, 0xbe}, {&(0x7f0000e1f000)="dfc29a27a305a520603e16ad0ee0b4a79228750a438a5bcc02d5eff518ea04974034bb79dba41649fde87f31269abb2cad8f579583324e9a049fda1a2bb4301394ae1ba39458f89cc0908767de007fbc39413176c5422c2f06422313d1c4bb22a30c4ff91d276d7ac5461e7eba0c0e54ceda5149f6be235162786b9fdc7ac68f60253876353c3fe679f321c6c646d952e6499be6434dd048f7cb38206888d2462b9debf974c1f0e38e863c4e9004a28c73c8be05d1376402a80835e619d084849544f268a7579e81f00f7ebd04adc0bf4e2bfb551aa6df6bd412a283e15af51302dddd95bf9468ab5f29d4663759af73b9", 0xf1}, {&(0x7f00005ce000-0x2b)="861df6802d2866bccbfc5d13e504e47c4a68762ca480631d628465c39fbd8045ad34aa0d4b03b693ff2d4f", 0x2b}], 0x9}, {&(0x7f0000ffb000-0x8)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00000cd000-0x20)=[{&(0x7f0000f96000)="50c363e642af1aa7e29fa1714cc7c3fc6b924ca9157ae80ab497f6a25224c2a48b142b33d0ba2826bf50ed12f017ecf5dfc64f28de58176f632476625fb0dc974469091c19fd", 0x46}, {&(0x7f0000d03000-0x3)="e15408", 0x3}], 0x2, &(0x7f0000381000-0x20)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x40}, {&(0x7f00001df000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00004c7000)=[{&(0x7f0000f82000)="980621165576ac9ab1d432c73363f916be881e91c923068f5dd244679c5e49a3f876782f8586f3691ee2770c57522f77966dc441", 0x34}, {&(0x7f0000cba000)="4357d07a45487d83a621fdbb7a0124c952a40bdfc8d4367a9256ec5bfbc58c6d5595e41bf1a4131fd7bfae0122078b566678b0ceb86e5ceb617a4f6cc649f764854b7b3a8740dd92399549222da1b8471963814ea0e471ed73cf640ea50d879ec54644259bf43d8331589d9bc2b262d8519af4dfdb62e39e3002db48dff2ecdbebf7b153c01e8dd2e83fc98dac5c985cc96a04c549c78c1008c76c517b58a70b6c1796dcb7c95e83bc26838a841915c7089024a4e74026a23b49b988be26", 0xbe}, {&(0x7f0000560000-0xff)="23567fd709039aa5282438114ad9f83b43ab23b485e1fce03aa6d8250550b0ac8ec2c41f4f34bd5ad0af9cfab023988a40ef45923fdebac6ffce7dbea13f4bffde9e7dcd6290e18631eed658960cd45b7307b8103c88775861bd230959af6b748f645e1828e23aae8bddebd50a2b5942a5db40d00e75f1658e6cf61a2dda47d2a5e1bb4b3a81200eb7172673cbcabca52bad41d1bbb7f6c0d03f2421e67080204c4afef857f2584caf761b3a2b1e2864a6a900b8dd41b29e4ad06dc0aedc082df40c2a00d2de61c701b4f8bbadcff06047313e43088a290842ebeda3e9202c504774636e6fafaa38b8183e55139db9c1ab57a0d3131ab3c9d5ae47bda0db33", 0xff}, {&(0x7f0000e72000-0xe5)="f3295caaa0ab1b96f1c30edd7b6eef3a2e79fd05d900cf55b4e21555416396f7c0e5dd3542d72b11e7fd54e13e2addb17ac6a5b354ef3dacd448c49224600b16b63b4ae674d5ded2dca67fdba958874be14c8bf9fc1a3096c5422bb04d3b51165e9fcccf0e57d4de8b779fd8897b1da0477404d1916c48a84f92f6a1ef7e394786a477ec81d515fca4e69f24d55851b9fec22c568971e4b7239b37eb732bc477ddb4b23bd163ed738a7b60e82181788aaddeb3477502898fc10244554bbc20909cf0b3c0525bc326268cd6e6626916614c2dcd8d4aac5c41f84a2be8870ed07d9dd44b36e3", 0xe5}, {&(0x7f0000f17000)="f12be650e23e14b8dec69fdc1a59e2de5da09523046cb74f8c8811200f3ad0139f5742ad97e8cf713b9d8c86078da216cefc0941d879f807a962715d99c0b9a85e1cce749fbe2d36598eeae297297dda0baa9cad9ad8fd502acc69b6453cf8ecabd24a02475f70c4080c2bff52b7dbc9d65a80628ae58675af32", 0x7a}, {&(0x7f000036e000)}], 0x6, 0x0, 0x0, 0x4000081}, {&(0x7f0000426000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f000016f000-0x70)=[{&(0x7f0000bf7000)="6e8b1d6c41dad2e5e682bd18024da4456a40775448a3c53da2a2bbe19a85f31a2de108f18b7e0e3ea484674dee36166f5edbbd9ddfff0ac54739a95bc55c6991324a0db4e804a81f961bcb9582017e1fb76c899d6ef932b8a1aea397825be4e5b3be7827fe9d75d92958ca88745ea48a5b048aa53e6deec5ef233d423a8bc32ef900cbfb43bd88885d597265b70a021ff949bffc1768c420ca58148bf9afd02633593956f7ede9480d4011cc01823af296055b7d", 0xb4}, {&(0x7f00009d3000-0xc1)="8b3d2449f7e64f98e3fd8051ea2931ac7db0c84da1d3fe718a0a917900ed4bbb3930f670bb1b64b328c2f015c5b9454549bb9104e28b4eb002641aeca356c73b6af98218f1731c4ad3454422e319448d795a4417045599a3ab38f1b5056cf745f19874534c33181a491254fbc87e6e9529ed9c2d267eef355d78cd34b72f5b7af59bc5ecbb0524c733b948157fd7944064daf1cfc92efbfd7bf25d46dfa5979dcf635139f9ee00f5cd692d830d1d0711f367a259aeb26e5798759bc23688e904ed", 0xc1}, {&(0x7f00000c4000-0x76)="ee487815219f550f4667aeeb21eed2393183908dfd8713d3457de90e556acb547bbc70e689ee4e2789e0b961b9c73d1bd3909a31a023d67156debdafa04cb81e96ccc3a81f3f022c03126d7c3801d5acef75fd57623047c9c7cf821c7f9d2e5b10929945628da0458e68d018c5e1f7b8f03a2f50932c", 0x76}, {&(0x7f00002b7000)="890b8cedc00d9b24d394027295af0ab7af4f4b02072c6b6ec2fcefc3e03b133241672f22035af174e9a1b03f424838f8e518543f44", 0x35}, {&(0x7f00008ea000)="9fd9eff7b3d323a3d5b0fe9a6707ceb98e035d3c28af04c62ead58245848801ae1733c0bb63993137d9c871ae7343719c58c1a5be7659ede3f59416d22b2d1494bc0aacdd402274dc9df505f8a011ad1752c6e6b3abedd5395f951abe658152b649d49f0c274488a7f05833f377891a6a6a9ee10126b10d48a83c1045adedfbba6f0d52d783bbd9eacf1d94bb799cf16fcffc92066310d45d71322217201150d04f1504155a807fc30cfadba704015eab9a5223935392681bc27a5d08fb0ae26ad6a9da3f4", 0xc5}, {&(0x7f0000439000-0x2a)="122a90273d7d74a1f6605322b7c4fe23f31b8b6036d5b1c4fdd2d353af959ee4e505acbc59eb2e9b4190", 0x2a}, {&(0x7f00006cc000)="ac0eec6a75d7ed6c78733fa8b4007c0868070ab08fe90ae422ab88b7b6aff185b262b553aa2481c96e56be40a178e378819d697a2c995f6fed974fcd3ee8ad2147bf0c9c39a4110a7eb2d03bb1d2f65aa253c11d7a50b8e0e9976a0228a63dfe3dc82cbeb9492df02209312779e3785c2c0bf4fbd7ecbfa50124e1923d76867d80769c7e58373e447951624c64ffd57f502a31ddecfdc3b8e33cd0d1e9700c0489", 0xa1}], 0x7, 0x0, 0x0, 0x40050}], 0x4, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000155000-0x10)={0x0, 0x2710}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000)=[], 0x80, 0x0) 2018/02/14 06:14:59 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000912000-0x18)=[], 0x0, &(0x7f0000e96000-0x10)={0x0, 0x1c9c380}, &(0x7f0000e5e000), 0x8) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lookup_dcookie(0xfffffffffffffffb, &(0x7f0000006000)=""/4096, 0x1000) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000006000-0x8)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fda000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000fda000)={0x0, 0x0}) mmap(&(0x7f0000fda000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000c32000-0x4), &(0x7f0000fda000)=0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000007000-0x14), &(0x7f0000004000-0x4)=0x14) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000004000), 0x4) 2018/02/14 06:14:59 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000-0xf)='/dev/sequencer\x00', 0x3ffffc, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000002000)={0x700, 0x1000, 0x971a, 0x47, 0x9, 0xffff, 0x401, 0x100, 0xfffffffffffffff7, 0x8}) r1 = openat(r0, &(0x7f0000c3c000)='./file0\x00', 0xa8181, 0x45) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000004000-0xe0)=""/224) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd1000-0x38)={0x0, 0x0, &(0x7f0000859000-0x10)={&(0x7f0000f69000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0xa0}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00004e2000-0x1)='\x00') exit(0x7) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00004e8000)=0x8, 0x4) sendmsg$key(r2, &(0x7f000025a000-0x38)={0x0, 0x0, &(0x7f00003e3000-0x10)={&(0x7f0000750000-0x60)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) recvfrom(r1, &(0x7f0000956000)=""/53, 0x35, 0x21, &(0x7f0000502000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x3, {0xa, 0x2, 0xfff, @loopback={0x0, 0x1}, 0x40}}}, 0x3a) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000741000-0x4)) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00004b2000)=0x2, 0x4) 2018/02/14 06:14:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000a5a000-0x10)='/dev/input/mice\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000028000)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00006fe000)=0x4, 0x4) 2018/02/14 06:14:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000f0e000)='/dev/loop-control\x00', 0x200102, 0x0) ioctl$void(r0, 0xc0045c77) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 2018/02/14 06:14:59 executing program 7: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0/file0\x00', r0, &(0x7f0000013000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000655000)='./file0/file0\x00', 0x3, 0x0) 2018/02/14 06:14:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000fcc000)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00004b7000)=[{&(0x7f000043d000)=""/228, 0xe4}, {&(0x7f00003f2000-0x82)=""/130, 0x82}, {&(0x7f0000b8f000)=""/145, 0x91}, {&(0x7f0000b8f000-0xfa)=""/250, 0xfa}, {&(0x7f000048c000)=""/116, 0x74}, {&(0x7f00000ad000-0x49)=""/73, 0x49}, {&(0x7f0000c38000-0x5d)=""/93, 0x5d}], 0x7, 0xa0) write(r0, &(0x7f0000fdc000)="218723fd243d175cfeda3946a32507baf22b1fc7033b0e021beaf8bff9c782fa57c4f17c7edb9349028a4b13", 0x2c) mmap(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) 2018/02/14 06:14:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x100000000000004) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@loopback=0x7f000001}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000583000-0x4)=0x8, &(0x7f00004ae000-0x4)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000369000-0x8)) 2018/02/14 06:14:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioperm(0x4, 0x8, 0x65) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0xb5, &(0x7f0000a03000-0xb5)=""/181}) ioctl(r0, 0x8912, &(0x7f0000000000)) sync_file_range(r0, 0x8, 0x7fff, 0x1) 2018/02/14 06:14:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000050a000)='/selinux/mls\x00', 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000fd4000)=""/191, 0xbf, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000135000)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000067a000-0x8)={0x0, r1+30000000}, &(0x7f0000327000-0x4), 0x0) syz_open_dev$binder(&(0x7f00003d1000-0xd)='/dev/binder#\x00', 0x0, 0x2) futex(&(0x7f000000d000-0x4), 0x3, 0x0, &(0x7f000004a000-0x10), &(0x7f0000387000), 0x0) 2018/02/14 06:14:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f000088d000), &(0x7f0000deb000)=0x60, 0x800) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000c85000-0x8)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f000007f000)=0x2f, 0x3) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000e3f000)={0x5, 0x5, 0x10001, 0x8001, "7254e092257a0308382b9869e7d5f351ad4daa3bcaaa38ca504b401c9cb23b5e"}) ioctl(r1, 0x1267, &(0x7f00009be000)) 2018/02/14 06:14:59 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003000-0x38)={&(0x7f0000000000)=@nl=@kern={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f000000e000-0x56)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000000900080008000500000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f000007b000)=[@in={0x2, 