af50156c2b6431e10de28284b344a83c83031ae68c3f60d", 0xde}, {&(0x7f000046a000-0xe6)="a612d13e1bc6800f0a51d2d2da90ca3db3052449801b66475326723e04e4028c2369c06d2f7c41b3b72f9bfe81ee4d0796258a8c76c4c9080635f4373534a25178169f7901f28b789cf2472826f4ee3ea648f700436b989328f4ed1b5485a1d28d2a9259ff542d20646a5b1d9bb297e38ceb52c43fc88228253ac77e065cb4a53ff26c3cbfdcf8e6914f54162f44459c8c0307533906ecf64e63ccba8eb63219eff34319ecf3dc012809f2cb1be5265115acf927106a613f0820d37a1a944c8a833181ae24cae494988c98aa7f246a721007081531d02d5bafa67401696223ec28ba6b28e60b", 0xe6}, {&(0x7f0000938000)="012a885ecc45e56e9cc8eea8a5028979b1dd197dc595e13e7692e3be098611b8dbdd1fb61b5315b9dea5cd2012e91682e4e5ec5f387884991015b2f64c21840b00712dd568ec1d7abf393351ea6589ace4ec285b50d2d0bd4740f9c37c89086bf247573d10aa64679bb34e13cad8a10dbcc3b2baf593ef6dba608c34ed9f613552150b132cb6ed76cb1e4c381c08933a71f2c683e0082996f0b74e3bf81c64842ca7a2bdc1c7c60757b40f89a6fb876348c91ffba55c8af11ebf383c85b54721d88339802e50abb5e36832256d36cb0239f9e2ec4aa8bc2eea62f381e14f85a50866b4", 0xe3}, {&(0x7f0000848000-0x2d)="31d58b7f9ba94080554dc7b11629ea8112d86fc054186a3bb61750ad690cf5165ddebb16d33b7b0c8b3e4c5d58", 0x2d}], 0x6, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 72.808887] binder: release 14645:14664 transaction 94 out, still active [ 72.815695] binder: undelivered TRANSACTION_COMPLETE [ 72.820798] binder: send failed reply for transaction 95, target dead [ 72.827373] binder: send failed reply for transaction 94, target dead [ 72.834458] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000500000-0x10)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000)="", 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00004c4000-0x1000)="24d13d9a803e68e77b5a00cde775943795680a2091fef97f28548239585552171940b6edb5bc0c952e5483ce0ff180d9c002b807c8f9dce8813c2388c3e9a2fafaeb0d240e4362cf393dbb54cd2b68c1db528655aa2c951fac98aeeb0126b904aa7ab031e67e3dd4202468ae51e024f40d892e738ed3c71d0d7cc6ba79bbb6318b26", 0x82, 0x0, &(0x7f0000fb1000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000486000)='>', 0x1, 0x0, &(0x7f0000ee2000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f000094f000-0x4)=0x0, 0x1000000d8) connect$inet(r1, &(0x7f0000948000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f000094b000)="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", 0x241, 0x91, &(0x7f0000940000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00002ab000)='\'', 0x1, 0x0, &(0x7f0000f55000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000bf1000)=0x0) timer_create(0x4, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00003b2000-0x4)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 6: r0 = open$dir(&(0x7f000028e000)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000001000-0xbf)="8f4d2d421752dda939c7e1307146af4590ae902bb6198bc6249f4d8cac061bbcac0cc74c4b9ad8792cef9984a2613efa9e70f7bf5dcc7edec9649476b202e88a0bbef41c8fc630dc693e565a81df16f4d74cb8bb832d93ad512456d84358d82065a5a3f7b5b07c821592ec6b5e1e8351249e7c7cbb8500ac00935a56024415b4f6e55bf70029d64430c79b31dcd382a03b665d803fdde6e74176391f7687b06b1a00302b03a57a4e2bd758b85ca357e865ca7ee54bd616f5d10146c562861b", 0xbf}, {&(0x7f0000e47000)="409512276a97def6ab2b60f19d1500d136103e23b16fef362ec16944ee3da7ba0299", 0x22}, {&(0x7f0000001000-0x1000)="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", 0x1000}], 0x3, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f00001dd000-0xb8)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}, @sadb_lifetime={0x4, 0x4, 0x4, 0x0, 0x0, 0x0}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000ce0000-0x10)={0x10000, 0x5074}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0xfffffffffffffed9, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000481000-0x8)={0x0, 0x400}, &(0x7f00000c2000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000310000-0x98)={r4, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x8}, 0x98) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00005d2000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000778000)='/dev/sg#\x00', 0xfffffffffffffff8, 0x400000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000745000-0x14)={0x0, 0x200, 0x1, 0x4, 0x9, 0x0}, &(0x7f0000a40000)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000c41000)={r2, 0x8}, &(0x7f00005ff000-0x1)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00007e1000-0x4)=0x1) syz_open_pts(r0, 0x60342) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0xf, 0x4) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 72.904903] binder: release 14695:14701 transaction 101 out, still active [ 72.911945] binder: release 14695:14701 transaction 100 in, still active [ 72.920793] binder: undelivered TRANSACTION_COMPLETE [ 72.933998] binder: release 14695:14714 transaction 100 out, still active [ 72.942277] binder: undelivered TRANSACTION_COMPLETE [ 72.947390] binder: send failed reply for transaction 101, target dead 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000bf1000)=0x0) timer_create(0x4, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00003b2000-0x4)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 72.964836] binder: send failed reply for transaction 100, target dead 2018/01/26 09:48:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000051b000-0x11)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000ef3000-0x4)=0x3) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000aa000-0x4)=0xe600000000000000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000823000-0xd5)="e887187341030f4fcd86e3d0cab27c0361b0e0f57631f6ca6fe755a9ebb16703309d465c9cf89d7eaa1602583a6b10a03f115cb46076bdb37f2eba4f62f7ee2cdcee35c0b3b6d01618970ae9334f4018f81718d7fde9aa920350f7b9024e4cc2937d82b95baa6ceba2ddb446ef156df7dde86cfaba1a598fdefad6761faa76a175ab8a02e58008a89b7c2a4ae71bc1fb246e5b8d7e70ab77bbff1c805d6bbf514f1ccdbab784aff5497b027d22c70fb892de257ac5ea6370c1538b153fd633f68c70a029046d0ceecec620a414a1375a91e9674b40") ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000729000)={0x99e, 0x3, 0x8001, 0x4, 0x1}) ioctl$void(r1, 0x5451) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e74000-0x10)='/selinux/policy\x00', 0x0, 0x0) dup2(r1, r0) signalfd4(r0, &(0x7f000030d000-0x8)={0x7fffffff}, 0x8, 0x800) read(r0, &(0x7f0000d08000)=""/31, 0x1f) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000b65000)='\x00', 0x3) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ff5000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000466000-0xe0)=""/224) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ff6000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000fcf000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000d9b000-0x11)='/selinux/enforce\x00', 0x8040, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000d95000)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000abb000-0x3)={r2, 0x2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000035000-0x10)='/dev/sequencer2\x00', 0x100, 0x0) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd1000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000fd2000-0x1008)={0x0, 0x1000, "4243a6a73562f9d9e69512754be96d98ca2ceb05c6dd37d8764f817474f9ced2c7b8379c17ee86cb574304b6a90695845928b873fa38fbb3ba2511ceef6c8190fd6d14061e1234cd9eda8badb3b9119fcf36e55698198ca327e18231249c422ea3f928cfa91d64bbb47f55fc8f78334ab92e386201a0a913f3bc503659a04340658dc14399f9f963d4a089e57b11c3ad79d1b4455571fe4cadf4e755c48bf42b94a9d6fce5e121076f4d7f1bcf38e947f876e00b6d38d82b64214d6604c1417809fbfcdeb15598a89dc689aefda19c827e76bf66cc451770e189863ec0bd11f3b3cd427f00d2d6017ab8d845e57d073941eadafe250da5f6d55451d749f84ea3df125a030b251854fda42ae63c4a0c00a0a06ea6f40bdff22e332b9be5f53d353808077115dd5b584185aa01054c59b01d7e59e1c28a5bf211666921242b8a197088aff73372ced401a2a5a639703675f48fc0a969e9bf24ba05fcf4623fb02dab931666bb4b1f34301caa62972a256578acc91c1a4e531ae083e449fa77deddf89856742afbfa4ba799bad06ea90566d80309cc46d127ba07dcf135cfc40346630e4ac198cb09b00d6a3f8e58fe35b8c91f17e3240627cf87beb9ba9209c7451f0752b4c15f8bee08c2e702f9b145ad6c6f1e972afa461c50cbb1d5adcad71912d80415e412200291f5789589d927d00e7959dc9092628a800679040dcb493627a8a44db9b3879ca77936e38a2c09dd31ae855b37abd7ec21c72d8ec49ad8490d69196ed40b8250127b75bfc9d226e6bb38fb4c5423bd794ffa200c7e10232e69ea0aae165b1a8574ab218cbfbb423bafd4defb2bb5c725892d3827dc851778b99a36f50c62c2a6bacd7b47ded0d87a5a9698dd44f3239583b2911f5b65fced1db048e10ba019ab5de43a8d4f8ffb3806b00b50ac26aeb570b868a93cf03a03d3ed0a28de7b9ec695938aa4eee164d37d4865e3da256f3092909c632a9a2cd9b2f2efc00188c2dc4fdcbb4932c5548174586953556a737fab58f840a23df1aa3a2eb2b791245d1abddab12ce6707750ebc71e5a86e25fcdf7794a3d207d05bc79e5753ebeb19ad1d7ff21483df61341ac08b4128692dfebbef4df3ba4cba413d82e8c37b1d05375b3aa762b30601c57bfcdcfe5b3ec7c63da99ba357cdac5d9b3feb7fb1e2a243732274005898549641944e82fbcbc52efdac5836a840e5f214d09d7ea21440ac4cab3147471e886b81928412a00eb55f1d9e568603c1b0610826208adba9f4c651a2eb4966bb5161a6b77910b6b67922a12c7055fb9daa96cc0b5a83fc37bfbb057155fa11a72652e92939673119e9f59cb9187ece49f0f0f6694af212ef9599f4d3cf3348d5000a4857b0e090e55a3a25f3326b5c011a34c19cbcc944e50b61a18652867eaa8a4c9ae44faf988b8df65f7ae1081f0eab7da5f3688b62590936d383607a23b5635cedb91c99a44e681219091b9b352053c3249ffbd75711180e7ada5f6d9ecea791182f7c5b731f7eda440648023f5077a2f30c4e2b4f8d4ee0d59522e430fa4abd4530ddb478e80b4a53eab2c4dd1d3bc710dbe91a2e24358f96811a90d978eeb90cfd3650f95f9312b8cf742d80f4a32932232961636823c686c4fa432336301c1487eae5dd077199b603b3a32a78fe380047526a86785ed06d53453c41afb1558409eb1d4f58aa084dd903d3c2732eb1fc9c989a2d6d444592746d866bdbc1969a6fe71f314528fdc51de5b4f9a8a3d1e54ce5c1aaa280000869ac07645bc49a9fd251b78bafd0526d3800f655724ab77b7b86dd974277e74f98153ff6254bd3523c41a63db95c126fdd49a313d682fe8c0ca52ca2306c2d1fe4cdaec79a686b18ab25212e0e4902b40a6e69916de95b43f35ae56db8f12aa7ef29066946c5865f64e1f699657a1e686a3904fc0146025bac94b99f928528ca45ff46944e4156979c1d01834c22f17ee474c4ed93ca1c4bf5c0a16e0e96fe4d6022372392ba1f260f1184a02b3e616012685210cf93db5c00079cc87f5af4bc3a041c4b7f0f3fdc4eca4e264b974c7cc599ed8d3791c63621889d319ff4f6a38f205af25adeb04470af48a8e2bc51e3f90a71581c3cc9cccafac2b9360b7aa0a0674c704b0a4a895e6d9c8823d5213c78bf97950ee28095fa665dff4b6ad5d3c332229d8bd533d0b4d2c7f7713814a05816e379e716424c9d3e6485d35340e62f00827823e0db564cfd46120c6a8220524029bfd1cf3a07c5747a16396ffa991680dd042baa843f93a2e370ebaf509588e7381514b47b79b7f0444f92ac4da1c8e46cca6f6e23bb683638f7f7b4ae31d5e13466f80175e6837374129b5aadcbce5213938534d23bb84133c0ecd8db0495626187ab35ad1b643a5101ef1c13f69306a94c5b8cd91c29b47084d3c9aedf7efee1297736201bb568f8725bdb3ddd876663666be0aec36c7281ecc4b2bdb627aca14f957410d37dd202a0cca94316ee4c2da798384151a7a0c7ca3acfc17e645381b56e831a81ebb8e414d6f4428471b501374654768a8107a5a69943a8aed796f4a5cc3dc1c0695f00253bc6da891dee72bf3b7db0a233ac6fa9bed1186ecbd3fa2b2bf5c6284c1ea7e8921c62ebcc69a475747c6f0c698d0029e68bdd32aa0ce65f4ed325ffc6613a25f8d2eee8bab8ed5d60f806a7cb5e3e0dabb50c2aeb6c08434d5dea306084e8696424d4830f84a8dedf532a211bb4a1726bae1ea83a27f3718cd078d586adaeecc20780ca2d9bdba85d218511fd5ac3c67bfd748e3f97f2aa825dd875a0d354131a0c83f4deb5933f7addcdbc28b6fc34954d4a22425c440720882c94841de08073b2f01dd86ed03409b49a2ff4f2723def3e09658f305cfd3b63845159447947253f8bfb82809f00c4ae5f695c29df3fac2361081e6f4238d91c9a98132e4945ab8ff727cf32894f847c72326fa1f7f2e18dbad3838f468eec053a7bacf665a5b53981c8c618544535667f1485d896cbbdb348ebab540ea357f5125962b77c4b84bc5f9064dcaa622472a3ead28e58ab6e0d7346ffae32c473a334a3d62fe40160ec9b3b3b7de42c2418b4373da696e4d3e65526c329348a9e096aef9585cadae256372529172c1f2c01100c786a2e9a8c22ad09b155b0e05cc8ab4d1241aa5672c99f4d62ac625218a61930bbe9db5bc7b84e69e6132c8b40e0c4513f9cd9879f4319087455efc93bf2b3e4d5b7eecd695eb7958049e67b79a6c00e5a55f45159f334ac6c287ca87a147fae05d9c95d00d40efafa73aa1646e4ba14d254ac3b1ad9f0f86e81c5be2977e0071a950b0df869462ed470722eb3954fe0047252c4ac24a4991fa126deb73d56e22c64c0907586b7e61c57ddb2d84ff85acd79fd6dbff037caa0bc9b4507de8fa361186e159f2d6b37275972669fe6431d39e2a3847248868125726d6e423455784045d9a2e2895b671f35990011ea30f045d59f290136d21180779eb8f6fd05d46c95bfb156bf98d1220f667ae251f0d66db290176d7b0b57c29eb311d8636066ab405f461b8ee48aa96aefbfbff2e689c594533f709c3b4dfe8ee1fbee6b01d005d10f3535adeb433077d76ca9b4d84a9284a4a0c4ea18d5215be233ad0ec8cd591e2c705ece7174446ed2ff06428a208169ecd36994c8edb08db324e404a0d2cbce894188650c3344b288e636561c6414fb258ec0f8771e8da4b47bd35dc534e286a041f2b58a33c96c9e52324b9eb02695abe5d001724a66bb58a25137a95484acb9998121085629f2e564619266a2c1aa5e19a586553a69b0a906e31218b2cf21d585122d1c0a106c0159637caff26eb5eb9edc6442218f637ade76910ec6d8dc915cec5a228d758f2af6be1956788be8e1347db64ffdbddc718afd963cc364c66dfe14e0b20af5f55326c51d0746969f51b032b6ba2ff89d8713c8742a14305c892725d5b30e6723198ff5594aa765c0abf19b6cc3046a5c87037db9b150b4b12f20c361f3da3ae23c4efc485bdb1f03749f39fe1be410a6c0eba51f83460a6cb5a48ba80eaf00dd08f405b865d06fa5562884916d7099347bc4e8fa3af22c03c89edd888e076864202e22a35c1f9ad6d7fa353751f65c36151876b1f9a489ffe2bcb9defc6cbe10d19f870b4c7ba920d7c473721976d7efa10eec41998147ccb85672eba529baebdf6c9c23022d2521e671b9b6b62bbb373ab886ca6edc672f566115844a6e795d16431e6eebdc30c64a515d2414d33a10d422c53dbcb790f9fe7061d8fd77572033017130b376a6184ad0369b61d78d5363a55b2a85578c603244399e1dd955919d98fe09747fe9cf859a6e07e7437605ec108d0b2db74d158202a1244df513c0c779656e902f0344c88c9bdec9b668ee0414a26cbef72b6e59802e2e88b54f005680ee8b9948da6d9c3640c6f5fd3de2c8f75f17886ba17eea8bc66fe49df870912579b144dd86c0b49d88f66dbf534aa7cd2ceb70b53db74736c8b6ab96653f351b5af0d27b0e76c34c4182ccbcfa7135c5a437de184a326250297fb55e2960d5e754f8b5be8c7d5b895efa0a32de6f57b2ba6167e4a3d563e92743ea8f9859997d04258a85620315266287ceb129d20f677ac7c37078fa6fcb72557a4ec62f7545c53be07e51ff0393f6b7135737f037162399e372988bad5cfd42a582338eacd7120b1ce40d77ff1ea88bbfad3cc0600429fcd05d4c8b1c71e490856cd2910c9a29d373b9902e59ffc8f1220bc1954bc51fa23204e56132dd6d4de9cfbbcc14c921b9a345967d2e8c46e84e8152d6142f0518afc9a56384c20c03c55d204772be40a9befe3c5d6075f889744efa7f841edf2b11f98ea5f1880f7cc098919f89a40578c68fb8b2568134d49acc4d262ada3aee46ecd7c41b5ef44021cd89f3654b7e0a084dbd905ae6f196f05e82a525cee19ffad1b2450c3901dcf162a6fe9d7a661680f2cb8bdfa910793a46b5ad62003efdca147554bfdf056ef48cc1fb718672c7437c9150bee34d8bdc523e772e61975ecd284b1a45767fabe0ce33175cc34925b718a48efd5713b37e50c97e4733a180e7841353d90492f2fa390a43138e7315d9112396dc69960963cf7da6c3c1d7e69b04a38e9ebbc8b678792c04a6ccf5c318e81d30317978df2567231f617fe3b7013fb5d8b1682a64b19412e07f1238798889993afdf2c9f3474b630c680fb96e50fc13be5011aa468e980fc1f8e97d7f5a153e57328d56c9333986a5b43c00b47fe1fe024274bfbd99e9cc93b71965d427114a73fa5c15ea3d6fb042eab452f675b9bc981c1156d634e8df23ca9f80266d71a266e2852f7f9c54ad4ebbca65e6cbbeaa12c2a86fcc1f9f85fab8cd011168c88b48a10151c21beefe07b125be50df8daf03a0e85302d9f5b3046e836a4d1d4995a693947079eecf3d9ada1734b11a6aee0868249afe3306ba52fb4b592c064997387a4b9c61a4141b09ba9e564686420b83525ecf104839eef2fc890db864fd03b7229572ec0da079532aca56e935b163ba9d3ecc1e5168e5dfe6838b00ab1ea7b4e769e3ea01ee6482f4991f08d6d514b5acd2835f5019dc6f9681e33d17f11a6dae1912cc42402d5b87088bbf743f7671349fdb4098ff05ab6ed5f5a40a166f2c9e896d0e3eecbfe0c2cc22059ddc84df36066feb476da733013b5e11f4a2072d1e14aacb252f685332a9ca922ffc2793fee201f0183de436e2c1432c668460f0a3f78cfa885cc5a0c4e3ab47fe408ca6a79541839f95e253432f2fc69e9"}, &(0x7f000029c000-0x4)=0x1008) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000fd2000-0xc)={r4, 0x8, 0x10}, 0xc) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000fd4000-0x64)={&(0x7f0000fd3000)=[0x800, 0xfffffffffffffffc, 0x9, 0x3], 0x4, 0x1, 0x2, 0x401, 0x70, 0x6, {0x9, 0x6, 0x20, 0x6, 0x1f, 0xffffffff80000001, 0x8, 0xaad5, 0xffffffff7fffffff, 0x5, 0x2, 0x7fff, 0x3f, 0x3ff, "4188ccb94a7917fb7eaad7ef0b7bc0e771b529cf6e3cfef1084c8ee1ea251dd2"}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000b79000)={0x0, 0x0, 0x0}, &(0x7f00009e0000-0x4)=0xc) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000fd2000-0x4)=0x0, &(0x7f0000fd2000-0x4)=0x0, &(0x7f0000c4f000)=0x0) syz_fuseblk_mount(&(0x7f0000ac3000-0x8)='./file0\x00', &(0x7f0000087000-0x8)='./file0\x00', 0x4001, r5, r6, 0x3f, 0x8, 0x800) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000fd0000)=0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000ef000-0x10)={0x9, 0x0, 0x22, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000b53000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000768000)=""/7, &(0x7f0000ff6000-0x4)=0x7) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000035000)="ae7ea3d52057b31fed8014a8c65d6cfa4bd2b56bb63684d1f66ffbd7aec4ef2a75357ad683a7ba2bf79fa04ac1b086924fd3737e41aef07cd4ccd96f1c481e6687fc24aa1363b09e9e41f3941f56b50e3cb913bdc4ffc90783694c09d8ed2900fef61174aa689892d9f0470eea089b9a2b75010d0b") setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000258000-0x10)=[{0x4, 0x7fff}, {0x6, 0x2}], 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000282000)='/selinux/policy\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001000)='./file0\x00', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000001000)=""/124, 0x7c, 0xb10, &(0x7f0000001000-0x10)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00002ce000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000478000-0x10)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x400, 0x3, 0x2, {0x0}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000003000)=""/4096, &(0x7f0000001000)=0x1000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001000)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0, 0x0}, &(0x7f0000004000-0x4)=0x8e) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002000)={&(0x7f0000008000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000006000-0x10)={&(0x7f000000a000)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0}, [@etimer_thresh={0x8, 0xc, 0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x0, ""}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000aca000-0x77)=""/119) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) fcntl$notify(r1, 0x402, 0x3) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 73.009149] binder: release 14719:14723 transaction 103 in, still active [ 73.016612] binder: send failed reply for transaction 103 to 14719:14735 [ 73.023839] binder: undelivered TRANSACTION_COMPLETE [ 73.029482] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000303000)='/dev/usbmon#\x00', 0x4d, 0x20200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000014000-0x28)='nodeveth1)}:eth0self%/eth0ppp1-proc[]!}\x00', 0x1) r1 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000014000-0xe8)={{{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000014000-0x28)={0x802c, 0x86, r1, 0x47, r2, 0xf68b, 0x7d, 0x3}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000012000-0xb)={0x0, 0x3}) [ 73.094941] binder: release 14742:14747 transaction 105 in, still active [ 73.109961] binder: send failed reply for transaction 105 to 14742:14758 [ 73.116966] binder: undelivered TRANSACTION_COMPLETE [ 73.128293] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008a5000)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000768000)=""/7, &(0x7f0000ff6000-0x4)=0x7) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000035000)="ae7ea3d52057b31fed8014a8c65d6cfa4bd2b56bb63684d1f66ffbd7aec4ef2a75357ad683a7ba2bf79fa04ac1b086924fd3737e41aef07cd4ccd96f1c481e6687fc24aa1363b09e9e41f3941f56b50e3cb913bdc4ffc90783694c09d8ed2900fef61174aa689892d9f0470eea089b9a2b75010d0b") setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000258000-0x10)=[{0x4, 0x7fff}, {0x6, 0x2}], 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000282000)='/selinux/policy\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000aca000-0x77)=""/119) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) fcntl$notify(r1, 0x402, 0x3) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001000)='./file0\x00', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000001000)=""/124, 0x7c, 0xb10, &(0x7f0000001000-0x10)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00002ce000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000478000-0x10)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x400, 0x3, 0x2, {0x0}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000003000)=""/4096, &(0x7f0000001000)=0x1000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001000)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0, 0x0}, &(0x7f0000004000-0x4)=0x8e) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002000)={&(0x7f0000008000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000006000-0x10)={&(0x7f000000a000)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0}, [@etimer_thresh={0x8, 0xc, 0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x0, ""}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0xffff) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000fd1000-0xce)="2a8f92f53c2347b9cc50e592fc7c113338a57997da153d1ceff8850daee724f36f7eb902c68d3424a762f4c5f2c838a9772533322a4d185a151047cd93ca37e507f76ed0ab9f2d65ea5a90782d6132d22ab162da38e96e3d2ba7ee32cd86057bfb27e38d70f8e183892a9185a29cc89a30264e3c3e3d032ebe5fea797c648ce3dcd132910d2589091735b60e368c6b78847d62cc8a84e7cbfb1ffaf78ac5f4d95ae993f68b7880abe4558bcdd5c6c634ae5b822b684b581663390e355adb96792d5908408257b3f47e94afaa807f") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r1, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) socket$pptp(0x18, 0x1, 0x2) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) fchmod(r2, 0x28) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009c9000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00007b9000)=0x0, &(0x7f00006fa000-0x4)=0x4) ioctl$TCGETA(r0, 0x5405, &(0x7f000026f000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000950000-0x8)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0x2, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x4}, &(0x7f00008ab000)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x5}, 0x8}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000dc000-0x4)=0x0, &(0x7f0000967000-0x4)=0x4) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000ff6000-0x4)=0xb3) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000ee4000)='./file0\x00', 0x2, 0x1) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000ff6000-0x8)={0x0, 0x10001}, &(0x7f0000a43000)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000f4a000-0x10)={0x20, 0x2, 0xffffffff, 0x4, r2}, &(0x7f0000ff6000-0x3)=0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x7, &(0x7f0000ff6000-0xd0)={0x400, 0x10000, 0x1ff, 0x5, 0x8, 0x5, 0x9bef, 0x20, 0x400, 0x9, 0x3ff, 0x2, 0x4, 0x20, 0x83, 0x7, 0x9, 0x7, 0x0, 0x6, 0xff, 0x1, 0x8, 0x5, 0x7, 0x80000001}) [ 73.174924] binder: release 14769:14771 transaction 107 in, still active [ 73.181868] binder: send failed reply for transaction 107 to 14769:14774 [ 73.189108] binder: undelivered TRANSACTION_COMPLETE [ 73.194347] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000ce0000-0x10)={0x10000, 0x5074}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0xfffffffffffffed9, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000481000-0x8)={0x0, 0x400}, &(0x7f00000c2000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000310000-0x98)={r4, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x8}, 0x98) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000ce0000-0x10)={0x10000, 0x5074}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0xfffffffffffffed9, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000481000-0x8)={0x0, 0x400}, &(0x7f00000c2000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000310000-0x98)={r4, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x8}, 0x98) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000eb1000-0x1000)=""/4096, &(0x7f00000d7000-0x2)=0x1000) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000ff6000-0x4)=0x0, &(0x7f0000ff6000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000a8d000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000ff6000)=0x10, 0x80000) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 73.231048] IPv4: Oversized IP packet from 127.0.0.1 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x40000000000002, &(0x7f0000ed0000-0x60)={0x0, 0x34, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000da0000-0x8)={0x0, 0x0}, &(0x7f0000b05000-0x4)=0x8) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x2, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000c50000-0xe8)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0be8570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94bad", 0xe8}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00006f7000-0x28)={@common='sit0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000262000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000567000)=0x10, 0x800) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000009, 0xc052, r0, 0x0) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$inet6(0xa, 0x7, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000f24000)={0x0, 0x669c, 0x10}, &(0x7f0000ff6000-0x4)=0xc) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000ff5000)={r2, 0x3f}, 0x6) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000d98000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f000024e000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00003dd000-0x4)=0x0, 0x4) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f000009c000)=0x0) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000759000)={0xaa, 0x30, 0x0}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000664000-0x10)={&(0x7f00000cb000/0x1000)=nil, 0x1000}) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 73.280424] binder: release 14782:14790 transaction 110 out, still active [ 73.287409] binder: release 14782:14790 transaction 109 in, still active [ 73.300500] binder: undelivered TRANSACTION_COMPLETE [ 73.312288] binder: release 14782:14796 transaction 109 out, still active [ 73.320344] binder: undelivered TRANSACTION_COMPLETE [ 73.332696] binder_alloc: binder_alloc_mmap_handler: 14810 20886000-2088a000 already mapped failed -16 [ 73.336543] binder_alloc: 14808: binder_alloc_buf, no vma [ 73.336560] binder: 14808:14814 transaction failed 29189/-3, size 0-0 line 3127 [ 73.375956] binder: send failed reply for transaction 110, target dead 2018/01/26 09:48:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00004cd000)=0x0, 0x4) r1 = creat(&(0x7f0000261000-0x8)='./file0\x00', 0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00009b8000-0x11)='/selinux/enforce\x00', 0x80180, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000cb8000-0x4)=r2) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000442000-0x8)={0x100, 0x6, 0x41, 0x3}) bind$netlink(r0, &(0x7f0000e6f000)={0x10, 0x0, 0x1, 0x80}, 0xc) 2018/01/26 09:48:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) acct(&(0x7f000028b000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e2f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18, 0x0}, 0x80) timer_create(0x5, &(0x7f0000c9e000-0x60)={0x0, 0x8, 0x1, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00004e3000-0x4)=0x0) clock_gettime(0x0, &(0x7f0000321000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00004a6000-0x10)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00007b2000)={{r4, r5+30000000}, {r6, r7+10000000}}, &(0x7f0000c7b000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000945000)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff93, 0x0}, {0xffffff90, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000930000)='/dev/hwrng\x00', 0x2040, 0x0) r1 = syz_open_dev$loop(&(0x7f0000048000-0xb)='/dev/loop#\x00', 0x44ed, 0x200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r3 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r3, 0x4, 0x40000) write$selinux_validatetrans(r2, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r4, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r5 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r5) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) eventfd2(0x6, 0x80800) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r3) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r3, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r3, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000ee7000-0x28)=[{0x7, 0x7}, {0xb, 0x1}, {0x8, 0x8}, {0x2, 0x1}, {0x4, 0x4}], 0x5) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000b52000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000868000-0x10)={0x2, 0x734f700c, 0x1000, 0x8}) 2018/01/26 09:48:01 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000b5d000)=""/126, &(0x7f0000000000)=0x7e) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f000046b000)={0x6}, 0x4) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f000072c000)=0x7b18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f000085e000)=0x0, &(0x7f000031c000)=0x4) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000eb1000-0x1000)=""/4096, &(0x7f00000d7000-0x2)=0x1000) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000ff6000-0x4)=0x0, &(0x7f0000ff6000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000a8d000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000ff6000)=0x10, 0x80000) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008a5000)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) [ 73.382703] binder: send failed reply for transaction 109, target dead [ 73.389546] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$inet(r0, &(0x7f0000746000)={0x0, 0xffffffffffffffff, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000156000-0x4)=0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009c9000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00007b9000)=0x0, &(0x7f00006fa000-0x4)=0x4) ioctl$TCGETA(r0, 0x5405, &(0x7f000026f000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000950000-0x8)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0x2, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x4}, &(0x7f00008ab000)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x5}, 0x8}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000dc000-0x4)=0x0, &(0x7f0000967000-0x4)=0x4) [ 73.455303] binder_alloc: 14829: binder_alloc_buf, no vma [ 73.469288] binder: 14829:14844 transaction failed 29189/-3, size 0-0 line 3127 [ 73.482471] binder_alloc: 14829: binder_alloc_buf, no vma [ 73.482492] binder: 14829:14851 transaction failed 29189/-3, size 0-0 line 3127 [ 73.505397] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.510936] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @thr={&(0x7f0000cde000)="5653d3d79fc574c5b0315d194ae2f3dd03a7e94dfe1fa6acb79cb1dcb421bd0d92d5552ab1d36fc774735724515b52bef79247f6d96d5cb8ffe6db8f5d5eadb6cb6dcd0bca6e81cd0a65b5", &(0x7f00001b0000-0x1c)="82726736f659b4dba1a09bbb790744fec2ea6b1da37f56e6edd809db"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000930000)='/dev/hwrng\x00', 0x2040, 0x0) r1 = syz_open_dev$loop(&(0x7f0000048000-0xb)='/dev/loop#\x00', 0x44ed, 0x200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r3 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r3, 0x4, 0x40000) write$selinux_validatetrans(r2, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r4, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r5 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r5) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) eventfd2(0x6, 0x80800) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r3) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r3, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r3, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000ee7000-0x28)=[{0x7, 0x7}, {0xb, 0x1}, {0x8, 0x8}, {0x2, 0x1}, {0x4, 0x4}], 0x5) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000b52000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x2, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xfffffffffffffcd1, 0x1, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffba) 2018/01/26 09:48:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000d98000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f000024e000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00003dd000-0x4)=0x0, 0x4) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f000009c000)=0x0) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000759000)={0xaa, 0x30, 0x0}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000664000-0x10)={&(0x7f00000cb000/0x1000)=nil, 0x1000}) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000fbb000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000085e000-0x4)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000bd2000)={{{@in6=@loopback={0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000006b000-0x4)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000b48000)={&(0x7f00002cd000-0xc)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00008ad000)={&(0x7f00001ab000-0x1cc)=@getpolicy={0x1cc, 0x15, 0x420, 0x1, 0x1, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x1, 0x1, 0x0, 0x0, 0xa, 0x20, 0x80, 0x21, r1, r2}, 0x6, 0x2}, [@migrate={0x30, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@dev={0xac, 0x14, 0x0, 0x10}, 