0x1, @loopback=0x7f000001}, @in6={0xa, 0x1, 0x500, @loopback={0x0, 0x1}, 0x486}, @in={0x2, 0x1, @broadcast=0xffffffff}, @in6={0xa, 0x2, 0x7f, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x9}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}, @in6={0xa, 0x2, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x36}, @in6={0xa, 0x2, 0x2, @ipv4={[], [0xff, 0xff], @empty}, 0x7fff}, @in6={0xa, 0x1, 0x8, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x2, @multicast1=0xe0000001}, @in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0xff}], 0xe8) 2018/02/14 06:14:59 executing program 5: pipe2(&(0x7f00008dc000-0x8)={0x0}, 0x84800) connect$inet6(r0, &(0x7f0000e1d000-0x1c)={0xa, 0x3, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x0, 0xf}, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00004fc000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r3 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) write(r2, &(0x7f000014d000), 0x0) pwrite64(r2, &(0x7f0000084000-0x53), 0x0, 0x0) close(r1) 2018/02/14 06:14:59 executing program 2: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f000002d000)={0x0, 0x0, &(0x7f0000fea000)=[], &(0x7f0000fea000)=[], 0x0, 0x0, 0x0, &(0x7f0000fea000+0x181)=[], &(0x7f0000fea000)=[0x6]}) 2018/02/14 06:14:59 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f000080b000)=0xa1, 0x4) mmap(&(0x7f0000000000/0xfa5000)=nil, 0xfa5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000004, &(0x7f00007ae000)="8907040000", 0x5) connect$inet(r1, &(0x7f0000f9b000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/14 06:14:59 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000001000-0x60), &(0x7f0000000000)=0x60) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000000000/0x60000)=nil, 0x60000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000060000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000061000-0x8), &(0x7f0000061000-0x4)=0x8) r1 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) r2 = fcntl$getown(r1, 0x9) mmap(&(0x7f0000060000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, r2, &(0x7f0000060000), 0x80000008, 0x0) mq_notify(r1, &(0x7f000005e000)={0x5, 0x0, 0x0, @thr={&(0x7f000005f000-0x42), &(0x7f000001f000-0x10)}}) mq_timedsend(r1, &(0x7f0000037000), 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000023000-0xd)='/dev/usbmon#\x00', 0x1ff, 0x200000) mmap(&(0x7f0000060000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f000004b000-0x12c)=[{{&(0x7f0000061000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000058000-0x40)=[{&(0x7f0000061000)=""/65, 0x41}, {&(0x7f0000061000)=""/191, 0xbf}, {&(0x7f0000061000)=""/222, 0xde}, {&(0x7f000003b000)=""/161, 0xa1}], 0x4, &(0x7f0000042000)=""/107, 0x6b, 0x86}, 0x8}, {{0x0, 0x0, &(0x7f0000053000-0x40)=[{&(0x7f0000056000-0xb0)=""/176, 0xb0}, {&(0x7f0000061000)=""/224, 0xe0}, {&(0x7f000004d000-0x78)=""/120, 0x78}, {&(0x7f0000062000-0xcd)=""/205, 0xcd}], 0x4, &(0x7f0000062000-0x1a)=""/26, 0x1a, 0x2}, 0x4}, {{&(0x7f000002f000-0x80)=@generic, 0x80, &(0x7f0000061000)=[{&(0x7f0000062000-0xb8)=""/184, 0xb8}, {&(0x7f0000062000-0x1000)=""/4096, 0x1000}, {&(0x7f0000062000-0x73)=""/115, 0x73}, {&(0x7f0000062000-0x1000)=""/4096, 0x1000}], 0x4, &(0x7f0000012000)=""/181, 0xb5, 0x6}, 0xffffffffffffec7a}, {{&(0x7f0000061000)=@sco, 0x8, &(0x7f0000062000-0x30)=[{&(0x7f0000001000)=""/240, 0xf0}, {&(0x7f000000a000)=""/166, 0xa6}, {&(0x7f0000050000)=""/105, 0x69}], 0x3, 0x0, 0x0, 0x8000}, 0xfffffffffffffffd}, {{&(0x7f0000061000)=@rc, 0x9, &(0x7f0000022000)=[{&(0x7f0000022000-0x9b)=""/155, 0x9b}, {&(0x7f0000062000-0x47)=""/71, 0x47}, {&(0x7f000004b000-0x92)=""/146, 0x92}, {&(0x7f000002a000-0xf6)=""/246, 0xf6}], 0x4, &(0x7f000005c000)=""/4096, 0x1000, 0x9}, 0x1}], 0x5, 0x10000, &(0x7f0000062000-0x10)={0x77359400}) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000062000-0x18)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0xff, r4}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000061000-0xa)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) 2018/02/14 06:14:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000708000-0x90)={{}, {0x0}}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000871000-0x20)={@loopback={0x0, 0x1}, 0xfffffffffffffc01, 0x1, 0xff, 0x2, 0x5f66, 0x9, 0x4080000}, 0x20) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40), &(0x7f00008e6000-0x10)={r0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00003be000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000770000-0x4), &(0x7f0000a04000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000199000-0x8)={0x0, 0x2}, &(0x7f00002d2000)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000c46000-0x14)={r4, 0xb, 0x9, 0x5, 0x8, 0x20}, 0x14) write$sndseq(r3, &(0x7f00008ff000)=[{0xfc, 0x43e, 0x7, 0x4, @time={0x0, 0x989680}, {0x2, 0x9}, {0xfffffffffffffffe, 0x9}, @ext={0xd0, &(0x7f0000d72000)="0d89dfd64388255bb9ded222d73a637a5bb8f1863bb64711edf973dedcd590b712f174b57a63379910ed2645da8a305a6bc422092dbde91214fd958fde2d2dbedc217288fa6027376278940146323b90ac4d9e69696f931d56d530b8ef501f6192e1f9277a859af2bb2e3c24af1ac7a5701a062d7018c660fd12413bf532b1d95405c67dc0c9fba5123bb6cd7c8a87e926d5ae5fd2b96b6a45fd785ab0b9a62892ec8f15bffd3b8556178bbefce63795c1c4782b30cf2e2eb4412f91c2b9ef9919c43a6a8ad8c421177664e4b3776e55"}}, {0x3, 0x9, 0xa9, 0x8, @tick=0x7fff, {0x9, 0xffff}, {0x40, 0x6}, @raw32={[0xc83e, 0x6, 0x5]}}, {0x7fffffff, 0x9, 0xfc3dd55, 0x7, @time={0x0, 0x1c9c380}, {0x1, 0x80}, {0x20, 0x80000000}, @control={0x200, 0x7, 0xaef}}, {0x10000, 0x3ff, 0x7, 0x1, @tick=0x43, {0x7, 0x80000000}, {0x1, 0x2}, @result={0x7, 0x7}}, {0x3ff, 0x3, 0x5, 0x1ca, @time, {0x20000000000000, 0x4}, {0x759, 0xa318}, @addr={0x5, 0x7ff}}, {0x1, 0x0, 0x88, 0x1, @time={0x0, 0x1c9c380}, {0x5, 0x8}, {0x3363acd4, 0x1}, @control={0x0, 0x10000, 0x8}}], 0x120) 2018/02/14 06:14:59 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000001000-0x9)='/cgroup]\x00', 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x82) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000001000-0x8), 0x7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x14, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001000-0x4)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00005cd000)='attr/keycreate\x00') sendfile(r3, r3, &(0x7f0000bb4000-0x8), 0x1000000000ff) 2018/02/14 06:14:59 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}]}, 0x80}, 0x1}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000d62000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00006ca000-0x8c)={0x8, 0x0, 0x0, 'queue1\x00', 0x8}) 2018/02/14 06:14:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) preadv(r0, &(0x7f0000735000-0x30)=[], 0xffffffffffffd9f, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000020f000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f000081f000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x0) pread64(r1, &(0x7f0000183000)=""/224, 0xe0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000b35000-0x4)='tls\x00', 0x4) 2018/02/14 06:14:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00006fb000)={0x4, 0x7}) get_thread_area(&(0x7f00007aa000)={0x0, 0x0, 0x6000, 0x4, 0x3, 0x6, 0x9, 0x4, 0x6, 0x224}) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000861000)={&(0x7f0000a17000-0x48)=@ipmr_newroute={0x30, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_UID={0x8, 0x19}, @RTA_MULTIPATH={0x6d, 0x9, [{}]}]}, 0x30}, 0x1}, 0x0) [ 96.441150] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. [ 96.456864] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/14 06:14:59 executing program 1: mmap(&(0x7f0000000000/0x95e000)=nil, 0x95e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000095e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00008ac000)={0x100000000, 0x6, 0x475d661870d590cc, 0x6, 0x5, [{0x6, 0x2, 0xffffffff, 0x0, 0x0, 0xc80}, {0x5, 0x2, 0x7, 0x0, 0x0, 0x800}, {0x9, 0x4, 0x200, 0x0, 0x0, 0x2400}, {0x9, 0x5}, {0x8, 0xdace3fb, 0x6, 0x0, 0x0, 0x2000}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000095f000-0x9)='/dev/rtc\x00', 0x80, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00007b6000)={0x3, {{0x2, 0x2, @multicast1=0xe0000001}}, {{0x2, 0x2, @rand_addr=0xffffffffffffffff}}}, 0x118) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000022000-0x10)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) write(r0, &(0x7f000050b000)="fff71ea1b24b8e4ea2da6a7d5eb4a547d59381894a330c0a8a2d625e96b288d8ba2c10926f", 0x25) 2018/02/14 06:14:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f000028c000), 0x80000) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000fda000)=0x5, 0x4) symlink(&(0x7f000082a000)='./file0\x00', &(0x7f000033f000-0x8)='./file0\x00') pwrite64(r0, &(0x7f0000892000)="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", 0x1000, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000096000-0x15)='/dev/pktcdvd/control\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000aaf000-0x4), &(0x7f0000bbf000)=0x4) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00005f3000-0xb8)=""/184, &(0x7f0000a9a000-0x4)=0xb8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f00007f3000-0x1c0)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-twofish-avx\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/14 06:14:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000508000)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x1e8, 0x1e8, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000001000-0x40), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@arp={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @dev={0xac, 0x14}, 0x0, 0x0, @mac=@link_local={0x1, 0x80, 0xc2}, {}, @mac=@link_local={0x1, 0x80, 0xc2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='ip6gretap0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f8) sendto$inet(r0, &(0x7f0000871000)="02c64ad54a8f3860ad1b3485483e0dfc6be3fe03", 0x14, 0x84, &(0x7f0000801000-0x10)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) 2018/02/14 06:14:59 executing program 7: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000012000-0x1c)=@req3={0x4fd0, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/02/14 06:14:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00005b1000)={0x20080522}, &(0x7f000067e000)) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00007dd000)={0x0}, &(0x7f0000360000)=0xc) fcntl$setown(r0, 0x8, r1) r2 = fcntl$dupfd(r0, 0x400, r0) clock_gettime(0x0, &(0x7f00001e7000-0x10)={0x0, 0x0}) write$sndseq(r2, &(0x7f00008a8000-0x150)=[{0x9, 0x7, 0x401, 0x7a, @tick=0x5ebc, {0xad, 0x3}, {0x10001, 0x3}, @addr={0x7, 0x7ff}}, {0xc0, 0x4, 0x4, 0x7fff, @time={r3, r4+10000000}, {0x8000, 0x5}, {0x5, 0x4}, @note={0x1, 0x6, 0x0, 0xbca, 0x40}}, {0x7, 0x4, 0x6, 0x904e, @tick=0xf5, {0x10001, 0x200}, {0x83f, 0x9}, @addr={0x2fb, 0x1}}, {0x7, 0x5, 0x6, 0x1000, @time, {0x57}, {0x4, 0x398c}, @result={0x8, 0xffffffffffff0000}}, {0x401, 0x5ebb, 0x5, 0x8, @tick=0x100000000, {0x6d99, 0x99}, {0x8, 0x3}, @result={0x0, 0x4}}, {0x8, 0x4, 0x2, 0x4, @time={0x0, 0x989680}, {0x2000, 0x9}, {0x7, 0x26}, @ext={0x1000, &(0x7f0000d77000-0x1000)="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"}}, {0x1, 0xfffffffffffffffe, 0x0, 0x3, @time, {0xfff, 0x5}, {0x3, 0x5}, @time=@tick=0x2}], 0x150) fcntl$getownex(r0, 0x10, &(0x7f000066c000)={0x0, 0x0}) process_vm_writev(r5, &(0x7f0000690000-0x8)=[{&(0x7f00001a0000-0x8)=""/8, 0x8}], 0x1, &(0x7f0000d1a000-0x10)=[{&(0x7f0000525000)=""/60, 0x3c}], 0x1, 0x0) 2018/02/14 06:14:59 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b9e000-0x1b)="00000000000000060804000000fffc0c6565643b799365005f1b76", 0x0) write(r0, &(0x7f000073b000-0x2)="0601", 0x2) readlinkat(r0, &(0x7f0000c1d000-0x8)='./file0\x00', &(0x7f0000f94000-0x22)=""/34, 0x22) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f00009b3000)=[], &(0x7f0000521000-0x30)=[&(0x7f0000ff7000)="00000000000000060804000000fffc0c6565643b799365005f1b76"], 0x1000) 2018/02/14 06:14:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f000040a000)='./file0\x00', 0x5) pipe2(&(0x7f0000970000-0x8)={0x0, 0x0}, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x101, 0x4) r1 = creat(&(0x7f0000ec3000)='./file0\x00', 0xfffffffffffffffc) r2 = open(&(0x7f000011a000)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00006cc000)=[{&(0x7f0000db8000-0xe3)="4654d40d9d8f5aa5f459043ee7f91a16d44bce4388e0cfecf4e02918b37f41b5f46426f043cb23b96455b0e5aea599c84d3834c4ccf4ca61e75cef594e299d5705adec91a661754420aecb5c70704fa0325d2b6fa7a5eeb5aade3144f8e6540549dd4706b6bdb1845b899ca16661d7399a4ff4bf3bfc18f1432e8be6b3a0b2220112b7bcc47c50ef74f7cc492cb53db59e9e9de88e74b9688b63f2c093acdf87e38c3e1c83ac0428c967b5193fbb858cc288b7fde7e2f171bce2434844e74ac481315f510080f8b86b4ac1dab6a997d06addd1b21a838d9be7a89db1527ce859ed0174", 0xe3}, {&(0x7f0000540000-0x4c)="22bfa5fefafe94dce3618e9ee3166ecbcb4af694508c4be77b4466443bb2bf03605afeccd6d9af0a37fd30261fd14e51fd05728983038a87da1ccae14689cadb676256833998c2c0f7f83560", 0x4c}], 0x2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000705000)=@common='vcan0\x00') ioctl$LOOP_CHANGE_FD(r2, 0x40049409, r1) 2018/02/14 06:14:59 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00008a0000)={{{@in=@remote, @in=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000d9e000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001000-0x50)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9, 0x100000001, 0x1, 0x500, 0x7, 0x0, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000006000)={@dev={0xfe, 0x80}, 0x0, 0x2, 0xff}, 0x20) 2018/02/14 06:14:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f00003a5000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f000027c000+0x521)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000589000-0x1), 0xfffffffffffffea7, 0x20020006, &(0x7f0000386000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000c83000-0x14)={0x0, 0x20000000012c6, 0xffffffffffffa66d}, 0x14) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000be1000)='/selinux/enforce\x00', 0x400100, 0x0) write$evdev(r1, &(0x7f000018b000)=[{{0x77359400}, 0x16d, 0x0, 0x1f09}, {{0x77359400}, 0x9, 0x8001, 0x6}, {{}, 0x7fff, 0x0, 0x1}, {{0x77359400}, 0x0, 0x4, 0xfffffffffffff122}, {{0x0, 0x2710}, 0xff, 0x1, 0x2}], 0x78) shutdown(r0, 0x1) 2018/02/14 06:14:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000e92000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000003}, 0x1c) lgetxattr(&(0x7f0000c7d000-0x8)='./file0\x00', &(0x7f00005cc000-0x14)=@known='security.capability\x00', &(0x7f000008a000)=""/217, 0xd9) r1 = syz_open_dev$sg(&(0x7f000032d000)='/dev/sg#\x00', 0xffffffffffffff01, 0x50400) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f000059d000)=""/4096, &(0x7f0000359000)=0x1000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000293000-0xc)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f000067e000-0x8)={0x0}, &(0x7f0000506000)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000f41000-0x8)=@assoc_value={r3, 0x2f7}, &(0x7f000030b000+0xc72)=0x8) readahead(r1, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000c08000-0xc)={0x0}, &(0x7f00005cf000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00004ea000-0xe8)={{{@in6=@loopback, @in6=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f00006ae000-0x4)=0xe8) fstat(r1, &(0x7f0000876000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000432000-0x4)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000c3f000-0xc)={0x0, 0x0}, &(0x7f0000e20000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00008f3000-0xc)={0x0, 0x0, 0x0}, &(0x7f00004fa000)=0xc) r11 = getpgid(0xffffffffffffffff) stat(&(0x7f00005a2000)='./file0\x00', &(0x7f0000e48000)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000fb8000-0x4)=[0x0]) sendmsg$netlink(r2, &(0x7f0000e80000)={&(0x7f0000c28000)=@proc={0x10, 0x0, 0x0, 0x1690110f61a0c32f}, 0xc, &(0x7f0000e9f000-0x20)=[{&(0x7f0000f6a000-0x20)={0x20, 0x1a, 0x20, 0x0, 0x1, "", [@nested={0x10, 0x6a, [@typed={0xc, 0x92, @str='\x00'}]}]}, 0x20}, {&(0x7f0000e27000-0x3a4)={0x3a4, 0x3b, 0x800, 0x6, 0x0, "", [@generic="1cf4a71a906ff2e628ed2fd7d3e4b11a069652c8115d6322c53ca5e319c6e58d696b0037a0d32a422f9da9d031cb52e08955e72972c6581bfe06f8676670e726eda34d35956728c2389b0653cf825053e5e5b137b6e5c44564236640752a610f5f41132271821d74d4ea9f16255ef83f8498", @generic="1dd11874a129823fb0834ee65eab0e4ffdacdf43a4bd8d7014cb6c96c266b170e42066e47cb1be3a7f4aca152013", @nested={0x2f4, 0x3e, [@generic="dc6bb29e89a296794b813323b308045c832469205dd789aa4476d9a2e7e25bd73ed4fbb56686dea467e7b449495530843017f9d43232427898485d5a4b8b7e64c9745fec6f5e9a693c4af2fffcc53c743993b3d563f41d89d467cd597925e3c25fa4741266b1062ac3dfbbef9c333311cd818d3fae", @generic="a04917bd40779670c413ec01dfee605f1f2503127adcbd56267ae83b4bd16de266016e535c559b41bb5407ccc0250f424a6c3482137f6e5e26018649d61f6d6eb0176ff48f1804cb8dbdf6b96a46169efe1e1eab21b08c5b9e1a4a6cbce949e2aae3c581141f522b7122b5b388f04fd896bb232c437b79dc5666d9e2a926e4f9f65d2e5b0c03efdef013199095731e183ce862e10913cec91c2804e652f346b13940ea9276537b054ed2ede250a87d4a2521841d25745ed568fbbc3700d85ef786a6553f6174a7aa70b15fca081120bd65b5", @generic="0630697c81a28f401ecafa234684ae06f078217e958d35eef22070de29f2748d89499077845801ffede422f9e19c5eb856a94746d9324bba9954db4d06b17941ccb3306efd842a14603ea075280241e3d809d07db01b09da8ea075d46361c0a319c7b735626e983bb20b383079440866c59a74f579c997a63a4132ab55fa88bb74a56e378ef5978d9489453ba7ef4f77739016b18644bc32150448e9a24b2bf2fb4540cfbf584a1ab0b287739c0ef2af93cf5ec108", @typed={0x18, 0x19, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="4e2004358a13b2e7f202dcfe87400252526100", @generic="240bbb", @generic="2942faa26263fae13de0fd87c0efe2aff532f1e1f598cead2c1b203f427437658fbfac3ebdcb830d5dffbdae8071ee96d7f8327b0dd52f1f2c32d798157c566a37b60a4cfb45e8b6ea0c779d64e6b7ccda56e96087657339be88de924c0aad2be6b3e8dad95f3fad657dfd11ed24ab60fc05c0307da4ceeaf489afca7aeb6827ff071f4d426331867efdf81775dda1bcdbe686db275ca975d54942ddcf17ec69e13b9ad768f683b8776e820de17cc3123b0051e56a822390d586edf3a96b3fba692b35"]}]}, 0x3a4}], 0x2, &(0x7f0000a10000-0xa0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r0, r4]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x20000050}, 0x20008000) bind$inet6(r4, &(0x7f0000839000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff}, 0x1c) open(&(0x7f000007c000)='./file0\x00', 0x545001, 0x128) bind$inet6(r4, &(0x7f0000f5e000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/14 06:14:59 executing program 4: mmap(&(0x7f0000000000/0x50000)=nil, 0x50000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) signalfd4(r2, &(0x7f0000041000-0x8)={0x5}, 0x8, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004f000)={0x80, 0x0, 'client1\x00', 0x0, "efffd90080000ce3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) 2018/02/14 06:14:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000e20000)='/selinux/enforce\x00', 0x94000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000191000-0x4)=0x7) llistxattr(&(0x7f0000b04000-0x8)='./file0\x00', &(0x7f0000e48000-0x4e)=""/78, 0x4e) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) setpriority(0x0, r3, 0x7) timer_settime(0x0, 0x0, &(0x7f0000047000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001e000-0xc)={0x40000001}) [ 96.595520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=36765 sclass=netlink_xfrm_socket pig=19738 comm=syz-executor2 [ 96.636139] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=36765 sclass=netlink_xfrm_socket pig=19738 comm=syz-executor2 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f00009be000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000003b000/0x3000)=nil) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab4000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00007c4000-0x1)='\x00', 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000055b000-0x15)='/dev/pktcdvd/control\x00', 0x408a80, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00005aa000-0x8)={0x0, 0x1}, &(0x7f0000c8e000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x118}, &(0x7f00005de000-0x4)=0x8) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000955000-0xc)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000ffa000)={0x0, 0x1f00000000000000}, &(0x7f0000753000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000b1f000)={0x8, 0x1, 0x101, 0xda7e, r2}, &(0x7f0000686000)=0x10) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000c21000)='cdg\x00', 0x4) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000aa7000)="18000300000001000000be5efecd88360000080203000008000006000e640002b900107401011c6900bb77a107567e5bdba17e19470055040097ec67a1e2010049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad000000000000061475d7220342000700ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75ab4f1b8fc393d2696b8c3ba5aea6096f201cd7eafcaaa52b1c179", 