0x3c, 0x4, 0x0, 0x7, 0x2, 0xa}]}, @coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0x0, 0xbb}}, @replay_esn_val={0x44, 0x17, {0xa, 0x4, 0x0, 0x2, 0x2, 0x7, [0x1000, 0x80000001, 0x590, 0x8, 0xffffffffffffce8b, 0x8, 0x4, 0x6, 0x5, 0x5d9]}}, @algo_aead={0x60, 0x12, {{'gcm_base(cbc-camellia-aesni,digest_null)\x00'}, 0x90, 0x1e0, "05dc7ceba302912144134d13e75d303586aa"}}, @algo_aead={0x94, 0x12, {{'gcm_base(ctr-twofish-3way,michael_mic)\x00'}, 0x240, 0x2c0, "e9574d19512e1b15fe1db2aa5ef7dd7c0e4a91aa88a3a272d8facd0955c8fe203e3b3ee0fe8d176f0caf3a27013564e2c0d83cef903a7f6dbdf596b53ff4f49ef7719b35d3d33f73"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) unshare(0x28060400) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r3]}], 0x1, 0x0}, 0x0) recvmsg(r5, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) socket$unix(0x1, 0x8000000000002, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0xa1, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:02 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000b5d000)=""/126, &(0x7f0000000000)=0x7e) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f000046b000)={0x6}, 0x4) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f000072c000)=0x7b18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f000085e000)=0x0, &(0x7f000031c000)=0x4) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioperm(0x3, 0x0, 0x80000000) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ff6000-0x16)='/selinux/checkreqprot\x00', 0x80100, 0x0) accept4$packet(r1, &(0x7f0000a71000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0]}, &(0x7f0000fe6000-0x4)=0x14, 0x80800) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x2, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000b53000-0x8)={0x5579, 0x3f}) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000b53000)='./file0\x00', 0x3) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000ff6000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000cad000-0x4)=0x8000000000004, 0xa7f2bbe13e0a1969) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:02 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x2, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xfffffffffffffcd1, 0x1, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffba) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000a68000)=""/126, &(0x7f00003df000-0x4)=0x7e) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) acct(&(0x7f000028b000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e2f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18, 0x0}, 0x80) timer_create(0x5, &(0x7f0000c9e000-0x60)={0x0, 0x8, 0x1, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00004e3000-0x4)=0x0) clock_gettime(0x0, &(0x7f0000321000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00004a6000-0x10)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00007b2000)={{r4, r5+30000000}, {r6, r7+10000000}}, &(0x7f0000c7b000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:02 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000014000-0xc)={@dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00004a9000-0xc)={0x0, @multicast2=0x0, @rand_addr=0x0}, &(0x7f0000b34000)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000393000)={0x0, 0xc5, "2ee8e313a29acf91112181b7c25e71e1e7b1d5b4d8d7aae8164db4885b6f137fabfd34ceb569cc781398bfd7aaaa233228f7976b635874c3a4a20a42c43fcc0fe1444ebda01ca9927431fe790b61d71a47a7a33f1eda8b6a2654eb1b685dd8f12a0105fc6ee0426ec5f6c5bde9c21e4b24deca4d6355cb7138b78f83a55eec8d66823c0ad27dad16afc3cb72654fe0f48457dbebb9f050a89fea58164dcd77394d923caddf68d2d1aa193b791fbf72b78e7add7ea9495292099c82419b6fcd73db063c6b38"}, &(0x7f00003ab000)=0xcd) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000556000)={r2, 0x0}, 0x6) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 73.709569] binder_alloc: 14864: binder_alloc_buf, no vma [ 73.728591] binder_alloc: 14864: binder_alloc_buf, no vma [ 73.734609] binder: 14864:14887 transaction failed 29189/-3, size 0-0 line 3127 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$pptp(r1, &(0x7f0000ff7000-0x20)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x0, 0xc}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f000098b000)="", 0x147, 0x0, &(0x7f0000ff6000-0x10)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) eventfd2(0xffffffffffffffe1, 0x1) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000de6000)=0x0, &(0x7f0000b52000)=0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 73.752774] binder: 14864:14893 transaction failed 29189/-3, size 0-0 line 3127 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000cbc000-0x4)=0x9, &(0x7f0000307000-0x4)=0x4) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b53000-0xee)="dd12e228c503d42771149273730000000000000038e33048da0a3d1736933b931b4ec4474d838a3876f37980aab20eec2c000000000000004cfe820bb605c8ad745889ee659a8e8d2d1ce46c9feb0e27644e68894aba55886ca165b1b025ee7e97d96ea9e7d3e2b62d9b8199a1d6beae1a0019233baf5973cc62bced0cbbd58a40dfb4e60c885236a3e487414751d267343af7583aa6b0768640724a602e5fe03458330ed10c442a16f5b900ac4e45afd0321160ffdef295d653e21ee4910ba44eae9917f28fd2333e92d98aee5feba5b87eefb4a797398906ca1422a0f204dcd4402fbd9da4930923f3c6f19a40", 0xee, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0xfffffffffffffffc, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x400000000000000a}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000b53000-0x4)=0x0, &(0x7f0000851000-0x4)=0x0, &(0x7f000075e000-0x4)=0x0) fstat(r4, &(0x7f0000d02000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r5, r6) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000bea000)=[{r0, 0x2002, 0x0}, {r0, 0x1200, 0x0}, {r0, 0x0, 0x0}, {r0, 0x8404, 0x0}, {r0, 0x20, 0x0}, {r0, 0x8000, 0x0}, {r0, 0x100, 0x0}, {r0, 0x1200, 0x0}, {r0, 0x4002, 0x0}], 0x9, &(0x7f000076f000-0x10)={0x0, 0x1c9c380}, &(0x7f0000ff5000)={0xe44d}, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f000078b000)="718c6326a03f7c3584786228fa04e25c9f7d34c59fd1ad9e4bf9d86276e71d6b42", 0x21, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ef3000)=0x0) r2 = getpgrp(0x0) tgkill(r1, r2, 0x30) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000ff8000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000ff7000)={0x0, 0x0, 0x0}, &(0x7f0000086000)=0xc) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000ff9000-0x4)=0x100) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00004f3000)=0x0, &(0x7f0000ff8000-0x4)=0x0, &(0x7f0000ff7000)=0x0) setresuid(r4, r5, r6) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000ff7000)={{{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff8000-0x4)=0xe8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000ff8000-0xc)={@local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, r7}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000ff6000)={0x1ff, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f000001f000)={{0x2c4b, 0x7fff}, {0x7, 0x20}, 0x800, 0x4, 0x100000000, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000ff7000-0x20)={0x3, r8, 0x10000, 0x0}) 2018/01/26 09:48:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 73.781878] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.787876] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.828860] binder: release 14909:14910 transaction 122 out, still active [ 73.835812] binder: release 14909:14910 transaction 120 in, still active [ 73.846028] binder: undelivered TRANSACTION_COMPLETE [ 73.851865] binder: release 14909:14918 transaction 120 out, still active [ 73.859843] binder: undelivered TRANSACTION_COMPLETE [ 73.866166] binder_alloc: 14916: binder_alloc_buf, no vma 2018/01/26 09:48:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000ff6000-0x9)='/dev/ppp\x00', 0x1, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000ff6000-0x8)='./file0\x00', &(0x7f0000336000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00008fe000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000e4d000)='./file0\x00', r2, r3, 0x800) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000ff5000)={{0x2, 0x1, @rand_addr=0x101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x12, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='ifb0\x00'}) mknodat(r1, &(0x7f0000250000-0x8)='./file0\x00', 0x1040, 0x1) 2018/01/26 09:48:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x40) read(r0, &(0x7f00005e5000)=""/31, 0x1f) clone(0x200, &(0x7f0000fbf000)="", &(0x7f0000077000-0x4)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f00000d5000)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r1 = syz_open_procfs(0x0, &(0x7f0000a8b000-0xd)='attr/current\x00') sendfile(r1, r1, &(0x7f0000eb9000-0x8)=0x0, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000d9c000-0x8)={0x0, 0x0}) sched_rr_get_interval(r2, &(0x7f0000aaf000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = gettid() tkill(r3, 0x16) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000c1000-0x10)={0x4, &(0x7f00002fa000-0x20)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f000099b000)={r4, 0xc}) getpeername$ax25(r1, &(0x7f00002c1000)={0x0, {""/7}, 0x0}, &(0x7f0000afb000-0x4)=0x10) 2018/01/26 09:48:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) readv(r0, &(0x7f00001b1000-0x90)=[{&(0x7f000090b000-0xc8)=""/200, 0xc8}, {&(0x7f0000f41000)=""/10, 0xa}, {&(0x7f00000ad000)=""/207, 0xcf}, {&(0x7f000049c000)=""/211, 0xd3}, {&(0x7f0000d68000-0x75)=""/117, 0x75}, {&(0x7f0000713000)=""/4096, 0x1000}, {&(0x7f000025b000)=""/14, 0xe}, {&(0x7f0000a7e000-0xbc)=""/188, 0xbc}, {&(0x7f0000a95000-0xd)=""/102, 0x66}], 0x9) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000cc9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) arch_prctl(0x1002, &(0x7f00004d2000-0xcd)="e660a54cf0f31b67f708e5c53c08c77a5674be3b5e80f52049c70cbeda17982ff4e89d0d21fb92e3db6bbfa1ec1e822745ef8bfdf386121293d2b4b243cb43e64cc9344850659bc725fa3cd5427b1f8f6189e63add44b2ed853b17f301de6cded7472a091a9a67e456275ebc68f164eb01521a4a2f7928dce0547d3cdd795846e0100c09c437c7dc7b48f6f7831dfbe1710af1fd5a340a172ee8eb400092a824b1b28c827d983675c9554aa69f2303c5587b54bd7702335db344a98335202dfa33a57accbc4791627418b36118") recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000628000-0x4)=0x0, &(0x7f000066d000)=0x4) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00003cf000-0x4)=0x0) sched_getscheduler(r1) getsockopt$inet_dccp_int(r0, 0x21, 0xf, &(0x7f0000d4b000-0x4)=0x0, &(0x7f00003bf000-0x4)=0x4) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000389000)={0x0, 0x0}, &(0x7f0000059000-0x4)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000b53000)={0x2, 0x0, 0x2261, 0x8002, 0x607e}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0xa1, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003ad000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00008b7000-0x98)={0x0, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x2}, &(0x7f0000cb7000)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000f16000)={r3, 0x9}, &(0x7f0000a33000)=0x8) sendto$llc(r2, &(0x7f0000b1c000)="4d532e890ee95ccfb628252c6be5f87e0075451f150e779a1851b26cc6a3c2663359f49a7e6b6d2ad4589000aa552771eb97e1282b34179b96a11b5dede1e998eb77ac53eb275956fc496be21b2a72d9c0e3bcabdcecd48e85c1c76ad8378abcb7c12e52f9d3157241e758b04ee9f1fa4d5f57e804d23fe5a6978fbed702b4792c2e0cbc37bd768178b56c12873d98251461356c972b8ddda91b279928402e7410dc1479946c7658c8f87554d1027eaf4d410173fc88c4036b32bb8e1c6589c521838fde0c0894f8612ac5cfd3daacd876e1ddf51a7c686e2b01486956ffd022a9556fc1b11ca24b1bdd9bcb1f03df0d9ef95719175a415151aa8f0c72123ac483c4993122541714b4f080d64c844f18913ab3f6f932c1a7169f2cda469b274d9e8f5904db7872e4c1be8e4b0fb728942d47d50a96297f3b1700c23bff26235335751207db5d9e007b344269be5fbf0758e4b45394b055413a0fec06b2ad3b935b78a51a1cbed486633a9a9e15c04dd8713f1c9d66787f13a70f9cc27cc6fd8ab92409020c36fa367c11fae8329ba657836ff24c89479fbbd0365689bc19b1c9248e6d9643b1723481e93a01259366835f2c4572528596785ec466569640c875750a2bc39247ada2cdb896105a8d9e4055a428edca996e17356cfc427de98a6fa4e9462dd50e01bf4a16ba38b9fe9ebb7abfa33c38eb693488c9bd039ef1aef9481819168ccee8bb2ed054d95e051bd746c45f08fe96301d501f28ad3d7c4ed95f383ed082535c6d70f0a117d54f0463e67577c93eee537d0688d308b5f67e3a876691081d496aff7fcd6229961cb33769b6902fe181378b806bfd3ed2dccf0d5a876ec33cf1800c6a5f3b58ebab2b3c08a197bb289459edd816a66042d727813265d99a08d3a3546b37104717a438e8219b4d353623d290d7976ee8c91c3392cf30c3de73e29e9b053b1971b42ef372ade13949831740f8f648541238af4f1d448d7f3e4568f8d85fb675b440883a15d5cdf32f96d12d533a5d766d120e07cb6e626160ab411ae7cca27e8480150f9ed1da55de5863ecabdb71b0e378e773af988f3937a8af44322cfd1d8f061da1fb3b4a8b159f50d153eeea5e703fe7cb3d5ad5a36c10938e924715effb88ea54c5ba3d2d584deac2876eb859f717a671aeb9553729e6e13a6f5ba253f30b94041d33df80a8625f9abba90fd9d53cd1e036fb02e7b384f895ec7b004149c221f560480e7d68f5fe9996ac963982f313f8cacb62a573339b791aab6661b6186a6c54c807706fc3880eba542d730f6e3bf86e5d34a32893d5244dc51a002d4889248c778383578ec923d9abf241cb1ef0c24eea53fb5507589ea33390e769d38688c05c602be5b6c57b9fe8fc79f17b3d12f439dfcfff669007a9643545a908b9668b3b61aeeaa84afceb1d232b3a9d32df332c3e709890cb986d951673d576df6bd2dcdd018cbd3f28a2f79353b4d0ce921705660e1d5d4cf39f0c84fab8fedd2821e283c36d057eaac4fe44586ce51259f9ae016a03674eaa0c9e28f013f6b661ec6e5d926f145016c23819a6f2e5b98e4d354df60d774b1ac98cfee838db57a927fb5b0be549b515e60ca4ae7fc511fb549986dfffbb526b09874dae0fd2f876df40432be46287197fa27f6e16ac96a4f3bb5a0f8eb92d878d87b7570a2b21726124ee6384aaca60a4b9c258d30a17967e13e546c0490fd58d38e74a2c764a2ccbef810e24e9614576bad9f12941fa07ba2636fa33b85919e7d7f8449196b425348f861406233821df41d31e0fc53c4b35bbfe3f22cc47e502263694df6990a48d146588f4b0d0c38eb6e928ab84c6fcaf605b1b47f4b51887596c48933d0be368e4f896a4ee8aa02efc83f20dc706a9968343e46fae206677667dc8d882f4b12bd303dfc36653fa867d4e0b69fa6966fa7ca7953b1f588343bf56a8ac0f86b4c997c162955e489f09b3ea6e2720a79504fd9ec71b79d8475dfcfba037691ad6b691c6de2dea7dd9d9c1e145c5b643a63035776d12c69cf67422f6737aabb1b4d8d33c0272ed54e9319c618d93dc0c576e640ca1e87c3fb7dca5fb0c1bf4ff78de8d914e3cbee2a5822472693e3f6f14f82e95f542c0627bf1dd1c900994ad4fd0c297a6bebbc7136e144a07b2cc8f22836832afa7db4786e7f942006698e9c9c3b93f56ceecf02091f46702b3cf2cdf8ee010bb904d4e74f61f9e53fb320d8659108b40d20c6f550084d25ec3d04fff1d47b4f8fc35f6340563422dfbc72e91e4f8322d8cb9ab0b839a91b8660b6228dd69449c708efec18f9cf0238148663b42d77e33527b47fb7ad6130b797ba29dba30a6debfe251e8ac8eaea36d0548c87787c00bcd9a239c46a254678549c31384b7fcc9457b95897801b2f43b7b1830148ec7e78262dd5e2f8dc8e8583339fee925c94979be081d752f859a69eb853352c96ff2ea9e9225c380547ad12df05312656d90098e29ec2ccfd2823b37b64f553b5a7a57c9d9e21e714c323ca038a10a2ad22660eb43549b256b5533d33ef04771ccb759723cec3fa952150a7e2f68dca800ff9fddc27e59783e9478fdfbf8ce10ee35a5f192c52ed010c794f63ac7ad900abff92c25562cf8c863f578f5838fa35bba1c3556d575d88151f33813634ce23755fad39fad32ba2f7021f7afef3d43f1394c40528d7779c59ca84745159c9df3c5280893cf54e61ea648845f0a82b3c64bcd49827fe52f80bc6b73aedf4cba6b2fbaee009b02c36b2dea7afaeee78897bf3099761b07c60d1befa4e212acbc230306dbe5201e853675f7dfe80396ab885fa7c25d11d1609eadba10808930f0918a6bc2e5ef22be208be4ec03a6e5d8439a7b866803ad0d1498387fdde784cca86c40f3c04e0414e4c6deed541174462d4513b4d574f1fdb3ff31402aac555312b533982a19923ab56e0a0af70ef66df63dbe828344a3cbe17dd4e812f326630530f6076c84a24a601a5b42450a8a4537c97ac03f936b77007a2f849a79ecc253039664bc3dceb8d9e8eadc01d61d8c380541ebf430a199bce2404ed73dcf4eff82869bb449ac15cdc1cfb6ce9e2528dec5d2975d93532645e27797847c5136acc380c37d88e2285c7c83990493d77ee8f8e965fa8435947cd1394ca2d8582b25074e2f5a05b8f8ea8e6355e024e92af0767e4ed660f73190aff0997da3333c894741f9aa09a07f030cb203d8f711f1fb5f258f5f2c917726a6d5a700885de2a289161010e0055f024f1450aff2754cb32acf1d52efdbcdfc3cfa18ec3e373e90a6031cd24aa477971ceab7737d76c446fd53c5beed9ae6b5879bfa5d097363fe00cbe76eaf13764e1cb48b37672f80dd5cfad0ea8af5ee7d9dba94e34f355c6b97b5be15dbb9d7cc344e6e75e2eab879ac76d350fce721cee4661945dd7e1e8bd8e303694da8e02e34df3b46a54ebe83a4731961e31abcdd61b7097d7c2e30e7d7f1f8ee898b1c8a3a5a6d1b1420adf1c8f8d798f36064794fb496fd51750ed4e2cc88122c3e64049dc9e83be01c4a647248a0bcd17f7d9493d6a96a7cc2ddf0187e111d2a4716d8d83350a3ff56f9885791c4789039213b6f8061e225b27c21b64e252a61f0fca51120d096e711f5a1d2228c2c18a7127bf1f4f6625bae994fba05b53e70741142f31be31b82e9bf9d3769602ea3aa4324512d6a41a46d084fb2c038b5e1acba7299739fa043e2b7fd798634eb1cbd280e869b9172bb33d8ed1e50ba1eef9fdab55c8b0ea6589662a17f4c8a3306d86dd6fd74791bca36fd6dad45a0ece3369d8fd8ee5e273c4b755b495a66480c19895d021df12f6d0953ef7aace09d042e7ad639a4fc1308c166f96297318c5a018c97babef5e607d774b0882cb51567ab3a4c632cb66c1bdeae1415cec0b9b4c6fa4744eca0260b2e1bcceb0dfde968e74c3f6449a44790a4a0a2c2b0dba471518cf84f70b8cdf53602bd081a0f4c5bb8969dbe0885f4b9a49a750a1b49a960f56ccede5dc3a9ef1336fdef017c92e41092a1df46d41a4c869e0fce08dc1535a105c0338d98864ebf7307df30146ace22ae50d65406625295696774411f654758d26147417327fe258440148a9715f07cc07823d74b84e808e702bd3ba2a9fabc9b16af74774ddd972609a49c1ed5d77e6f8ac1b5e8f6918f7cfbc073048d86c9ec242ad34c689a9f49752731c9165c8267a6118d54595feee7afea4a966b93f2ac1891ce884c49642dfdae20ac0c4632cdc0e52934d8d1c05020265b7db1fd89791eb37d7293eb396986f719370d6194f42f2680334674cab1bf3f046fe00325c5aef66dc72176c08b7794bb9e65308edbc753bd8ccceea228cab5e0b302adbf32e6525406d76ac8787d41932e75e8c5fa0a98c699a3c53978a8458fbd4e1261a5257788b151dc2976b78ddf26065c4b79def4833198dc4847ca98a4a9a4a4ef5d1dd038372b15cfb71fb69a6c815544fde38118d85b39f4c75763a0b6afbc03f7b16c1a39a6338158a1087279121e0bfe8f329290fa369c355e7205cac17f1ba2c1b72cf68d6499de2ebbf928e539413c8697c9748f4a529dc3fc5b1de5d48491ed42a300108c37db0500a469860a6da808a4a074e1e3ab05ad493953b3e5b308cb345e44fe0ece2dfe65c74760e89a18520c12a4aedf6094b3e15d614427ebf1f74c18b0a04fc7ba2c6c20a2730f7efcff53f381cfe3dcbaee0fc547f967bc25968649a493a46252b0f76bf61baee70b961308c121b518dd8d4c014ce23ce20c3ff639eda5d1e10663b6427926365ea1096f1cd042f57dcc396769849858e944c94fad5126cede054fe5a7f1045d3a8c1c26552cf0cfb044c13bff44cc77c113dc4144c1c86e6ff1b658df339abf4fa4d6f84035862cd29026aae488afb424cc311dca18deb9aaa3148e867098e32e6b7916bd8e4923ce015370db5e6f3e0ca283c80bf172b5cf92b14e94700d6194fcb5c48d27e91874399941a24e6342a684577d1ced517809b5aa49670e2b31543dca801d55d58e8bc9ee716a54ce2ad4be4225597a3f4e29d6bbe5ab74bdc78e920384a0720f8e3777a476038b3566bb978dcddb40ca3310da690ebcd28d2b347c0abfba217553f483790b741cf3a42806bf13859cac5a1f9fd4a7830fae77301233c02980616f83a1456725237d4bfb0d9776363d460381f561f406cfb42634b19787db7a3fc8f6a9bb3099aa9ec48f20df712d2c96b9472d855569752c9272ccaba2dae88601e6183646162e45fc65741b5fa99112b0a3891e05d1ebe4fa2e02c1b54e63f52700753cb9382b1487414c3bb14de9a318daeeb8eddc5cb4b43bf0249ba1662a667c26f55204442d10594569cffe345a6b7016420bbbb56d6f4135b6ea0d1624eead6827b013298e47d416f5f677aab96f6cba85e8994f8e0f665b560c99e9c591ebedd31702904842597cd5a685b1ff466a3c7748e08995a30ec33b2d41bc237639be24a3626fb7403400b16903b9304481f3e84053d5048dbc7a13d1b8347b0defd2803209c8369a69275e4c70cad02929af0d65099932fb47fb608bf7052023bd6f04273bff36714bca37e02b6f1ea21ba6a02626b45886d02534e7324ee1af96d57987a14cb10e9fb1c2e59080b968074ace78c03d64a39d6ee3372feb878f7ddcf0878a6a43ce3ef8516e077431d42d505ae4aa3c884f145d7391de3eb8535c9b29b731a9d376c71831695d69d49a58337ed5859f037cb5303daa0485612cfc96c027936a6a913c73528103eccfce92", 0x1000, 0x4, &(0x7f0000d73000)={0x1a, 0x17, 0x8, 0x22, 0x100000000, 0x5, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0]}, 0x10) unshare(0x10010000) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8)={0x0}, 0x8}) [ 73.866185] binder: 14916:14923 transaction failed 29189/-3, size 0-0 line 3127 [ 73.879883] binder: send failed reply for transaction 122, target dead [ 73.886535] binder: send failed reply for transaction 120, target dead [ 73.893324] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000e8e000-0x50)=[{0x3, 0x5}, {0x8, 0x0}, {0x8, 0x100}, {0x8, 0x9}, {0x8, 0x6c3}, {0x6, 0xc2a}, {0xa, 0x5d}, {0x7, 0x7ff}, {0x3, 0x40}, {0x7, 0xffff}], 0xa) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) prctl$setendian(0x14, 0x2) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00003cf000-0x4)=0x0) sched_getscheduler(r1) getsockopt$inet_dccp_int(r0, 0x21, 0xf, &(0x7f0000d4b000-0x4)=0x0, &(0x7f00003bf000-0x4)=0x4) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000389000)={0x0, 0x0}, &(0x7f0000059000-0x4)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000b53000)={0x2, 0x0, 0x2261, 0x8002, 0x607e}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00006a4000)={0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000931000-0x8)={r2, 0x2}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) recvfrom(r1, &(0x7f0000469000-0x2)=""/2, 0x2, 0x10002, &(0x7f00005bb000)=@nfc_llcp={0x27, 0x3, 0x5, 0x6, 0xc2de, 0x1ec, "6d4c179a18c6cc9c9d1e1709968ebab6dc68a24bee0198038bbfb355eeb99d10f505db037479ceb731fe3cfac720aa0731a9bc280762bb674965f844253d7a", 0x400}, 0x60) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x1ff, 0xfffffffffffffdbb, &(0x7f0000be5000)=""/241, &(0x7f00007c9000)=0xf1) mount(&(0x7f0000ac5000)='./file0\x00', &(0x7f0000b53000-0x8)='./file0\x00', &(0x7f00004f7000)='ncpfs\x00', 0x1000000, &(0x7f0000aa6000-0x1000)="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") setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00008f0000-0x10)=@generic=""/16, 0x10) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000041a000-0x10)='/selinux/status\x00', 0x0, 0x0) write$selinux_user(r1, &(0x7f0000a2b000-0x2e)={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'user_u\x00'}, 0x2e) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000b5c000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000349000-0xe8)={{{@in=@empty=0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00007e7000-0x4)=0xe8) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setuid(r4) rt_sigprocmask(0x2, &(0x7f0000a3f000)={0x7}, &(0x7f0000158000)={0x0}, 0x8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) accept4$inet(r5, 0x0, &(0x7f0000ab7000-0x4)=0x0, 0x80000) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000c0000-0xc)={@rand_addr=0x0, @broadcast=0x0, 0x0}, &(0x7f0000a14000)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000945000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1, r6}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:02 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000024a000)='/dev/vga_arbiter\x00', 0x200080, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ff5000)=0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000f00000-0x4)=0x0, &(0x7f0000ff5000)=0x0, &(0x7f0000b99000-0x4)=0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000ff5000)={0x234, 0xfffffffffffffffa, r2, 0x19dd, r3, 0x100000001, 0xd4f, 0x10001}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000ff5000)=@common='nr0\x00', 0x10) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000534000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000c4f000-0x4)=0x0, 0x4) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) connect$netlink(r0, &(0x7f00000b6000)=@kern={0x10, 0x0, 0x0, 0x4004000}, 0xc) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000735000-0x14)={0x5, 0x7, 0xfd24cbd, 0x1, 0x10000}, 0x14) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000d99000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a81000+0x4ac)=@ethtool_modinfo={0x42, 0x8, 0x3, "a9cc8f57ff701f3b"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) mremap(&(0x7f0000150000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00005c2000/0x2000)=nil) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000a59000)=0x0, 0xfffffffffffffe3f) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 73.957369] binder: release 14925:14936 transaction 126 out, still active [ 73.964371] binder: release 14925:14936 transaction 125 in, still active [ 73.982472] binder: undelivered TRANSACTION_COMPLETE [ 73.988462] binder: release 14925:14949 transaction 125 out, still active [ 73.995969] binder: undelivered TRANSACTION_COMPLETE [ 74.015836] binder: send failed reply for transaction 126, target dead [ 74.026287] binder: send failed reply for transaction 125, target dead [ 74.038939] binder: release 14953:14955 transaction 129 out, still active [ 74.045890] binder: release 14953:14955 transaction 128 in, still active [ 74.054283] binder: undelivered TRANSACTION_COMPLETE [ 74.059461] binder: release 14953:14961 transaction 128 out, still active [ 74.066376] binder: undelivered TRANSACTION_COMPLETE [ 74.071982] binder: send failed reply for transaction 129, target dead [ 74.078793] binder: send failed reply for transaction 128, target dead 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f0000cda000)=""/0, 0xd037, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r2, 0x80000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00002ca000)=""/173) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c0a000)='/dev/vga_arbiter\x00', 0x48100, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x100200000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f000088d000-0x8)={0x4, 0x0}, 0x8) tee(r0, r2, 0x1, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f000033b000-0x8)='./file0\x00', 0x0, 0x126) recvmsg(r1, &(0x7f0000ac1000-0x38)={0x0, 0x0, &(0x7f0000615000-0x80)=[{&(0x7f00005aa000-0x3f)=""/63, 0x3f}, {&(0x7f0000cd8000)=""/85, 0x55}, {&(0x7f0000ff5000)=""/111, 0x6f}, {&(0x7f00004e6000)=""/86, 0x56}, {&(0x7f0000abd000)=""/192, 0xc0}, {&(0x7f0000e55000-0x14)=""/20, 0x14}, {&(0x7f0000a22000)=""/42, 0x2a}, {&(0x7f0000c42000)=""/4096, 0x1000}], 0x8, &(0x7f000000c000)=""/0, 0x0, 0x3ff}, 0x8000) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) accept4(r2, &(0x7f00008ce000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000530000-0x4)=0x26, 0x800) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00006a4000)={0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000931000-0x8)={r2, 0x2}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b53000-0x20)={"176b11e4922e921d43fcb0a6b0f8a04e", {0x4, 0x8d9, 0xffffffffffffffc0, "8c328cc9ba54", 0x401, 0x0}}) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mlock(&(0x7f000053a000/0x2000)=nil, 0x2000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000c5c000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000614000)=0x8) 2018/01/26 09:48:03 executing program 1: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00002ce000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/238) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000865000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000001000-0x4)=0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) ioctl$TIOCGPTPEER(r0, 0x5441, 0x92e) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00001f6000)='/dev/rtc\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000001000-0x4)='em0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f000001c000-0xc)='/dev/ashmem\x00', 0x0, 0x0) preadv(r1, &(0x7f0000019000-0x30)=[{&(0x7f000001c000)=""/16, 0x10}], 0x1, 0x0) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f000001d000)={0xfffffffffffffff9, 0xffff, 0x5, 'queue0\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 74.490694] binder: 14977:14979 got new transaction with bad transaction stack, transaction 132 has target 14977:0 [ 74.521383] binder: 14977:14979 transaction failed 29201/-71, size 0-0 line 3031 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000ff5000)='md5sum\x00', 0x2) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00007f3000)=""/96) sendto$inet(r0, &(0x7f0000d39000-0xa9)="175374804a3a5bef21ca4fb552925af80cd881ec136323be743b48bab36946a3d10c98f71aa096591fec513c190ba2c2e88fc2413d0afea19c0d2d9ef6fae6eaad3db234360e90659450c741df20e0506589999ba24b93914e868ca42c75fa80f7fba75aef512bf225a60d1d8a679206fc0d027078a6bfa4732c9eb0957e7b6e971826f43ef1004c4dfda40bf73c51a2d622b8e6792a4caa6d185ed565d9d8e892ffa860a8dae42b1b", 0xa9, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mlock(&(0x7f000053a000/0x2000)=nil, 0x2000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000c5c000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000614000)=0x8) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) getpeername$inet6(r0, &(0x7f0000739000)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000df3000-0x4)=0x1c) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 1: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00002ce000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/238) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000865000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000001000-0x4)=0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) 2018/01/26 09:48:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00001f6000)='/dev/rtc\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000001000-0x4)='em0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f000001c000-0xc)='/dev/ashmem\x00', 0x0, 0x0) preadv(r1, &(0x7f0000019000-0x30)=[{&(0x7f000001c000)=""/16, 0x10}], 0x1, 0x0) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f000001d000)={0xfffffffffffffff9, 0xffff, 0x5, 'queue0\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 74.530893] binder: release 14973:14981 transaction 136 out, still active [ 74.530898] binder: release 14973:14981 transaction 135 in, still active [ 74.530902] binder: undelivered TRANSACTION_COMPLETE [ 74.530916] binder: release 14973:14988 transaction 135 out, still active [ 74.530919] binder: undelivered TRANSACTION_COMPLETE [ 74.530926] binder: send failed reply for transaction 136, target dead [ 74.530932] binder: send failed reply for transaction 135, target dead [ 74.541723] binder: release 14983:14986 transaction 138 out, still active [ 74.541728] binder: release 14983:14986 transaction 137 in, still active [ 74.541732] binder: undelivered TRANSACTION_COMPLETE [ 74.541745] binder: release 14983:14994 transaction 137 out, still active [ 74.541748] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000eb000-0xb)='/dev/hwrng\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f000096e000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000700000-0x4)=0x14, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000f90000-0x4)=0x0) wait4(r4, &(0x7f0000698000)=0x0, 0x1, &(0x7f000058b000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b1f000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000bd3000-0x88)={0x7, {{0xa, 0x0, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00004c9000)={0x0, 0x20}, &(0x7f0000eb1000-0x4)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00008a1000-0x8)={r6, 0x7fffffff}, 0x8) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000ff5000)='md5sum\x00', 0x2) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00007f3000)=""/96) sendto$inet(r0, &(0x7f0000d39000-0xa9)="175374804a3a5bef21ca4fb552925af80cd881ec136323be743b48bab36946a3d10c98f71aa096591fec513c190ba2c2e88fc2413d0afea19c0d2d9ef6fae6eaad3db234360e90659450c741df20e0506589999ba24b93914e868ca42c75fa80f7fba75aef512bf225a60d1d8a679206fc0d027078a6bfa4732c9eb0957e7b6e971826f43ef1004c4dfda40bf73c51a2d622b8e6792a4caa6d185ed565d9d8e892ffa860a8dae42b1b", 0xa9, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000f21000-0x8)='./file0\x00', 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000b44000)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @loopback=0x0, 0x0}, &(0x7f0000c2d000-0x4)=0xc) sendmsg$nl_route(r0, &(0x7f0000eee000-0x38)={&(0x7f0000946000-0xc)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000607000)={&(0x7f0000d99000)=@ipmr_newroute={0x40, 0x18, 0x4, 0x7, 0x3, {0x80, 0x0, 0x0, 0x8, 0x0, 0x2, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x7, @remote={0xac, 0x14, 0x0, 0xbb}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x14, 0x16, @nested={0x10, 0x3a, [@typed={0xc, 0x41, @ipv4=@rand_addr=0x7fff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00006be000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000d88000)=0x8) r2 = creat(&(0x7f00007e3000-0x8)='./file0\x00', 0x0) pwritev(r2, &(0x7f000036e000)=[{&(0x7f0000608000-0xf3)="98", 0x1}], 0x1, 0x7fffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000cfd000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00004e9000/0x1000)=nil, 0x1000, 0x0, 0x2012, r3, 0x0) ftruncate(r0, 0x8001) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00004cc000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00009b7000)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000263000-0x38)={&(0x7f0000865000-0xc)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000d58000)={&(0x7f0000e55000)=@polexpire={0x2c0, 0x1b, 0x10, 0x3, 0x3, {{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in=@empty=0x0, 0x0, 0x7, 0x2, 0x951, 0xa, 0xa0, 0xa0, 0x5e, r1, r4}, {0xc332, 0x3, 0x1, 0x1c, 0x8, 0x7fffffff, 0x0, 0x9}, {0x0, 0x612, 0x9, 0x6}, 0x80, 0xe, 0x1, 0x34aaa6dd164d4e6d, 0x2, 0x3}, 0xe8cb}, [@algo_auth={0x90, 0x1, {{'ghash-generic\x00'}, 0x238, "913331c4129a513fd54d8a41ce858f4021ac55e07cc242384d9f4ea6a556d8bf85ecc8aa5d6ef9edfd2301bc83d2898ed4dc3187b36b3227ad0dc70f14956eb8c37a0ebf843751"}}, @user_kmaddress={0x2c, 0x13, {@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in=@rand_addr=0x5815, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x2, 0xfffffffffffffffc, 0x4}}, @algo_auth={0x120, 0x1, {{'rmd256\x00'}, 0x6b0, "f98e2c5cbbad45832731142b257f651c1ac624055338329c5b6424a1d8457ce1012337e0623aa918cc7f22b157aa42f27cd3f4fbf1ce05ace6d741cda0de864c0e9878ce1d9164077981452b871634185011376726a8585f9f6b1330b312ac9d2a4318225f412f67e65647f79b8e6e5d24ef994936e4fce26c4eb44f0572964417fe811dab1b5fa2dfb4e7965d387fa679d73d18985f56260457c513c47aa6a1fe4ac35cfff86fbb14f9ae77f6acea824415f8949010379581f744fe03f971dafdd84bd54522d7026cffbd56b2c2df53141a5e312499"}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) 2018/01/26 09:48:03 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000193000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x1, 0x7, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, 0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x5, 0x101, 0x0, 0x0, 0x7edc, 0x5, 0x10000, 0x7fffffff, 0x5, 0x9, 0x8, 0x7, 0x1, 0x8, 0x92a]}, &(0x7f0000001000)=0x108) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002000-0x10)={r1, 0x1f, 0xa53, 0x1ff}, &(0x7f0000001000-0x4)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f000007c000)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x6, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe}, 0xffff}, @in6={0xa, 0x3, 0xe6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x13}, @in6={0xa, 0x3, 0x9, @loopback={0x0, 0x1}, 0xffffffffffffffc0}], 0x74) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f000070a000)=0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = getpgid(0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ff5000)={0x1, r3}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000ba4000-0x4)=0x10001, 0x4) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000d79000+0xb7f)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b65000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000342000-0x4)=0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000a87000)=r4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000a73000-0x10)=@syzn={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$llc(r0, &(0x7f0000ff5000)=""/235, 0xeb, 0x21, &(0x7f00007cc000)={0x1a, 0xd, 0x9, 0xc2f3, 0x36df, 0xffffffffffffff81, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xb}, [0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) getpeername$inet6(r0, &(0x7f0000739000)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000df3000-0x4)=0x1c) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000b52000)={0x0, 0x59ce}, &(0x7f0000489000-0x4)=0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000b54000-0x4)=0x100, 0x4) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) mq_unlink(&(0x7f0000c04000-0x11)='/dev/vga_arbiter\x00') pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000ff5000)='md5sum\x00', 0x2) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00007f3000)=""/96) sendto$inet(r0, &(0x7f0000d39000-0xa9)="175374804a3a5bef21ca4fb552925af80cd881ec136323be743b48bab36946a3d10c98f71aa096591fec513c190ba2c2e88fc2413d0afea19c0d2d9ef6fae6eaad3db234360e90659450c741df20e0506589999ba24b93914e868ca42c75fa80f7fba75aef512bf225a60d1d8a679206fc0d027078a6bfa4732c9eb0957e7b6e971826f43ef1004c4dfda40bf73c51a2d622b8e6792a4caa6d185ed565d9d8e892ffa860a8dae42b1b", 0xa9, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 74.541754] binder: send failed reply for transaction 138, target dead [ 74.541760] binder: send failed reply for transaction 137, target dead [ 74.663338] binder: release 14977:14979 transaction 132 out, still active [ 74.672152] binder: undelivered TRANSACTION_COMPLETE [ 74.686192] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16, 0x0, 0x0, 0x0}]}) r0 = getpgid(0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002ab000)='/dev/sequencer2\x00', 0x88000, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000ddb000)=0x3) execveat(r1, &(0x7f0000a24000)='./file0\x00', &(0x7f00009fc000-0x18)=[&(0x7f00001a6000)='/lo\x00', &(0x7f000091a000-0x1)='\x00', &(0x7f0000051000-0x1a)='posix_acl_access(md5sum@\\\x00'], &(0x7f00000cd000-0x28)=[&(0x7f0000a53000-0x10)='/dev/sequencer2\x00', &(0x7f000080a000-0x1)='\x00', &(0x7f00002b5000-0x10)='/dev/sequencer2\x00', &(0x7f0000285000)='(\x00', &(0x7f0000114000)='{%\x00'], 0x1000) ioctl$TCGETS(r1, 0x5401, &(0x7f0000a15000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setpgid(r0, 0x0) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000638000-0x8)=0x3f) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) inotify_init() r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000683000-0xa)='/dev/ptmx\x00', 0x2000, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000ff6000-0x3)=0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000b52000)={0x0, 0x59ce}, &(0x7f0000489000-0x4)=0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) mmap(&(0x7f0000b53000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000b54000-0x4)=0x100, 0x4) [ 74.704366] binder: 15022:15030 got new transaction with bad transaction stack, transaction 140 has target 15022:0 [ 74.704377] binder: 15022:15030 transaction failed 29201/-71, size 0-0 line 3031 [ 74.744625] binder: BINDER_SET_CONTEXT_MGR already set [ 74.744633] binder: 15037:15040 ioctl 40046207 0 returned -16 [ 74.747227] binder_alloc: 15022: binder_alloc_buf, no vma [ 74.747245] binder: 15037:15040 transaction failed 29189/-3, size 0-0 line 3127 [ 74.747716] binder: 15041:15042 got new transaction with bad transaction stack, transaction 144 has target 15041:0 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000db3000-0x10)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = syz_open_dev$usbmon(&(0x7f0000257000)='/dev/usbmon#\x00', 0x61, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000d6b000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000a93000)={0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000677000-0x4)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f000069d000-0x8)={0x0, 0x9}, &(0x7f0000c47000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00007b0000-0x8)={r5, 0x2}, &(0x7f0000e2f000)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000043000)=0x2, 0x4) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000683000-0xa)='/dev/ptmx\x00', 0x2000, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000ff6000-0x3)=0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x1, &(0x7f0000273000)={0x0, 0x36, 0x1, @thr={&(0x7f0000aa4000)="43bdf8be1dbc9d92f93411099dcf9a1664a2fa53a2b2cd6b5d29c79c5be011d3d077ddda56918df70fb017aa76f2ed6073fee1e683989e4cd83c0f330f3dbb993853de13bf60cf", &(0x7f0000329000-0x1000)="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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 74.747727] binder: 15041:15042 transaction failed 29201/-71, size 0-0 line 3031 [ 74.780594] binder: BINDER_SET_CONTEXT_MGR already set [ 74.780602] binder: 15049:15053 ioctl 40046207 0 returned -16 [ 74.782230] binder_alloc: 15041: binder_alloc_buf, no vma [ 74.782247] binder: 15049:15053 transaction failed 29189/-3, size 0-0 line 3127 [ 74.864382] binder: send failed reply for transaction 132, target dead [ 74.871842] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.877455] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000043b000-0x2)='$\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10001) write(r0, &(0x7f0000001000)='/', 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000a80000-0x8)={0x0, 0x200}, &(0x7f0000c9b000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000076000-0x10)={0xa62a, 0x8000, 0x100000001, 0x6, r1}, 0x10) sendfile(r0, r0, &(0x7f0000001000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', r0, &(0x7f0000a00000)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000f94000-0x8)={0x0, 0x1f}, &(0x7f0000e9c000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00007ab000)={r2, 0xffffffffffffffff, 0x15, "e1b9833db24b96d6bc749e4d8043a8ff654acf54ae"}, 0x1d) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000c94000-0x1c)={r2, 0x14, "f229cf6419b29ba37a779fe5553c3c1b0261b7ea"}, &(0x7f00001ca000-0x4)=0x1c) r3 = add_key(&(0x7f000061d000)='dns_resolver\x00', &(0x7f000006f000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000c9f000)="cd5f4961b9861cefe1aac3041eb5", 0xe, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000291000)='dns_resolver\x00', &(0x7f000065f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000922000)='$\x00', 0xfffffffffffffff8) r5 = add_key$user(&(0x7f0000aab000)='user\x00', &(0x7f00005ea000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00003dc000-0x3a)="697af98b0ed6a2a20a22471a2942b15854d217498d01c080fcb83c66ab2911d8c039f1b46f5a0bd076745740eac603932d5d3e2dc259a63bbac4", 0x9, 0x0) keyctl$dh_compute(0x17, &(0x7f0000e44000-0xc)={r3, r4, r5}, &(0x7f0000f27000-0xba)=""/186, 0xba, &(0x7f0000710000-0x38)={&(0x7f0000c6d000)={'cmac(xtea)\x00'}, &(0x7f0000dcc000-0x7b)="056647750b8d4a176c99ce56e246ac8a5e5a3febdf48657bda4c0a6c25ccfe70da51a11514f5a1956b364d51a7c6c5bb2517d3e6a34aaa0f2f831d1c48490ffcca3088d3ef264fbed503ab61c3a2f38b1f6f7ba58589289b6a74fa0bc94b54e07afabe27e6ff10b26c35b9d1ee4660b1a221c9c3160bed46b67f2c", 0x7b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r0, &(0x7f0000ab0000)=@known='com.apple.system.Secur{ty\x00', &(0x7f000068f000-0xf7)=""/247, 0xf7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000ad2000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00006b8000)={0x0, @in={{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0xd4}, &(0x7f0000f73000)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00003d6000)={r2, 0x200}, 0x8) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f000042f000-0x4)=0x0, &(0x7f0000de2000+0x3d1)=0x22f) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 74.885358] binder: release 15041:15042 transaction 144 out, still active [ 74.911822] binder: undelivered TRANSACTION_COMPLETE [ 74.928986] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f000090b000)="bce8253152abdf9def59c51ef04052a2969b1b3ce003d8d41f8baa611b84308ffacec62eb9d3c067b88acbc56a028c14e7c7b3b90c03730b396a9389388915f31811ee8d939e4a95c42ff84e86060da715c797de5e428a4b6d6e85f0ec58b7082c2f281362395253cfbe5f85fcccac8ac96236a8de6aee4f90a4e67418191c71068c879f5f833bb358477b2e580ba336f8b56a8b8787a05265e9ce7e2669e2729eeec2c16e0eafc5c9878d8429aecea224b489adb30411771bf4bd363ce9857a68d62e64da1bff3e31872ded400ca98384d6c8136bacc64fafb94ff64eebec51e8030d80878f4e72d2348a10f1d4c78beea7ae5d", 0xf4, 0x20000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000383000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000552000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000553000-0xe)='/dev/keychord\x00', 0x400800, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000e3000-0x4)=0x8000) r2 = epoll_create(0x2) mmap(&(0x7f0000552000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000552000)='/dev/sequencer\x00', 0x100, 0x0) mmap(&(0x7f0000552000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000553000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r3, 0x89e3, &(0x7f0000554000-0x2)=0x1) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000552000)=""/115) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001000-0xc)={0x0, 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f000054b000)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00004d4000)={0x0, 0x0}) r5 = fcntl$getown(r0, 0x9) ptrace$poke(0x5, r5, &(0x7f0000066000-0x8)=0x0, 0x40c000000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000551000)={0x0, 0x0}) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 74.935039] binder: send failed reply for transaction 144, target dead [ 74.959783] binder_alloc: 15022: binder_alloc_buf, no vma [ 74.959803] binder: 15058:15079 transaction failed 29189/-3, size 0-0 line 3127 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000f0f000-0x4)=0x0, &(0x7f00000b1000)=0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 74.984070] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.996643] binder: release 15022:15030 transaction 140 out, still active [ 75.009724] binder: undelivered TRANSACTION_COMPLETE [ 75.015240] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.021672] binder: send failed reply for transaction 140, target dead 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x100) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000001000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x4, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) fcntl$setstatus(r0, 0x4, 0x80001fff) connect$unix(r0, &(0x7f0000006000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000637000)=0x0, &(0x7f0000d05000)=0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00002bb000-0x50)={@syzn={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, @ifru_settings={0x0, 0x0, @cisco=&(0x7f000010c000)={0x0, 0x9}}}) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) connect$l2tp(r3, &(0x7f0000bbc000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4, 0x2, 0x3}}, 0x2e) syz_emit_ethernet(0x84, &(0x7f000067c000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x16}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@llc_tr={0x11, {@snap={0xaa, 0xab, "f79a", "cb0c8c", 0xd, "95efeefc61bbd3162bbae5f4584d4dabf49f1a8d4b3fa16bcff6e766925fdbc6d35541ef8d51b707e331484b2f57d43e3d316f086a26cdf10d5a110062b914d081f7018977d00c6eecce8c2abffad9a895e0495b368b7f692e480e6571b3e099a0ac4f49383995814594eeba9a"}}}}}, &(0x7f00008df000)={0x1, 0x2, [0xa83, 0x4c5]}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) sync_file_range(r0, 0x9, 0x1, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000231000-0x3)='io\x00') ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000452000-0x4c)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000091b000)=[], &(0x7f0000788000-0x20)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000009000)=""}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000b2e000-0xc)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f00009f8000)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000c5f000-0x50)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7, 0x2, 0x2, 0x400, 0x7, 0x0, r2}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000db3000-0x10)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000f4a000)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) add_key(&(0x7f0000884000-0x8)='trusted\x00', &(0x7f000035f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000f75000)='keyring\x00', &(0x7f0000fc4000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000c04000-0x3)='.dead\x00', &(0x7f000064e000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000017000-0x1)='\x00', 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f000022a000-0x8)='keyring\x00', &(0x7f0000a71000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f0000ab4000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000044f000-0x23)="65746831776c616e3170726f636ba17972696e675b766d6e6574302d73797374656d00", r4) keyctl$assume_authority(0x10, r5) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r1) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) dup3(r2, r6, 0xd6bc0b5b0a79d97a) sendmmsg$unix(r6, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 75.070462] binder: 15091:15107 transaction failed 29189/-22, size 0-0 line 3004 [ 75.091434] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0x0, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xc}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005d1000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 75.143162] binder: BINDER_SET_CONTEXT_MGR already set [ 75.153442] binder: 15109:15135 transaction failed 29189/-22, size 0-0 line 3004 [ 75.167063] binder_alloc: 15116: binder_alloc_buf, no vma [ 75.177104] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.183271] binder: 15116:15128 ioctl 40046207 0 returned -16 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00002bb000-0x50)={@syzn={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, @ifru_settings={0x0, 0x0, @cisco=&(0x7f000010c000)={0x0, 0x9}}}) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000f4a000)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) add_key(&(0x7f0000884000-0x8)='trusted\x00', &(0x7f000035f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000f75000)='keyring\x00', &(0x7f0000fc4000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000c04000-0x3)='.dead\x00', &(0x7f000064e000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000017000-0x1)='\x00', 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f000022a000-0x8)='keyring\x00', &(0x7f0000a71000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f0000ab4000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000044f000-0x23)="65746831776c616e3170726f636ba17972696e675b766d6e6574302d73797374656d00", r4) keyctl$assume_authority(0x10, r5) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r1) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) dup3(r2, r6, 0xd6bc0b5b0a79d97a) sendmmsg$unix(r6, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000a3000-0x9)='/dev/sg#\x00', 0x3, 0x28802) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/248) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x40000) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00001c9000)={&(0x7f0000b04000/0x4000)=nil, 0x4000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f0000698000-0x38)={0x0, 0x0, &(0x7f0000f0d000-0x70)=[{&(0x7f0000d9d000)=""/205, 0xcd}, {&(0x7f0000a4a000-0xf7)=""/247, 0xf7}, {&(0x7f0000457000)=""/247, 0xf7}, {&(0x7f0000967000)=""/154, 0x9a}, {&(0x7f0000184000)=""/75, 0x3c}, {&(0x7f00004f1000)=""/249, 0xf9}, {&(0x7f00005b6000)=""/0, 0x0}], 0x7, &(0x7f0000dd3000)=""/0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00006bb000+0x516)={{0x400, 0x1e26}, 0x0, 0x5, 0x7fe, {0x5, 0x1}, 0xffffffffffffff1a, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockname$inet(r3, &(0x7f000016c000-0x10)={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c8f000-0x4)=0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000ff5000)={@common='eql\x00', @ifru_addrs={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x16}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 75.189591] binder: 15116:15123 transaction failed 29189/-3, size 0-0 line 3127 [ 75.201747] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.207461] binder: release 15116:15123 transaction 150 out, still active [ 75.220166] binder: undelivered TRANSACTION_COMPLETE [ 75.226375] binder: send failed reply for transaction 150, target dead 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000b53000-0xf)={0xa, 0x0, 0x3c, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x314) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 75.283240] binder: 15151:15172 got new transaction with bad transaction stack, transaction 154 has target 15151:0 [ 75.296766] binder: 15151:15172 transaction failed 29201/-71, size 0-0 line 3031 [ 75.319702] binder: release 15151:15172 transaction 154 out, still active [ 75.326659] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00002bb000-0x50)={@syzn={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, @ifru_settings={0x0, 0x0, @cisco=&(0x7f000010c000)={0x0, 0x9}}}) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0xf, &(0x7f0000d76000-0x4)=0x3, 0x4) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) fchdir(r3) 2018/01/26 09:48:03 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000-0x8)='gid_map\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000cdd000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1ff, 0x3, 0x1, 0x58b52d3cfae00534, 0x1f, 0xfffffffffffffffa, 0x5}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000006b000-0x4)=0x0) 2018/01/26 09:48:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000e20000-0x5a)={'system_u:object_r:tmp\x00\x00:s0', 0x20, 'system_u:object_r:ifconfig_exec_t:s0', 0x20, 0x3f, 0x36, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x5a) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000383000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000ff6000-0x9)='/dev/rtc\x00', 0x400000, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r1, &(0x7f0000ff5000)={0x28, 0x0, 0x3, @fuse_notify_delete_out={0x6, 0xfffffffffffffec0, 0x7}}, 0x28) [ 75.332088] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.337542] binder: send failed reply for transaction 154, target dead 2018/01/26 09:48:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffc6) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x3d, &(0x7f0000ff5000)=""/4096, &(0x7f0000ef9000)=0x1000) 2018/01/26 09:48:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000a9e000-0xa0)={0x0, @in6={{0xa, 0x0, 0x3, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf}, 0x501dd5c1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3c9f, 0x7f, 0x1, 0x3ff, 0x83e}, &(0x7f000053e000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f000030b000-0x8)={r2, 0x5}, 0x8) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000ba7000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000589000-0x1)="", 0xfffffffffffffe98, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = creat(&(0x7f0000a9e000)='./file0\x00', 0x40) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000119000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b36000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000c86000-0x14)={@loopback={0x0, 0x1}, r3}, 0x14) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000ebd000)=0x0) 2018/01/26 09:48:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00003d1000)='/dev/sequencer\x00', 0x200, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00007b7000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000dab000)={0x20, 0x0, &(0x7f0000e1b000)=[@enter_looper={0x630c}, @clear_death={0x400c630f, 0x4, 0x1}, @register_looper={0x630b}, @enter_looper={0x630c}, @exit_looper={0x630d}], 0x7c, 0x0, &(0x7f0000e96000)="6052e1c5f955d5d04aeba3a43b97ef81c45f533a3e0f14a48c00b5c7c2fd88c24f2779b84700bb75a1f49f0730bee34f57050a47f3a5ae0ccd204acbafcb49f78266e0a07a3147c8c233ae4a66c20973f2261e9d2d1c6357f7ae7c6fd2be885deb6e7d67f3eef4b56a616a26e920f3159c0cace971a4cf448bfb444d"}) openat$pfkey(0xffffffffffffff9c, &(0x7f000098f000)='/proc/self/net/pfkey\x00', 0xa0441, 0x0) prctl$intptr(0x4, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_procfs(0x0, &(0x7f000000b000)='ns\x00') creat(&(0x7f0000bba000-0x8)='./file0\x00', 0x10c) fstat(r1, &(0x7f0000564000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/26 09:48:03 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1000000000004, 0x9) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000e34000-0x10)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, 0x200) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000599000-0xa9)={0x0, 0xa1, "0552b0f6f7e57bbf01b03f217b9cb3a82f45376e0427c10a89c3615fd6bfdd4fa69080a4ace198b68b5febbd629b1bd4cc80b205e047e07d0f50b0ba0cfa93ec357efedd4ee34614d30cea3e22acc0283f4e9769231b46d43dc383b64d1eba0fcfe97dfa89a3d8e02a9aca1cf578684d9c5b6cf79cd9f2276ec2b2bdf10edee2a7ca3a2f3b09c886b01a6a5ef068420862d2faebe086ce28da3cbc10eac8cf6245"}, &(0x7f0000b53000-0x4)=0xa9) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000e41000-0x8)={r5, 0x10001}, &(0x7f0000f00000-0x4)=0x8) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 75.471636] binder: 15187:15208 got new transaction with bad transaction stack, transaction 157 has target 15187:0 [ 75.484854] binder: 15187:15208 transaction failed 29201/-71, size 0-0 line 3031 [ 75.509118] binder: release 15187:15208 transaction 157 out, still active [ 75.516462] binder: undelivered TRANSACTION_COMPLETE [ 75.524099] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.532114] binder: send failed reply for transaction 157, target dead 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) getresuid(&(0x7f0000712000)=0x0, &(0x7f0000976000)=0x0, &(0x7f000029b000-0x4)=0x0) fstat(r0, &(0x7f0000885000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000cce000-0x8)='./file0\x00', r4, r5) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f00009d5000)=""/27, &(0x7f000020c000)=0x1b) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000-0x8)='gid_map\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000cdd000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1ff, 0x3, 0x1, 0x58b52d3cfae00534, 0x1f, 0xfffffffffffffffa, 0x5}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000006b000-0x4)=0x0) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000-0x8)='gid_map\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000cdd000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1ff, 0x3, 0x1, 0x58b52d3cfae00534, 0x1f, 0xfffffffffffffffa, 0x5}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000006b000-0x4)=0x0) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00001ef000)={{{@in=@loopback=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ed2000-0x4)=0xe8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000045e000-0xe8)={{{@in=@loopback=0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff6000-0x4)=0xe8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000ff6000-0xe8)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0xa, 0x80, 0x80, 0xff, r1, r2}, {0x6, 0x7, 0x0, 0x3, 0x401, 0x3, 0xffffffff, 0x0}, {0x1, 0x6, 0x1000, 0x0}, 0x0, 0xb, 0x3, 0x1, 0xc81aed882fb0e9d0, 0x0}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x7e}, 0x2, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6, 0x7, 0x0, 0x4, 0x1, 0x3ff, 0x50}}, 0xe8) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000b53000-0xc6)=""/198, &(0x7f000024f000)=0xc6) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000792000-0x4)=0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000273000)=[{{0x0, 0x0, &(0x7f0000128000-0x50)=[{&(0x7f0000b1a000-0x9d)=""/157, 0x9d}, {&(0x7f0000f9e000)=""/226, 0xe2}, {&(0x7f0000dbd000-0xf3)=""/243, 0xf3}, {&(0x7f00008f1000-0xc4)=""/196, 0xc4}, {&(0x7f00004c9000)=""/108, 0x6c}], 0x5, 0x0, 0x0, 0x6}, 0x800}, {{0x0, 0x0, &(0x7f00007cf000-0x40)=[{&(0x7f0000f44000)=""/85, 0x55}, {&(0x7f0000630000-0x54)=""/84, 0x54}, {&(0x7f0000d69000-0x57)=""/87, 0x57}, {&(0x7f0000eb7000-0x9f)=""/159, 0x9f}], 0x4, &(0x7f0000d32000)=""/134, 0x86, 0xfffffffffffffff8}, 0xfab2}, {{0x0, 0x0, &(0x7f0000098000-0x50)=[{&(0x7f0000f26000)=""/67, 0x43}, {&(0x7f0000f10000-0x86)=""/134, 0x86}, {&(0x7f0000fa3000-0x1f)=""/31, 0x1f}, {&(0x7f0000589000-0xcf)=""/207, 0xcf}, {&(0x7f0000482000-0x62)=""/98, 0x62}], 0x5, 0x0, 0x0, 0x3}, 0x400}], 0x3, 0x40, &(0x7f0000ea0000-0x10)={0x77359400, 0x0}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000ff6000-0xf)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) sysfs$1(0x1, &(0x7f00004a2000-0x26)='system_u:object_r:unconfined_exec_t:s0') timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000f07000)=""/21, &(0x7f0000968000)=0x15) syncfs(r0) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b48000)='/selinux/enforce\x00', 0x303100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x7, &(0x7f0000273000)={0x0, 0x2, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r1, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000073a000-0xc)={0x0, @multicast2=0x0, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}}, &(0x7f00000b4000)=0xc) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) ioctl$VT_RELDISP(r0, 0x5605) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000ff5000)={0x0, 0x0}, 0x80000) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000ff6000-0xa0)={0x0, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x8, 0x1, 0x8, 0xba}, &(0x7f0000e92000)=0xa0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00001fe000)=[{&(0x7f0000ff8000-0x1c)=@in6={0xa, 0x3, 0xc639, @loopback={0x0, 0x1}, 0x2}, 0x1c, &(0x7f0000656000)=[{&(0x7f0000c17000)="15657d3c87f28b30fa847a29d4da8425f3f2078579ce59c8a175f55f84ccc6965d2287d088b664800ecb805076e27a9d2d74e904e9e4604d63a91735f893ba", 0x3f}, {&(0x7f0000326000-0x1000)="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", 0x1000}, {&(0x7f0000ff7000)="cfecaf5d43a1acbac940306bbe97299dd23438665b7821dbfd4266dc59d9a9c9b1d847cb3c6b1dcdc285ad1a57e0c4f84cd0d091c9e4be01ca928c478a4a973eda8ecd3a056621ccbd4dd4860779fdc563ad1bbed7dde8fbca029191e22eed824f2f20cdfbebcdde0300765cd78774d2b58900ee64689c9bf56c35230d2f204a1f9d22923d6b0a905fcaa85e", 0x8c}, {&(0x7f0000ff7000)="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", 0x1000}, {&(0x7f000083f000-0x98)="f6accfae0b0ee9434cafc8aaa6ff98a838daa73ccbd382474f234fedc4868aec28cfa6909ffbddc36548a826b48704bddfc3bd9a60d31bfb6d1b8f71a54c9cd438e6708251d94f6019b4b30449c458f1a3fe6a8bc2f0f46fa0a09ea7c4e5b69a511cd6b08f5133ada877c8e851bc88f49448d6ac6051bca620c98ed0540b4e423bc7d642f2aee1638cf1c50d85b13718f586c961ce65ab70", 0x98}], 0x5, &(0x7f0000ff8000-0xc0)=[@init={0x18, 0x84, 0x0, {0x10001, 0x0, 0x8, 0x0}}, @init={0x18, 0x84, 0x0, {0x3, 0x283d, 0x9, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x1, 0x5, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xb87d, 0x2, 0x1, 0x7, 0x8, 0x7, 0x6, r3}}], 0xc0, 0x40}, {&(0x7f0000681000)=@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000a96000-0x30)=[{&(0x7f0000ff8000-0xb2)="f185e1c0135e6749ddbd30982031b2f7a2acdcd02a4feada10df3326c174160aaecc2fd7326ec569f516ecbc842d890c6d3fa57b65348beaa35d23a65cfb65815b921d9849cffa8220760b15d9ded6608a90636e249c2d0ab2d60464845a2e220375e75f152bfee266f91e22b40ad141c7e1097ffe8379fa4b3d82a929197b374c429a2ab5e8b1c4070e517e7420b1c505578b79434d235058e0012fb1c42bb688b8920704d583fc73c3663f577a61deb428", 0xb2}, {&(0x7f0000975000)="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", 0x1000}, {&(0x7f00004db000)="d393b4f8b33040d0cce77fb547d31d691c091825d3390be05ebdd3b83e1d2f37b1cbb0e8a69b03176436336ba41ddd819d9c4999e0bd5b28eeed259cd5943462d7577623ce2e66255a7d56ad87e1ef4b25d14b586bc3f8cf649bcb66b228cfeabff69ceef8ebf22dff925054d2e8591e259565d1dd37fd19a9636a72540d79a27292d2214360ebf80081e24c", 0x8c}], 0x3, &(0x7f0000ff7000)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x4, 0x4, 0x4b5aa4b, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x10000, 0x8, 0xffffffffffffffff, 0x34c, r3}}, @init={0x18, 0x84, 0x0, {0x8, 0x2, 0x7, 0x378e}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x3, 0x7, 0x8, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0xffffffff00000001, 0x8000, 0x80000001, 0x0, 0x2, 0xdb, 0x80000001, 0x0}}], 0xf0, 0x24000000}], 0x2, 0x10) truncate(&(0x7f0000ff6000)='./file0\x00', 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000ff5000)={r3, 0x40}, 0x8) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000005, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 75.649818] binder: 15237:15249 got new transaction with bad transaction stack, transaction 160 has target 15237:0 [ 75.663038] binder: 15237:15249 transaction failed 29201/-71, size 0-0 line 3031 [ 75.684991] binder: release 15237:15249 transaction 160 out, still active [ 75.692584] binder: undelivered TRANSACTION_COMPLETE [ 75.698179] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.704274] binder: send failed reply for transaction 160, target dead 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000005d000)='/selinux/enforce\x00', 0x40, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000ff5000)="c6b77a6d4c582bb3f1a21e727d78a394d2ace0c36d2410e85111565f489f887677c5d0b9ed57756ba739cec786780c82fbbc82d8fb45722d4d227b45648bc228016e4f3e5379910fe15d65b62d19340466064689426f165c77dd2e3527cd82851c1aa055f4fd6f26d3d6392f30a0b6cf478d0a4ff0b287b6") sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r1, &(0x7f000052c000)="33722247485c86b5fb60f3599a08663da25369994778c120ba4b1bf64c62fd72236d728cd58b89f5c1660111f1a724d5229a940519b2d6e1e3c1929320923793505ff12bbb95d2cb837791ac14bf1300b5478acaedbc65f814621a53ce14d1939627f3645c0d41e4d214f9fcc973d952a79fd1f2ec6db273273f9a96bf3c89df45f8301ddf4104ef25fde3783b5b0889766f7f89f9b6dca442af0527d1346c3f7c3aa4a184ae3072b91fdd71341273aec128574f0de53129fdbf0f170985431aed359392537483532c4f", 0xca, 0xffffffffffffff80, &(0x7f0000ff8000-0x10)={0x0, 0x989680}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000ff7000-0xb0)={{0xd1, 0x5a2}, 'port1\x00', 0x8, 0x101859, 0x8, 0xcbd5, 0x0, 0x7ff, 0x5, 0x0, 0x5, 0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) creat(&(0x7f0000804000-0x8)='./file0\x00', 0x99) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = accept4(0xffffffffffffffff, &(0x7f00001ea000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000605000)=0x9, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00003a0000)={@common='ifb0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00006a3000-0x14)={@loopback={0x0, 0x1}, r1}, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006d9000-0x11)='/dev/vga_arbiter\x00', 0x80000000000, 0x0) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00005d5000-0x4)=0x6, 0x4) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) sendmsg$nl_generic(r5, &(0x7f00004bf000-0x38)={&(0x7f0000d4f000-0xc)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000016d000)={&(0x7f0000f65000-0x5c)={0x5c, 0x37, 0x400, 0x5, 0x0, {0x4, 0x0, 