0xc8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000270000)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000a3f000)={0x3, 0x6, 0x3, 0x1, 0x6, 0x8, 0x2, 0xfffffffffffffff7, 0x8, 0x2, 0x7fffffff}, 0xb) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000eeb000-0x44)={{0x2, 0x1, @broadcast=0xffffffff}, {0x306, @empty}, 0x44, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, @common='ip6tnl0\x00'}) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x6, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000654000-0x50)={@common="ffffb70e7473300009dfffffff00", @ifru_names=@generic="07527f00000000000100180000004e1e"}) pipe(&(0x7f0000a99000)={0x0}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f000080f000-0x8)={0x0}, &(0x7f00000ee000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00007de000-0x8)={r3, 0xffffffff, 0x492}, 0x8) readv(r0, &(0x7f00007a1000-0x18)=[{&(0x7f0000f30000-0xde)=""/222, 0xde}], 0x1) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000020e000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000671000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000909000)='ramfs\x00', 0x9, &(0x7f0000088000)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00007b2000)={0x0, 0x3c, &(0x7f000097a000)=[@in={0x2, 0x3, @rand_addr=0x2999}, @in6={0xa, 0x3, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in={0x2, 0x3, @multicast2=0xe0000002}]}, &(0x7f0000995000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f000035c000)={r1, 0x3e8}, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000ea4000)=@int, &(0x7f0000d74000)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000748000)={r1, 0x1000, "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"}, &(0x7f0000542000)=0x1008) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00001b7000)=0x0) r1 = syz_open_dev$mice(&(0x7f000048c000)='/dev/input/mice\x00', 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000dab000-0xc)={0x80000003}) getpeername$netlink(r1, &(0x7f0000965000), &(0x7f0000b74000-0x4)=0xc) r2 = syz_open_procfs(r0, &(0x7f0000ba5000)='uid_map\x00') pread64(r2, &(0x7f00008af000), 0x0, 0x400000) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000bf3000)) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000baf000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x2c, {0x2, 0xffffffffffffffff, @empty}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000e9a000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000001000-0x8)='./file0\x00', 0x480800, 0x20) ioctl$void(r0, 0x5451) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a2a000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009e9000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x40600) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a4000-0x8)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c82000-0x2)) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000325000)=@known='system.posix_acl_default\x00', &(0x7f0000346000)='/dev/hwrng\x00', 0xb, 0x0) rename(&(0x7f0000ee9000)='./file0\x00', &(0x7f0000966000)='./file0\x00') 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00005c5000)={0x0, 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000ecc000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000d8a000-0x4)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00004da000-0x14)={@dev={0xfe, 0x80, [], 0x0, 0x14}, r2}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000d30000)={&(0x7f0000b79000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f000082c000)=@newsa={0xfffffffffffffcd6, 0x10, 0x29, 0x2, 0xffffffffffffffff, {{@in=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x33}, @in=@multicast1=0xe0000001, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0xc0, 0x1, {{'sha256\x00'}, 0x3c0, "c0567e07ca443111315a00c1fb026ae3e37d9c96ed4fa78ccb613833a7fc328d6c0278bb8b39a042a1e966328d539d8e7b5561701ccae41b3f64d280afad9c2050cceb65740e46f55caacce9d981182cb6d9bcc28b7017ad279bc607bb433928a6917ef67054d660cf5eba7e8752bd122a255ccdb9f552f1"}}]}, 0x1b0}, 0x1}, 0x0) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000001a000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000001a000), &(0x7f0000001000-0x4)=0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000019000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r2, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r3, 0x0) write$tun(r3, &(0x7f0000014000)=@pi={0x0, 0x6007, @eth={@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xc}, @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "8d2590", 0x1c1, 0x29f2347a2a58ac36, 0x0, @empty, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[@routing={0x2f, 0x4, 0x1, 0xdeadd8c, 0x0, [@local={0xfe, 0x80, [], 0x0, 0xaa}, @loopback={0x0, 0x1}]}, @fragment={0x6c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}], @gre={{0x0, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x1, 0x880b, 0x50, 0x1, [0xf6, 0x101], "23a4aa2f3ee8a72e9138eb9bb7a569e4762ba2c4daf20e2cfddb95ffc2dccc112478a5594c6e9178f40509a90a1b4648c9b3d608b856554790c94ef55f4e48ff3758214246bc2a424c619606cd992463"}, {0x8001, 0x0, 0x5, 0x6, 0x0, 0x0, 0x800, [0x80000001, 0xf9c, 0x6d3d], "165824d7e127b50f8a33ef5a1a4627bcc5fe7a16769d6cb5d34f5d91ba0b68035894019a44ce5cff7bfab626f06fe55d733887a074717e87f145707c6064f6974a32f58b4b529705"}, {0x1, 0x0, 0x8, 0x6, 0x0, 0x0, 0x86dd, [0x10000, 0x3f], "12a22cd5aa54adb573ad80af4b9b389e714319520582889f2db42f82b5a6942c0f3a5b08b6b529a759812b65017f24943ab35f4b3e2ba0c399a6c00ef78932e46b4d5a6e63b59f5bcf8bd039722e4c2194b0dbece5418fa3e6c4e350d79504be1f4e50bdc2072c2ee6ed1d8bbd0db6006882f31fb14575128d60a7973605f465be5a3d4da5c8c56150341dcb2e5905f4142a403fa4c7f5b9a8327de239d727cf2f391c980e012af8cc49d9c969153607e1357b9949f8d6ffad5e491786ac18a8df2e1a560c8680b3fc38571a20c1c038ab687025b8c60e5a16dcc1"}}}}}}}}, 0x1fb) listen(r2, 0x0) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f000031b000-0x50)={@common='lo\x00', @ifru_ivalue}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000c89000-0xe8)={{{@in6=@remote, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00007dd000)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000014d000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x2, 0x0, 0x1, 0x0, 0xa, 0x20, 0x20, 0x0, 0x0, r1}, {0x2, 0xadca, 0x3, 0xfffffffffffffffe, 0x20, 0x2, 0x1ff, 0x1dff}, {0x7, 0x417, 0x9, 0x9}, 0x55, 0xf, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast1=0xe0000001, 0x3, 0x7f}, 0xa, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x5, 0x3, 0x3, 0x100000001, 0x8001, 0x4, 0x32968ed5}}, 0xe8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000b09000-0x28)={@common='lo\x00', @ifru_addrs=@rc={0x1f, {0x0, 0x6}}}) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000cf9000)={&(0x7f0000de3000-0xc)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000023000)={&(0x7f0000011000-0x204)={0x14, 0x0, 0x1, 0x1, 0x1, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, &(0x7f00002f8000)=@nfc, &(0x7f000099e000-0x4)=0x10) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000af5000)='illinois\x00', 0x9) recvfrom(r0, &(0x7f0000f9d000-0x65)=""/101, 0x27, 0x10000000000000, 0x0, 0xffffffffffffffbb) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00006f8000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00001bd000-0x4)=0x3, 0x4) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) getpeername$inet6(r0, &(0x7f0000d6d000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000379000-0x4)=0x1c) ioctl$sock_ifreq(r0, 0x600008b0f, &(0x7f0000fa2000-0x28)={@generic="10463b6de51bc39770c58b6f06906731", @ifru_addrs=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgid() mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000001000-0xa)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ec2000-0x8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00004af000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000fb2000)='./control\x00', &(0x7f0000fb3000-0x11)=@random={'osx.', '\\+md5sumeth0\x00'}, &(0x7f0000715000)='/selinux/avc/cache_stats\x00', 0x19, 0x1) mmap(&(0x7f0000fb3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000fb4000)='./control\x00', 0x0, 0x130) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000fb5000-0x44)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000fb2000)={0x0, @in6={{0xa, 0x3, 0xf3, @loopback={0x0, 0x1}, 0x8}}, 0x7c, 0x5}, &(0x7f0000957000-0x4)=0x98) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000cb4000-0x6c)={r2, 0x64, "16f5a8027bc017c7e0521c1b5e4c4ad6c8c50e18472f9e50e7714a32c05bbc31575178729504b6479f5e435e784a2d4b60b594d38e415f8a19cd035927a43e68ae88445a85a07b4d7d77e2ee410c1f0496cb50ee6f47c1d3b2f5132f4635d48784f9bb52"}, &(0x7f0000fb2000)=0x6c) r3 = open(&(0x7f0000790000)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$llc(r3, &(0x7f0000fb3000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000fb3000-0x4)=0x10) mmap(&(0x7f0000fb5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000fb5000)="e4772c6a4a994a21c7aa6a3068c544e7", 0x10) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x0, 0x0) bind$unix(r2, &(0x7f000000e000-0x8)=@file={0x1}, 0x2) r3 = request_key(&(0x7f000091a000-0x5)='ceph\x00', &(0x7f0000e08000)={0x73, 0x79, 0x7a}, &(0x7f0000040000)='/dev/sg#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000bbb000-0x8)='trusted\x00', &(0x7f0000c34000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00004dd000), 0x0, r3) listen(r2, 0x8000000000) accept4(r2, 0x0, &(0x7f000074c000), 0x80000) add_key(&(0x7f0000eff000-0x6)='logon\x00', &(0x7f0000acd000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000bda000-0x56), 0x0, 0xfffffffffffffffe) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000e0d000-0x10)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000608000)='/dev/sg#\x00', 0x7, 0x400000) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bind$unix(r0, &(0x7f0000749000-0x3)=@abs={0x1, 0x0, 0x2}, 0x8) dup2(r0, r1) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000c61000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006a8000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) writev(r0, &(0x7f0000190000)=[{&(0x7f0000332000-0x68)="172f70209a4f5fdc801c9c9bbab7e12266a74dbcb2f3a2498af86f55bccc20e2cedad2e0ac9d74b3399bf839a00394c001f86a1d91e5bf501c4120b70592980bf0b019a0b151219a6bc06319d45217bf33f4a40ee8f7b779ca283e0fb72a7df9ca6a3d68f7d4b80a", 0x68}, {&(0x7f0000c5d000)="061dab3e2038818df6782acf59f60effd17c5d7fb49e303d4e85c36ec0637fb05eced83fd5ff005e093ef2ece6cfa83ccbe6e77a2e417ee81e6674584ec9e3a51654834ca155456b333f29b46104c3921b5acd79059da97ea8393d150075f35ba2a9", 