0x0}, [@typed={0x1c, 0x23, @str='/dev/vga_arbiter\x00'}, @generic="de48629d6497b24f56119206bf9333c47162b6a6e9ca91fb404b98aa3cce7f649be5eb813acd3d6f3131ec"]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x54) write$tun(r5, &(0x7f0000270000)=@hdr={0x1, 0x5, 0xfff, 0x10001, 0x4, 0xd7, @ipv6={0x40, 0x6, '\f\b?', 0x15ee, 0xe, 0x74bb, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[@dstopts={0x5c, 0x21d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1f, 0xd1, "a5ebb0fd5141464ad1822db2988f0065f3aba71cd806df5b6de135e109d79576d92062de99aedde8aa26bec73c8568795d9d966fd212b3debb9dab86c45797dbdaa5b09e1c7f9accd0a777c9a28376bfb4fb348ceff75483399d1703d310206890fae552ad219002d7994618233045c1919a5fc967f7d125f15ea5e3e6ba16e864fef74ffcc9c31fb40058276a4ff0243754d0277d557397194f69a7d47017d97a3fce6044309ea58f67e92fb1154ac9dc56da9792c946bccefa277717b0a62e61c37dcb0d4d571f8132267b3323111bba"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x1}]}, @dstopts={0xff, 0x23, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@generic={0x2, 0x66, "b88f49ed53e57d82cee5a01817a410b5a4c838444b090bfc164c9647dc73c1afa38e14d61e8232b0c52b1d3765ed785f275bfb3b8755b0db4bb850ba60803c991875a14a056c5b059cf63a7807d17bf73cd0e73dbd4433e65777616d8704d379712be65aac33"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x1}, @generic={0x1, 0x92, "396cc2d9bee4747a23872d7018e5d9b8d9775cb5849fc16652c94152a3224d2d8e8b1c9181253db3ec36699ff2d37e903a765715ddaa1255acff6e6fd602d15b1d723485ca88b6880a04a18b7d11d20bafaae97558f9d281d03ebfed4caed7c5b74286508aba0113c6ac421ef86e5d8eafd5c46adf9ed3cbbcb662b0a02d579eedd5e0cd32731240fe7f431f16a65dec0eed"}, @ra={0x5, 0x2, 0x1514a1d7}, @jumbo={0xc2, 0x4, 0x0}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x9f, 0xc, 0x1, 0x5, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x2}]}, @routing={0xc, 0x8, 0x3, 0x5, 0x0, [@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}]}, @routing={0x3f, 0xc, 0x0, 0x81, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}]}, @hopopts={0xbf, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@ra={0x5, 0x2, 0x44}, @pad1={0x0, 0x1, 0x0}, @hao={0xc9, 0x10, @loopback={0x0, 0x1}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10}}, @generic={0x0, 0xbe, "3c0f0e00e8e35d02fd2ee00f6b98036b96bbaa2e877b815b29baaeef17e2030e6fefb7aa055f904b0be05c035acc8f309ef25139a84ca846f334f8905fd607bf3449a70611a1a38d47a6af8a2a6e7f55eff052ceff885c7da4b1d0bc857c30ae71272e9ea171dd95ad26120c604e7b1020e0251276d569b6e1671cada9c6accc12975778d156b0ea419048689009e5aaecd0bf9bdf54d83bbf0a3e3ac7aa5590fc8ac8d70bab66df3d1d18b200ef6d46f7ebb8977ac924da1cc9325f576a"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @gre={{0x0, 0x0, 0x1, 0x8, 0x0, 0x400, 0x0, 0x1, 0x880b, 0xb4, 0x1, [0xc5, 0x9c73], "27c64599a29940941030be3c55a060fa44d191b743b8b7caed155a0f1b83d8bb8b852fb51192caa45ddb0b76cc8a20aa9613d3615588e857da149fa3d93468bbdf8895f31ec11772c20e749b2a294e0229236ddf1d74bf8604e330cae4750a56cbc9955dd047075987c2d1b179290d62d83322a223c8cafb92e5f4c96152d3802ac92514650790fa5ecf2af552327fcc44a1d3273c654c353116aeeccb8de32c8fd0fbec2e638863385b6d97135aa4d84e99ff22"}, {0xffffffff, 0x0, 0xb4, 0xaef, 0x0, 0x0, 0x800, [0xff, 0xffffffff, 0xffffffff], "14a3e4faa5db"}, {0x101, 0x0, 0x4, 0x3, 0x0, 0x0, 0x86dd, [0xf0, 0xfffffffffffffffc], "320d72fc82ed235baa3140d15b566657732033e2835f477eff4f66a34c0ed4da9b49a73ddc8a1f9832a4d549068c1f1d5907b8e3297e838aff04c9fb55d38c569f4b98f7ca7086cd5611d8be7bd856f741881a04d338774af28123185bab690d9f56464fb0f59d5c69850e61bd6927f9be0b899e584037e89e311736e470b6381c62c01680a520f6ab0afe7df735f70d7eaeb244a66f8ec13fe976b12e03c12136774a0063734846a8398be33d1d6a7f3466381da332219881f39731745747a34cde5f3ba2af27119be081632904f1445b497f1cbcc8d728df474d71cd26bbaa17391a0f956d8b00038b"}}}}}, 0x1620) r6 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00006f0000-0xe8)={{{@in=@loopback=0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00009b6000)=0xe8) lstat(&(0x7f0000c38000-0x8)='./file0\x00', &(0x7f0000406000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f000004c000)=[{&(0x7f00006e9000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000603000-0x60)=[{&(0x7f000077e000)="cf2f36216b088e78d1bfa9a1572c9eb3ed0743a662688701844d5e11db5851c34a5ae4291dd833ce4a8b6a56c7b327c14afdfb96eeeb397b1f43c549ab9d64aa7b7f01025e6a7a22a380d44bc57cd7716f246e9481c458d286af7242c300a688ef", 0x61}, {&(0x7f000098a000)="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", 0xfa}, {&(0x7f0000b8a000-0x3)="108598", 0x3}, {&(0x7f0000e49000)="22ddff39b870b5944162fabcfe77851d7d48b9bdb7968fcb3fb01558c8e431d62469c31730a1f7749dec5f07e40880c9053b8ca25ae900d273ad7f43ff5096f255eb2784cd9871482258a6fc16199f841afee12ab5525a0b0d10ffc4fc321e4584f831b5511145aeb2b981426f3075d5a781c58e3862f0e3d24524b75d3f453085fbe95731", 0x85}, {&(0x7f0000599000)="2aaa17d81e75016ada716b107a2e9ccb710760148053d92c1b4fd90d503e6d43474f41a77f2723c4c25cb0a652267f072a8830aba8a4b842e708bbb18457e60c9ec208d4b6c9a9b762028f3cfecc23801c35766a6801d1312a08124b3fe1021953eac57c194bc2a5b0435d028a36f632e5d64355f81f6f765d63c8cb7d8b110ae51a0e", 0x83}, {&(0x7f0000af0000)="37e363d649e9638ced6412c52aaddec845b553a581c8475ff4daa173819580a0e9c4198e0c7196406d3352a984583a7460fa36dcad59a4fa5cf285c3503d7a44a334c619932b095473e065c917b3d8a098d4865ffa892ccea76f9e8cb33b2a3bed30fd9e9d962e383a60be47", 0x6c}], 0x6, &(0x7f0000fdf000+0xa9d)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r5, r4]}, @rights={0x20, 0x1, 0x1, [r2, r0, r5]}], 0x58, 0x1}], 0x1, 0x40040c4) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c82000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x207ff, 0x8100000000000000) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000b52000)={0x0, 0x0}) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f0000b52000)='./file0\x00', &(0x7f0000b52000)={{r5, r6/1000+10000}, {0x0, 0x0}}) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00002a4000-0x4)=0x0) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c5d000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$sock_ipx_SIOCAIPXITFCRT(r3, 0x89e0, &(0x7f0000fd6000-0x4)=0xfff) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000ff6000-0xf)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0xf, &(0x7f0000d76000-0x4)=0x3, 0x4) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) fchdir(r3) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00002d8000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000ff6000-0x48)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x6, 0x43, &(0x7f0000ff5000)={0xfffffffffffffffd}, 0x8) [ 75.833378] binder: 15273:15295 got new transaction with bad transaction stack, transaction 163 has target 15273:0 [ 75.847545] binder: 15273:15295 transaction failed 29201/-71, size 0-0 line 3031 [ 75.869496] binder: release 15273:15295 transaction 163 out, still active 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ad2000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000d0a000)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) signalfd4(r1, &(0x7f000074b000)={0x7fffffff}, 0x8, 0x80000) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00001f6000-0x2)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00006b3000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00002e4000-0x4)=0x5, 0x4) timer_settime(0x0, 0x0, &(0x7f0000dfe000)={{r4, r5+10000000}, {r6, r7+10000000}}, &(0x7f0000539000)={{0x0, 0x0}, {0x0, 0x0}}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, r8}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000712000-0x9)='/dev/ppp\x00', 0xa000, 0x0) bind$ax25(r0, &(0x7f0000621000)={0x3, {"d557168ddc8046"}, 0xdf}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000b61000-0x4)=0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000120000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x9}) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000733000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) keyctl$join(0x1, &(0x7f0000a45000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}) fcntl$setstatus(r1, 0x4, 0x3fffc) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000130000-0x8)={0x0, 0x0}) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000631000-0x4)=0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setparam(r5, &(0x7f0000b53000-0x4)=0x100000001) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c82000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x207ff, 0x8100000000000000) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000b52000)={0x0, 0x0}) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f0000b52000)='./file0\x00', &(0x7f0000b52000)={{r5, r6/1000+10000}, {0x0, 0x0}}) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00002a4000-0x4)=0x0) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000-0x8)='gid_map\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000cdd000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1ff, 0x3, 0x1, 0x58b52d3cfae00534, 0x1f, 0xfffffffffffffffa, 0x5}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000006b000-0x4)=0x0) [ 75.879386] binder: undelivered TRANSACTION_COMPLETE [ 75.884491] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.890399] binder: send failed reply for transaction 163, target dead 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d3c000)={@common='lo\x00\x00\x00\x00\x00\x00\x00\x00 \x00', &(0x7f0000a71000-0xc0)=@ethtool_rxnfc={0x30, 0x0, 0x0, {0x0, @usr_ip4_spec={@broadcast=0xffffffff, @rand_addr=0x0, 0x0, 0x0, 0x1, 0x0}, {"8d09", @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0, 0x0}, 0x0, 0x0, [0x0, 0x0]}, @esp_ip6_spec={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0}, {"22bf", @random="bfcf6c1008ae", 0x0, 0x0, [0x0, 0x0]}, 0x0, 0x0}, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000085000)=@assoc_value={0x0, 0x6}, &(0x7f0000ad9000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000442000)={r1, 0xfb, "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"}, &(0x7f0000a84000)=0x103) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009a3000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = dup(r2) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000b53000-0x1c)={0xa, 0x0, 0x2, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r6, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000873000)=0x9, 0x4) get_thread_area(&(0x7f0000691000-0x10)={0x7ff, 0x1000, 0x400, 0x2, 0x3, 0x7ff, 0x8, 0x5, 0x7fff, 0x6}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 75.990264] binder: release 15308:15312 transaction 167 out, still active [ 75.997247] binder: release 15308:15312 transaction 166 in, still active [ 76.022562] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000ff5000)='/dev/ppp\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = socket$inet(0x2, 0x2, 0x3f) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0x0, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb422dfac0a130b2c) readahead(r1, 0x8, 0x7) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f000000d000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000321000-0x9)='/dev/sg#\x00', 0x0, 0x0) mkdir(&(0x7f0000b18000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f000038b000)={0x4, &(0x7f00003b6000-0x20)=[{0x3, 0x10001, 0x100000000, 0xffffffffffffff81}, {0xfb67, 0x10000, 0x5, 0x7}, {0x9, 0x1, 0x3, 0x3}, {0xe4a, 0x1, 0x42dd, 0x1a2}]}, 0x10) fcntl$dupfd(r0, 0x800000000402, r0) exit(0x0) syz_open_dev$sndseq(&(0x7f000000d000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) r1 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x800000000402, r1) mkdir(&(0x7f0000ba6000)='./file0/file0\x00', 0x0) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 76.042055] binder: release 15308:15324 transaction 166 out, still active [ 76.050390] binder: undelivered TRANSACTION_COMPLETE [ 76.056030] binder: send failed reply for transaction 167, target dead [ 76.069338] binder: send failed reply for transaction 166, target dead [ 76.076190] binder: release 15336:15339 transaction 170 out, still active [ 76.083142] binder: release 15336:15339 transaction 169 in, still active 2018/01/26 09:48:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000903000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000f90000-0x4)=0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000381000)={0x0, 0x7}, &(0x7f0000298000)=0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000b14000-0xc)={r2, 0x4, 0x20}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r5, 0x3, &(0x7f00000d1000-0x10)={&(0x7f0000aeb000-0x1000)=""/4096, 0x1000}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x24000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000ba4000)=0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000a4d000)={{{@in=@empty=0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c75000)=0xe8) sendmsg$unix(r3, &(0x7f0000932000)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000032000-0x17)=[@cred={0x20, 0x1, 0x2, r7, r8, 0x0}], 0x20, 0x0}, 0x0) signalfd4(r0, &(0x7f00000c2000-0x8)={0x1ff}, 0x8, 0x80800) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00007e2000-0x8)={r2, 0x3}, 0x8) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001000)={0x803}, 0x1) mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000fd7000)=0x0, 0x5, 0x0, &(0x7f0000f64000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0xfffffffffffffffc) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a7f000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000859000-0x4)=0x0, &(0x7f0000d04000-0x4)=0x4) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f000045b000)=0x0) sched_rr_get_interval(r4, &(0x7f000058d000-0x10)={0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:04 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000ff5000)='/dev/sequencer2\x00', 0x1, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000ff5000)={{0x719, 0x9}, 'port0\x00', 0xc0, 0x180010, 0x4, 0xfff, 0x1f, 0x0, 0xffffffff, 0x0, 0x7, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000ff5000)=0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(r2, &(0x7f0000ff6000-0x16)={0x30, 0x3, 0x0, 0x40, 0x1ff, 0x8, 0x5, 0x16}, 0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000712000-0x9)='/dev/ppp\x00', 0xa000, 0x0) bind$ax25(r0, &(0x7f0000621000)={0x3, {"d557168ddc8046"}, 0xdf}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000b61000-0x4)=0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) [ 76.090400] binder: undelivered TRANSACTION_COMPLETE [ 76.096926] binder: release 15336:15350 transaction 169 out, still active [ 76.104081] binder: undelivered TRANSACTION_COMPLETE [ 76.109202] binder: send failed reply for transaction 170, target dead [ 76.115860] binder: send failed reply for transaction 169, target dead 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x0, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x0, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000085000)=@assoc_value={0x0, 0x6}, &(0x7f0000ad9000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000442000)={r1, 0xfb, "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"}, &(0x7f0000a84000)=0x103) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009a3000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = dup(r2) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000b53000-0x1c)={0xa, 0x0, 0x2, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r6, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x258200, 0x0) faccessat(r0, &(0x7f0000272000-0x8)='./file0\x00', 0x80, 0x1c00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) getpid() timer_create(0x7, &(0x7f0000abe000-0x60)={0x0, 0x1000000000001e, 0x10004, @thr={&(0x7f00002bf000-0x4f)="9e406d6343092d680d6c1fcaf5bf0162d85aa35233f7badc1fb018d130e89da00970b5a1ad7989205989446aaa32a6c934cf0595409d9a9e73d8bf1b91793c2887439ca3ff0f0098a1ce722fe9b428", &(0x7f0000dee000-0xa1)="0454b5d6bbb4c7ba9488966e9e53c2f8c5856908b08e221a01dc2817b6967b7b91a3d1df6816e0ffca776ec7f38dba40cace645206162b609f73ac9c4be7b12ca03213c42f645aa5989ff821863eec790439d09981305c12ed63b1790324573410307071139dda144654a75c2d1f03fe26cb0c584989e14b31cee4044658aae2da0e302ed13223c9cb778554d0232e0bf3aede25f8b09de2f4e8087296648887f6"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c22000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x0, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 7: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 76.205351] binder: release 15368:15380 transaction 173 out, still active [ 76.212357] binder: release 15368:15380 transaction 172 in, still active [ 76.225026] binder: undelivered TRANSACTION_COMPLETE [ 76.253617] binder: release 15368:15390 transaction 172 out, still active [ 76.260888] binder: undelivered TRANSACTION_COMPLETE [ 76.265999] binder: send failed reply for transaction 173, target dead [ 76.272691] binder: send failed reply for transaction 172, target dead 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000dff000-0x15)='/dev/pktcdvd/control\x00', 0x86000, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000403000)="f0bcde216a5a44afebeee3d0df24ec5dc2903400477ada6d2fb119f6e53b44f38ce602511ce2580e5ce27760bd4af4024f41fd6361ed69e370c91d98caa8af3b26e6977254b8f4fab05439dff0848b0f275d1cd6fa021c30287253e889c3cac1eef9644a3e9cc725e51e5e5ec0d883ead3f8ced3d53fda797f6df55785fcb18a3bb42c4dfbbab3c2bb60b66395e5559f8788b450565dae1aeb830f49f4b9877eaf3a37b7486bebee95d38655d6ac26c8d02373185cda419bfb960455b40c8e09d219fc0d901694faa4ef0e3bbec380945f8a75f5a6c9171a5b341aca568f65b921fd9488aa9bb0bab818c05bab2bb104e496") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000316000)="440d0d03138001031d078900ec", 0xd) sendfile(r0, r1, &(0x7f0000c87000-0x8)=0x0, 0x9) 2018/01/26 09:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) connect$pppoe(r3, &(0x7f00008bf000-0x1e)={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @generic="73d1c9ebb9f9195142e6593b80c4a15f"}}, 0x1e) 2018/01/26 09:48:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x100000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00009f8000-0x8)={0x0, 0x0}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00002c9000)=[@in6={0xa, 0x2, 0xffffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1f}, @in6={0xa, 0x3, 0x2, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x80000000}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x7, @loopback={0x0, 0x1}, 0x100}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x7, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0xb0) 2018/01/26 09:48:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00004a0000)=[@in6={0xa, 0x1, 0x432e, @loopback={0x0, 0x1}, 0x26}, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x0, 0xfffffffffffffffa, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xe02}], 0x64) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005af000)={0x200, 0x401, 0x2, 0xddb7, 0x8, 0x3, 0xffffffff, 0xfff, 0x0}, &(0x7f00009cd000-0x4)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f000082a000-0x8)={r3, 0x54}, 0x8) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f00002ba000)={0x7, 0x149, 0x1, 0x0, 0x3, [{0x4, 0x8629, 0x81, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0}, {0x2, 0x7, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x92, 0x1, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}]}) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:04 executing program 7: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x4, 0x80f, 0x1) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000ff7000-0x10)='/dev/input/mice\x00', 0x0, 0x2080) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000ff7000)=0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f000047d000-0x38)={&(0x7f0000cba000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f00007b9000)=[], 0x0, &(0x7f0000a21000)=""/239, 0xef, 0xfffffffffffffff9}, 0x22) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000381000-0x50)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x11d, 0xc724, 0x500, 0x9, 0x40000, r3}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ff7000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000ff8000)=0x0) r5 = getpgrp(0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000ff5000)=r5) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x258200, 0x0) faccessat(r0, &(0x7f0000272000-0x8)='./file0\x00', 0x80, 0x1c00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 7: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:04 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a14000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f000020f000)={0x3, 0x6, 0x9, 0x7, 0x2, 0x80000001}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/keychord\x00', 0x2, 0x0) writev(r1, &(0x7f0000249000-0x70)=[{&(0x7f000062d000)="ad85d4f605b9", 0x6}], 0x1) [ 76.382019] keychord: Insufficient bytes present for keycount 0 [ 76.397678] keychord: Insufficient bytes present for keycount 0 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x100000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00009f8000-0x8)={0x0, 0x0}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00002c9000)=[@in6={0xa, 0x2, 0xffffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1f}, @in6={0xa, 0x3, 0x2, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x80000000}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x7, @loopback={0x0, 0x1}, 0x100}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x7, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0xb0) 2018/01/26 09:48:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x4000007, 0x0, &(0x7f0000ca2000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000cb5000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f000021d000+0x97)='/selinux/policy\x00'], &(0x7f0000c7f000)=[&(0x7f00001c2000)='/selinux/policy\x00', &(0x7f0000d73000-0x1)='\x00', &(0x7f000099b000-0xb)='GPLsystem\'\x00', &(0x7f0000b65000)='vmnet1%(self#wlan1mime_type!\x00', &(0x7f00002f7000-0x1)='\x00', &(0x7f0000126000)='posix_acl_accessppp1self\\$ppp1\x00', &(0x7f000061c000)='security]securityGPL\'#vmnet0\\loproc-%selfkeyring\x00', &(0x7f000088c000)='^\x00', &(0x7f00002f0000)='/selinux/policy\x00', &(0x7f0000128000)='\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = fcntl$getown(r0, 0x9) timer_create(0x6, &(0x7f0000c28000-0x60)={0x0, 0x36, 0xffffffffffffffff, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x33, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) sendto(r1, &(0x7f0000e38000-0x8d)="a5756937a6ab083c2cba13d9a8b662f10ffa3d00efa38f091afccfa1511b7d8f656db7ee3de862c1a72fd1ba741b6b63039c24d98e385592a521f353b39f3e8359421094e6e79fa3706248e7c8b707e598f5aead3a1173ddfe0410a1180ef560983f2e20d11c3b10bb5f397f7e82622c95d8333350bf71b5ba6b72c150ff41d1915940cf2bd9ca234bc2b28065", 0x8d, 0x10, &(0x7f00001b4000)=@pptp={0x18, 0x2, {0x2, @broadcast=0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) select(0x40, &(0x7f00004b5000)={0x7, 0xfffffffffffffff7, 0x200, 0x80000001, 0x100, 0x4, 0x20, 0xfa2}, &(0x7f0000f71000)={0xfe, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x7f, 0x4, 0x8}, &(0x7f0000f06000-0x40)={0x10001, 0x20, 0x1ff, 0xb800000000, 0x6, 0x6eff0899, 0x1, 0xf60}, &(0x7f000015f000-0x10)={0x77359400, 0x0}) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x15, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000)=0x804, 0x4) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r5, &(0x7f0000b52000)={{0x0, 0x0}, {0x0, 0x0}}) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000ff5000)={0xfffffffffffffff9, 0x0, 0x10001, 0x6}) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000fbe000-0x10)={0x0, 0x0}, &(0x7f0000ff7000-0x4)=0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000ff6000-0x20)={0x6, r2, 0x10003, 0x9}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) alarm(0x5) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000ff5000)={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x34, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00004a0000)=[@in6={0xa, 0x1, 0x432e, @loopback={0x0, 0x1}, 0x26}, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x0, 0xfffffffffffffffa, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xe02}], 0x64) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005af000)={0x200, 0x401, 0x2, 0xddb7, 0x8, 0x3, 0xffffffff, 0xfff, 0x0}, &(0x7f00009cd000-0x4)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f000082a000-0x8)={r3, 0x54}, 0x8) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) ioctl$fiemap(r0, 0xc020660b, &(0x7f00002ba000)={0x7, 0x149, 0x1, 0x0, 0x3, [{0x4, 0x8629, 0x81, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0}, {0x2, 0x7, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x92, 0x1, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}]}) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000093e000)='/dev/rfkill\x00', 0x0, 0x0) getxattr(&(0x7f000060a000-0x8)='./file0\x00', &(0x7f0000db9000)=@random={'btrfs.', '/dev/rfkill\x00'}, &(0x7f0000365000-0xfc)=""/252, 0xfc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000d08000-0x8)={0x0, 0x8001}, &(0x7f0000212000)=0xfffffffffffffc88) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00009f5000-0x8)={r2, 0xfffffffffffffffe}, &(0x7f00007d7000)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) bind$ipx(r1, &(0x7f0000d7b000-0x10)={0x4, 0x0, 0x5, "5b45f5d38608", 0x4, 0x0}, 0x10) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) sendto(r1, &(0x7f0000dc1000-0x38)="c3d4def489abace73c7e5c06c971be9989083b8d70bc9c22d5eb2bec9ea893d697ff2f25f843d2ab22d227bcb2eca9a944934203db248337", 0x38, 0x41, 0x0, 0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty=0x0, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12, 0x0, 0x0, 0x0}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000450000-0x4)=0x340, 0x4) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000d3f000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000546000-0x30)=[], 0x0, &(0x7f0000ccf000)=""/4096, 0x1000, 0x0}, 0x0) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 76.601757] IPVS: Creating netns size=2536 id=12 [ 76.648216] pktgen: kernel_thread() failed for cpu 1 [ 76.653431] pktgen: Cannot create thread for cpu 1 (-4) [ 76.660966] IPVS: Creating netns size=2536 id=13 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) close(r0) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d2b000-0x10)={0x3, &(0x7f00007a0000)=[{0xea0, 0x5, 0x9, 0xfffffffffffffffe}, {0x9, 0x8574, 0x4, 0xbf}, {0x4, 0x2, 0x7, 0x76}]}, 0x10) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000d95000)=0x5) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f0000408000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x0, &(0x7f00009ef000)=[], 0x337, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000ff6000-0x4)=0x3ff, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000ff5000)={0xfffffffffffffff9, 0x0, 0x10001, 0x6}) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000fbe000-0x10)={0x0, 0x0}, &(0x7f0000ff7000-0x4)=0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000ff6000-0x20)={0x6, r2, 0x10003, 0x9}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) alarm(0x5) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000ff5000)={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x34, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) 2018/01/26 09:48:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000622000)='/dev/vga_arbiter\x00', 0xfffffffffffffffd, 0x0) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[], 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000089b000)={0x0, 0x0, &(0x7f0000318000-0x30)=[{&(0x7f00008a5000)=""/2, 0x0}, {&(0x7f0000a58000)=""/193, 0xbf}, {&(0x7f0000dde000)=""/11, 0xffffffffffffff09}], 0x3, &(0x7f000000c000)=""/0, 0x0, 0xffffffffffffff66}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) r1 = syz_open_dev$usbmon(&(0x7f000056b000-0xd)='/dev/usbmon#\x00', 0x1, 0x101000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f0000dd6000-0x8)={0x771}, &(0x7f0000ff6000)={0x0}, 0x8) socket$inet(0x2, 0x801, 0x5843) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000810000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00008b4000-0xcf)=""/207) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000265000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x40}, 0x1c) connect$inet6(r1, &(0x7f0000a65000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xa}, 0x0}, 0x1c) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000238000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000ff5000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000ff5000)={0x100}, 0x4) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000ff5000)=0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000ff6000)={@generic="1f0582bd0edbabaedf5a5c42c96b460a", @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000ee3000-0x4)=0x0) 2018/01/26 09:48:05 executing program 0: unshare(0x1fffffd) r0 = syz_open_procfs(0x0, &(0x7f0000005000-0x5)='task\x00') getdents64(r0, &(0x7f0000002000)=""/72, 0x48) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000664000-0x8)={@multicast2=0xe0000002, @broadcast=0xffffffff}, 0x8) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 0: unshare(0x1fffffd) r0 = syz_open_procfs(0x0, &(0x7f0000005000-0x5)='task\x00') getdents64(r0, &(0x7f0000002000)=""/72, 0x48) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000664000-0x8)={@multicast2=0xe0000002, @broadcast=0xffffffff}, 0x8) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00007e4000)=0x8000000000004, 0x1000001a2) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00009a1000)={@generic="dcaae878ef50812ad68e147a3fd27f4a", @ifru_flags=0x100}) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000071c000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') umount2(&(0x7f000033a000)='./file0\x00', 0x0) sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00005ac000-0xa0)={0x0, @in6={{0xa, 0x3, 0x80, @loopback={0x0, 0x1}, 0x3e}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x1, 0x80000001, 0x6, 0x4}, &(0x7f0000633000)=0xa0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00002b5000)={r2, @in6={{0xa, 0x1, 0x5, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x6, 0xeee8, 0x2, 0xc9, 0x9, 0x4, 0x9, 0x3ff, 0x101, 0x6, 0x6, 0x9, 0x2, 0x7, 0x1]}, &(0x7f0000dd3000-0x4)=0x108) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086b000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x3, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00009bd000-0x8)={0x0, 0x81, 0x3}, &(0x7f0000091000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000f5b000-0x8)={0x0, 0x0, 0x9}, &(0x7f00007bb000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000883000-0xb8)={r4, 0x10000, 0xfffffffffffffffe, 0x3, 0x9, 0x80, 0x200, 0xffffffff, {r5, @in6={{0xa, 0x3, 0xbb, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xc8, 0x401, 0x3, 0x8, 0x5}}, &(0x7f00004be000)=0xb8) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000b52000)=""/38) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r6, &(0x7f0000e18000)=[], 0x0, 0x1) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x102) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x24000, &(0x7f0000ff6000)="5060850bcfb0b6714ccf3783fd29e44a0bed84e6d0", &(0x7f0000661000)=0x0, &(0x7f0000ff6000)=0x0, &(0x7f0000ff7000-0x5b)="b44999208c01627d4c2d2e5d6051f6368151bf02dc06650a2090872cf0917d63663004db9c9df682827e64a9952735f6cf18e844d2b8cbc02885ce131963778fe8f5b061142e1c1e3a34b285fb9be978ffeba64b1a05839eabc3ae") sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00008c8000-0x78)={0x5, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x0, 0x8c, 0x40, 0x2, &(0x7f0000ff8000-0x10)=@generic="f707d1f8ee4b74acf2cbf37ef2071046", 0x4705ae6000000000, 0x2, 0x8}) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x80807, 0x3f, &(0x7f00002d5000)={0x0, 0x0}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f000001e000-0x18)=""/24) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d2b000-0x10)={0x3, &(0x7f00007a0000)=[{0xea0, 0x5, 0x9, 0xfffffffffffffffe}, {0x9, 0x8574, 0x4, 0xbf}, {0x4, 0x2, 0x7, 0x76}]}, 0x10) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000d95000)=0x5) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f0000408000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x0, &(0x7f00009ef000)=[], 0x337, 0x0}], 0x1, 0x1) [ 76.884321] binder: release 15526:15528 transaction 176 out, still active [ 76.891321] binder: release 15526:15528 transaction 175 in, still active [ 76.907393] binder: undelivered TRANSACTION_COMPLETE [ 76.926498] binder: release 15526:15544 transaction 175 out, still active 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x7, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f000089f000)=[@in6={0xa, 0x0, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x3}, @in6={0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x8f}, @in6={0xa, 0x1, 0x3af1396d, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12}, 0x4}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x100000001, @loopback={0x0, 0x1}, 0x6}], 0x80) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000a15000-0xc)={0x0, 0x1ff, 0x10}, &(0x7f0000b53000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000590000)={r5, 0x14}, &(0x7f0000f45000-0x4)=0x8) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000810000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00008b4000-0xcf)=""/207) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000265000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x40}, 0x1c) connect$inet6(r1, &(0x7f0000a65000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xa}, 0x0}, 0x1c) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0x101, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000c05000-0x10)='/dev/input/mice\x00', 0x0, 0x10000) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00002cc000-0x8)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f000063a000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00009c3000-0xa)='attr/prev\x00') writev(r2, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/01/26 09:48:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000b84000-0x4)=0x0, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f000072f000)={0x0, 0xfffffffffffffff9}, &(0x7f000024a000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00004b9000-0x8)={r1, 0x7}, 0x8) r2 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r2, &(0x7f0000f24000-0xc)=@unspec={0x0, 0x0, 0x0, 0x0}, 0xc) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000d5b000)=0x8000, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x200007, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000feb000)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r3]}], 0x1, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x4) stat(&(0x7f0000954000)='./file0\x00', &(0x7f000060f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg(r5, &(0x7f000000e000)={0x0, 0x2e, &(0x7f0000f1f000)=[], 0x0, &(0x7f00007fc000)=""/0, 0xa5d045ccf825c511, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f000058a000)={0x10001, 0x8000, 0x4, 0x3c, &(0x7f0000135000-0x3c)=""/60, 0x1000, &(0x7f0000342000)=""/4096, 0xaa, &(0x7f000080d000-0xaa)=""/170}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000dce000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000772000-0x4)=""/4, 0x4, 0x40, &(0x7f000086f000-0xa)=@file={0x0, './file0\x00'}, 0xa) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00008d8000-0xc)='/dev/rfkill\x00', 0x440000, 0x0) write$selinux_create(r3, &(0x7f0000727000-0x32)=@access={'system_u:object_r:var_lock_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x36, 0x30, 0x0}, 0x32) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000112000-0x4)=0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) socketpair$ax25(0x3, 0x2, 0xca, &(0x7f00008ea000)={0x0, 0x0}) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) acct(&(0x7f00001b7000-0x8)='./file0\x00') ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000b42000)=0x0) getpgrp(r5) [ 76.934832] binder: undelivered TRANSACTION_COMPLETE [ 76.940073] binder: send failed reply for transaction 176, target dead [ 76.946812] binder: send failed reply for transaction 175, target dead 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f000032a000-0x8)={0x0, 0x0}, &(0x7f000096e000-0x4)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000ff6000-0x10)={r0, 0x8, 0x6, 0xe5}, &(0x7f0000ff6000-0x4)=0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 1: clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f000039b000)=0x0, &(0x7f0000bda000)="") modify_ldt$write(0x1, &(0x7f000084c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0x1)='\x00', 0x3) connect$inet6(r0, &(0x7f0000001000-0x1c)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xb9}, 0x1c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002000-0x10)={0x0, 0x80000000, 0x4, 0x8e}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002000)={r1, 0x0, 0xffffffffffffff54, 0x6, 0x3, 0x8cc6}, &(0x7f0000002000)=0x14) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000003000)={@multicast2=0xe0000002, @rand_addr=0x8, @dev={0xac, 0x14, 0x0, 0xa}}, 0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0xf3) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/checkreqprot\x00', 0x300, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000497000-0x18)={0xffffffff, 0x7, 0x80000001, 0x6, 0x2, 0x1}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00005ad000)=0x0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000ff6000)='/dev/keychord\x00', 0x442100, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000d6d000)=0x10001, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00003fb000-0x4)=0x0, &(0x7f000057d000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) munlockall() mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000a15000-0xc)={0x0, 0x1ff, 0x10}, &(0x7f0000b53000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000590000)={r5, 0x14}, &(0x7f0000f45000-0x4)=0x8) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 77.037860] binder: release 15565:15574 transaction 179 out, still active [ 77.044968] binder: release 15565:15574 transaction 178 in, still active [ 77.065182] binder: undelivered TRANSACTION_COMPLETE [ 77.075133] binder: release 15565:15590 transaction 178 out, still active [ 77.087347] binder: undelivered TRANSACTION_COMPLETE [ 77.114099] binder: send failed reply for transaction 179, target dead [ 77.122600] binder: send failed reply for transaction 178, target dead [ 77.125490] binder: 15608:15623 got new transaction with bad transaction stack, transaction 181 has target 15608:0 [ 77.125502] binder: 15608:15623 transaction failed 29201/-71, size 0-0 line 3031 [ 77.147481] binder: release 15608:15623 transaction 181 out, still active [ 77.154711] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000b98000-0x8)='./file0\x00', 0x40020007e, 0x28) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlinkat(r0, &(0x7f0000ff7000-0x8)='./file0\x00', &(0x7f0000ff7000-0x98)=""/152, 0x98) r1 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000ff8000-0x4)=0x0, &(0x7f0000ff8000-0x4)=0x4) r2 = accept$llc(0xffffffffffffff9c, &(0x7f000033c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000362000)=0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$llc(r2, &(0x7f00005d5000)=""/157, 0x9d, 0x3, &(0x7f0000ff7000)={0x1a, 0x1c, 0x3, 0xfffffffffffffffb, 0x100000001, 0x5, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000d02000-0x8)={0x2, 0x6}, 0x8) 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x9) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xd, &(0x7f0000001000)={0x82, 0x7}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000001000-0x170)={0xffffffffffffffbf, 0x3ff, 0x0, 0x7, 0x6, [{0x1, 0x400, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, {0x8000, 0x278d4f4a, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}, {0x1, 0x101, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x400000000000, 0xfffffffffffffff8, 0x3f, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}, {0x0, 0xd816, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, {0x81, 0x9, 0xcab, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f000006c000-0xc)={0x2, 0x931, 0x6, 0x100000000, 0xfff, 0x1}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000ff5000)='./file0\x00', &(0x7f0000ff5000)='./file0\x00', &(0x7f0000ff6000-0x5)='f2fs\x00', 0x800000, 0x0) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00002c6000-0x10)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair(0x4, 0x8000b, 0x8, &(0x7f0000df5000)={0x0, 0x0}) openat(r0, &(0x7f00005b7000)='./file0\x00', 0x10000, 0x2) set_tid_address(&(0x7f000053c000)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000c26000)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000097000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000f48000-0x30)={@local={0xac, 0x14, 0x0, 0xaa}, @empty=0x0, 0x0, 0x8, [@loopback=0x7f000001, @empty=0x0, @broadcast=0xffffffff, @dev={0xac, 0x14, 0x0, 0xc}, @rand_addr=0x4, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff]}, 0x30) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) munlockall() mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 77.160035] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.165478] binder: send failed reply for transaction 181, target dead [ 77.204139] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r1, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000001000-0xec)="31ab22688cd75e1c3b370d4f85b165df85e534f9b56f76f19107a6e47ac9bc48779780f1b2f7170ea561c7f9592c3c72731055d20b473d4ee16675780ef54708aa7acb6a44b0631f11d122ce5f002c569efd523e6f1397abf1cb26d6d9604f722f61c21f412dda652984332dbe6453e27b336f9f88b9dd7fd5b6387232a6df04cf3897497f16bdf95602e63ebfbf19e201486fbce6b6c0b1b16166be6fa0a32f748a6c391a0133df9b23b5b0c196aead08338e3f39e4c89958f3991cde46c3025ceb50a7fb32456fd95e3b46411a1946cc3e0f1332cdd0446e42786caea52890fa3e0609a7cc8ac61a55c50a", 0xec) mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000ff7000-0x131)="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", 0x131, 0x0, &(0x7f000088b000)={0x2, 0x2, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000626000)=0x10001, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000359000)={0x0, 0xffffffffffffffff, 0x0, @mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000ff6000-0x4)=0x1c, 0x800) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000ff5000)={0x0, 0x6b74}, &(0x7f0000fd8000)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000ff5000)={r2, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x5, 0x3, 0x2, 0x44}, 0xa0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000ff5000)="", 0x0, 0x0, &(0x7f000077b000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f000058a000)={0x10001, 0x8000, 0x4, 0x3c, &(0x7f0000135000-0x3c)=""/60, 0x1000, &(0x7f0000342000)=""/4096, 0xaa, &(0x7f000080d000-0xaa)=""/170}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000dce000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000772000-0x4)=""/4, 0x4, 0x40, &(0x7f000086f000-0xa)=@file={0x0, './file0\x00'}, 0xa) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00008d8000-0xc)='/dev/rfkill\x00', 0x440000, 0x0) write$selinux_create(r3, &(0x7f0000727000-0x32)=@access={'system_u:object_r:var_lock_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x36, 0x30, 0x0}, 0x32) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000112000-0x4)=0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) socketpair$ax25(0x3, 0x2, 0xca, &(0x7f00008ea000)={0x0, 0x0}) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) acct(&(0x7f00001b7000-0x8)='./file0\x00') ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000b42000)=0x0) getpgrp(r5) [ 77.215545] binder: 15631:15636 ioctl 40046207 0 returned -16 [ 77.236817] binder_alloc: 15629: binder_alloc_buf, no vma [ 77.245124] binder: 15631:15636 transaction failed 29189/-3, size 0-0 line 3127 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000016000)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 77.267322] binder: 15629:15645 got new transaction with bad transaction stack, transaction 185 has target 15629:0 [ 77.285336] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.294549] binder: 15629:15645 transaction failed 29201/-71, size 0-0 line 3031 [ 77.318010] binder: BINDER_SET_CONTEXT_MGR already set [ 77.324037] binder: release 15629:15645 transaction 185 out, still active [ 77.331108] binder: 15664:15665 ioctl 40046207 0 returned -16 [ 77.337043] binder: undelivered TRANSACTION_COMPLETE [ 77.337052] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.337073] binder: send failed reply for transaction 185, target dead [ 77.356920] binder: 15664:15665 transaction failed 29189/-22, size 0-0 line 3004 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000ff5000)='/dev/ppp\x00', 0x420400, 0x0) r2 = mmap$binder(&(0x7f0000a1f000/0x4000)=nil, 0x4000, 0x6, 0x30, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000691000)={r2, 0x0, 0x0, 0x0}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000000+0x561)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000cf6000)='\x00', 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000754000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b0b000)="9601e17d876e766296bec603dfec34be0a9007f2f4f6f7fba559bf36f0cd59398ac05e7de2354f6431c6b05e6d2d0e5bab9ebbceed067830e896c1ff4e148ef6d2accac8fafc3c64828505674a51af929f74817fff629603f28765735ac6df47091f8c31a3c92affe9b5f9354d4dca437c71b6a57e163a16c15bb443bc1dfe3ac2dd0b2b50eb23673ee4ee1423d985c259d197cb5959f7900ce85a2051d8153141bb44208b9994ebd276c666f3a8772282d00f", 0xb3, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000069a000)="65746830b600", 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00001e8000)={r0, r1, r2}, &(0x7f0000655000)=""/4096, 0x1000, &(0x7f00002e2000)={&(0x7f0000843000-0x40)={'sha256-avx2\x00'}, &(0x7f0000294000)="2197312bbdbafd07686886e31b1b842fe9a8772eac8f75e690d05766578234b809b977b2f9032d30b62db2bfc52e27e3c4746cf9740b21f52277ba76f63837d5fb02388115f748edfbbcd636e08cb2f1e05126b804b7da1e93765d0893bb079a03537fdfe2ae28256db3f3b647cfa5b96dd419e3970c7493d0cda95b1443f46b25388bf4581837ac0bf6baf0503357a1ff61c6cd17491d9ef316eb94151cce2b4d7e2645f358ecf2905f8149cb00bb9f711e3556ec724f2d5885f6b9df61d6888aa57795", 0xc4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r3, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000564000-0x4)=0x0, &(0x7f0000bc2000)=0x4) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000009b000)=[], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00002b8000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000abc000-0x14)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00003df000)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000075f000)={r4, 0x9}, &(0x7f0000a87000-0x4)=0x8) 2018/01/26 09:48:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair(0x4, 0x8000b, 0x8, &(0x7f0000df5000)={0x0, 0x0}) openat(r0, &(0x7f00005b7000)='./file0\x00', 0x10000, 0x2) set_tid_address(&(0x7f000053c000)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000c26000)={0x0}, 0x8}) 2018/01/26 09:48:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000872000)='/dev/keychord\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000e4a000)=[{0x8, 0x4}, {0x8, 0x20}, {0x4, 0x81}, {0x8, 0x0}, {0xb, 0x4a8}, {0x3, 0xce10}, {0x2, 0x2b28}, {0x7, 0x4}], 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00004c1000)={@rand_addr=0x7, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xffffff9e) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000b93000-0x38)={&(0x7f0000232000)=@file={0x1, './file0\x00'}, 0x8, &(0x7f0000338000)=[{&(0x7f0000722000)="c6f2c548168de954add8959ed5c4884dd10f1f31e1fb491ff8e1ac717cbcfa4d07acbb90dad4a810baacada745836acd22bba7235f04be28b95bfd21055f940e6fd52fd2b5174aa5a3b02cca20fa376609933fdac20342c0612d3943f9b569ff53a2e16283307f8d9b6d85cf3adf434e466c19460eab224caf72175b97ad0fac26e8074d1d44d91a54ce8ea520b04fecd252b1a6baaf42c5dfac4f0fb814b2612dc9824f682cc951a23117758cf8b0d41b9380d9843e8bea211ce9af29a7026e52b5fafe5316d0cc9d265ee64ee4130d5a7452677a13df021fc2b3c591e70a8221cb77a6bcf840e5b1", 0xffffffcb}, {&(0x7f000097b000)="13e521f41ccb9a09d7454ebcb94fefaaac5e8267c0530f5b6afe1778f4a73a8d28303bf03897d08cf9df4d42b060e58623ee9d4742fa57a9d945dceab9f320f560cbfade303b1200526bc0cdce24b81b4d86f8fc7e069973d5", 0xfffffffffffffd57}, {&(0x7f0000944000-0xa9)="e5ea073f52c71615963dedcf2109301ea98f89f9ce3665808963f106a80d515ded33d90f84f47f80d12c65d8b998d988b1ac513fd0d98a6898cc863e2c8a4076de2e202755124d31832fb6330efaa91b7effd0ffe1d1a3a0eefc0b0eccc3719924c5c1b0da5ba0585ab3b068fda85cd4541931abeaf75b8db86fc3410ca8368e475823d7210400aba41698ff2ee9c0b8696b0982b60964a3abd7f8b7f56cc80de52725c2f9f04ff4c7", 0xfffffffffffffe0e}, {&(0x7f00000d8000-0x75)="14b5d277afefbc5ccdf6021ca7c853c5368a8e8e7f7eade9bac43cce244d186cd209e0b37b9c3240751e2dfb7633de3825fd0d2379b95bd0617859d4ce3a01440ac2697d64c3f8c9d941cea83ca6708b40a2df9d753a75388aa3bb4c6b02003971adcfb0fa049bdda3feebebc564bfdef517f66199", 0x75}], 0x4, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r1]}], 0xffa5, 0x10}, 0x4800) recvmsg(r3, &(0x7f000000e000)={0x0, 0x274, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000d71000-0x4)=0x0, &(0x7f00003a3000)=0x4) [ 77.368608] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:05 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008b9000-0x10)='/dev/sequencer2\x00', 0x40, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000698000)=0x0, &(0x7f0000ff7000-0x4)=0x0, &(0x7f00009a9000-0x4)=0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000ff6000)={&(0x7f0000f96000-0xc)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000a9e000)={&(0x7f0000ff7000-0x30c)={0x30c, 0x12, 0x0, 0x7, 0x3, {0x1b, 0x0, 0x0}, [@typed={0xc, 0xa, @uid=r2}, @nested={0x2ec, 0x1c, [@typed={0xdc, 0x26, @binary="e8648a3b1ab11e91eaff220b317daae47d89de25366a232651b8e2171c32d0182ad83d87a610548dd6a7a1ab1c008a7a4a1c8fe0a64c49b02341db4b7b7a55d37772bd016866a54ae65f1b2f8799b1d86e9dd850f47b1192d48435b12bfedef97b0c21254640b3d89c1953f6572e891aeb40a5ed771b77ca83996d5a9ad87278b677aa35885953e35688ec3b7b8745aa413b8120704ab01b2f786b3b6e6bcbffa2efab4bb90aabe3c49aaefacf081697184c4d265c62db57c9d8fb16206934432b9da219e6a96d6fdc0db8dcd3501f9b76"}, @generic="440e1460c52af140c6098e836e8d924c60b987b2a6254699b6f21780177744dd36c281ff4f50a90c1887f80a8027e15fe5c8582296ce74e9fe82d6897f779551a29904e3b281314ec8ec7ab24ce510c14151ee5310fa3011c3aca8b7a9fa2fa4df29450c97901e53a4202dba", @generic="4fa5d5742c7597add5bf879b4bf5ef2d33f8a09e7a45e9989d457fe29ed32a730f30802d027326aaedb5e2d9fc8cf16a2ab801484edcf09833d80657af879f335b3547c0313757b251f1a64c054884210649cb4dbe098e14e09493bff2b538f67170a4a1511a913e3852b8896af2b9da3f61d6d9d73043c1f3ed28f5082877cd96f15c1d7bc8e70e520293b9619cb1935cf84780f5f982844e9a181e0156b70331fdd30de902d59a7257cc7630e1ef0220868cd8a34966de8d5499c7a7b04099e4db82600a0f4109d45c6d9e73d4", @generic="fbbdd90b817a11b8203fd860a2d68962abbd3ea33a5e5c686685f3149c21234778e434382f81e93a62997d59d7a2ee220168", @generic="f3d2cb95834cb18aabd5850fb36b5e9c406b8c31905983af802a47e51632887968f4c91af0636028b250a97a54a67ebb563ec62085fb03d4ca79103a0c8f1ef57e9bb5336280a2cc177fdaa87ef7e37213a22ecb477ac47805858a6dee16341e24be9b7a456b2d8f8e88eaed813776d54f42693730b2047613df208014af76f0843919227742e048ce6445b26927a0153642a82a740b6f", @typed={0x8, 0x71, @void=""}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) 2018/01/26 09:48:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x80000, 0x83) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r0, 0x4, 0x800) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f000024c000)=""/72, &(0x7f0000bc2000-0x4)=0x48) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) openat$hwrng(0xffffffffffffff9c, &(0x7f000097c000-0xb)='/dev/hwrng\x00', 0x254a03, 0x0) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) eventfd2(0xff, 0x80000) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000bdf000)=0x4c, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:05 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) signalfd(r0, &(0x7f000044c000-0x8)={0x7}, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 77.433478] binder: BINDER_SET_CONTEXT_MGR already set [ 77.453046] binder: 15673:15681 ioctl 40046207 0 returned -16 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = syz_open_dev$evdev(&(0x7f0000887000)='/dev/input/event#\x00', 0x2, 0x80000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000e83000)='/proc/self/net/pfkey\x00', 0x401, 0x0) accept4$nfc_llcp(r2, 0x0, &(0x7f000050e000-0x4)=0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f000049b000-0x26)=""/38) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000009b000)=[], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 77.474923] binder: 15668:15686 got new transaction with bad transaction stack, transaction 189 has target 15668:0 [ 77.487057] binder: 15673:15681 got new transaction with bad transaction stack, transaction 191 has target 15668:0 [ 77.493497] binder: 15668:15686 transaction failed 29201/-71, size 0-0 line 3031 [ 77.505712] binder: 15673:15681 transaction failed 29201/-71, size 0-0 line 3031 [ 77.511880] binder: release 15668:15686 transaction 189 out, still active [ 77.511883] binder: undelivered TRANSACTION_COMPLETE 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000936000)={@rand_addr=0x0, @rand_addr=0x0}, &(0x7f0000ff6000)=0x8) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000009b000)=[], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000de000-0x8)='net/llc\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 77.511890] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.511906] binder: send failed reply for transaction 189, target dead [ 77.511914] binder: send failed reply for transaction 191 to 15673:15681 [ 77.555903] binder: BINDER_SET_CONTEXT_MGR already set [ 77.555910] binder: 15707:15709 ioctl 40046207 0 returned -16 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00003d3000)='/dev/vga_arbiter\x00', 0x406002, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r1, &(0x7f0000ff7000-0x40)={0x377, 0xffffffffffff77f3, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x9}, &(0x7f0000ff6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x6, 0x7, &(0x7f0000ff6000)={0x0, 0x0}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) recvfrom$inet(r0, &(0x7f000054c000)=""/162, 0xa2, 0x40000140, &(0x7f00006a7000-0x10)={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000147000)='/dev/vga_arbiter\x00', 0x800, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000ff6000)='/dev/keychord\x00', 0x442100, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000d6d000)=0x10001, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00003fb000-0x4)=0x0, &(0x7f000057d000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 77.577096] binder: 15702:15713 got new transaction with bad transaction stack, transaction 194 has target 15702:0 [ 77.591415] binder: 15702:15713 transaction failed 29201/-71, size 0-0 line 3031 [ 77.593128] binder: undelivered TRANSACTION_COMPLETE [ 77.593136] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.593139] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.598909] binder: 15707:15721 got new transaction with bad transaction stack, transaction 196 has target 15702:0 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00009cf000-0xe)='/dev/keychord\x00', 0x40800, 0x0) fcntl$setstatus(r1, 0x4, 0x44400) r2 = socket$inet6(0xa, 0x80007, 0x200) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) getcwd(&(0x7f0000fc8000-0x4b)=""/75, 0x4b) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f47000)='/dev/sequencer\x00', 0x20002, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000be6000-0x28)={@common='nr0\x00', 0x89, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000f98000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000215000-0x16)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x6) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00008c9000-0x4)=0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b28000)='./file0\x00', 0x0) mount(&(0x7f0000072000-0x8)='./file0\x00', &(0x7f0000916000-0x8)='./file0\x00', &(0x7f0000026000)='adfs\x00', 0x8, &(0x7f0000769000)="") mkdir(&(0x7f0000e2b000)='./file0/file0\x00', 0x0) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000ff5000)={{{@in=@multicast2=0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff5000)=0xe8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000bd2000+0xc45)='/dev/usbmon#\x00', 0x7, 0x81) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000043000)=0x0, &(0x7f000012b000-0x4)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0xfffffffffffffff7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r2, 0x0) sendto$inet6(r2, &(0x7f00006e9000-0x26)="19bd83f89e81181fc63217c6035a420c4adb05f8b8496cf6865d9ab970ee7d32c3774d44b688", 0x26, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) recvmmsg(r0, &(0x7f00009e4000-0x12c)=[{{&(0x7f0000db3000-0xc)=@nl=@kern={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000136000-0x10)=[{&(0x7f0000492000-0x49)=""/73, 0xfffffd63}], 0x1, &(0x7f0000d5e000-0x8)=""/8, 0x8, 0x0}, 0x0}], 0x1, 0x0, &(0x7f000080b000-0x10)={0x77359400, 0x0}) r3 = accept4(r2, &(0x7f0000219000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f0000db5000-0x4)=0x214, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0x0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0}, [{0x0, 0x1, 0x0}, {0x0, 0x1, 0x0}, {0x0, 0x1, 0x0}, {0x0, 0x1, 0x0}, {0x0, 0x1, 0x0}, {0x0, 0x1, 0x0}]}, 0xfffffc76}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000d5d000)={{0x20, 0x80}, {0x200, 0x42e3}, 0x0, 0x2, 0xffffffffa9aa2a46, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80005, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff7000-0x4)=0xd, 0x832df04ca0f13048) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 77.598920] binder: 15707:15721 transaction failed 29201/-71, size 0-0 line 3031 [ 77.601706] binder: BINDER_SET_CONTEXT_MGR already set [ 77.601713] binder: 15725:15726 ioctl 40046207 0 returned -16 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0xdb5f, 0x100) pread64(r0, &(0x7f0000e2f000-0xe4)=""/228, 0xe4, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x8000000000004, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000cb9000-0x30)={0x4, 0x0, &(0x7f0000ff7000-0x4)=[@enter_looper={0x630c}], 0xf3, 0x0, &(0x7f0000ff6000)="683d14bd79dcf6fbe05d21039834b0ef2c757c423fb029a23656827564bacd5e7a49bc117fb50c6894fc8746df2b1b171caeb1719c712c203d539b0339c8f204944c937584f05bec44c8cb3f747ce4398c9057b7d6793d0405e3cb347c278fed48174b2f215e1c427091c79dcdcb2c6189310cc16e01bb4344e13f449325b77ffc36f79d6be9cfd919385cd3f6cdedca718049a906e4ddcbb0c1648053e86b0f77e34fab28a81a7816aaaa588e5b48bc039316441888043e50e74a117e621937ea76d266bf44b4caf3e2ba05458ef2985651b0d359f1fe200c73ddad059267aaada61cc608d4d31a3ff17c6b91cacecf73a52c"}) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000a70000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 77.614769] binder: release 15707:15721 transaction 196 out, still active [ 77.614772] binder: undelivered TRANSACTION_COMPLETE [ 77.614778] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.659182] binder: 15725:15732 got new transaction with bad transaction stack, transaction 198 has target 15702:0 [ 77.659197] binder: 15725:15732 transaction failed 29201/-71, size 0-0 line 3031 [ 77.674180] binder: release 15725:15732 transaction 198 out, still active [ 77.674185] binder: undelivered TRANSACTION_COMPLETE [ 77.674191] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000009b000)=[], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000856000)='/proc/self/net/pfkey\x00', 0x403, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000580000-0x4)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00009a8000-0xf)='/dev/sequencer\x00', 0x10000, 0x0) bind$inet(r0, &(0x7f0000517000-0x10)={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xa7) symlink(&(0x7f0000afc000)='./file0\x00', &(0x7f000026a000-0x8)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000edc000)={{{@in=@loopback=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000027d000-0x4)=0xfffffe99) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000fb000-0xc)={@remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff, r2}, 0xc) sendto$inet(r0, &(0x7f0000589000-0x1)="", 0xfffffffffffffe98, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f000011a000)={{{{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2, 0x9, 0xffffffff, "176e912d7dd14880be3869dc65423cfc9893b380b49bdd27eb0810766e978f9e8a083d909da02cf7775ca57ce8367cf481aab8ad387539ac0d25d2e468ca166d057dfd25cc27ade92effdd1ec742904e"}, 0x160) connect(r0, &(0x7f00008e5000-0x10)=@ethernet={0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000ff6000-0x8)={0x0, 0x400}, &(0x7f0000ff5000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000098000)=@assoc_id=r1, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000ff6000-0x14)={@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000271000-0x4)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000003e000)={r3, @rand_addr=0x100000000, @dev={0xac, 0x14, 0x0, 0xa}}, 0xc) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000ff6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r2, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socketpair(0x7, 0x1, 0x100000000, &(0x7f000007a000)={0x0, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000ff7000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000be000-0x11)='/dev/vga_arbiter\x00', 0x2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000ff6000)={0x0, @in={{0x2, 0x2, @rand_addr=0x6d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0x5, 0xfffffffffffffffc, 0x3, 0x54}, &(0x7f0000c4d000)=0xa0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000ff7000-0x8)=@assoc_value={r2, 0x800}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00001e1000-0x4)='tls\x00', 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000785000-0xc)={0x12, 0x0}) syz_open_dev$usbmon(&(0x7f0000708000)='/dev/usbmon#\x00', 0xf1, 0x20000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f000008a000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000cbe000-0x8)={0x0, 0x0}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000d86000-0xc2)=@dstopts={0x3b, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@generic={0x40, 0x95, "33aff390ed4d3999b5f34b42fefc9bbc1f5fb75f9328006dd9640ed5ab08324ea261c305879859ef9bca8db19fa05378532bc5c72b445551ef6697f241f1304477cd3d9b755359570bc18494767cdf9b3268beddbd32b6334c99ccea0407f9217f4c43cec97ab5faa4bbc66d75507d33299fc2388fc4a024858adda583463042a75b3189556efad42be9b03f7b48968f9e278ee99d"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x180000000000}, @pad1={0x0, 0x1, 0x0}]}, 0xc2) r3 = dup(r2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000dbd000-0x4)=0x7, 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000fbe000-0xd)='net/mcfilter\x00') readv(r4, &(0x7f0000f04000)=[{&(0x7f0000636000-0x92)=""/146, 0x92}], 0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000a25000-0x4)=0x0, &(0x7f00004cd000-0x4)=0x4) read$eventfd(r4, &(0x7f000074a000-0x8)=0x0, 0x8) 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) faccessat(r0, &(0x7f0000421000)='./file0\x00', 0x111, 0x300) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000a3c000)=[], 0x0, &(0x7f000000c000)=""/0, 0x0, 0xffffffffffff7fff}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000be000-0x7)='wlan1,\x00') [ 77.784691] binder: release 15702:15713 transaction 194 out, still active [ 77.792019] binder: undelivered TRANSACTION_COMPLETE [ 77.797517] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.803284] binder: send failed reply for transaction 194, target dead [ 77.810000] binder: send failed reply for transaction 196, target dead [ 77.816672] binder: send failed reply for transaction 198, target dead 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0x0, 0x0, &(0x7f0000af2000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x7, 0xfffffffffffffd04) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ff6000+0x622)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000ff6000)=""/4096, &(0x7f000064e000)=0x1000) 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40004) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f0000027000)='blacklist\x00', &(0x7f0000a04000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000854000-0x10)='/usr/sbin/cupsd\x00', 0x0) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f0000ef2000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000fcf000-0x10)='/selinux/policy\x00', r3) mq_open(&(0x7f0000d61000)='em0\x00', 0x80, 0x100, &(0x7f000014d000-0x40)={0x9, 0xef9, 0x7, 0x6, 0x3, 0x5, 0x5, 0xfff}) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000005, &(0x7f0000eb6000)=0x81, 0x2f0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000b52000)={{0x100, 0xc000000000000000}, 'port1\x00', 0x59, 0x80000, 0x800, 0x7f, 0x0, 0x8000, 0x0, 0x0, 0x7, 0xfffffffffffffbff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x3ff}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x40000}], 0x1, 0x1) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x800, 0x2800000) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff5000)=0x8000000000005, 0x188) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ff6000)='/dev/vga_arbiter\x00', 0x1, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000ff7000)=0x0, r0, &(0x7f0000ff7000)=0x0, 0x689, 0x3) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000ff7000-0x4c)={0xfada, 0x2, 0x46b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00009ff000)="6c65e135ff45ece1e7895252873ce09c7dd234ee47c22a308a384ef55285e3726bddd8", 0x23) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00003ed000)=0x0, 0x4) sendmsg$nl_route(r0, &(0x7f00001fb000)={&(0x7f000061f000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000f70000-0x10)={&(0x7f00005fc000)=@getlink={0x38, 0x12, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@IFLA_MASTER={0x8, 0xa, 