0x62}, {&(0x7f0000009000-0x72)="e3f39110e515df940398210c8ec49c910c3ece4844d3b8eae0a431286cd6ef3dc48f7f981f38cce511678d24f94397afb69b6fc9eb4f86660fd3531f84dfa750023e835c9d57c9c021a7f7565e8fbd20616f1bbff43d266ee0c30973af4d9d9a517ed1f0d15771d6d0059e69b0881c8e210a", 0x72}, {&(0x7f000005a000-0xa2)="d052c2cf25b9c29f188e1d883b1da98aa7178daec537ef0b42cc060aeea0134945f30dee6310241ff98af979a058022c2f2a6438d40fcbfcb8b8f56957ee38ed67ce8083477441437ab99af110f9e5c5012eb4d5493f3e42bfc1a71a0fe37ca0c27e539711557f4e85c4af64b98571147bc491ed05cf4669cc2546b7db7a1deff52b18de0d59426b3689abafdfbafb2a2a6478a19747018f233bf9ce42dcff2e9291", 0xa2}, {&(0x7f0000aeb000)="b9e94afa52817ad541d013ee1c23a33f667e771652ec3597b394f9167d3d7d043634ad0fe4e1de5236cac2d92bc69c7b10c3d19b35bfd2dedea3ade1d624b9b564dfd78715889a9007466fe86ab7b1ab1e1918928319f99a1998cff64a94dd9bf37c90b17c55f463b73969f140455312fef50e3924d7d7606bc97d34fc81e9e3ae8b56ff7a445ddf6927c2e7c044bdc194adc49471d9f905c1ef2c5ca3f1a0b0bb08d5378a0ff3ca8673bf309de826936414", 0xb2}, {&(0x7f0000e98000-0xcd)="37ddc061a979582735f9388cd0581e9ba71dbb49bdd4794c54078fc808c9b2cbd41a986fd00e3e50d36044501611d1881dc071899792ab8a7fbabc4d1a6f4239ac89f93cb87696476099622de5b412853bfa7878a07c1b1254d0205ea2481b6520eb96545f8f72690f73a6a72b7857b0c8b30e61731b1ae7fcac7071c2105ad439f5e034bb963438806fa1d3b7b11553d57700af3ba672b6c6f433281b5bce737b35386fdcbf59f5753a9eb137ca50ff0b01a7bcc939e244943663457c0003bb03370a59edd0e79555508151ab", 0xcd}, {&(0x7f0000b52000)="1fdcc4b9a24b52c94b4b3ca0b33ea3739b72355ede0e40659e95ece3b0c90a6059dde5c080c2ba8041962525b1c41c4842e4e95f873f21819c6078fdb3744f6a6f26e069646901ff437b706b68e19b2baaaccdf99946de00086861ccdffbfe7ed143", 0x62}, {&(0x7f0000bc7000)="56aea70449bfefeb41f4d00cd3ee043855ad5d1355083ada3ece86f7b4d80722407c3dc931b247b94d1089f6fc6997187f841828ba2fe0e47d845a2ed6dc3535b95e82a59646a5f4ccec6fcc5d861e86581f507d0c85ff9d6d81cb0298c45bbb686f1694b044e5679c4e89cf12246fb03e2d7a9dd6a3b44c48278bff62995cf4b2b5042400e8b39ffabd3a06", 0x8c}], 0x8) clock_gettime(0x0, &(0x7f00002c9000)={0x0, 0x0}) write$evdev(r2, &(0x7f000086b000-0x48)=[{{r3, r4/1000+30000}, 0xffffffffffff21f1, 0x6, 0x3ff}, {{0x77359400}, 0x7ff, 0x8, 0x2}, {{0x77359400}, 0x80000001, 0x2, 0x9}], 0x48) r5 = getpid() ptrace$cont(0x20, r5, 0x7fffffff, 0x5) recvmsg(r1, &(0x7f00005cf000-0x38)={&(0x7f0000ebd000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @empty}}}, 0x26, &(0x7f0000784000-0x20)=[], 0x0, &(0x7f0000c53000-0xf9)=""/249, 0xf9}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000b1c000)={0x0, 0x2, {0xffffffffffffffff, 0x2, 0xaf5, 0x1, 0x32b3}}) setsockopt$inet_tcp_int(r2, 0x6, 0x27, &(0x7f0000a1b000)=0xffffffffffff873b, 0x4) close(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r6) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') sendto$llc(r0, &(0x7f000038e000-0xd7)="4a2e518cd7870c576cb680a7fcd8201e59dc8ec16c2fdc85a048317f4d60441962b87797c8ae583c1ecd6320c7e9c70eed3657c3a88a3837702c238f1a165b891d44a0228bd8e6f244c588faa6cec706d8a83dc4bf34aa18761b1023cc7d5672859f4aa54e72d3e74bce64e094e6e36b3f189953d35afb7c748c517256faf5769597b0214ec6281bd3f7868a5676e0a73ae5544fb1f5d0e236b1ab686df0c555323d43812fe4d75a9ca8fb95754c442ec3c2949bd4bdf4af1a15b0a7eb5a60f8dd103156542ecfc9f4bb5e6228ab8c32c3afc3e95f6dc6", 0xd7, 0x80, &(0x7f0000a2f000)={0x1a, 0x6, 0x7ff, 0x3, 0x8000, 0x0, @random="b2564070fd62"}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="297560d858269c211c0dad93aa01224df081054d9fb6c46f7ee0386728f5f2df24eeb4897ad7596645017587023275ff023efbed621d79e8176ccba508973f452ab397eede5b4ab41ac8ef566de294fb5db94fefa4ba77265ff502c5bc886813e94fd0ad5ca56bd0e733fd81f00a94de3bf51279d0a9c01f9a9ed18ed53a04e5f112ca3680e1496a645e356c50b14aa5e4fa7b074f31992ddc021fa030182380d363e2bbd35325d8d7f4ccda5263f044ccee061acfa8798d0294bb80d1f5cf240dafa4544442355c0e59532558d07dd8b0ed4b12aa65b5e657f2cd76b88bba3b4e5f916fc166f2146cc394e562129740e4a169b0b8cdd5d12c5ed7ec2b05816560c95d08076b5abf2062ea39533146c0776e168263310c8e66e196a73978c9282598beca0dd460dce69af15b33a64c6565c4385ad7ecaa40b21366551ce916e13e1ad84ec1bc19f65da4bd3dfc028cb6dac263b93da4846688114e7aade3c23b36420e9ea0998b5a5c11a06a32ac4ebd45269251dc417cc66c8f2e92f73c4ec3a1fd8aad4e8d9e7039af4f78792f9bfcc20244208aaeb0125f1fbd9795fc3d7c6994be6567bcf8df9924542fcc14ffdeae264dbf4a9412528b5bbb4806f658b87f28e1fcb347ea91ed244712c141f331de30f27d1e5a09c607c9ac3fa1341d12ee5e89aadb21a1408ae350d67f527a73036cfb264713aa870df91caf219a2f71ce1a69399ca4358d654cde4afe168e3628b5574f1575cb8980d0ba7dcc559705bafd41f42cf21c49db359d4841576d4c2bd4edf5e09ca0db3f4cafa3ae5a2735567eb457d76cfb3bb47e77820f735ca9e78379b970486c4fbd06ddd929335cb62c3a9abcdfd9c6a07435a5f97cd030b2bc3c90ad546509093b9578c960258c73acfaaf0d2836a7c2c7e21731c56d3c50019cebedcbc776b6dd0455580fb974c6af5af1227cd562cbdb4e762a7929f79a36b8836220dfe358d59ce910b83427e82d7ed4a964b665f98588ddab529bd493ae92a2b1a673678530bfb31c4dc527e544a966725f67c56e243c36fcf0ecd9020c6a66d9dc754f7e42a98481efa2d34ed7e628ce7a6ceb817cd9d46e1211dffb60d53538e11532372220cdaf40cd3b9ce5cc099b914bd1dae3d4f6124e4a2e48f3060fec59e2d8733ca9ac56d3fc93bbacbc44ae5cd3b00d9ed33111b5459b0bd7bf2e6d24ac3e289a8b6ba38791d9bc72448b8124ca088db2a83f310b70f4d42442bdfdedec682d820addde7245f8564b7b069e82b441f0a32df0ac6fac8af137e45487fad37659d52e37331adb4e7a6ad9ebacaae4bed35a9b42525a9c704f8813132ec7003bebdd2ac8230d3c652ddd455624fcab393f6975061cbd06f26d0fc0cfb0eae17cd188b41ad4e8a05e7691383ff03f45e4a03480372c4ce8c2eae788c9f1200f7a248de1d4cbf92e694396cacfcd95d455e9a396d85195ee80817424a573638cbf77dd3722db656bc95e2341d1e880cca71f5c69338ef133ff1accd84a28f69b11d9a38f1397476b5c1ca77cb1eb0dfb2263578d7f2ba84e6f9728a8e38bc1065abe07bb8353ace5b7692640f9ca125a39a37578d669ba16c70172ca94a1f6f054885e6d260c87a275aed26636eaf00936446320531e36e092242a3871e73a2390803c53d09f0796e2e170ec3c2cf3f50f2bd84db047a7768535fee4935bf516347cda38746b85b7529c8922cff3088ea1b021822345f33eef226a6ef3aa8906b575d5e13e674249799e68bfcdf8e692a344b39fe6df4124f060137d250bb7b5fbc2a589d847e6c0ae7244d8aa46c683db5672030b4df4f0c99ffb192df0ac792c2a858ca79085bdd7ae0048ce0a29c88545ffbae3747639ff78f0c5f3785ce751d8de0f858054191843c3324aa990bb093616d98c0484216d68860d558d615c79650cdc0e6ecd7c9c477d50775df7ad87d798dc2996648be0173f5b78dbe044925bc442281637f5b2adce7c6625ecc8ca375d54807457b5eb68b4e25290ccc97d72ed0f76271bc99b3fe06ee7cdbaeb302e546e6486e4a2a2b9a19e5a61d8321ea9b643f138d88033f87a8965b725fda4e6251a6a7fdc798c77df4720bde070bc23bafe61968aec943a9d700c755fcbf659a2c58eae14cd3bb183bd46c8cc5dec7972ebd300bb909f5b39fe29cff07689565de7db33e3560f378558077246026fb8803b271989591ea6e4523d299be6b995a08ba96496772ae76ed0f9b9eca69a0ef91a8fcc14d5b090b030b632bd41878659163cd169170300cb8c236bb90be09717eaa48532ed64033356daeb62b6451cfbe42da35d4efe116b23c3dae9b624650fbab78f012ee904591044f8a78863efc4f7d1194a360f7e8519a55cc1fea26ec771ebc7e0b3d292e566ce5f8bef2cd5ff6d3b1f758a60c4e7c3faa9d415a938ead8c1116b9b0cc8fa9b696cbb11d593228dadab4fa081a6c20e2b5ca7798602534b27f12251285edd163110c716b51f430e1d97761d10bf730e584698ef4b33ac72649545f6aeab9ebfe93abddb89c5c723337a7740c59d3fcc591ee624f2638ed25361eb36f39959554b0f00e8b2913ba3801b57797c8815d7fdc72f515b8e77dff3ebae101593a63cc8e04b90ea4eaedffad1f00435c30dd53b6ee7b8032c10315d2392188948d976d3e9ef9561529a23379976fb8d5f1d604687648ee1caa9a374b26135fcfe5a392eeda26efb2420f32e2ec800a6daca4c89a0dff96042ff4a782532637ad2b1d0c23518ca34b84754756fe94d1c589f3bf32fbc055438b10ddc099b12d2dd145e20f1575ced4214136e259c4cb34b2472764ab04d6d9ad54aa3e5a0014d50222934182572b1e356d4c07ea60dbadd402fa7fed94488a32fb9353861115cf12e5adc1231c91ea0a211f94938e8b0504af820c16cdb853f09b85b0cfaab384027a5847f1c8b0b177ef8522fdb77add3e17a122c80bc0b6d909d3a0b07ecb319f9224d5c9226aafd53068d07b8eac29850ec04943e380a5d3a81e0b5628f606fc137a52ce4700f6114ec654179a24f0fa0e0e81aeb5f4de18ec23dc1f394a271b15b89e26d1d24825652080b2a8c1c6ace54f21b933d7df53fafbf43037890560a807e46e16780b9593b1ce13d3663465fd43c7c41f8614ba2ecd9a75d4d514faf7a2655e60222501ddfb1395799243e01d8380aa87cc1fcfccba26f5486510c5c686b1ed2143d3291a763ee1baf80d369c785f516c7e07954429ba03278a09f430e8f32ee061a88116ad9abc3c1d544b42804b028db010978632265e545b0aaebb464dbd3426fa7ccb663aaad7c51fb4e52012cf9a38d5f63a5e9748104d58aea138ad94236dc4f7bad35b02918ac27285168e54cde5a5770b89bd3fe679660583926c270c7fed1816dfc58f6272d9f3b1b568c51d7d49d33684d50776d3ca965ecf0e9029ef089850fdd943b6f1db749ae22b934c9ab9c614a3eb71c401fc2a797353eab7e8b2bd43981af48383c9e2c46ee66ffe59490ebb65eaef9c67f3cbc32be2c11a24bfc6fda8550a3eaad6faff6018be4c7cdcbf49292126f54977f782fc5db79a3a0e1ef2bf96b6ffa601b59e5094b1733573c7c09cd9651968231a32cfd9ec04a8028cdcab285ee4ed13fdb373e4b38433ecb95ed7474bd969feaa2d51a5b0c151d151ce689bfb19990d51d61ff142940dc44f1709b04acfacc7424826b279faa87e433232390823be116ba9112641ecbd90b08b1e696c2860ada8104649aae6b7efc686a02d4bbafb7e15878fb939ef5070789dc7af6042f685444c09a72175dee5296859829c825411d23781871a60d0b8026bf1be581ee8916d9970bb4e0dec6ffa2ef52f6a1dfd96fafab2b7477b5dbc5acb5eee33fa8a7fdd6d272d3d70e46a97d51f8d85149d6201da54caa8b5f84dabfac9c78e4455b5fca39d96fa90949241efc9dbc9f8cbe66d46a4a5818f698df91af6efde400506b9cd72ceab297edb07798eb0acdb4dce105e0a83e9621962314a7720fd2409e81ba018c244e5a935baa4727cb0de2d4a0c2dbdfc2d7cd1219e0bf56dd4603a5ed3d8880d22866736dec555eb7b32cce363baa7881ef7f24dc27cfc3550822db252549c3006b3853ea76e25caa5797cabe0386b58c76af74f7608bcfe8196c59a395bd54ced50d9dd4beed872773562bb6a746ec9415a5bc52f880fa1a2d9eaf2b31ae515ba7825c862e5b7044fe2d16b168427c58923a3537b83ec2505d384031a9d56e9c3b75875c33a80ee50b6d47e3192c5ec4aaacac7912cba16f468df23c0d0d8f4e487be80ae99c41d7e702fda50eedf30d3855a5ab6e5cb3bafcbe4e66fd09a9f6d6a4216d19135eb635219f7db18b3e2bcf4628d867d647e5d14cf19914c40cbae1e21e06fe99f715f980af4e77bc8d71ec1c2688ed3c5a961fa5624cd088b7586678af0145da2bc6d8a71ffed246d3970580a2ef77b9ebaf4d355e7162394838cc6fa8f1a6d954b1a4da62b65c6495fb43a904e9d8ea561a40f7826c931de1c1a193c591deea4b8181aa41760595d27e0fb1528e4459f1342240ca4f39126d8b3e9d89f0751c107d560fb469bc43137026818d653715f132ca080897b6cddd2bc311379ea1ba127eff151999aaa5690c92427c1039ad9f121473c18ba3b49f752199fe42ffaaf46a9487ab16b4257e355c53fc0fca0582c3c67019d73d1aa1d3ecff55489ac053559ad52efe11297d21acb269cd2308f69e5edd1f754f245e163a15efa5295faf992ea76c0e3f616e971a66bcddb39a11db5b55df7a88512c377a364044848bf9f922de0c36b71be1cf4efe5840b1b3d710c62812bbd6fe31852ff2301a8862c3b9642a1764510b77df5a6392bc9818e927f2425b1db8e988e356d705ae30ffb564fc1598454873e0b98fb3ada55134c8918426977fff8567fbe5821f3ee4a311a561f07606fab2945c0b6379b1c03972199f3234dab37f447ea8796b034794c049ca94c70b1e6b5953db3808982971a32bea59b9af56fe743e1a2f173afec1d51368402a69d29048b51adeebf7c3f9c5220844b2dcc4068126b7b9da2a6a3a4981f0dc22811aba72340e22370d865d11b18dda07d8d47fc5b996330f9d7631ed020ba6c038a1ade909c2e68f0170cbcff52621e3791bceb0b7130271a67af572f9de59fbee677b5f648c1fe2afa13746f6b7714409406111b7746f6c71530f690d3166a5c446142a01cc58cb98f1d047940555c32b285dc559c1796a90568f2ee3a7a190d3d9465a75007c5ff3eb8a96d50a5f6169cdffcc46323eb5f2807dfaa038a3256ac6d21d6c7b887296f7d0525fdbbf62d83f43ea61ccb3541f8a15ea16f302e8913e487b8828ad6244ed9eae00404c015b29002dfbe7a0c9e68374f224d52ccfbf44287d83ef6cbe5b94eff5f753328f647c3f1c8752a4cf6013d3761b31bcae6e20d876a7a7441f11405c6c1489f874d84ef8e5364546c1d9c898dc11c7a673b17d3d8c58fc1344484b16440276cd3264ec40220aa2c1298eac6535647dd238989f9a030c0a0f123babfdb83969f7303808094f4b64e1687d70f58ce0cce6705632bd82be6add3d8f794aaec8ea50dbf5e9a52a6417bcfdf5f8a069763b7263028d97f5e0bf7e561d2b686b8938871c1825057dd4ac40c1e47fe584b9b416951884aecf1a448b7f66a5578dc1c94b5efb69f8584d5faca2fbf9ba89b689f223b4e4b62245c55e70ec37743cdc594f1fa17ac72cd25f2d5b9343a302ab15d99249ce09b9bcaf94461b1b4b06764a6dabce", 