0x0}, @IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0xc, 0x1, 'em0ppp1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 77.879781] binder: 15776:15795 got new transaction with bad transaction stack, transaction 201 has target 15776:0 [ 77.891050] binder: 15776:15795 transaction failed 29201/-71, size 0-0 line 3031 [ 77.915989] binder: release 15776:15795 transaction 201 out, still active [ 77.924127] binder: undelivered TRANSACTION_COMPLETE [ 77.944460] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.956681] binder: send failed reply for transaction 201, target dead 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f6b000-0x9)='/dev/sg#\x00', 0x3, 0x80) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f6a000)=0x5, 0x4) r1 = socket(0x400000000000000a, 0x2, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000f6b000-0xd)='/dev/snd/seq\x00', 0x0, 0x100) mmap(&(0x7f0000f6d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00009e7000)={&(0x7f0000f6b000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000a7d000)=[{&(0x7f0000f6c000-0xb1)=""/177, 0xb1}, {&(0x7f0000c85000)=""/66, 0x42}, {&(0x7f0000f6c000-0x7b)=""/123, 0x7b}], 0x3, &(0x7f0000a26000-0x15)=""/21, 0x15, 0x8}, 0x140) sendmmsg$nfc_llcp(r1, &(0x7f0000237000)=[{&(0x7f0000f6d000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0fcca4bb22f2892559edddba1a892f216c6adb6dac3291add84e7dd1b9b1e1043844071c4d783ef83c7baa707bef6850ccd339c111743913f1b7601256cf03", 0x0}, 0x60, &(0x7f000090d000)=[], 0x0, &(0x7f0000074000-0x38)={0x10, 0x0, 0x0, ""}, 0x10, 0x0}], 0x1, 0x0) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000489000)={@common='bridge0\x00', @ifru_flags=0x8000}) mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x3) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff7000-0x4)=0x4, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000f5000)={{&(0x7f000048f000/0x4000)=nil, 0x4000}, 0x1, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00007c7000)=@assoc_value={0x0, 0x8001}, &(0x7f0000ff7000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00008c3000)=@assoc_value={r2, 0x80000001}, 0x8) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000235000-0x78)={0x1f, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x45, 0x8001, 0x9, 0x9, 0x4, &(0x7f0000b56000-0x10)=@common='gre0\x00', 0xff, 0x5, 0x784}) fcntl$addseals(r1, 0x409, 0xa) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00001f7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00004d1000)=0x14, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000d6000-0xc)={@empty=0x0, @multicast2=0xe0000002, r1}, 0xc) r2 = syz_open_dev$mice(&(0x7f0000538000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$TIOCSBRK(r2, 0x5427) getsockname$inet(r0, &(0x7f00007ea000)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000dd7000-0x4)=0x10) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f000081f000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x803}) sendto$inet(r0, &(0x7f0000220000-0xee)="e1df9d27ac7b82abf888a1f284209e722bb9b515ad3e2d0bdcb4de1a63954f00648961336cf33a171285ec2969e4ae53a6bd04498e4abd2aea93c1ba56a03107465e51a95502e76a1a881593bf6e8ff5e5580f89b65d405de0096d9d2de1f50a4fb7a9927c2ff9b3f5cf734fdd2237201b72139e2284376aac5ad15051daeca235e2827cc46dfd4df91793a18e9b4d86645a735c7f4e7ed5eda00b20cc497b16d9695dd92a74b5777e480f2ffa4dc91628ae43f384bfcba57baa151c3fd6daedc29ce09cf1cc520eb087fee87cffbcd9faeed07da0d1761d36848b8535016af6dd7bec419b7dafbfc7372f488372", 0x289, 0x4, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000056b000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000a7c000-0x4)=0x2fa3, 0x4) 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x8f) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x36, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000cd7000-0x4)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @thr={&(0x7f000062f000-0xed)="a7ecabffb9b0435dbfb89464e3c731de687ebff2ca9de53691fa540789e6e54b6aecb30589cc390b4b2a524206907d71091f009d1a187c22bd709fb14c7c4abe30cbde89f6333af1f0a34f3e78ea66f5390237561099802f5943da133a2c68b0ee066b40707ceb22becc26fd72d12cb1eca6e829583086808db8d3bf4c4d16beaaec352c2213b1aa0edfbfccfd673a56ed0e0c179558474bcd5adcded7a79887de8a521caf1da4eeb0ea5685506d7d5a64ab3b7ad094cc21ad6ea354e642338d885dd312050b4adff95f33a7f43457095c6064896fc7f7f3e0fd38588de33afff0da80d0851cd6335282c03e7e", &(0x7f000043a000)="4ece9400f8e7ed"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) r3 = getpgrp(0x0) ptrace$poke(0x5, r3, &(0x7f00009fd000)=0x0, 0x8000000000000000) timer_gettime(r2, &(0x7f0000389000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f000070b000-0x4)=0x0, &(0x7f0000f0d000)=0x4) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00006ce000-0x2e)=""/46, &(0x7f000068f000-0x4)=0xfffffdad) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) sendfile(r0, r1, 0x0, 0x7) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x0}, 0x0) recvmsg(r1, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 2: r0 = userfaultfd(0x80800) fcntl$addseals(r0, 0x409, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$pptp(r4, &(0x7f0000dab000-0x20)={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000925000-0x7d)=""/125, &(0x7f0000fbe000)=0x7d) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000ff5000)={@common='lo\x00', @ifru_map={0x3d030ce8, 0x4, 0x100000000, 0x4, 0x540e, 0x82b}}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000ff6000-0x8)='./file0\x00', 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000451000)='/dev/ppp\x00', 0x440402, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$ax25(r1, &(0x7f0000c71000)={0x0, {""/7}, 0x0}, &(0x7f0000ff8000)=0x10) accept4$llc(r1, &(0x7f0000ff7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000e6b000-0x4)=0x10, 0x80800) socketpair(0x1f, 0x5, 0x10000, &(0x7f0000ff6000)={0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000489000)={@common='bridge0\x00', @ifru_flags=0x8000}) mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x3) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff7000-0x4)=0x4, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000f5000)={{&(0x7f000048f000/0x4000)=nil, 0x4000}, 0x1, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00007c7000)=@assoc_value={0x0, 0x8001}, &(0x7f0000ff7000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00008c3000)=@assoc_value={r2, 0x80000001}, 0x8) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000235000-0x78)={0x1f, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x45, 0x8001, 0x9, 0x9, 0x4, &(0x7f0000b56000-0x10)=@common='gre0\x00', 0xff, 0x5, 0x784}) fcntl$addseals(r1, 0x409, 0xa) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000a3c000)=[], 0x0, &(0x7f000000c000)=""/0, 0x0, 0xffffffffffff7fff}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000be000-0x7)='wlan1,\x00') 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000ff5000)='/dev/sg#\x00', 0xfffffffffffffffb, 0x82800) r1 = getuid() mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000bad000)={0x0, 0x0, 0x0}, &(0x7f0000ff5000)=0xc) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000ff6000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000ff5000)='./file0\x00', &(0x7f00005c0000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000e5d000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000ff5000)=0x1c, 0x80000) r6 = socket$packet(0x11, 0x0, 0x300) r7 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000b8d000-0x4)=0x0, 0x800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = accept$llc(0xffffffffffffff9c, 0x0, &(0x7f0000ff6000-0x4)=0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = getpid() mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000647000)={{{@in=@multicast1=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff6000-0x4)=0xe8) r13 = getgid() sendmsg$netlink(r0, &(0x7f0000f41000)={0x0, 0x0, &(0x7f0000cf0000)=[{&(0x7f0000ff5000)={0x430, 0x41, 0x704, 0x5, 0x3, "", [@generic="da3fb11f4d6c8406a4b420054f89829647e25e3a8cb1a79c341215b9ec448cb2d29eb54b871e0ba873a7e8dd8f1a01ed", @generic="d870aae5b4199e55f1de255a3658051b0378764186633ec6e2ee22192259c7b8c89a7b3e3203029b6951b7d6523d8d80e9d80b743bfd81032ab8fc97adc45c44478802c59c25f04ec0fd5609e65cd29b5836b06e9ca59aab585ab95c640c43a1a070b37347591d367eae52c7fd194d2f2c1d561a82e3725680a5a527a6d5f6fe4295ff5198834c9a329793a87d0d1e383c63ad4239b068093baa6496b8bd6cea20a60ee1204369a66e7a510c2c6279c6619e96d74a881c931cd5a254749b735be05e73a1e0eb2aca0ef9ea640e9aefb923b4a4f051287877a22a134b5c0ac8014e", @generic="5059b265a8033705825321dc4c0b0a51791351489944717a8e1cc87c3038c9ba8957336f200cd79e732f37dfe3281274cbebf0ff3603550af6a269296b1aba828a499f57020bff628aef86cd74eb7f6139acbae824c23700e15cfb8ac7", @nested={0xe0, 0x8a, [@typed={0x10, 0x33, @u64=0x8}, @generic="56d89d91b3c6bbf22326a3e5cbb17c2710d1433bf540f5322734c9ea3acdfbcfe0f1e3534a7025f31a2691aa594c38b4be1b8285931dcd9b3ee92bd4bd5ec7d299412773a8519f1db595b1fa760109416f3fd213ff8bf53eec80943c3803647709dc6376378793c5c439ecc0ff539c169a824023265fc8b5c7fd3b864e4e0ed954c0632a633fc843691deeaf09518ce708e3161148ec936be23079fdb09a1525944cf9e4594c16a50613971f8f1cc9226f91d70f94c916a8a5fe6dd51e4d298acda87704a5a79050ba6f47"]}, @typed={0x10, 0x55, @str='eth1\x00'}, @typed={0x10, 0x38, @u64=0x871}, @nested={0x1b0, 0x67, [@typed={0x38, 0x5b, @str='+vboxnet0}keyringposix_acl_accesssystemppp0ppp1\x00'}, @generic="8ae2abad9f9e41322a0af4bedb71705938cb86a31fb2a5332e71d433493067562312ae8404344c6be0dfcadba5d060da0e1c237e5b1ddc7f9dfa0f01874f8c523a4ba5cf5bc39ed44b16b49ffca9b133dab272b6b1b73e07f6b1a564a4eadf471d5f177ff8423d4057362168f5c7075f80882080e6a181d2cd82639fa37585a2cd57b845fcf07dc1a083fc6893a14d0373e3a31f156731c0af73abbbebad7c519bb3b3abf16b77e42d", @typed={0xc, 0x75, @ipv4=@broadcast=0xffffffff}, @typed={0xc, 0x44, @uid=r1}, @typed={0xc, 0x3d, @ipv4=@rand_addr=0x200000002000000}, @generic="de9110e9cb499acb64760b30e7945bb847e3dd069bfc417fdba03fe686953523225bba3c06655fa32382442516bae235b9231c2f9acb18d1f9b5bef2293aadb99f01cc22b0d868a95bd2aa06f2b4aa6657b2879029fb9cde2f0fe6835ccf51ca246e570683802e6e2cdd7c314ea11749b2f6791050c0caf4ab752f3706fd22f66b94e20f4056a9d223dd7b1e14806e8692a8215b4022ca57be1170f176ac5034b75ebfc6eb54ef"]}]}, 0x430}], 0x1, &(0x7f0000d88000-0x68)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r5, r6, r7, r8, r9, r10]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x68, 0x48000}, 0x8000) r14 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, &(0x7f000056f000)={0x0, @in6={{0xa, 0x1, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7481, 0x2, 0x10001, 0x6, 0x80}, &(0x7f0000e0b000)=0xa0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f0000ff6000-0x18)={r15, 0x3, 0x0, 0x8, 0x7}, &(0x7f000019f000-0x4)=0x18) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r16, 0x0, 0xa, &(0x7f00006f5000)=0x800000000000004, 0x4) sendto$inet(r14, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x80a, 0x80, &(0x7f0000ff6000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00005bb000-0x4)=0x0, &(0x7f0000073000)=0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000ff7000-0x14)={0x6, 0x6, 0x25f, 0x4, 0x2, 0x3ff, 0x3, 0x0, 0x3ff, 0xffffffffffffff70}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 78.118833] binder: 15824:15849 transaction failed 29189/-22, size 0-0 line 3004 [ 78.149000] binder: 15824:15859 transaction failed 29189/-22, size 0-0 line 3004 [ 78.189650] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.195147] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000759000-0xe)='/dev/keychord\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000bc4000)=0xfae, 0x4) r1 = socket$unix(0x1, 0x7ffffffffffffffe, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00009ff000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000ec2000)={0x0, 0x8, 0x7, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d45000)=0x0) timer_settime(r4, 0x0, &(0x7f000016c000-0x20)={{0x0, 0x989680}, {0x0, 0x0}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x4, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000004000)='ns\x00') getdents64(r6, &(0x7f0000001000-0xff)=""/27, 0x1b) getdents64(r6, &(0x7f000000c000)=""/67, 0x43) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00009ef000-0x4)=0x0) r7 = fcntl$getown(r0, 0x9) setpriority(0x3, r7, 0x1ff) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000ff7000-0x118)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @rand_addr=0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000288000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000e0c000-0x4)=0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000aec000)={0x0, 0x8}, &(0x7f00002c1000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000c8b000-0x6)={r3, 0x3f}, &(0x7f0000aa5000)=0x6) sendmsg$nl_route(r2, &(0x7f000001c000-0x38)={&(0x7f0000e4a000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x28, 0x18, 0x501, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}, [@RTA_METRICS={0xc, 0x8, "0600100000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x7, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000ff5000)=""/66, &(0x7f0000d40000)=0x42) 2018/01/26 09:48:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f000090c000)=@file={0x1, './file0\x00'}, 0x332, &(0x7f0000008000)=[], 0x10eb, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f00009a7000-0x55)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000063e000-0x10)={0x0, 0x7530}, 0x10) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000676000)=@get={0x1, &(0x7f0000bfd000)=""/43, 0x3}) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x20, &(0x7f000072b000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f000096b000-0x4)=0x14) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000676000)=0x7fffffff, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/26 09:48:06 executing program 0: r0 = userfaultfd(0x80800) fcntl$addseals(r0, 0x409, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$pptp(r4, &(0x7f0000dab000-0x20)={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000925000-0x7d)=""/125, &(0x7f0000fbe000)=0x7d) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$llc(0xffffffffffffff9c, &(0x7f000049c000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000ff6000)=0x10, 0x800) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000893000-0x4)=0x306, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000c1b000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x2}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x7, 0x4) userfaultfd(0x80000) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getrlimit(0x0, &(0x7f00005c7000-0x10)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000ff6000)='./file0\x00', &(0x7f00008ec000)='./file0\x00') 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00003d8000-0x1)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000f10000-0x28)={@common='ip6tnl0\x00', @ifru_mtu=0x0}) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000ff5000)={0x0, 0xfffffffffffffffc}, &(0x7f000091a000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00005bb000-0x8)={r1, 0x101}, &(0x7f00009b0000-0x4)=0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000ff7000-0xa)='blacklist\x00', &(0x7f000080d000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000ff7000-0x1d)='posix_acl_access[selfselinux\x00', 0x0) add_key$keyring(&(0x7f0000ff6000)='keyring\x00', &(0x7f0000ff6000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r2) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000ff7000-0x10)={0x8, &(0x7f0000ff6000)=[{0x8, 0xfffffffffffffffe, 0x80000001, 0x7d0dbc7}, {0x0, 0x7fffffff, 0x0, 0x9}, {0x0, 0xb0, 0x1000, 0x3}, {0x2, 0x4, 0x9, 0x80}, {0x3ff, 0x9, 0x28, 0x2}, {0x6, 0x100000000, 0x10, 0x1}, {0x7, 0x0, 0x4, 0x2}, {0x5, 0x9, 0x3, 0x9}]}) 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0x0, 0xfffffffffffffff7, 0x0, 0x20000000000000}, &(0x7f0000000000)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000b74000)={r1, 0x0, 0x2, [0x401, 0x3]}, 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000009000-0x10)={r1, 0x81, 0x1000, 0x4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000002000-0x14)={0x1, 0x3, 0x1, 0x1, 0x2}) socket$inet6(0xa, 0x80000, 0x2) munmap(&(0x7f0000000000/0x8000)=nil, 0x8000) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/vga_arbiter\x00', 0x40001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ax25(r0, &(0x7f0000000000)={0x0, {""/7}, 0x0}, &(0x7f0000001000-0x4)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000001000-0x4)=0x0, 0x3) [ 78.301873] binder: 15879:15896 transaction failed 29189/-22, size 0-0 line 3004 [ 78.335603] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000029a000)={0x0, @in6={{0xa, 0x1, 0x1000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x46}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x101, 0xf800000000000000, 0xffffffffffffe124, 0x1, 0x1, 0x4f, 0xffffffffffffffd4, 0x4, 0x5, 0x2, 0x9, 0xb678, 0x43e, 0xfffffffffffffbff]}, &(0x7f0000550000)=0x108) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000043a000)={r1, 0x20, 0x3ff, 0x494}, &(0x7f0000cbb000-0x4)=0x10) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:06 executing program 1: r0 = socket$inet(0x2, 0x800, 0x80000001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000335000-0x70)=[{&(0x7f0000001000-0x6d)=""/109, 0x6d}, {&(0x7f0000d85000)=""/226, 0xe2}, {&(0x7f0000af5000)=""/15, 0xf}, {&(0x7f0000376000)=""/184, 0xb8}, {&(0x7f0000001000-0xe5)=""/229, 0xe5}, {&(0x7f000030b000)=""/170, 0xaa}, {&(0x7f00006c8000-0x85)=""/133, 0x85}], 0x7, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000c9d000-0x1d54)=@newlink={0x20, 0x10, 0x703, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, []}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) bind$netrom(r1, &(0x7f0000edf000)=@ax25={0x3, {"94c36a11ce463b"}, 0xa9d}, 0x10) 2018/01/26 09:48:06 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000fde000-0x4)=0xffffffffffffffff, 0xffffffd7) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair(0x10, 0x5, 0xfb, &(0x7f000013e000-0x8)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005ba000)={{{@in=@broadcast=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bb9000)=0xe8) bind$packet(r0, &(0x7f00005da000)={0x11, 0xf6, r1, 0x1, 0x8, 0x6, @random="bbd2fd5e4456", [0x0, 0x0]}, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1, 0x0}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:06 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ff6000)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000ff7000-0x4)=0x0, &(0x7f0000ff7000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f000053d000-0x4)={0x3, 0x0, 0x2}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000ff6000)={0x0, 0x0, 0x3, 0x5, 0x2, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00007e6000)={0x0, 0xffff}, &(0x7f00005de000-0x4)=0x8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f000089e000)=0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000ffa000)={0x77359400, 0x0}, 0x0) getpeername$unix(r0, &(0x7f0000ff8000)=@file={0x0, ""/4096}, &(0x7f0000eae000)=0x1002) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000ff7000)={r3, @in={{0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000ffb000)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000755000)={0x0}, &(0x7f0000ff7000-0x4)=0x4) 2018/01/26 09:48:06 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000ff5000)={0x0, 0xfffffffffffffffc}, &(0x7f000091a000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00005bb000-0x8)={r1, 0x101}, &(0x7f00009b0000-0x4)=0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000ff7000-0xa)='blacklist\x00', &(0x7f000080d000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000ff7000-0x1d)='posix_acl_access[selfselinux\x00', 0x0) add_key$keyring(&(0x7f0000ff6000)='keyring\x00', &(0x7f0000ff6000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r2) [ 78.372742] binder: 15919:15930 transaction failed 29189/-22, size 0-0 line 3004 [ 78.395458] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f00009a7000-0x55)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000063e000-0x10)={0x0, 0x7530}, 0x10) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000676000)=@get={0x1, &(0x7f0000bfd000)=""/43, 0x3}) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x20, &(0x7f000072b000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f000096b000-0x4)=0x14) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000676000)=0x7fffffff, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 78.444697] IPv4: Oversized IP packet from 127.0.0.1 [ 78.445053] binder: 15934:15944 got new transaction with bad transaction stack, transaction 208 has target 15934:0 [ 78.445063] binder: 15934:15944 transaction failed 29201/-71, size 0-0 line 3031 [ 78.453795] binder: release 15934:15944 transaction 208 out, still active [ 78.453799] binder: undelivered TRANSACTION_COMPLETE [ 78.453806] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.453823] binder: send failed reply for transaction 208, target dead 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 78.484821] binder: 15951:15952 got new transaction with bad transaction stack, transaction 211 has target 15951:0 [ 78.484832] binder: 15951:15952 transaction failed 29201/-71, size 0-0 line 3031 [ 78.488829] binder: release 15951:15952 transaction 211 out, still active [ 78.488833] binder: undelivered TRANSACTION_COMPLETE [ 78.488841] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.488858] binder: send failed reply for transaction 211, target dead [ 78.529938] binder: 15957:15959 got new transaction with bad transaction stack, transaction 214 has target 15957:0 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x0, 0x0, &(0x7f000000d000)=""}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x0, 0x0, &(0x7f000000d000)=""}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 78.530007] binder: 15957:15959 transaction failed 29201/-71, size 0-0 line 3031 [ 78.541444] binder: release 15957:15959 transaction 214 out, still active [ 78.541448] binder: undelivered TRANSACTION_COMPLETE [ 78.541456] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.541473] binder: send failed reply for transaction 214, target dead [ 78.559991] binder: 15960:15961 got new transaction with bad transaction stack, transaction 217 has target 15960:0 [ 78.560001] binder: 15960:15961 transaction failed 29201/-71, size 0-0 line 3031 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x0, 0x0, &(0x7f000000d000)=""}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x0, 0x7) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000b52000)=[@in={0x2, 0x2, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x15}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x15}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0x1}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x8c) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x24, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 78.563992] binder: release 15960:15961 transaction 217 out, still active [ 78.563996] binder: undelivered TRANSACTION_COMPLETE [ 78.564003] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.564020] binder: send failed reply for transaction 217, target dead [ 78.570098] binder: 15962:15963 got new transaction with bad transaction stack, transaction 220 has target 15962:0 [ 78.570108] binder: 15962:15963 transaction failed 29201/-71, size 0-0 line 3031 [ 78.573125] binder: release 15962:15963 transaction 220 out, still active 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000029a000)={0x0, @in6={{0xa, 0x1, 0x1000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x46}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x101, 0xf800000000000000, 0xffffffffffffe124, 0x1, 0x1, 0x4f, 0xffffffffffffffd4, 0x4, 0x5, 0x2, 0x9, 0xb678, 0x43e, 0xfffffffffffffbff]}, &(0x7f0000550000)=0x108) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000043a000)={r1, 0x20, 0x3ff, 0x494}, &(0x7f0000cbb000-0x4)=0x10) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 78.573128] binder: undelivered TRANSACTION_COMPLETE [ 78.573135] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.573151] binder: send failed reply for transaction 220, target dead [ 78.582837] binder: 15964:15965 got new transaction with bad transaction stack, transaction 223 has target 15964:0 [ 78.582847] binder: 15964:15965 transaction failed 29201/-71, size 0-0 line 3031 [ 78.586271] binder: release 15964:15965 transaction 223 out, still active [ 78.586275] binder: undelivered TRANSACTION_COMPLETE [ 78.586282] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.586299] binder: send failed reply for transaction 223, target dead [ 78.598170] binder: 15940:15968 transaction failed 29189/-22, size 0-0 line 3004 [ 78.610595] binder: 15969:15970 got new transaction with bad transaction stack, transaction 227 has target 15969:0 [ 78.610604] binder: 15969:15970 transaction failed 29201/-71, size 0-0 line 3031 [ 78.613454] binder: release 15969:15970 transaction 227 out, still active [ 78.613458] binder: undelivered TRANSACTION_COMPLETE [ 78.613466] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.613507] binder: send failed reply for transaction 227, target dead [ 78.661396] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.672589] binder: release 15973:15974 transaction 231 out, still active [ 78.672597] binder: send failed reply for transaction 230 to 15973:15978 [ 78.672607] binder: undelivered TRANSACTION_COMPLETE [ 78.672618] binder: undelivered TRANSACTION_COMPLETE [ 78.672624] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.672638] binder: send failed reply for transaction 231, target dead 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x80000001) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0x0, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 78.714446] binder: 15966:15984 got new transaction with bad transaction stack, transaction 233 has target 15966:0 [ 78.714456] binder: 15966:15984 transaction failed 29201/-71, size 0-0 line 3031 [ 78.717332] binder: release 15966:15984 transaction 233 out, still active [ 78.717335] binder: undelivered TRANSACTION_COMPLETE [ 78.717347] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.717364] binder: send failed reply for transaction 233, target dead 2018/01/26 09:48:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair(0x10, 0x5, 0xfb, &(0x7f000013e000-0x8)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005ba000)={{{@in=@broadcast=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bb9000)=0xe8) bind$packet(r0, &(0x7f00005da000)={0x11, 0xf6, r1, 0x1, 0x8, 0x6, @random="bbd2fd5e4456", [0x0, 0x0]}, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1, 0x0}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x24, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d10000-0xb)={0x74, 0x2f2a, 0x0, 0x0, 0x1ff, 0x6, 0x4, 0x80, 0x0, 0x8, 0x66}, 0xb) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x0, 0x7) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000b52000)=[@in={0x2, 0x2, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x15}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x15}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0x1}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x8c) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000804, 0x4) epoll_create1(0x80000) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000f25000-0x14)={0x0, 0x276d, 0x1ff, 0x200, 0x2, 0x0}, &(0x7f0000469000)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00004b2000)={r2, 0x3}, &(0x7f0000542000-0x4)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r1, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00002c8000)={&(0x7f00001ae000-0x4c)=@bridge_setlink={0x28, 0x13, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r3, 0x0, 0x0}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x0, ""}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000048a000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) socketpair$packet(0x11, 0x1, 0x300, &(0x7f00003c2000-0x8)={0x0, 0x0}) recvmsg(r2, &(0x7f0000165000-0x38)={0x0, 0x2f1, &(0x7f000008b000)=[], 0x100000000000006a, &(0x7f000000c000)=""/0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x4, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000ff7000-0x44)={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x0, @rand_addr=0x81, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="f30527b0444fdfd7fd99344979878bfa"}) sync() [ 78.967569] binder: 15994:15995 got new transaction with bad transaction stack, transaction 236 has target 15994:0 [ 78.979861] binder: BINDER_SET_CONTEXT_MGR already set [ 78.985188] binder: 15991:16000 ioctl 40046207 0 returned -16 [ 78.998779] binder: 15994:15995 transaction failed 29201/-71, size 0-0 line 3031 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x5, &(0x7f0000001000-0x9)=[{0x100, 0x9, 0x2, 0xe8}, {0x1, 0x6, 0x8, 0x7fff}, {0x4, 0xeb, 0x0, 0x2}, {0x9, 0x2, 0x0, 0x2}, {0x401, 0x1d, 0x8, 0x8001}]}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x8000, 0x3) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 79.018882] binder: release 15994:15995 transaction 236 out, still active [ 79.018886] binder: undelivered TRANSACTION_COMPLETE [ 79.018894] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.018913] binder: send failed reply for transaction 236, target dead [ 79.036174] binder: 15991:16012 transaction failed 29189/-22, size 0-0 line 3004 [ 79.037875] binder: 16015:16019 got new transaction with bad transaction stack, transaction 240 has target 16015:0 [ 79.037885] binder: 16015:16019 transaction failed 29201/-71, size 0-0 line 3031 [ 79.040474] binder: release 16015:16019 transaction 240 out, still active [ 79.040477] binder: undelivered TRANSACTION_COMPLETE [ 79.040483] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.040499] binder: send failed reply for transaction 240, target dead [ 79.069021] binder: release 16022:16025 transaction 243 out, still active 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f0000ed6000)=0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000b52000)={0x0, 0xddec, 0x7, 0x2}, &(0x7f0000b52000)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000d2000-0x8)=@assoc_value={r5, 0x2000000}, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x24, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair(0x10, 0x5, 0xfb, &(0x7f000013e000-0x8)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005ba000)={{{@in=@broadcast=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bb9000)=0xe8) bind$packet(r0, &(0x7f00005da000)={0x11, 0xf6, r1, 0x1, 0x8, 0x6, @random="bbd2fd5e4456", [0x0, 0x0]}, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1, 0x0}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ff6000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r0, &(0x7f0000d97000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000)=0xc) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ff6000-0x4)=0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ff6000)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000ff7000-0x50)={{0x8, 0x0}, {0x2, 0x2}, 0x2, 0x4, 0x9, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000ff7000-0x8)='./file0\x00', &(0x7f0000798000)={0x40000000000, 0x4}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000112000-0x8)={0x80000000, 0x5, 0x5, 0xfffffffffffffff8, 0x3}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000817000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ff6000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000ff7000-0x74)="eb410cfe888269cf6aaa837122504aa20f6497a39ce9e4bb63dbc885cd7d5eb6be3725213b60e3cd9732799fd20f724d9f1818b145fec71384e97aa8bcdf9d485a99c0a0f05e2b2b4e849ada045d194f6d69ae5bef0fae3571bba510526c94cd2bc51770c4ec34a17ddc362b5000f2eea0394201", 0x74) write$selinux_create(r2, &(0x7f0000bbb000-0x3c)=@objname={'system_u:object_r:usb_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x30, 0x37, 0x20, './file0\x00'}, 0x3c) r3 = gettid() r4 = getpid() tgkill(r3, r4, 0xb) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(r4, &(0x7f0000ff8000-0x8)=&(0x7f0000ff8000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f00005b3000-0x8)=0x18) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000ff8000)=[{&(0x7f0000ff9000-0xa7)=""/167, 0xa7}, {&(0x7f0000ff9000-0x2e)=""/46, 0x2e}], 0x2) 2018/01/26 09:48:07 executing program 0: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ff6000)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000ff7000-0x4)=0x0, &(0x7f0000ff7000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f000053d000-0x4)={0x3, 0x0, 0x2}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000ff6000)={0x0, 0x0, 0x3, 0x5, 0x2, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00007e6000)={0x0, 0xffff}, &(0x7f00005de000-0x4)=0x8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f000089e000)=0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000ffa000)={0x77359400, 0x0}, 