0x1000, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xf93000)=nil, 0xf93000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f93000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f000011e000-0x8), 0x7c) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000f94000-0x78)={0x8, {0x2, 0x2, @empty}, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, {0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x4, 0x5, 0x94, 0x6ddc, 0x6, 0x0, 0x1, 0x4, 0x4}) r1 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000aaa000)={0x0, 0x20, 0x0, 0x9, 0x0, 0x6e62830f}, &(0x7f000076e000)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00006d9000-0xa0)={r2, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0xa}}}, 0x1, 0x400, 0x1, 0x1000, 0x20}, 0xa0) connect$inet6(r1, &(0x7f00003ae000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f0000f93000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000b39000-0xe8)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @multicast2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000f94000-0x4)=0xe8) mmap(&(0x7f0000f94000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00009af000-0x4)=@assoc_id=0x0, &(0x7f0000f95000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000f4c000-0x10)={r4, 0x8000, 0x10000, 0x10000}, &(0x7f0000c9e000)=0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000b01000-0x50)={@ipv4={[], [0xff, 0xff], @empty}, @dev={0xfe, 0x80, [], 0x0, 0xf}, @dev={0xfe, 0x80, [], 0x0, 0x13}, 0x5, 0x0, 0x3, 0x400, 0x1, 0x10000, r3}) mmap(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r1, 0x29, 0xfffffffffffffffb, &(0x7f0000bc0000), &(0x7f0000f95000)=0x4) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ccd000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000bc3000-0xb0)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000eab000-0x15)='/proc/self/net/pfkey\x00', 0x200, 0x0) dup2(r3, r0) memfd_create(&(0x7f000067c000-0x1)='I', 0x0) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca5000)='/dev/loop#\x00', 0x0, 0x181001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000479000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0a065200163300000000000083db76f181d706c6ae287372a39e76aff1ef051059b01546c36100368f4b2e57d33dff030001000000006b8a02809c85216b15d5", "242bc323ac3809907d760008000097074aad417f1fc271a2872f786f9246941d"}) r1 = socket(0x7, 0x1, 0x2) setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000867000)=0x9, 0x4) 2018/02/14 06:15:00 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000717000)='/dev/hwrng\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00009a3000)=@abs={0x1, 0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) bind$inet(r1, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00007f4000-0x4)=0x8, 0x4) sendto$inet(r2, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x0, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r1, &(0x7f00001c1000)=[{{&(0x7f0000c82000-0x10)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7f", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000d48000-0x10)={0x2, &(0x7f000026d000-0x10)=[{0x9, 0x3f, 0x9, 0xffffffffffffffe1}, {0x0, 0xff, 0x5, 0x9}]}, 0x10) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f000032d000)={0x8, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x1, @multicast2=0xe0000002}, {0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x15}}, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000bfc000-0xc)={0x0, @dev, @rand_addr}, &(0x7f0000412000-0x4)=0xc) timer_create(0x0, &(0x7f00004af000)={0x0, 0x6, 0x5, @thr={&(0x7f0000123000-0xf8)="32c864622cdbdd90f422ca0a15ecae9b52f4256f8b55a7444cad09907756400d3fc439e747f6abf22dba6972bf48b49273b715411e077b8a8d06d4b30388d1cca3927c55027fd38f1a8a932e6845773a865fa16ce3fcf59468bf34776200b673e082c3b25fdd39e6250060c3042d4d8f3ff3a852e892bc4a781d0e8f696da730d22f49d4b4e91b0a593418d89496a50694abbe2f7332b1eb5c3164b5cb8bad819f10dff2000895ed89384f609af74ded0d3c50d160cf0b2f603e3a319dd39fda593d6533bc39036d3d3cf812759fdc271ceeae1690632c230a5fd87dff1a9e20010b79bb337cf6a44201ef55ebc929682c92074325552fba", &(0x7f000026f000)="4964a8d3fa1f85e9a41eb83e2622326f329bff1633c63555b8b13e37b19b1515629077b8a9faf251975b6b33afcd5e318c68baa66bf598c9f65473e5133f9735c052741eabf78f26d6d9dc3e4d394bc1f4ae789d9bcce754c1d8a51e7b7435c7fad95319a5872449040f09bf2a8861c0166a91a0f7aea832c0ad8f413b"}}, &(0x7f00006f0000-0x4)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000267000-0x4), 0x4) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00008d7000-0x8)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f000011a000)='./file0\x00', 0x0, 0x0) socket(0x4, 0x2, 0x401) removexattr(&(0x7f00001d9000)='./file0\x00', &(0x7f0000ac2000)=@random={'trusted.', '-)-cgroup,\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00002c0000)={0x0, 0x2008, 0x42d, 0x9, 0x800, 0x7}) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0x39000)=nil, 0x39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000003a000-0xd)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002000)=@generic="23f9e7d53c2c4ebf21471dda780d0a77", 0x10) mmap(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000003a000-0xa)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f0000741000-0x14)) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000759000), 0x0, 0x0, &(0x7f0000d8a000)=@file={0x0, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000691000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000000d000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000196000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) close(r1) close(r0) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000051d000-0x90)={0x2, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006e3000)='/selinux/policy\x00', 0x0, 0x0) lseek(r1, 0x4c, 0x3) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000486000-0x10)={&(0x7f00002ad000/0x2000)=nil, 0x2000}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x10) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000009000)=0xffffffffffffffc0, 0x4) sendto$inet(r0, &(0x7f0000f9b000), 0x0, 0x0, &(0x7f00007b9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x2006}]}, 0x37c) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) dup3(r0, r0, 0x80000) clock_gettime(0x0, &(0x7f0000051000-0x10)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000ff0000-0x20)={{}, {0x0, r1+10000000}}, &(0x7f0000fef000)) timerfd_gettime(r0, &(0x7f0000da3000-0x20)) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x468) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00001e3000-0x390)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x200000000000051, [{{0xa, 0x1, 0x80000001, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x7}}, {{0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4}}, {{0xa, 0x1, 0x923, @dev={0xfe, 0x80, [], 0x0, 0x12}, 0x4}}, {{0xa, 0x2, 0x18e000000000000, @empty, 0x5df2}}, {{0xa, 0x2, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, {{0xa, 0x1, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x8000}}]}, 0x90) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0x35f000)=nil, 0x35f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000eb000)={0x0, 0x0}) mmap(&(0x7f000035f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r1, 0x712, &(0x7f000035f000)={0x14, 0x2, 0x1f, 0x3}) r2 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000344000-0x4)) setsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000140000)="79699abfb369939ce69f492c44c0ac50dd54d89009f0387f627a57c21df41a5fbed10c629cdb25d64bf9fc655304318dfa4adfe540935315078b3bcf25e17a28fdc161ce3a", 0x45) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f00000d0000)=[{0x10}], 0x10}, 0x0) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f000027b000-0x4), &(0x7f0000865000)) mknod(&(0x7f0000a85000-0x8)='./file0\x00', 0x8002, 0x6) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000913000)={0x1, &(0x7f00005a1000)=[{0x0, 0x3ff}]}) open$dir(&(0x7f0000b85000)='./file0\x00', 0x81, 0x0) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) eventfd2(0x1f, 0x1) writev(r0, &(0x7f0000fb6000-0x10)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000086b000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f000046a000-0x10)={&(0x7f0000f90000/0x4000)=nil, 0x4000}) writev(r1, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) dup3(r1, r0, 0x0) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000fb8000-0x84)=[@in6={0xa, 0x3, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x81}, @in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x3, @broadcast=0xffffffff}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}, @in6={0xa, 0x1, 0x8000, @mcast2={0xff, 0x2, [], 0x1}, 0x401}, @in6={0xa, 0x2, 0x8, @dev={0xfe, 0x80, [], 0x0, 0xd}, 0x2}], 0x84) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, '\x00', 0x14, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0xe}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x46) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007d9000-0x108)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000013000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f000000b000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000000f000)={@generic="fe349c69022848d8bc4676241f191c26", &(0x7f0000006000)=@ethtool_stats={0x1d, 