0x0) getpeername$unix(r0, &(0x7f0000ff8000)=@file={0x0, ""/4096}, &(0x7f0000eae000)=0x1002) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000ff7000)={r3, @in={{0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000ffb000)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000755000)={0x0}, &(0x7f0000ff7000-0x4)=0x4) 2018/01/26 09:48:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f00002b4000)={0x0}, 0x8}) [ 79.069025] binder: undelivered TRANSACTION_COMPLETE [ 79.069046] binder: send failed reply for transaction 243, target dead [ 79.132710] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 79.174294] binder: release 16031:16034 transaction 245 out, still active [ 79.184668] binder: undelivered TRANSACTION_COMPLETE [ 79.198214] binder: BINDER_SET_CONTEXT_MGR already set [ 79.198222] binder: 16044:16046 ioctl 40046207 0 returned -16 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000ef1000)=0x3) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000016b000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a4e000)=0xe8) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000059d000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000ff5000)=0x0) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x36, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000034000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000ecf000)=0x7) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000022d000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000ef1000)=0x3) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000016b000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a4e000)=0xe8) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 79.210272] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.210289] binder: 16044:16046 transaction failed 29189/-3, size 0-0 line 3127 [ 79.227173] binder: BINDER_SET_CONTEXT_MGR already set [ 79.227180] binder: 16049:16051 ioctl 40046207 0 returned -16 [ 79.229103] binder: 16049:16051 got new transaction with bad transaction stack, transaction 248 has target 16028:0 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000ff6000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ff6000-0x3)=0xc) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000ff6000-0x4)=r1) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) r2 = fcntl$getown(r0, 0x9) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x32, 0x200000000000004, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) ioctl$TCSETAF(r0, 0x5408, &(0x7f00004d2000)={0x8, 0x5, 0x7, 0x7, 0xf62, 0x8, 0x1c, 0xfa0e, 0x664, 0x20}) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) sendmsg(r0, &(0x7f0000e03000)={&(0x7f0000dc8000-0x20)=@pptp={0x18, 0x2, {0x0, @broadcast=0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, &(0x7f00002cb000)=[{&(0x7f0000d6b000-0x4c)="b07a6a1152abf8ed000fad955adc8d18390d251a441462aead2bbc9e0c1cefb09f582eeee9b626a503a1e8e39748952c14750c304ced5c73f342c3401486b6e47d9b8b08fa110b37970e0aaa", 0x4c}, {&(0x7f000033c000)="82aa0e355cf305b296fac322b2f4980a7b6dad461a008e6b88ad1e4e7592dcb70ae314ea411e765e6f55730bafbac5dffd2b08786f4f079c6dd3b4779835bfd684310ba06b73523e59be40e11067e65a321a88b95bf90a2d38e84e03aee24c68b638064ab0052c4a33127c9b899df3cf8d9e669a9dcfa31f7b85d2844bac420c059878bf1ab7b40ab13183610ffadc5d687f9dd8d0b5f87c4040bf2cfc63ed0d59ab2ab9ac435ef3c9ce8dd0c4dec121fc", 0xb1}, {&(0x7f000098d000)="ac16214ddbeaee061a976cb46f8b244cce620c8ac93303522c806a30ceb2337c478bcccdb3998297a951445c72b800dcd6a63484c42786b4384ea8fa8f0186fd761e12d5207e5d4c1bc60e06f8d30bfbe7d13659fbba396d8a35a51ce1d2ef3e25df9eca9bdfbb5b6fd3b9b400cf16cca177b4c5b2c7858ac4b35baa7e7e11e677cc3d757f7ca03c554ec80d3970d38e62ee73e738c25bd6eeb73cd5de1f4ef2152ae5c97541a373f78f7aa97bcf4cc62be80c422b94bb07584672af45f8cb2423e7d22b17e913cc36", 0xc9}], 0x3, &(0x7f00002b6000)=[{0x40, 0xff, 0x3, "6da6a4ff79101b059bbd5fe8436d5823eca2ba0635feb11daa8d018da5673e4e16d9fc4f70dadd556493c54ad515e343"}, {0xf0, 0x0, 0x8, "fe05628f7acd233f78276255c4e1ce37244c88974132563a46a872069b9636214a3d17606924e713fe8615884232f598bfa845fbc0a7c0d09601cdaa6dfe38a2bcb768ca0ec685d861b2f1c10c0b9567903689d2727aaf50e93044819d6ae27eabe68a8f5bb39ec2a26a27751a6e895b4b0d48f49900d1e4a898daf204293a0c51fb36611dd7e157c31e44a86a9d6c994aa4a2167a8771614a0b3b1354a5ac25a9ec28363b7e72fd27ef95d0db31b4962a90a12797bf6229869a86164283923d4537c6a4d9ac332dbeac32cb37b73e5f3a1bc1ba4217256179460f"}, {0xd8, 0x18a, 0x8, "8b3e745b1600402bea05f890af6ff2cff5871c23ac549c251067e12e4ee7c9e570e1b44f535f9f1521d7ae83510ed286d3bcb838421909cf92ffba865c83749f9ad5d81e7827fe17d676e1763a7a4e777d923db73358e636fbc425906d23bce1a4f1bd52d497568420857ea6a66fe5a5333a48ecd73d8f6e172031c439dbfff3e4df1e9c63c0c82936b03245692239adf8fa345b6a034bc0a30d1f7294fd2de7a8cb73aa1fd768233b0f2cd059827ce4e6e850972a40903bd4c59404de0fa1af2d8d421dfa793933"}, {0x108, 0x102, 0xd87, "06627152e67949f2162cec4a1a0da705ab6d8e0ec008bcc1d703f9277540662e7fc12d262b2698fc7797a9fa54fb4099950288f7353f3a1d42e448b94235ba44a8dc2b28382c318d4cb6c83842a5cc15eed17884f73b7eca421b1dcb9ba5a4307e6e312c9bc500330793b002f47960b8b153350f6b505fa3c9cadc988b3d90df5477d81cc264786e1ca1b99d8e568f8d270e353c9b8e8970658207ff2f59a84d4ecb3ca85f1f8be036203d09e5ab62aa419b1e5ea53c6dba5c7b0d552e2a8891a2fe56ff4a81ee49a6d34620c0f6814ae3ad35415862b6646e54a4edb83fcd41558cd6a1c6f7c7949a674902bc479b4158374b25a365fc"}, {0xa8, 0x113, 0x4, "e31bb1ef5d4b17033743d1d991256c20d1faad318791e7af2cbd2ec3a681f7b096c91a1103f323f4dadb7e385fabd7ea5e99bf76cb3b13f21f1a5b9e077bace9a7341cde2b62537d62bab769244f14830edfbf63bdd2b5e3752b62c93f532b31550bc13c73456e1bc851f85951d7fcb6266f8cd5e1c2ee4aaad6646dc0702b7ea2abd447eed0f4f29268d70098a6df94a3c221bbf527de"}, {0x1010, 0x117, 0xffffffff, "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"}, {0xb0, 0x1ff, 0xc1c9, "b74db15a0b5e413b72e5ebbe43f29e8637b570c93fd4b5553e6c7afbf2a18e1ca47272db7ec12d3c7c4a80a7c0bec96180c488985aee83c16d16e3dda26231043eff9c8c0cef2629b1fa0ae5dee535f0ad1b14bbebe3eea67044c526b188b56cbdee57777bae39a787060289f9b9555f19d309ab182c3ba7dbd55dec526767a0aded88f1165ce795d809fd76e26e93a91e1dcf273ff2445b5cf1"}], 0x1478, 0x80}, 0x800) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) r5 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f00009a8000/0x3000)=nil, 0x3000, 0x2, r5) syz_open_pts(r0, 0x20401) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r6 = dup(r1) setsockopt$inet6_tcp_int(r6, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r6, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r6, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000049a000-0xc)={0x0, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @rand_addr=0x0}, &(0x7f00001f1000-0x4)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000427000-0xc)={@loopback=0x7f000001, @loopback=0x7f000001, r1}, 0xc) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ff6000)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000ff7000-0x4)=0x0, &(0x7f0000ff7000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f000053d000-0x4)={0x3, 0x0, 0x2}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000ff6000)={0x0, 0x0, 0x3, 0x5, 0x2, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00007e6000)={0x0, 0xffff}, &(0x7f00005de000-0x4)=0x8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f000089e000)=0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000ffa000)={0x77359400, 0x0}, 0x0) getpeername$unix(r0, &(0x7f0000ff8000)=@file={0x0, ""/4096}, &(0x7f0000eae000)=0x1002) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000ff7000)={r3, @in={{0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000ffb000)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000755000)={0x0}, &(0x7f0000ff7000-0x4)=0x4) [ 79.229114] binder: 16049:16051 transaction failed 29201/-71, size 0-0 line 3031 [ 79.242771] binder: 16028:16042 got new transaction with bad transaction stack, transaction 250 has target 16028:0 [ 79.242783] binder: 16028:16042 transaction failed 29201/-71, size 0-0 line 3031 [ 79.255992] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 09:48:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000108000-0x15)='/dev/pktcdvd/control\x00', 0x800, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) unshare(0x28060400) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f000027b000)={0x0}, &(0x7f00006d4000-0x4)=0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000580000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000765000)=0x0, &(0x7f0000f57000)=0x4) nanosleep(&(0x7f0000582000-0x10)={0x77359400, 0x0}, &(0x7f00006e9000)={0x0, 0x0}) pselect6(0x40, &(0x7f00004f1000-0x40)={0x7fff, 0x7fffffff, 0xfffffffffffffffa, 0x2, 0x4, 0x7, 0x2, 0xff}, &(0x7f0000896000-0x40)={0x1000, 0x6, 0x800, 0x2, 0x5, 0x10001, 0x6, 0x7}, &(0x7f0000bfd000)={0x6, 0x40, 0xffffffff, 0x3, 0x7, 0x8, 0x5, 0x4}, &(0x7f000024c000-0x10)={0x0, 0x989680}, &(0x7f000079a000)={&(0x7f00003a9000)={0x7}, 0x8}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00001c7000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000a54000-0x50)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @loopback={0x0, 0x1}, 0x0, 0x8, 0x4, 0x100, 0x8001, 0x100, r7}) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={r5, r6}, &(0x7f0000041000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x36, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x5, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000ff6000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ae4000)=0xc) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000074000)={0x2, &(0x7f0000ff5000)=[{0x5, 0x0, 0x7, 0x7}, {0x5, 0xff00000000000000, 0xffff, 0xff}]}, 0x10) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000029a000)={0x0, @in6={{0xa, 0x1, 0x1000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x46}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x101, 0xf800000000000000, 0xffffffffffffe124, 0x1, 0x1, 0x4f, 0xffffffffffffffd4, 0x4, 0x5, 0x2, 0x9, 0xb678, 0x43e, 0xfffffffffffffbff]}, &(0x7f0000550000)=0x108) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000043a000)={r1, 0x20, 0x3ff, 0x494}, &(0x7f0000cbb000-0x4)=0x10) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r3, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x5, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000ff7000-0x1b)=@random={'security.', "6370757365743a2f7365637572697479f000"}, &(0x7f0000886000)='":#wlan0selfbdevnodev!eth1)#system.!system}\x00', 0x2c, 0x3) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0xffffffffffffffff, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00003e2000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000d7a000)=""/240) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) timer_getoverrun(r2) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00d103cf6d346b385d507835de2072a1574c6b36f80be51c08bcf4465639d420d21e51912f245b00f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac29a7d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d305194056f73cc3a89e94b", 0xe5}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x1}], 0x1, 0x1) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3f, &(0x7f0000b52000)=""/4096, &(0x7f0000b53000-0x4)=0x1000) 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000049a000-0xc)={0x0, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @rand_addr=0x0}, &(0x7f00001f1000-0x4)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000427000-0xc)={@loopback=0x7f000001, @loopback=0x7f000001, r1}, 0xc) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 79.256000] binder: 16055:16059 ioctl 40046207 0 returned -16 [ 79.256102] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.256117] binder: 16055:16059 transaction failed 29189/-3, size 0-0 line 3127 [ 79.256547] binder: BINDER_SET_CONTEXT_MGR already set [ 79.256553] binder: 16058:16060 ioctl 40046207 0 returned -16 [ 79.274979] binder: BINDER_SET_CONTEXT_MGR already set [ 79.274986] binder: 16063:16068 ioctl 40046207 0 returned -16 [ 79.275076] binder_alloc: 16028: binder_alloc_buf, no vma 2018/01/26 09:48:07 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f000010e000)={0x0, 0x9, 0x7, [0x100, 0x2, 0x8, 0x3, 0x3f, 0xd9e, 0x0]}, &(0x7f0000d92000-0x4)=0x16) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000ff6000)={r1, 0x7}, 0x8) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000ff8000-0x90)={0x8001, {{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ff6000)='/proc/self/net/pfkey\x00', 0x66600, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000595000)={0x1, &(0x7f0000ff7000-0x8)=[{0x0, 0x0}]}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000c7d000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f000093b000-0xc)={r4, 0x80000, r2}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000ecb000)={r3, 0x6, &(0x7f0000ff6000)=[0x0, 0x94, 0x4, 0x9, 0x25a3fe9c, 0x2], &(0x7f0000ff7000-0x8)=[0x0, 0x7f], 0x2, 0x1, 0xd27, &(0x7f0000ff7000-0x4)=[0x0], &(0x7f0000f6f000-0xc)=[0x7fff, 0x3, 0x1], 0x0}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0xfffffffffffffc46) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000ff8000-0x2b)={r1, 0x1, 0x14, "4b3ed14f9926c3852978d3eed559b0c9caa8f4eae7fdc522504b284aa49b4657be3fa7"}, 0x2b) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00006fe000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a71000)='/dev/hwrng\x00', 0x800, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000ff6000-0xb8)={0x0, 0x3f, 0x0, 0xffff, 0x9, 0xaf8, 0x7, 0x80000000, {0x0, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x5, 0x101, 0x7, 0xfffffffffffff55f}}, &(0x7f0000ee4000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00003a5000)={r1, 0x100, 0x3}, 0x8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r2, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r3 = dup(r2) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000ff6000-0x8)={0x0, 0x5}, &(0x7f00001c1000)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000223000)={r4, 0x10001, 0x0}, &(0x7f0000ff6000-0x4)=0xc) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f7e000-0x4)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b52000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b52000)="", 0x3e7, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x1, @loopback={0x0, 0x1}, 0xffffffffffffffda}, 0xfffffffffffffffa) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f00002b4000)={0x0}, 0x8}) [ 79.275092] binder: 16063:16068 transaction failed 29189/-3, size 0-0 line 3127 [ 79.316717] binder_alloc: 16028: binder_alloc_buf, no vma 2018/01/26 09:48:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x36, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 79.316736] binder: 16058:16070 transaction failed 29189/-3, size 0-0 line 3127 [ 79.331783] binder: BINDER_SET_CONTEXT_MGR already set [ 79.331793] binder: 16071:16075 ioctl 40046207 0 returned -16 [ 79.331905] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.331922] binder: 16071:16075 transaction failed 29189/-3, size 0-0 line 3127 [ 79.394229] binder: BINDER_SET_CONTEXT_MGR already set [ 79.394237] binder: 16086:16090 ioctl 40046207 0 returned -16 [ 79.395918] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.395939] binder: 16086:16090 transaction failed 29189/-3, size 0-0 line 3127 [ 79.401516] binder: BINDER_SET_CONTEXT_MGR already set [ 79.401523] binder: 16084:16096 ioctl 40046207 0 returned -16 [ 79.427035] binder: BINDER_SET_CONTEXT_MGR already set [ 79.427043] binder: 16102:16105 ioctl 40046207 0 returned -16 [ 79.427874] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.427892] binder: 16102:16105 transaction failed 29189/-3, size 0-0 line 3127 [ 79.443938] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.443959] binder: 16084:16107 transaction failed 29189/-3, size 0-0 line 3127 [ 79.450733] binder: BINDER_SET_CONTEXT_MGR already set [ 79.450741] binder: 16110:16116 ioctl 40046207 0 returned -16 [ 79.451250] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.451268] binder: 16110:16116 transaction failed 29189/-3, size 0-0 line 3127 [ 79.486489] binder: BINDER_SET_CONTEXT_MGR already set [ 79.486499] binder: 16120:16123 ioctl 40046207 0 returned -16 [ 79.510055] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.510073] binder: 16121:16125 transaction failed 29189/-3, size 0-0 line 3127 2018/01/26 09:48:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x78d9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000027f000)='/dev/vga_arbiter\x00', 0x200, 0x0) connect$l2tp(r1, &(0x7f0000b18000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x4, {0xa, 0x1, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}}}, 0x32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) kexec_load(0x5, 0x3, &(0x7f00000f9000-0x4c)=[{&(0x7f0000b60000)="33638a6aef0846", 0x7, 0x100000000, 0x8}, {&(0x7f00005d7000)="9508f4065e60d8b015eba8718b68919b6e112f1745416c62ebb048b06bc3f45d3d5a7277ec48c9f88d0d", 0x2a, 0x6, 0x7}, {&(0x7f0000e79000-0xa6)="26bcd73b5963e24ab58f136f3e8f883d9b85a1b4ff029b7b3de90156e770c8a3c5d363594cf64fbda6d3f5b2a256dc35f98bc1cb1ec1193069b7a787a6d616ef39b74a552b52e66b3a81344ad3beddd05a14ca16945ccc7025e1e303bbb871744c353bf5ed592fc143378d36c0757373926b360b2f8f5142eca55341013ed6d348179fefd0a24ed0816acea489735a79bddbf7aeb859ab1e4f447822101cb5f269747d87ab6b", 0xa6, 0x0, 0x7}], 0x280000) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000078f000)=[], 0x0, &(0x7f000000c000)=""/0, 0x0, 0x0}, 0xfffffffffffffffd) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f00009a7000-0x55)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000063e000-0x10)={0x0, 0x7530}, 0x10) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000676000)=@get={0x1, &(0x7f0000bfd000)=""/43, 0x3}) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x20, &(0x7f000072b000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f000096b000-0x4)=0x14) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000676000)=0x7fffffff, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00004e4000-0x11)='/dev/vga_arbiter\x00', 0x24800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000412000-0x5c)={{0xa, 0x2, 0xff, @loopback={0x0, 0x1}, 0x1ff}, {0xa, 0x0, 0x4, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x700}, 0x1}, 0xffffffffffffff2b, [0x6e, 0x80000000, 0x9, 0x0, 0x7, 0x7fff, 0xc8f9, 0x6]}, 0x5c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000eaa000-0x2)={r4, 0x3}) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r1) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r5, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0xe57, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) bind$netlink(r0, &(0x7f0000001000-0xc)={0x10, 0x0, 0x2, 0x80000}, 0xc) fdatasync(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000002000-0x78)={0x5, {0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x32a, 0x8, 0x200, 0xb4c, 0x401, 0x0, 0x0, 0xfff, 0x7}) r1 = getpgid(0xffffffffffffffff) ioprio_get$pid(0x3, r1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000001000-0x24)={0x1, 0x0, 0x3, 0x7e3f, 0x1000000000, 0x3, 0x7, 0x10001, 0x20, 0x9, 0xf3, 0xf5}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000003000-0x4)=0x1, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000004000-0x10)={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000004000)='/selinux/load\x00', 0x2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000005000)=""/205) finit_module(r2, &(0x7f0000005000-0x1e)='/selinux/commit_pending_bools\x00', 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000007000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000007000)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000009000-0x38)={&(0x7f0000001000-0x6)=@hci={0x1f, 0xfffffffffffff001, 0x3}, 0x6, &(0x7f0000006000-0x50)=[{&(0x7f0000005000-0x1000)="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", 0x1000}, {&(0x7f0000001000)="a4b9f4d7cbcaca0039e5c34086a81bfdb6231288cd4391a69025545aaa758fba7af5e6dff543012a08e41a70494ff0ed14accbe2c23ad7379d371bbe7f180c994e897a2bd70267f10a00135dcb1a84d61b01d834607899fe33474121d273265a6a05ff2a634099defde23387ec198f049511726170f68a75612501f50951ce01da236d5543e4ccb2799e3e2b1e38d43291636d6f8c0116a4ddf86c7471b78c6e9c0d46712bf564cf8258722ed07e48afbc3bb570824dcf", 0xb7}, {&(0x7f0000009000-0x67)="0397b9b79bca89fa13a6bc158d53450bcbe0a1ccfd1b077877d7e5f2d308e4aceedbd3b82f1cf0da5e1a2072f2487abfda4b36118f3989dbd8c7ed6b0367c49753899bcc50a7d041bde5e0b21f68ecff55ebd0f183f3f83f40b8953f7fbaf28532ef383a5522a1", 0x67}, {&(0x7f0000009000-0xaf)="ee1e9d20a6b91d9812e90a8af08ffa9a4e1de05f6eebb77da9480ffccc8f97b467ed9b485b6f183e3142239c37edc59f78ea64f9de504e2286e7190865b75b4b0ed4a6a27db1ad7969e7f45b5b1b4e078eef88c43788cd321eb2e100da3029fc2c069808b71b988f21cfb07423f2d61c26fb4a0efcad242521a2cc62f6d0296c0ff8ed2d54a68689c30f9ebef9c483c8f811d1083004dc60444ba5a402839e3b349d2e635f5fda2032da5fe1dcf4f0", 0xaf}, {&(0x7f0000005000-0x78)="b968234820a86e33c580d97459d3ac65603a504955f85282bf5e8cc4d2828f93a22e54a73f0c992388cdeae114f72ad9d3195d34a4cf54a9ed04b56c0fc0ebe9183cb0ffb4875cd2e1faa770a3b30d2be05d721ba0e6825fee6f48721b58b998b56b0098ac6101faab0661693d23c578d264f36b1a59b589", 0x78}], 0x5, &(0x7f0000002000)=[{0x100, 0x112, 0x4, "ff843c2beaa2f94d05469870e64bf75eeb71632f50180d6c286e4fc6ea9e5d4656eca860d1132875e2deea94a33ab267c63447c51721c4b4e7189cfa87778ae4e01c3a59162980833f26f9d62dda90cf5cb4511abfa07b01f18ec33a02fe93a380aa2b99be21bf087271b7ac159b8cf9ff60369238b52e61b543a030a3c6a9a6691fa42817b18e9ab5ac8e18fa35db25b76cc5481e1deca8ec579c6a7d77232e0f1c45b15f11eadd11e2f57d1c7158b07b35fc5f2e718dd0f9fe2dc96850aa1942bf55cbb7caba08ae1bbc00d3aac6ed7a79875ffc07b415a13890c1e17a0ee13aba961894e3ec7c8fd2353dd9"}, {0x48, 0x19f, 0x2, "77c749fcb724aed7abb0f06559a8fc406cba77c15dd9da34a327e87d405ae2a64d0a0e84d50a36a57e1279d9b67a99f89474cc07cfbcca"}, {0x1010, 0x109, 0x80000001, "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"}, {0x50, 0xee3b7f3fe5ae05, 0x7, "3df064467d9574b057e6f2e93c0908799bfa43bcd18962f0704d232c334329897391cec97c7fe33dbfdb011b5db502fb267115f2cc3376acdcf465ee8824"}], 0x11a8, 0x4000}, 0x40) 2018/01/26 09:48:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x3f, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f000057d000-0x4)=0x3, 0xffffffffffffffc9) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000ff6000)=0x2e4, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000ff6000-0x8)={0x0, 0x0}, &(0x7f0000ff5000)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000ff5000)={r2, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000ff5000)=0x8c) [ 79.523195] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.523214] binder: 16120:16126 transaction failed 29189/-3, size 0-0 line 3127 [ 79.656962] binder_alloc: 16028: binder_alloc_buf, no vma 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000097000-0x15)='/dev/pktcdvd/control\x00', 0x201c2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000ff6000)={{0x3ff, 0x0}, {0x0, 0x9000000000000}, 0x5eaf, 0x1, 0x100, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x3f, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f000010e000)={0x0, 0x9, 0x7, [0x100, 0x2, 0x8, 0x3, 0x3f, 0xd9e, 0x0]}, &(0x7f0000d92000-0x4)=0x16) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000ff6000)={r1, 0x7}, 0x8) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000ff8000-0x90)={0x8001, {{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ff6000)='/proc/self/net/pfkey\x00', 0x66600, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000595000)={0x1, &(0x7f0000ff7000-0x8)=[{0x0, 0x0}]}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000c7d000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f000093b000-0xc)={r4, 0x80000, r2}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000ecb000)={r3, 0x6, &(0x7f0000ff6000)=[0x0, 0x94, 0x4, 0x9, 0x25a3fe9c, 0x2], &(0x7f0000ff7000-0x8)=[0x0, 0x7f], 0x2, 0x1, 0xd27, &(0x7f0000ff7000-0x4)=[0x0], &(0x7f0000f6f000-0xc)=[0x7fff, 0x3, 0x1], 0x0}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0xfffffffffffffc46) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000ff8000-0x2b)={r1, 0x1, 0x14, "4b3ed14f9926c3852978d3eed559b0c9caa8f4eae7fdc522504b284aa49b4657be3fa7"}, 0x2b) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00006fe000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/26 09:48:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)={0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a71000)=0x0) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001e8000)=0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10)={0x0, 0x0}, &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1)="", 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[], 0x0, 0x0}], 0x1, 0x1) [ 79.656982] binder: 16132:16143 transaction failed 29189/-3, size 0-0 line 3127 [ 79.660130] binder: BINDER_SET_CONTEXT_MGR already set [ 79.660136] binder: 16136:16145 ioctl 40046207 0 returned -16 [ 79.680829] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.680853] binder: 16148:16151 transaction failed 29189/-3, size 0-0 line 3127 [ 79.692570] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.692589] binder: 16136:16156 transaction failed 29189/-3, size 0-0 line 3127 [ 79.696029] binder: BINDER_SET_CONTEXT_MGR already set [ 79.696037] binder: 16158:16161 ioctl 40046207 0 returned -16 [ 79.703088] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.703109] binder: 16158:16161 transaction failed 29189/-3, size 0-0 line 3127 [ 79.724963] binder: BINDER_SET_CONTEXT_MGR already set [ 79.724970] binder: 16166:16168 ioctl 40046207 0 returned -16 [ 79.735813] binder: BINDER_SET_CONTEXT_MGR already set [ 79.735820] binder: 16165:16167 ioctl 40046207 0 returned -16 [ 79.739223] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.739241] binder: 16165:16167 transaction failed 29189/-3, size 0-0 line 3127 [ 79.783327] binder_alloc: 16028: binder_alloc_buf, no vma 2018/01/26 09:48:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [0xffffffffffffffff]}], 0x1, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000f24000)={0x0, 0x0}) timerfd_settime(r2, 0x2000001, &(0x7f0000ee7000-0x20)={{r3, r4+30000000}, {r3, 0x0}}, &(0x7f0000446000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000486000-0x8)=0x5, 0x8) recvmsg(r1, &(0x7f0000d9a000-0x38)={0x0, 0x0, &(0x7f000008b000)=[], 0x100000000000003a, &(0x7f000000c000)=""/0, 0xfc13, 0x2}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={r3, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:08 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x1, 0x121180) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001000-0x4)=0x0, &(0x7f0000fb8000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x3) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000ff6000)=""/0, &(0x7f0000ada000)=0x0) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x2, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x3f, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000ff5000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000ff6000)=0x2e4, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000ff6000-0x8)={0x0, 0x0}, &(0x7f0000ff5000)=0x8) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000ff5000)={r2, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000ff5000)=0x8c) 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000ed0000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f0000d76000-0x40)=[{&(0x7f0000c62000)=""/4096, 0x1000}, {&(0x7f0000ca5000-0xd2)=""/210, 0xd2}, {&(0x7f0000e37000)=""/17, 0x11}, {&(0x7f00003c8000)=""/61, 0x3d}], 0x4, &(0x7f0000656000-0x89)=""/137, 0x89, 0x0}, 0x0) 2018/01/26 09:48:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00001d2000-0x8)='./file0\x00', 0x81) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000a6e000-0xc)={@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000b62000-0x4)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000443000)={@common='teql0\x00', r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r1, &(0x7f0000e26000)="2d01000000e6000000005ca73d9fe3b5039bab0097532da5", 0x18, 0x0, &(0x7f0000dc9000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [0x0, 0x0]}, 0x14) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000dad000-0x10)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TTUNGETFILTER(r4, 0x801054db, &(0x7f0000627000-0x1000)=""/4096) mlockall(0x2) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 79.783348] binder: 16166:16175 transaction failed 29189/-3, size 0-0 line 3127 [ 79.845119] binder: send failed reply for transaction 245, target dead [ 79.853223] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.860964] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.866495] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.868889] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000b05000)='o', 0x1, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000050f000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000d67000-0x8)={0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000f0d000)={@broadcast=0x0, @multicast1=0x0, 0x0}, &(0x7f000039f000-0x4)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000085a000-0xe8)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bbf000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001000-0xe8)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x3, 0x7e7, 0x1, 0x8, 0x2, 0x20, 0x80, 0x7f, r1, r2}, {0x8, 0x7, 0x3632, 0x87, 0xfffffffffffffff9, 0xfff, 0xac9, 0x3}, {0x38fd8e1e, 0x0, 0x0, 0x452c}, 0x3, 0x8, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast=0xffffffff, 0x1, 0x32}, 0x2, @in=@rand_addr=0x7ff, 0x0, 0x3, 0x3, 0x800, 0x152b0000000000, 0x5, 0x0}}, 0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={@generic="c2fe438927d1ec08be83b7207e84827c", @ifru_flags=0x5302}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002000-0x9)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000001000-0x8)=0x8, 0x8) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000003000-0x3dd1)={'security\x00', 0x1, 0x4, 0x3d71, [0x7f, 0x8000, 0x1dd5, 0x10001, 0x5], [0x3, 0x2, 0x14b, 0x5, 0x9], 0x10, &(0x7f0000003000-0x10)={0x0, 0x0}, [{{{@multicast2=0xe0000002, @broadcast=0xffffffff, 0xff, 0xff, @generic="12a0da3d9cfdba7d16650102a02ffb36", @generic="757ff2665c7f3217cce9fd3e5e07c3b2", {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xa9, 0x1, 0x56}, 0x1, 0x13e0, 0x14ca, 0x35, {0x3, 0x5}, [{0x1020, "8e0e2919e6c714aef96be80eb437a92dcb6855d323d2dc13302888c288", 