0x1, [0x10000]}}) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000023000)={0x10}, 0x0, &(0x7f0000023000)={&(0x7f0000010000-0x30)=@ipv6_delroute={0x12, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_UID={0x0, 0x19}]}, 0x30}, 0x1}, 0x0) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0x5e2000)=nil, 0x5e2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$TIOCSBRK(r3, 0x5427) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000567000)) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f0000178000)='>', 0x1}], 0x1, 0x0) poll(&(0x7f00004d7000+0x82a)=[{r4, 0x1d}], 0x1, 0xbad7) close(r0) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000fc6000-0xe)='/dev/keychord\x00', 0x4000, 0x0) recvfrom$inet6(r0, &(0x7f000031a000-0x60)=""/96, 0x60, 0x1, &(0x7f0000dde000)={0xa, 0x0, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffa}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f2b000)={0x0}, &(0x7f0000fc7000-0x4)=0xc) ptrace$peekuser(0x3, r3, 0xeec) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000aba000-0x10)={0x2, &(0x7f0000fbd000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f000068a000)=0x0) r5 = getpgid(0x0) setpgid(r4, r5) sendto(r1, &(0x7f0000c9e000), 0xf971, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000fc8000-0x6)={0x8000, 0x2, 0x3}) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00002bf000-0x7a)="6504f0c3ebe3da65e78d8716a259e6dbefba2677dd00c8a8c5e4b5fa70289160e3634cce798830dccb8d51bc124fa1dea1ce552fca883fa55424ed68f8b3fb24fa0c8df47bc89390b2e2932c8ab01ce64ee93c69f040aea59e75e6993057116dfce5aa3b92cf40f0fe9e816c3fc0a9736ed470220badb29252fe") sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000002000-0xc)={0x10}, 0x30, &(0x7f0000007000)={&(0x7f0000f71000-0x228)={0x14, 0x13, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x5f}, []}, 0x14}, 0x1}, 0x0) mmap(&(0x7f0000f72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000f73000-0xbf)="ce4bd1085d136af18bbb2df3a2957a425bd1a1eb2adb7535808af612618d38b6f8144563ab7191b8336752195daf0287e18ce6fb3ce748df1eead240ae10d45c65d8d003030be50342507026e1884ecaf48e4a78534d92987fa93d7a85d06f542eb307167e647f1a57dd40dbd3738e93b6b80ef9da25f8624af85dbde94d232819eb3e5edf3dcba4e166f58f0ee1769502f68f4ba0a7b6fd68720c039bdd2d5bd4c89bc1016ed954edb393ea39a6848432184bd201b57ab9ebedd147eddace", 0xbf) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000013b000)=[{&(0x7f000055a000-0xdc)="580000001400192340834b80040d8c560206f8ff000400000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) r2 = memfd_create(&(0x7f0000eeb000)='cgroupkeyring\x00', 0x2) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f00007a1000-0x4)=0x18a00000000000) open$dir(&(0x7f00001ee000-0x8)='./file0\x00', 0x0, 0xd) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000330000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000856000-0x8)='./file0\x00', &(0x7f000091d000-0x6)='ramfs\x00', 0x2000000000000003, &(0x7f00008ca000-0x9)) mount(&(0x7f0000803000-0x8)='./file0\x00', &(0x7f0000976000)='./file0\x00', &(0x7f0000905000)='devtmpfs\x00', 0x85030, &(0x7f0000e9a000-0x79)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00004d7000)='/selinux/enforce\x00', 0x400200, 0x0) pipe2(&(0x7f00002fd000)={0x0, 0x0}, 0x4000) renameat(r0, &(0x7f0000f4a000)='./file0\x00', r1, &(0x7f000069e000-0x5)='./file1\x00') mount(&(0x7f0000214000-0x8)='./file0\x00', &(0x7f0000ecb000-0x8)='./file0\x00', &(0x7f0000a29000-0x6)='msdos\x00', 0x9025, &(0x7f0000f8c000-0x1)) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) fcntl$setlease(r0, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) modify_ldt$write2(0x11, &(0x7f000083b000-0x10)={0x7, 0x20100800, 0xffffffff, 0xffffffff, 0x8000, 0x35f7, 0x800, 0x2a3, 0x9, 0xfffffffffffffffa}, 0x10) sendto$inet(r0, &(0x7f00002cb000), 0x325, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000f59000-0x10)={0x0, 0x4f369afd, 0x41, 0x20000000000}, &(0x7f0000c0d000)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000fce000)=@assoc_value={r1, 0xe2}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00003a6000)={r1, 0x4}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00002dc000)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000140000-0xc)='/selinux/mls\x00', 0x0, 0x0) getpeername$netlink(r2, &(0x7f0000aeb000-0xc), &(0x7f0000e44000)=0xc) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000afd000-0x1)='\x00') [ 97.133754] keychord: invalid keycode count 0 2018/02/14 06:15:00 executing program 4: capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)) prctl$intptr(0x200000002f, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000fdf000)='/dev/usbmon#\x00', 0x40, 0x10d800) r1 = fcntl$getown(r0, 0x9) capget(&(0x7f0000098000-0x8)={0x20071026, r1}, &(0x7f0000705000-0x18)={0x6, 0x3, 0x3ff, 0x1, 0x7f, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000249000)={0x0, 0x80, &(0x7f0000e2b000-0x80)=[@in6={0xa, 0x1, 0x7299, @loopback={0x0, 0x1}, 0x3}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, @in6={0xa, 0x1, 0x200, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x0, 0x5, @empty}, @in6={0xa, 0x0, 0x1f, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xfffffffffffffe01}]}, &(0x7f0000b78000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00006a2000)={r2, 0xde8, 0x3}, &(0x7f0000e24000)=0x8) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x4000000000000) mmap(&(0x7f00009d7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) link(&(0x7f00009d7000)='./file0\x00', &(0x7f00008c7000)='./file0\x00') mprotect(&(0x7f000011f000/0x3000)=nil, 0x3000, 0x8) memfd_create(&(0x7f00000d1000-0x1e)="2d40bd766d6e65743176626f786e657430766d6e657431776c616e302700", 0x0) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf9000-0xc)={0x4}) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f00003f7000-0x4c)=""/76, 0x4c) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000a1e000-0xc)) epoll_pwait(r0, &(0x7f0000ba9000)=[{}], 0x1, 0x0, &(0x7f0000c58000+0x287), 0x8) read(r1, &(0x7f0000a98000-0x8c)=""/140, 0x8c) [ 97.157283] audit: type=1400 audit(1518588900.362:94): avc: denied { write } for pid=19893 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000f82000-0x2c)=""/44, 0x2c) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000003000)={&(0x7f0000000000/0x1000)=nil, 0x8000, 0x4, 0x2, &(0x7f0000000000/0x4000)=nil, 0x7ff}) syz_open_dev$sndtimer(&(0x7f0000003000-0xf)='/dev/snd/timer\x00', 0x0, 0x200100) socket(0x8, 0x80004, 0xff) r1 = gettid() clone(0x0, &(0x7f0000001000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000000000)) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000004000), 0x5) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000003000)={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xd}}, {0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, 0x5c, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00008cf000)='./file0\x00', 0x400, 0x88) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00008b6000-0x20)={0x8, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00007c4000)={0x0, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(r0, 0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000839000-0x4)={0x1, 0x9, 0x7}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00005b5000-0x20)={@empty, 0x3ff, 0x3, 0x3, 0x4, 0x7, 0xffffffffffffff81, 0x4}, 0x20) lookup_dcookie(0x3, &(0x7f0000928000)=""/4096, 0x1000) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000b64000)={0x4, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r3 = syz_open_dev$tun(&(0x7f0000c01000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00002d7000-0x50)={@common='nr0\x00', @ifru_names=@generic="1671a000100000000000002100000159"}) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000091000-0x81)=""/129, &(0x7f0000a1b000-0x4)=0x81) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000001000/0xeed000)=nil, 0xeed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000ee9000)=0x40000000000800, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000046a000-0x4)=0x7fe, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000000)=""/203) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000012000-0x3)={0x2, 0x0, @empty}, 0x10) shutdown(r0, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000eee000-0x4)=0x14e1, 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000)=[], 0x0, &(0x7f00009fe000-0x51)=""/81, 0x51}, 0x40002106) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/dev/pktcdvd/control\x00', 0x111000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000772000-0x22)={0x1, 0x5, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x3}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000003000-0x8)='./file0\x00', 0x2, 0x8e) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000004000-0x4)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000004000)) r2 = getpgid(0xffffffffffffffff) ptrace(0x4207, r2) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000002000)={@common='gre0\x00', @ifru_addrs={0x2, 0x2, @multicast1=0xe0000001}}) ioctl$int_in(r0, 0x5421, &(0x7f0000001000-0x8)=0x80000000) ftruncate(r1, 0x40000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000005000)=[@in6={0xa, 0x2, 0xb7, @empty, 0x80}, @in6={0xa, 0x3, 0x9, @loopback={0x0, 0x1}, 0x2ae}], 0x38) fcntl$setpipe(r1, 0x407, 0x9) open(&(0x7f0000005000)='./file0\x00', 0x80040, 0x181) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000006000)) setns(r1, 0x4000000) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000008000-0x4), &(0x7f0000001000-0x4), &(0x7f0000001000)) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000009000-0x4)=0x14) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000009000), 0x80000) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/autofs\x00', 0x121282, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001, @multicast1=0xe0000001}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001000-0x10)={0x0, 0x58, &(0x7f0000000000)=[@in6={0xa, 0x3, 0xd6, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x1, 0xc000000000000000, @dev={0xfe, 0x80, [], 0x0, 0x13}, 0x40}, @in={0x2, 0x3, @rand_addr=0x10001}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}]}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001000-0x20)={0x10000, 0x4, 0x209, 0x4, 0x3, 0x9, 0x8, 0x4d6, r1}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) connect$inet(r2, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) bind$inet(r2, &(0x7f000058f000)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000cb3000)={@rand_addr=0x9, @local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x6, [@local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, @rand_addr=0x136, @rand_addr=0x7fffffff, @rand_addr=0x27]}, 