0x5ed65090, "db8963428d6de583e7c4b27db2be8ef49bde5294960b8068aed884206157645d99a350209165721207be9e4c788e424ecac49158e966e0eaaafa2e37eaf071d6551e0f4271a8cf187d2f703be514927ad4fe928b4b1b486fda793ac679bf87893c673c6368fca7935785a81b86561c5a89373f7b9e531309e0561f55e42d859abf870f9df4fbb67890a5960eb213ce0e012db7ae7d10b456294e2e61520f36dc72eb80c3d9562c19e660e8254f1a2230285c29ebbf4cf3c075db44b326419b090f21ba1bbc95ae962c9664f23df1c1b8d7d903c3e6ed6c93e9b9e59638552ba78548da0901d2e59ed84aeebab8b14954cb6aa04129a0eb60ab75041d3b75268a8f683e6442f31fa868166ae00b01ca1a63b97fbb9659c2ae6ce13f399e42ddfbe81786cf7d6a560063b0133f13f262aed971561ca85463b69c2f908b553612fa6e494914d54ee779a9fa7ca36ad18ac101a39786f33497871c3e60e509ef6617f2e18558135021d5d3d2d83880fad3ef6201fb6bbd3532e53301d7a5e7a5d2a1e233f9bf381d07e4cfa4dd09ee0d14c765baf4a7733a6ee8bf984e4320bbd4675951b79c3302a8c836f10f46f553043d121a487fbb91a4844abfa567406a2ada9741ad5284736296201b47ca723f9b461ffd5c2d3d500df1a9cd70a18e3bab3ecf3ddb066315e8a2efc24c9a0bb8479103057af2d6ead023fde00ea0eb29bc17bf5b7902a4380179155075db591ca7e10d30cc3e03e2a52be63a30c4911255d81aca5d53d957bc3a66ca7a3e7bbb7de105e75a8b01f589d28e72da2c25da0711a7455a65d1dffd9181058464ae2712262a97d10b9cf00e16ae1eae17a29278654a64e624f3d8b87e4bcebb13a497e401f545761c6494b8cfae57f33a90e5576c93b3218dd130483aa4d14e4f342af39c66748ce2251908b1defddcc7fa60e469e674fd664f4352ec182fd43457b236a866ebdd03b87c72824271b789067cdd41a54e7db07c6224fb09f3db2bbd5dc5b412d6bc4ca5987d42ec3f712cf8f8da5bce2f9b5029f3c99e973fdc22b45d49ad6b87eb5816186b12f11e249fa94194ba7c83c854480203b684e6055ebb0d59e474e947394f98f977555a049b1cf525b602c84c89d4b278d1c14a2d6db552cb2cb11e8d444046eba6f34c60b293a7620229dff15b5ee693621c7d2c92de6f2fd37c48868306bc40a9078622c0d9d5b1a28f68fb14ffbc99762c18ffba196dacdb1fca207c7db58724608b0759568193cd197c15f486ba941c80c197072cf29331ddead0c9e135e6e469355ca386472462e5af8861310d93b2ac5aa146988421e60c7dfaf09ae7ca6f2a7915dd23bdc9298aec43f154d95245551aaa3883d96c4042a0b93be6ae4857fde198c2d090ffa7e80b96f56aad7d4ce7c949603a0cc03f16c3d70f8b98dc8837e683fcde88c4a2ff23231f5bbee1a20300641af3ae7ea6d4c50384e5ed864e76294d46c8e5e8f025213bccacb12e1a929c2577dab73b45b45ff589d9e1a4219e31ebbca961919a698d24f15a29e9db6940e66c6adb386608a4d2c7452e0a91432b1d17bb9a87ef2ef54b2bbc073655fa7c617bdd80b6bfd25ba6fff6a4e780b15cdd90cc6e45c7a57c1df9d43af0eeefdac98315d36398b4730816e9108c238e5aeebde133043b77374fa1a9dfc668e9ee990bca986d4ef9b7bb25523f2341d05b7243d810ea6c4bf3a2eec95265163ee58cb97507bfbe6f0108a8850da8009d49543a1dda46fff4642d8b6c2ee8ed294b30cdecc32c651b74eebb0f725e5c4ac39144c01f76a6b414292752de84f4b80c1adbae15312a8ddc27dc9bce412313bb8a6a97d0f023f452757fe609e9904151540ba38d9afbc7e26de16429f31b5904c81d70b51309754faf1f7da2803b617a54a019f20ffd2155e63b09c53cdaf98edf90adff95b5e9d0f91bc949e58e774889d825157efbd8752f9ac3b57e8bb0fe187d710237b9871fe57bb16e75a8cbdeca93e3979bf7e533c15e3fc0e1e43a508d5c2a78d68c78a6ce66fd7d73a9a0baedcd2c11068083febb565de988cdef0caf72e17c3afcb7f5cbbae1ebb6505ad0158cb085eb0a376b6f20a45177c6a1453fe33b09d5d83b84f58f62192929c13550812cb10c23eac42d0fc05313522286eeb71411251214a4d51fc9a2240ab6eb0929c9e2058224af05c30e1d4dae6ecde93e98773ebc17d1cd7bb5ed14973dbef30d44031132c4ae8e5c2d2f61e672d914249ba23482065dd7d78ee276dbe5a364022a30f529cc4c5f3ab75a2bb722e4763329dd940e21457441f9ea683fdb5ea8d23f2ca5697aec55de0850975bb8c58f51be0d06a41d1341dc4cf2d01127d576f335ac48ec187da9be5d559014dab69a73f4753205840a251b88299b4a2421bcf83763dede314b6d1495070fb6d4bdd2a867b4003576ce29785d933f824a50888cf3973b0d585ef5c25ec86c67ad3760e2faf64d91865565445a943f67a06ac955b69ea28a4c439bdfa0ee3cb883b0f232b531ec835b3965d7ee87bbfc40bc92b94f815f1fcacfc9275fece4f566292fe23ab44f5175c69dcf1674338b94fb875f465836aebd1f7953885eeeb1e092f810e88a030596f23afa8a161c8b31a3a601e8c80750f6f519e64aed3ec09e76e82422a0d6aa3df674b1183b4fe4c33cc025485b0822eb4822100f3b0d7cfa65c93fa32f509abcf06b3be8f1e1d8ad0cd032df5908cd878bf5a606400d2915f0f3e6a848b6bd3cc79c2661dd91f28e2f57b3660472545a6a452ee1c40394d804b16af7cc19c8af2a66365d7b9686ff5d96f8bee6afd8aaa669ed2edc1fef8162cdf98e2a51c32d3dd9a631d471374677ca447a95ed33c547b3a5043c7879b72dc6f3cd8c2b1a301aaa985d1397dc73707d1f43bcb27081178fc2c07754ab08ef2f73358a7e17159689ab13163d3ec57bb5e06826be86bde5e641208e3ad5d1d3dec2681b317232b3afdc6cb287afe7301325c2f4aeedc9c401fa4d9e683f12205abb120edb1cf4cb15e2896ff7f5aba8a0b1072723fa5943ba82cf66e9bdb2ad7b599d87171ff4b9c3d7fe23d24b3aee730d43b46115494a4d996a4ad853b2c1316cd514db0f2b5e6384887c1bf3cd79f31d169d72830a9b0254808d95b4d705628191fa13949acfac3f194903dff381d7f0979d3693b404096e87f5d64e4b8eaf5505c48bcdecec82b5dffeed46c4f75503a6d6176940d6fc36fcc1e84beee0ebbfb9ac9a713dea633bce9f869d9a7426fe57ab6b5c659d2e409f6cca6c9a4519e5d343f1283fab8fed56fffa9ffb917c220b7198d7760a58e8747f7dea76265db0d6b5b745dc222941d65ff5db3f9a2894600aa57db5cd924fcba96a0b60da63c956ae770a272f9bf081099aa9fba5d9aa3c722ea5ebbef374cf6d645d1fdb8ada65567999c1f712d0f703f27eb8390dc1b1d335d53f6e0c4c36ecd5b2dd32ff5b9846baf8088344d8af87d60af659c21a34dd64d2044445ad71c63cb969b59e15beec47b0797e4d1b8fcf7159f0972aaadc991dfedcbcdfbc7a27c6fe45bcc07a20e838f2842040f26068cd845a1cc18fae0e921258e29289f5ed280237b8ddfd4b5c945331ddfc5e148eb4777a459351c42c00f5db83194400d2345fa24cde1dca70741a87ccd48cbb35f2caca313ed8cb831c9ccfa898bec975ee7b01c98a0b4d5c35c5154fb189bde5b6c361416bd846c3e87d8d8fc82e7d4fd9ac09068ef6218b25d5986065ef636286dd7cddf9a685081ff921b7f25c68d6b4a3992b180f34bb89433b7569068b0cab2ad9d4bbf30023dd367fa739325f31d8c35296fc76dce2456888ee4a79febd9cbde3f157c150463483bd0a7e927617c6e82a5014d52810f9589e1a27cf1d69bce8610a66a63de1e7a1f333001c82798d24076bf0c732f4b911b8a093dde04d7300edb9ca032f82fd813cd1b9ab3c38bc80468c8896a38a1dbe71bb661a0510e0f57c2ad6f49bbee09eee33317deba9428b7dddc7254cd7c19ac488c3338d03b228e0793d76bb0104281e913b5c8192843e597a86439c57500888525e77bcb6bcb37356cc30e164c5769b1286ae4ba531a5a44d002584e0352668f0cb96ce04ed73212f05e6a28ce88b73c6a0055b2dcf202395c3cdea77315ea4b1a5485b6276b035154e2481cd92ff4e945edd8609f62251378592a9b868b958a9e90f92540c185e7b2b5c808260fb351a3e152268c9fc9746bbae70c8505cb359fa009b11c0c28d04fa514757b5e517918ff63c82c7dbc3ece4ccfdb67ba8980504f81f74f7455e142da19b67c9f980c4eccac9b5005133ec14624ae97a050481a968321243b2d909a6bd74075c2202b769d7e142ca4aab1b4094e0e36f5a1c3b4fc14d5d023322a787a3bf6ad69d56a3443d5b5402f8e4a1f45d5ef3f389495f839bc44f16df5a1a0935522f69a9ea1adb5365e4b9f36c5154188d76b8f75398709a3cff1daceb389fc55285d611aa8134cb6903648fc0004dd05616a7705748535b3b4df79952616d8f51061300073c6f6ebe4ade7779bf209c80b692a84fff1d1bc33dcc5863bd0fcb559235f54921d7675f6b01151eed714de8a658f85b9b0aa178a84545da90ed40b78fc17213a5b562d650b559eda6142f0cd09af15b80981a03e8ada0b07fe0e5efdbecfa50d2386429f83849dc5a8a0984e1cf52e7cb3dea886573e3428bad65a87f6d380f82132080f8fb6e03eddecfce6d60fb3d2a8686409e2a2c5512c17d76c884628e1d58d13ada82099f126fba97787b8e3eea81248bce54f0b1aea523df5c74305a020ac0d481cf5c6be3b1acc070edda655135e16446da361e4245f0d76d14a62a85165c447f8b9a89b25dec9c13209a996db5c2cf1b2b4508fd7608d15a3fc60192a4d5edbf8b5013d9a40ae6a20f9c5366b42c257bfe52ce46ef0201462c2ebad6ad69c1f4e271a664e294ac8ab89de515b7a56c4cdf224524d313dad031cbbffca065ce48c968db9d5ed7b8e8ee6523b8ee11c54d00ea6f3ccb95fc9fd0e885b95e1f23fa0afed83511899d589445a339e1cab8361096c408b60b8be4dd056c26e15f5251620a2afe391e2df8db20910a82af3141bb8972fe3f25268352778ccc21c3090779ee1839debf34f1701d68921577463220e01eccb40b216172fc522ab44ada8b1f88dcc610f00d5a6279b2046b3cd31734a96512a125b31d93f092ce2817232e9085525fd726d346c730e27a4763ba47b2ae4211551c5672b1773eddab1016d2130fe6fc5ad4fcc5e48825852e6924039ee66b1c0ef73a4f4bfab72eba1a10df6f6aa3235e7d78b93d7fc72a71ea69dea0cda946293419829c621f1ae120a8d0db9f2392f42a2a814189131257dcb3c6e11bc9492cafddcce9f6a29327ac5ba3c479a98fd84c4b8f471fe8a3d4215cf0526dbbe800671bd34dde667aa14135ba4c2f8336559fb1e4dc39a077c7590898973c9b173ef0aeee6befc5466d59ffe69aa930872d4bf5c174aef825e624abb6a82a6df91ece9a21ecc0f0a1f63f6f7e7cfc3aa8d639edf1b35ac790143db04d6f62138a2bb96f7a9271fcc524ec35cf85379743e16f931418d01b185568b54e5be59814dc4dee58a9554e3a4c823e3c5052c0b2cbed95d200ef62bf0236df6ac2c4be8b203a3171f53e8b2f4602eaf4600aca1dc8cf67282ab04bed0f1e60eb168dade91335ea8c606805de87b56af479297f0732c6483a1c35cfd4dcb13cd315e49c999bc5856947431cb7e8459b3f17f5f56e541251ed683c"}, {0xb1, "4d275af593bf9991d99277be01f5960c96153f61f9d19e7cadf2d47033", 0xfff, "53574a3070e3af9c3541dc96a1d20072daf9eff7d99c548ea8b45732a6ffd00ae5fb1c2aeac5aafa675644091eb5b4805f7e82bc262f678ffad26baf757f154104f1b3621dcaf72080a8ef678e125799604ca858b24b9b237c7f75562df059f836d66908f3e68ba59c3cdb5e702f3d741f77d3113f5f7611e863b192b45e1d6e1e75bded4f07ce5319170adcc1fef39f8a"}, {0x103, "9493eba843f76c191a1e9dc61c6b427cecfa19bd7f7304334df17168ec", 0x100000001, "4c4241fc1da2bb3ad5238838f9b15a137ae5f2844fe3fce0f76e978a69f16dc94a210c493a25831104658f629de71f6b1671d02c96c599b61e170993d0f7862c66817675b50d0a3ffad3962f8e37904dd63fc9dd69b40024478174b1b16cc3ae8d1e8f5d83edcabc06a9cdc3c393f722cf60b3d66b797a99be4867ba32e5929d3c77a1f97123706860e69d8f740dce0a9b13a16ac1af99785a916546fa0398974702f8ff254ff2b19f3d56471d3a616aead9743cc89a897f63215ec9679484ca826087151859aa6d3e456d322c1f66b2dfa22111315b5717f5aeaadf026295e32e54ba"}, {0xe9, "0629b588eba82705e76d68e3a1e8a056350afddbd69004ca34d6d5dcba", 0x0, "d2fe4025080b7c2fce807e4d6f636d06c3b95b39e9131a15b1c45d4714a18801319f0980a87c9c0f4d0b01a944efa0dad3cdb78d4e320c7b35d1bb42247282ca530196f339fc64b31ceb6aeedf8c1271c11bd04bc3076529877b9cf34d5199bf0d06ddf9f5887b96d2bacf7478e3381019fbba2b00f04ee11d880eccff39142b98dbde7933db29a9d28de15a6af40ee50dd87200a702ec2ba8a0b5475302f0c28a0148f69639da74dda4ca009829eca09717f39bace315c21d80740dd280859c8e0c247361fbda0f8b"}, {0x2e, "98b929effa6b9c99bc19381e8f18a126725f49cb57cc75d623e23ed396", 0x56, "3b36434a8167e2be109241998c0b"}, {0x4a, "bc1ca96670b2344ceabf1cf6804fda115db636f06f2ec283de9bbc8ed9", 0x100000001, "24f272c350e69f71042ec632f429eb730928682a9f6f605be357bfc7d14bcda611af83c22daa11f792b1"}, {0x3b, "351c49a6f418080daa1a6236faf91582a6d7814a1c0bcb80ef2e480857", 0xabb, "f4f4f78ae79e9f7c98a24b6b06bfb2491fd365b5572b352babd6ff"}]}, {0xea, "204843ee65a9efe27b3d66a990f4d82cf486096a48774972373cb2b4b9", 0x1ff, "542f956e5ada8692ceb37675f3ebed886c3ecd03493e0a06ff3852b185f0603a01190f8d8ae0aa68c6b54cbff9d950bfeabada309dc7786eba2940cb96081c747b629029555871a5b56b4057fbd82ccb19f02dd2d03650a074e9d1394964436a8a35c6bc0d3d7c1de9d01250d4b539f3d38387d6d21523bf70327edf1ba324571055faf0d6ed37dc975457aa110980d47a5e36b9e7c4910521a382cc312b993627dbc990f1f5bc5fb24c182772667871172025ef5533fe95c1ec330e7952df22772f7aa76018174c03cd"}}, {{{@empty=0x0, @broadcast=0xffffffff, 0x0, 0xffffff00, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @generic="6e8c4446e880ab2dcb1fe5d264135e95", {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5e, 0x1, 0x38}, 0x0, 0x1338, 0x1453, 0xa, {0x8, 0x3f}, [{0x61, "e1b0d0fe84c0eb269c97d6a8e2c272e62fa90bdf92e05a5549e627e7ff", 0xfffffffffffffbff, "2c52b0ad45db78935eb1482f07e49696a045601cf9a81cf00555ba7788c1cb08abac51b57f3af743984c7b8375507613fdfd94792f3259a7f99655085f2af2fa28"}, {0x95, "da544ba83805fd43c861ac9d6de7aae26335271a38b9437912673c53a2", 0x1, "046df876d3d7cfb6f14890b776b6daeda82badcee10f9c050e22064a431338b17fc001c0e5dea6d2ca397f937c5d40da554203c00cf58ad2433599407bbc7a332855b47b6996bf539b37553d7a327be11f54011c0a08779e98e03cddad15aa12ce2f0132403a6b7311698504ea8eeee8e49c6611d1"}, {0x4b, "c8a72b82a204c629cad1457da062191e5826a17ec8cc0254b8c1d228da", 0x32, "61644ea91b7c8581e6e4f6df89a49c22e4818e2d4da3784033410c4e61f475f58a5382a383d30830ed7cad"}, {0x1020, "eb1fb9c878014a9785cd35fa41d64dfe17a307b912030fc04ca1c75904", 0x1c0000000000, "c417f32f3d0f5e69c911e9493b0cb88e98bfed2584d10d40691fbcfd0dbf353ac6a4e1e1470c2034fa5bd2c57d33c3186ac5157de031e3513f01f689d21ae64dd53e31343ec4fa49f7214ad48d6c342e1131d95717b707935218aff87634a33ec42d7758fe35c7ebedd25e30070a24709d7e074e34317bdd160af85d039d6bde1163f0ed654fb3be5333e1b47f92ef070030a0333379247adfac3f903d0e5bd111a02a2cb932d1a6629e0e2129f59721398b25e58770548a45fbbd1ff629aded7859119ae429785e4d9b6bdaf29bf9b7366b828011f206f1adea6459bf87b3da5c1a6483d82f713d98e02daec2c89c8aebe87a4090adc7da9b2c97e53e8b074499b065b2aa8e3c9a31956bc099f3480b7a765f223622a6f5090e710543e328a993ed7a65ae469d16eb1670717c47b778d31320655797833331f7f04cf5b08c6b12011b1ddc0a23de79d93d956327668f85db3b75fc9f7197b7decb2d37c2934f66cb75526a7ff45a365ff89d5d7ba9a8abbda34a2fceecb9347d89d4e7e1f8cc9c4b4ce85dd03789ff1c553c713b4eea9f1323d6cc0b217df8d2c75d12c06c444903f1ad29bd4b68b079ecba4cb7418427c51c93c279866cddb7dc8853a4d6b6763ba730edfe0eed6a82d96b35a13b7c1d798b52d4509c89c7d3a05569e183dd549c7d5400c699ce98d86d075d85b07eaba29705e6f24dc963395ef57bc41c544bbd105409e4d04820a071c247a3d9b05f1635e6998e851c23d5328da41b8176581eef9f55782ff556fd8467909665cb2d66f6ab522af356a703018f2b44c0b9c36a98ee9a51d85a81300e9353aec2907bd34dbde5350e66998c2d5565db432aa6780a79855b093aa9a0280739f0512c0f54f0fa2477bf5d7af25c055d92b6704d8d9feb575002e61507430707aafa6292b2c82d1a4022778af5a6285657882429d047629bc754189f42a654c947ee7e76225a086530519e805f7163eef0f506b29e1e1ac98a64733e3be8e393781574357e89dc6168dc25f763dfdc09a17f4ddf0e67f0a2880fefbda8881fe858e8830ef5cfb1ce2441797ad769aa15b957c21ed6ce5138b798b067715a87ea12e656e071a297c45d6e1643dec067ebf591520971b01a1011edd3b88fb025289ed3b8e2da9e00925b69dcdfbb5643ee4370c2e592eacedbc3678b36d4b1c357c7ceaba13daa289c622b748618154d1f5bf25c40e086f84c21d03ffc044cc748aee7bda1059a419c2b5012491ba56beb6199e41a89b99e40c18eab73ea64d84c140b89836df3f683da8433de055338b794160d64aecfa5373d1f9b50c88b0a4fbce70dff644643020c5e0bf76b6fdd175c975449eb75c587598b87fd78fdcede9898a1c355e84de8b64499f1c80fcfc58b45b1c08166e6ad99f2db414c9f5118588b1f6003e434fcc30607c285069bdf549c3287ffa3f96e198df1f36792b562563d7e873a6a91cabe24756744faae2cc1c95c9188a19096d24ad9981c49f5092771aecc94c3856bad9bb4a658e51906ac7b2855602e9ec72c2902b44dc2b4c99fc11c647d98d0c1298ccac594ca2c88741b1968b191b40c6caa4c15f8db5df0f90b527276c71f87d13ef3142e91f1e3ca253fdb90a5efb9cb20a610cd823601502dc64b10340bc9341735ae757a8f1d0dcdcef31c5c8d475c340664ed99a7e7792491e1b26cb4db46a4b8277e1df0e692e78d8609decb9f0b4708ac1f72a8cd6888a6a939e6993c47b7057a5a7e5a609409e52f63413f9eea9d59a034cf177ac0eed76388af8027cf117cd1e874f6a9a07cb4f0a8657ffb51dca64968d9cfe2ced21354e2080929bfb80e5164ca81a6585cef1ca655331b2f3162b150288d274136ffda1b6403f972f7423c78f95297887550bc3485650e7a9d595d2e78cd71ef2f8a1e2511fcc308a6a4da1df8d86d2061e0f233ced0885ad9f43c201cb43f6ecbfc8b0b4955127b83ee2ad560c752814b14c32391d73074a5f682c553ba8fb783071a7a91384b23a70062671171797213135935df10ce31c04e0a6038d256ebb86e0b9e45f8f073d0bb1e7a3ab802dad6657167aab8d6ab86a0bc7446669fcd508893214a7af7ef1e9023528a5d0a674da22f62d8275bcbf32af0de32cb6f6c1d8d532259c41a231e7b5ef36d86ab90cd5386332de6be466a62455cf2c4b290ae7b1936eb678c5a5dd311b946f12c79231cffcaa79062b547b5874e33a91a3ff9204505f43dea5fc8232ac020ed196cf2f6814101129ceb4e398fdcca11aa22a8d554a168822915815fde63ca57210e21b789c11e7f1651f9990b6cd35a2eab9fe91a5cc4998eaccf413836cf487609ca5c842c9cdf285d541b0b74cb69efc33018a987a8fc84cc294b4e68de5a660bdfd8684918586574265c4e251bdb113b8f7790f106a0395afc85e3d48dc047720521209d5352649ac0e6b3fad72bb20e2c48dc3886318a159f9bcf4e662a30c40c2c193910044618962e5ea6888cae372e98b3646da15b7300a29f6a6d4fd83d3a11a9afafa1204f298269f89b5400d022ae05f2e8092d62fe92e0634dd857991d3484f8028b73d36209f38362135ab41fcc55e564e4d719bac10f06a9943d232528838645922887b96857fad89aae0844567f30c229e1ad681f2204d273b227d7987db92163d305bbcbc7b833ac26f421769991ca483fcf5f4bfed6ee7ab28b9abb8f6f90dfc9c00f819161c4f689ad08a577e92f9652209f919404c662f26414ed4c2fecb7762125877ac6354f4a9695fefe7946dc610c19007a46fd89fc731b82aa5fc18ffa124e38a5ff89cc2e126e902d6af365cde788eabb13c229acfe22f06c6d10b7a6300b21602308f6e1b3cc27a6aa725c28ee19f896701701ffc14b87cd92743bd21bc10b02d83dc43b91ac46b0eea79f15f10a48fca3b19e2ed6359316b0abbeb4b303bb0727c9eca6a821b155cf73fa7a9264865b7ee16c7ba7574f2e2e0cbfafcb44ab9f42d118005bb0784add4a5fb54703185cc480842b7c5bca89ad16806f4c0fad7c14c8840360a2f1cf6921aebd31d9cc840da95f264910204140222dfd8785e799317f08b9acabe0c084ad7b3f92e33a41b14ede627ca489e679fbcb81a05a2e6d5e1671859a3a688fb4b216ccf88003ea451e575e6c4d1fc01df95d2d5aa5256d4da12c349b5c36de6ff9503cca53876f744700d6f96ff3bcc94a1cc22103935e867cb1eddd16cc7714699483cf7b5a893e7d6f01c18c3470bf02d7d04e4a671db24c293d8e39db78d333ad96cea0a4df8f99843640b2cce303400c3ad5d7bd42d4ce63ac5a1f11cc9ce135d4534ed3096d52f9b0b3d43aea66d4b91211c1c32ce30a90a4a93f0ab39ccf6833b06de4160d92a9553a6d5a28fa7e6baedeca6c10f81981544d2b61bc71b643e36edff010c9ed201e219527ead1f49582203acd50e621031446166606a524f947b84894ed43c6bd2cded52f670516d602f9fb3b341a4cfde6a6d223b9a9a2dd79eac07c3340d1c8985d32b722b018851b87c348bb1df2454b80e3e6b18a65392c8ca6a4fb5cc853b7cf57eca66f4fc2104b4be5e8346bd1addf9fe7dceb5f9c3d62b2989825e86f1602ca63fc63cce0b6a856f620bf8ec80597bf8aaeb69b63e4e94fc5ae1b3b489c5910e43b3a632dc0e50746a4685cc897a5d1df36d7690ef4c2c092d105fe7b61ce4a8b7fdd548865df75aef6126333ad7cda7be55dc2fca82c0a573344e50a52ef300c9d28d8a283f5bb6fbd53d1cd3a01811d48d09a945cb826c710c19647588ae1411167306af7e72ae618dab693c840d2ebf65dcc6f27e6a6964b31529caa6b9645941365d4c58b63e8d7be5cc618dc57200cb265cc1e06115700b59e777942705cd0d029122989983c91fbc4d5293b4e0221445fd6b7f5544855647c188e5ca12427d3b862c0b17440d67b64810063b0177054ea8e55f4868d963712cd4e51688661d8b7e13d979120f7ae976e09506b5917ae7998d937ac413b3f16ec3452b77fa7a713c8be8a0ebc134f4770e4f98fef53348b9ff8136c76bbec6933c106988ea980f32c2ff8561f194eb6ec58789bc2a0e972d857e139ffec748165f53ab14a3ae835934bf29328097f6d22988bcaa9e0d0d56e70249a9aff56d8080eedce652189dcd46a3376699bde2442a2779caedef39d04be45ba34536ad467469c7bbd51cb17de80e8aad27a56c1f745e97649e1647b9884327079f56a68b2018537801a8b1d13abe87321501936f2c4a4a32dcd86140d81097aa9067f1ce3f6be6239d416d9e1f6f2c3a42e7768905fa5c2a7c94bcdff1a084661839c389060d592171d872bed87502fbaa7e234f9742175222f04b631ccfd14c460c97730cb3c088d0a303395209c7f675e2d84616d1738680a0de13f55652e0a18dba3fe3f3be6365fa2f79bea44f855aa26bd161260ed757a091d318ee290ef4402bdccee23db97256cca2881aed85abe7b3c86fcb4c55f01d54c197d9ab8414345c8097ba97005e443fe9654776b3e035c1e6fade0cd053c8b97d1972ac6476e995a8611ec021b8b337b03e333f3b046b69e81e42118601a14c7c00a8a3fdd165f6013e676f61472ba06ff8d3fa22dccc738a3b382a37f50b52079ccd2af83e3e6608e7ca6e6b495fef10bf4abef9283bd13e423c8a95997a08601c89c880ed6811313fcf5ea57ba2f20928b7df11d20df63506db8f69fc9825449f499a82f70455aae3ce57d45f25916e0bb643aa6c0259ea06b1a3e29d26906eb8b74e5d5ccdb4613bd0e3b603cc36fa1f0c9a504857d5ca362ef53568a49314c8f71d18f8cbdf40c687be74f4e32eb5ac81f03889edc70c71c597cf2459f05a35f2def1499d46870d9b3346d07149e0aa38c56cb918ab5ad030b99c33a6fe2f6a9c1ee262a6c8fdf75466e768630b7c6c9ee49e0962585b2feacaea304fd0bd2e51d33e024c81b93bb956b52484fa713b39eb2495d8482f99fb120d6e44729762427daa183a4cf469082e7c4082d8a8aad423b4a62082802061854c4a73302af51aee042fd57245a819e86fb24af7f06e9726f0264977859fc733fccbb36c8a4c4fcf6e687889265d6a438102be796ff3167baf848a7381e52df134bcc076698e9350d4025dc08955fce531340ac4bfcdd4e18134d346ca6b880b505ac09c28aaa372b28a1be0ebd79f50770deb537b99dbe2c7972c1b7682ddd9d16530463b757dde46351150d3b0325e7872379352540df954e421e36d587121c3f7ae854f370d1976fa63489f4e8e941f866310acd3aa216994de883a24063bce880a36146a95add8ee353f274d5d944d40fce258c80be77f15c614f184881f56d28946825ad6be0f68e258efea30fb7041ae2de7dee8f66ddfea2147d275d88244fa0fe21b4748aaae4bc8e39ef0934dff72236e6e3455f26f99bd9087b99fea00fec6f899129508662c5ab5fd0f387b186c13656e36629c3aec02b46e7792489c64b6062d1e1eb9edea835b5c43894a849bd135b44d8c891fd38c02b5e0827eab3c6ad1399655def956047699ca3d77035cc9c4e089b544b08040f7c756f95d0f332ff2b5245ee9cbfcc6ff34eab23906f6ae51f1b9183a488f0b67855424eb9f02964c19a25b5612a8931f4e3c3725802ea8945bd15d61ced02d7ebe43c40cb41987d9a3e0c32a35641f4ec1d28b20a1a6bfe2a66ace27b6a531a0fcd52cc8974157185ba70d211c6c4d128cc7deefc82c69f0bb10436718043d291093cd3f173fdd9883edcb6904a8e8289c395d40e"}, {0xcd, "c710fe5420d06a6e8de69eac38dd02f51c03162584ef152f959de7eb47", 0x1000, "0ae4be4b10f0ca6cf9af385a7dbd08ad687d07bcc8cf3e2db650d60ea50d2c4da607ab3ccd19fd3cdb4c6d640a241bc6e8229241cae4034c9932cd97860968c2860eba44dddb6f93a7fd70614aff82dcd39a69e521ae80c0b7893230930d3d3643f7ebc2d361f7ef97d602ce5429d2a98091851547a9558f653b254110b3380296972fea7498c91e62c574347ce83e77dafbc051e1ebad1e8179511a596a86a4650eaa22caba3e050f7e225508"}, {0x9a, "91788f1e34b5d9ef03aa3bb2654fbe1530fd99593ae9bc68e5d6ba0fdd", 0x401, "4b343a227eca142a55760379ce30c3ed7f7e54b2b64d1021ed8c3774c2de44662a73bc07038f76da7b0881e53e2e7716935414dc58dcad8d093a01d298e3625bc8f4e44fd72d26eae49b064f7cfb2e1a50f48ecdb4718a8230b7100934409a4501f9f45f123251a96a4b1461c22a0edac885133909bc5fc0d68f"}]}, {0x11b, "6d8b37648df654dd5354c874c2309cffe0515f4537460c18eb03117eab", 0x7, "680940adaa3247a61dbad0e240bce31d6f930955134fbfa76da2ce63dd00cb8e4c09feeaff147ccfd133477ce97835c076bca05180a4a46047074571d501f8ceed4aae6ff49d3ee78cee982447f0e561836fca18676bd5d71ab0e89e62f17c1dac41be526f1c7724b36561df7df61df8ba1776d2a01809215df9cd446dba4deba08a98bfb0e1b3bd0369f78b8fd1ac9733b4e7d1798849e6ad8dcf46b766faf5048fd6da7b648eb1c47abb45a52aed9e2eb967e1285f6c03a074e694d106bfc4ee5f4995347c8289d650887b78c12738f13ad6f7552e3668ceee3a2a9157c7f5c61075ca382ce5a434839aaf467d7e7b02d187a58d38d111d0212b"}}, {{{@remote={0xac, 0x14, 0x0, 0xbb}, @empty=0x0, 0xffffffff, 0xffffff00, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @common='yam0\x00', {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x88, 0x0, 0x40}, 0xe91c, 0x1248, 0x12f9, 0x8, {0x8, 0x6}, [{0x1020, "5a605e7b51ad07e2e6cf99e34136742983b137b19e7d4a3d5c97d55ac5", 0x9, "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"}, {0x46, "cf8e6f71e655e69d5011d52f2ca4361702a63432368298d0efa620f917", 0x3, "7cba9ef5327f51a5447d1ffde465d5983c33ba2084fbaacd24057da18965e3ef963647fb95c5"}, {0x6b, "fd5e740db5d7a0ffd27f9a62d14fdbba9ea6eb81d2162683c40504e7ec", 0x0, "e8dbb8917efa51fdedf3e51edd5223e1e23179bc26f97952287e72a9579df03382412be422fb360712aa953ed6fbf4c29689383b474af44ef137cb65a6d1ce7c55fcd2413ba351a447ab25"}, {0x107, "6f78d9de8e562187258ebd262dfe177026fa5b31782d9376b3543eda03", 0x6, "7de90884691eaa9f108a9a90e6f65d88f526c96f4b5e62aef7ae4152fd6e9c7e1393fdc85af59d02c3d49750a1726df99280aa75cd456d5ae9b87d9c32423495d830f930b2b5eb0f2c1452fcdb13e7c6a803ad1c7e0241e3acd87f8f4d2fac77630f86324ab5dff885e10f79d96e1ddebd2ada9d70c3712afe73eb9ae7f51ac71287273dce89efa66960a1a252ded66cb2d1232fad651c0a10668f7a4c1cde990397a7c2c1a48cd31a11d2387813175ee6cabf1aeb38c55fc196c58ed921381c74d41090c24b1616e8b2a065876f054c08e6fd750a8af6daa103a0c6a0d38c724069ed46e72dfc"}]}, {0xb1, "8b17a9c3627f9e09e0a914d6420c6624d511b6e26967249d5ff7d5d1de", 0x4, "3e02f4903deb709b4394bddb30cd2b397b0b2fbcbf80be97472a788bd883513c74628fc230a27d44cb9cd150d9cdf98dddfadef301161262a6cc25b18de413779c1324787a758e7262506a6a99a724a7f9ad2d632bb9c9fda66bc491316e68874af8bca335f310d36a0fd7aef7c1d96b733dab4d2f1130840e1483002e9f90d1fff7c0fc44bdaad59f7996c76277310f92"}}, {{{@local={0xac, 0x14, 0x0, 0xaa}, @remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0xffffff00, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x33, 0x3, 0x14}, 0x4, 0xb3, 0x15b, 0x20, {0x6, 0xd261}, [{0x43, "ab027af2775913a09f99a4ecbc682bd2e7e798e41af0d7dfabde3b8aa5", 0x4, "67fec07e107b7301ea64ab9208c05a2edde3891c9852aec354d48c2dcc853665ea35cb"}]}, {0xa8, "9ff9b5d10701fefa24103b8fd69ebec17fc1b54d401e18512aa2d288c2", 0x3, "392c5620958cc6b7e4a62904081eadb483910d81ffdfad1d0260f404298e1b0482a2542c9a052860546272d3836bd623c90b50a1fd4d05706cd3ab4648624bd86dd02bf7a5de75f168fd3b7ecbd1d20594d0f1f6747060c1aea5ab1a5f5245f659887e404b0ac466c390462ee431df23a9e5c3b8721517c33e2518afb8f0bdf7df3726281a71c987"}}]}, 0x3dd1) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000006000+0x797)='./file0\x00', &(0x7f0000006000)='./file0\x00') mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000008000-0x4)=0x0) fdatasync(r3) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000008000)={0x0, 0x0, 0x1940}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000007000-0x10)={0x0, 0x0, 0xe7}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000003000-0x10)={r4, r5, 0x9be}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000009000)=0x80, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f000000a000)={0x0, 0x7fff}, &(0x7f0000006000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000003000)={r6, 0x5, 0xa7ba}, 0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_context(r3, &(0x7f000000c000-0x20)='system_u:object_r:ssh_exec_t:s0\x00', 0x20) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 79.868897] binder: 16179:16191 ioctl 40046207 0 returned -16 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000202000)='/dev/sequencer2\x00', 0xffffffffffffffff, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000bb6000-0x4)=0x270f, 0x4) mlock2(&(0x7f000011d000/0x3000)=nil, 0x3000, 0x1) r1 = getpgrp(0x0) prlimit64(r1, 0x7, &(0x7f00002be000)={0x9, 0xbe93}, 0x0) mount(&(0x7f0000292000-0x8)='./file0\x00', &(0x7f0000486000-0x8)='./file0\x00', &(0x7f0000f79000)='ecryptfs\x00', 0x800810, &(0x7f00001f0000)="73b5cbb141b82c8e475de0a800157df5e9d496931884755565c1bd2dcc83897e90e671294842b3799f3dd693ef6b19281e24b1163120c557ac6ce2870266b26d2230c6f23ec973a0dd50a2b887ab62ad74d1c95135d23de81465b45c7ca576d64385580617d4b6acbf") ioctl$TCSETSF(r0, 0x5404, &(0x7f0000cb3000-0x24)={0x0, 0x7, 0x6, 0xffff, 0x7f, 0x2, 0x2, 0x1f, 0x0, 0xfffffffffffffff7, 0x1, 0xd9f1}) [ 79.870911] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.870929] binder: 16179:16191 transaction failed 29189/-3, size 0-0 line 3127 [ 79.880483] binder: BINDER_SET_CONTEXT_MGR already set [ 79.880490] binder: 16182:16190 ioctl 40046207 0 returned -16 [ 79.914635] binder: BINDER_SET_CONTEXT_MGR already set [ 79.914643] binder: 16205:16209 ioctl 40046207 0 returned -16 [ 79.915937] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.915998] binder: 16205:16209 transaction failed 29189/-3, size 0-0 line 3127 [ 79.918716] binder_alloc: 16028: binder_alloc_buf, no vma [ 79.918733] binder: 16182:16206 transaction failed 29189/-3, size 0-0 line 3127 [ 79.983934] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.989489] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.994961] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.000463] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.005936] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.011445] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.016928] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.022454] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.027911] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.033422] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.039126] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.044600] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.050100] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.055570] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.061124] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.066587] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.072101] binder: release 16028:16042 transaction 250 out, still active [ 80.079059] binder: send failed reply for transaction 248 to 16049:16051 [ 80.085875] binder: undelivered TRANSACTION_COMPLETE [ 80.091002] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.096466] binder: send failed reply for transaction 250, target dead [ 80.103243] binder: undelivered TRANSACTION_COMPLETE [ 80.108329] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/26 09:48:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x2000000000002, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x30) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000fef000-0x8)=0x4) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000a1d000-0x4)=0x2) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x44, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2c"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/26 09:48:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e56000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000317000-0x10)='/selinux/policy\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00009e8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00007e5000)=0xfffffffffffffffe, 0x82cb1ba8fbe09874) connect(r0, &(0x7f00003b2000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x0, 0x3, {0xa, 0x1, 0xff, @loopback={0x0, 0x1}, 0x401}}}, 0x32) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00001d2000-0x8)='./file0\x00', 0x81) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000a6e000-0xc)={@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000b62000-0x4)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000443000)={@common='teql0\x00', r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r1, &(0x7f0000e26000)="2d01000000e6000000005ca73d9fe3b5039bab0097532da5", 0x18, 0x0, &(0x7f0000dc9000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [0x0, 0x0]}, 0x14) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000dad000-0x10)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TTUNGETFILTER(r4, 0x801054db, &(0x7f0000627000-0x1000)=""/4096) mlockall(0x2) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0xe) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 0: mmap(&(0x7f0000000000/0xdc2000)=nil, 0xdc2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00007e4000)='/dev/keychord\x00', 0x100, 0x0) mmap(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000dc3000-0x4)=0x0, &(0x7f0000608000-0x4)=0x4) fadvise64(r0, 0x62, 0x792, 0x3) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000c6f000-0x8)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000dc1000-0x108)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 80.113775] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.119266] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.152463] binder: BINDER_SET_CONTEXT_MGR already set [ 80.158675] binder: 16240:16243 ioctl 40046207 0 returned -16 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000)=0xfffffffffffffffd, 0xfffffffffffffef9) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 09:48:08 executing program 0: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000027000)={&(0x7f0000027000-0x48)=@ipv4_newroute={0x28, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}, [@RTA_MULTIPATH={0xc, 0x9, [{0x9, 0x0, 0x0, 0x0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) 2018/01/26 09:48:08 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x80000, 0x1, &(0x7f0000ff6000-0x8)={0x0, 0x0}) mknodat(r1, &(0x7f0000afa000-0x8)='./file0\x00', 0xc100, 0x1) 2018/01/26 09:48:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000076d000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000028000)={0x4, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000f45000)='/dev/sg#\x00', 0x7, 0x8002) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000044000)={0x4, &(0x7f000062c000-0x20)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000a0d000-0x10)={r3, &(0x7f0000952000-0xbe)=""/190}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000030000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00006a7000-0x30)={0x2, 0x0, 0x1, 0x4, 0x100000, 0x1000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ppoll(&(0x7f0000cc0000)=[{r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f000002f000)={0x0, 0x0}, &(0x7f000004c000)={0x0}, 0x8) 2018/01/26 09:48:08 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) pause() ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000c000-0xf)='/dev/sequencer\x00', 0x40040, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000005000)={0x4, 0x4, 0x8, 0x2, 0x8, 0x10001}) 2018/01/26 09:48:08 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff6000-0x4)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000ff7000-0x8)={0x0, 0x0}) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000ff7000-0x5c)={{0xa, 0x0, 0x1000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fff}, {0xa, 0x0, 0x2e, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1a50}, 0xc413, [0x170b, 0x9, 0xfffffffffffffc01, 0xffffffffffff26f3, 0x0, 0x57e, 0x0, 0x6]}, 0x5c) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000635000)=0x9) 2018/01/26 09:48:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 80.171352] binder_alloc: 16224: binder_alloc_buf, no vma [ 80.177218] binder: 16240:16243 transaction failed 29189/-3, size 0-0 line 3127 [ 80.189598] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.202232] binder: release 16224:16226 transaction 274 out, still active [ 80.207961] binder: 16258:16262 ERROR: BC_REGISTER_LOOPER called without request [ 80.217268] binder: BINDER_SET_CONTEXT_MGR already set [ 80.217728] binder: send failed reply for transaction 273 to 16224:16245 [ 80.217739] binder: undelivered TRANSACTION_COMPLETE [ 80.217752] binder: undelivered TRANSACTION_COMPLETE [ 80.217757] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.217786] binder: send failed reply for transaction 274, target dead [ 80.257457] binder: 16263:16268 ioctl 40046207 0 returned -16 [ 80.258915] binder_alloc: 16263: binder_alloc_buf, no vma [ 80.258930] binder: 16258:16262 transaction failed 29189/-3, size 24-0 line 3127 [ 80.258937] binder: send failed reply for transaction 277 to 16263:16274 [ 80.280536] binder: release 16258:16273 transaction 276 out, still active [ 80.280540] binder: undelivered TRANSACTION_COMPLETE [ 80.296035] binder: undelivered TRANSACTION_ERROR: 29190 [ 80.302338] binder: send failed reply for transaction 276, target dead [ 80.309315] binder: send failed reply for transaction 279 to 16263:16274 [ 80.316163] ------------[ cut here ]------------ [ 80.321005] WARNING: CPU: 1 PID: 24 at drivers/android/binder.c:2151 binder_send_failed_reply+0x147/0x3a0 [ 80.322580] binder: 16258:16275 ERROR: BC_REGISTER_LOOPER called without request [ 80.323764] binder_alloc: 16258: binder_alloc_buf, no vma [ 80.323782] binder: 16258:16273 transaction failed 29189/-3, size 0-0 line 3127 [ 80.351191] Unexpected reply error: 29189 [ 80.355316] Kernel panic - not syncing: panic_on_warn set ... [ 80.355316] [ 80.362666] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.9.78-gf518fe4 #22 [ 80.369840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.379174] Workqueue: events binder_deferred_func [ 80.384187] ffff8801d9967910 ffffffff81d943a9 ffffffff83a47c40 ffff8801d99679e8 [ 80.392162] ffffffff83eac600 ffffffff82d62c97 0000000000000009 ffff8801d99679d8 [ 80.400144] ffffffff8142f451 0000000041b58ab3 ffffffff8418ac30 ffffffff8142f295 [ 80.408149] Call Trace: [ 80.410719] [] dump_stack+0xc1/0x128 [ 80.416063] [] ? binder_send_failed_reply+0x147/0x3a0 [ 80.422891] [] panic+0x1bc/0x3a8 [ 80.427881] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 80.436082] [] ? vprintk_emit+0x3ad/0x750 [ 80.441855] [] ? __warn+0x1a9/0x1e0 [ 80.447105] [] ? binder_send_failed_reply+0x147/0x3a0 [ 80.453915] [] __warn+0x1c4/0x1e0 [ 80.458990] [] warn_slowpath_fmt+0xc4/0x110 [ 80.464933] [] ? __warn+0x1e0/0x1e0 [ 80.470180] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 80.476730] [] binder_send_failed_reply+0x147/0x3a0 [ 80.483381] [] binder_cleanup_transaction+0xd2/0x140 [ 80.490111] [] binder_release_work+0x1b0/0x260 [ 80.496315] [] ? _raw_spin_unlock+0x2c/0x50 [ 80.502262] [] binder_deferred_func+0x9a2/0xd10 [ 80.508568] [] ? __lock_is_held+0xa1/0xf0 [ 80.514346] [] process_one_work+0x7e0/0x1610 [ 80.520379] [] ? process_one_work+0x72c/0x1610 [ 80.526585] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 80.533045] [] worker_thread+0xe0/0x10d0 [ 80.538726] [] ? __schedule+0x683/0x1ba0 [ 80.544406] [] kthread+0x26d/0x300 [ 80.549574] [] ? process_one_work+0x1610/0x1610 [ 80.555863] [] ? kthread_park+0xa0/0xa0 [ 80.561457] [] ? kthread_park+0xa0/0xa0 [ 80.567054] [] ? kthread_park+0xa0/0xa0 [ 80.572654] [] ret_from_fork+0x5c/0x70 [ 80.578755] Dumping ftrace buffer: [ 80.582359] (ftrace buffer empty) [ 80.586048] Kernel Offset: disabled [ 80.589659] Rebooting in 86400 seconds..