0x28) sendto$inet(r2, &(0x7f0000c96000-0x3), 0x0, 0x8000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000e77000-0x1000)="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", 0x5b5, 0x0, &(0x7f0000bc9000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/14 06:15:00 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000756000)=@nl=@kern, &(0x7f0000114000-0x4)=0xc, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001000-0x10)="eb7adf3bace12e7f23c33f185dd05715", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x808a002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000dd4000)={0x0, 0xe0000000000}, &(0x7f0000cca000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000055f000)={r2, @in6={{0xa, 0x3, 0x800, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc41c}}, 0x4c0b, 0x4fa4fa92, 0xe888, 0xe46, 0x38}, &(0x7f0000a7c000-0x4)=0xa0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd"}) write$sndseq(r1, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note}], 0x60) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000bc4000)) timer_settime(0x0, 0x0, &(0x7f00002ac000), &(0x7f0000355000)={{0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00002d4000-0x50)={0x303, @time={0x77359400, r3}}) r4 = syz_open_dev$sg(&(0x7f000086a000-0x9)='/dev/sg#\x00', 0x2, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000b47000)={@common, @ifru_mtu}) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000b30000-0xd)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00002ee000)={{{{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x10}}}, {{0xa, 0x3, 0x7fff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x100}}}, 0x2, 0x7486, 0x37d8, "3d5023df892cc6b19f12fc51e417cc87be395476a28805c7443b741b50b59348ed28ba5a626a0fda54b22af3738498ffaeb31eeb40cc650cc4079f6db210db313321f19fe497892ef2f9a6c883103ae9"}, 0x160) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f00004ee000)="ff55d36cffba04715d0000000000000100000000", 0x14) dup2(r0, r1) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00004aa000-0x10)=[{&(0x7f0000c3e000)="580000001400192300b54b80040d8c560a06000000000410489643c200000000000000018164243e8900000028215a0004fbf50dfff90004a5000004001ce1ed5e0000000000221f1000010007000600000000000000536e", 0x58}], 0x1) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f000083e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00005e4000-0x4)=0x8001) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000336000)={@common='gre0\x00', @ifru_flags=0x2001}) 2018/02/14 06:15:00 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002000-0x4)=@assoc_id=0x0, &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(r0, 0x0, &(0x7f0000002000-0x4), 0x80000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001000)={r1, 0x6, 0xef, "9f07cb3a701141a37bb9cbdf75d6f75f3117ed49acba7659820afa9b407855644ae4cfc9f774a0e55c91716cac495a66ebcba8aba233b7d48e77e4cb2beef21db3069374591cfdc716edb1a1a649c82ccd08d7295b85c3216150ede991d158a1fc12cf5f74af417a8598a4d3f639254f7cb576eb33f1cc15454cb0f41eb2ea30d562b22a7f59917d594dfceb239224d2fa97f3d098633777361a775e5160d45076ba2362baea8e9118f86c1ca9ae59c570cf1cd6ecf86d7ba16581ef045bceeb8b3db3b035d50f6d8f7ad83f47efa2612c609fea99017440dacd65ede61d718b2da605703cb4a4b24c10f6be1646ca"}, 0xf7) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ece000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0x89c000)=nil, 0x89c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f00007d7000-0xc)={0x10, 0x0, 0x2, 0x40008080}, 0xc) clone(0x6, &(0x7f0000425000), &(0x7f0000477000-0x4), &(0x7f0000362000), &(0x7f000043e000-0x2)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f000067c000-0x6a)=""/106, &(0x7f00007b0000-0x4)=0x6a) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000638000-0x8)={0xeb}, 0x8, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00001c9000-0x15)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f00006a5000-0xd2)=""/210, &(0x7f0000624000)=0xd2) read(r2, &(0x7f0000898000)=""/128, 0x3f2) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) readahead(r0, 0xffffffffffffff7f, 0xf5d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000ca9000)="f5", 0x1, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000714000-0x4), &(0x7f0000bfe000)=0x4) recvfrom(r1, &(0x7f0000d1a000-0x65)=""/101, 0x65, 0x0, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ca3000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000ba5000)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f000092b000-0x4)=0x0) ptrace$setregs(0xf, r3, 0x4d68, &(0x7f0000000000)="18b594777acc2d1e25d7b58a796c") getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000de0000-0x8), &(0x7f00000b2000)=0x8) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0x58000)=nil, 0x58000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000000b000)='/dev/ptmx\x00', 0x200, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000058000-0x15)='/proc/self/net/pfkey\x00', 0x300, 0x0) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a88000)='/dev/net/tun\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000e7d000)={0x0}) dup2(r1, r0) prctl$seccomp(0x16, 0x0, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) epoll_pwait(r1, &(0x7f000096e000-0x30)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000ec7000)={0x8}, 0x8) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$ipx(0xffffffffffffff9c, 0x0, &(0x7f00000fd000)) mmap(&(0x7f000093f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f000093f000)=""/210, &(0x7f00005aa000-0x4)=0xd2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f000051d000)={@common="6c6f0000000000ff000000000000d612", &(0x7f000093f000-0x14)=@ethtool_wolinfo={0x26, 0x100, 0x0, "01000000c87d"}}) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000067000-0xc)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f0000b6f000-0x34)=@ipv4_deladdr={0x34, 0x15, 0x801, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}]}, 0x34}, 0x1}, 0x40880) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000068f000)={r1, @dev={0xac, 0x14, 0x0, 0x13}, @empty}, 0x2) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000e4b000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_context(r3, &(0x7f0000de8000)='system_u:object_r:modules_object_t:s0\x00', 0x26) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f000060f000-0x4)=0x400, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000318000-0x15)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, &(0x7f0000d3c000-0x4)=0x80) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00006ce000-0x3f)="f9ebd28f9498dac7f37f8ae1543a0a63c5aa6e9559653ec340d9a4afedea5fdbc4c9f85b99260826adcd5aafecf40c1449561635b19ebe99ab55f5db2467df", 0xa2, 0x608007ff, &(0x7f0000cf1000-0x10)={0x2, 0x3, @empty}, 0xff27) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000111000-0x8c)={0x0, @in6={{0xa, 0x1, 0xfff, @loopback={0x0, 0x1}, 0x1f}}}, &(0x7f0000221000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000d77000-0xa)={r2, 0x81, 0x1, [0x8]}, &(0x7f0000550000-0x4)=0xa) sendto$inet(r0, &(0x7f0000500000)='@', 0x1, 0x8040, &(0x7f0000928000)={0x2, 0xffffffffffffffff, @empty}, 0x10) sendmsg(r0, &(0x7f0000531000-0x38)={&(0x7f0000bed000-0xe)=@l2={0x1f}, 0xe, &(0x7f00002e3000)=[{&(0x7f0000013000-0x1000)="8063bd765382efe814f0b81a685f0c879ffe79eb63a7f33856f7f830588bdf0b5da10cc277b3cf43c889e7d400b5436b708080081810b2d70ab3a4baf0f76dec17fd63041cf95559fa7a977f0686f3f3a7dce7f428382ffdd5cae31da03bc8759d6cbb7efb54fea725947a54410112492d08d1961fa302272e8661ee5a92340359c07a1038065c5e9d2012dd401da9ade94f80b5d34aed3d35015ece67906822c1bd7df1820acca2be82d814904f8f3ab347b9584ce20c040178617f4c70d9055d0e5a7c54eb2bebccb25f0d25891fd46d8b7c807a5e7ef5c2f0384ddcfdf0da835fd4771fc04964720f23d6924defec22d706938b5e8fe03f2fd8e6f23b0189d750e9069d4df1c399f8d98d5c96c421c747d5250acae948ca1522b1087441a2f4249e902be42e86bceee9c66b32079fbdc1fd29fab99ebb1a3dd25879c507d01a02919ae3bb5fa6cef0400b53d12f632919fa8661bfa799b6058381c92530a275b26ab3f1b12cb9199581598ecb128223c73b17bb76ff82c77e73c4074ce62d8781f709417b00f16b447e1a03ba13189a9d0d802d987abbf515fbc0c5b04cff4623e9990c3e5351329e17ed0bd6bfc07276188e845d6b3203a7d61675c842bf83d3dd77e996dbad53fbd3ad7d51c34cc391501ada6f7b30ee15f938908b866e92dad2c00ad80bdcdf1eb628838fb593e1320ac925d820e50f8c1eda816eb06e82a5baa3c94908f021f240852bd2342b9185707c559b471751a2ebf5c9dffc52df5de2e81dda4d637867c628a8d2b6d9e9aee7ffb4fefb8c7e6c53a3dec8f3f4", 0x240}], 0x1, &(0x7f00003ab000-0x260)=[]}, 0x0) rt_sigaction(0xd, &(0x7f00000f8000-0x20)={0x75, {0xdb}, 0x1, 0x15b684ef}, &(0x7f0000f70000-0x20), 0x8, &(0x7f00009c5000)) getsockname$llc(r1, &(0x7f0000076000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000db4000-0x4)=0x10) 2018/02/14 06:15:00 executing program 0: lstat(&(0x7f0000a9d000)='./file0\x00', &(0x7f000096a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000113000-0xe8)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x3, 0x0, 0x0, 0x100000000, 0xa, 0x0, 0x0, 0xbf, 0x0, r0}, {0x7, 0x7ff, 0x4, 0xdfb, 0x7, 0x6, 0x1, 0x37accb47}, {0x5, 0x39, 0x7ff, 0x5}, 0x5, 0x9, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x0, 0x10}, 0x1, 0x3f}, 0x0, @in6=@empty, 0xffffffffffffffff, 0x4, 0x3, 0x6, 0xc4, 0x7, 0x2}}, 0xe8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000001000)="a810887add3b388e9db900e71135e67b3c1ab1e3fe7aa0eb26d2e4de872d4626608df2dd6d76c35fc940d6381e1ab0c8712642c813e4c685cccd763fa5437ca15aa409acdc4913ccd6d10b9586697eadc1e0c7099e6f9b4b060075d19dd883cbd4144cd96889b38881231b4b8aed122b49f53adebafb61b72ca4c79c19b657340f4a1554bcf471b66507f8abfd11382ce887ae1deebb791483c2ebda3592b8846146ddd84085ed831dd3ed7d4ecd93a8ef35844098c49be9adf5ab96f3e9a9be9304ba283927fb482741ad1a0c93608fe96fd9ab466e0d41780d355c8e529590ad1ae4e9bd6b935350", 0xe9, 0x40000, &(0x7f0000000000)=@sco={0x1f, {0x8001, 0x6, 0xfffffffffffeffff, 0xe2, 0x6, 0xc2e4}}, 0x8) pipe(&(0x7f0000002000-0x8)={0x0, 0x0}) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000001000-0x13)=""/19) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000003000-0x38)={&(0x7f0000002000-0x8)=@un=@abs, 0x8, &(0x7f0000001000-0x40)=[{&(0x7f0000002000+0x249)=""/136, 0x88}, {&(0x7f0000002000)=""/75, 0x4b}, {&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000002000)=""/185, 0xb9}], 0x4, &(0x7f0000000000)=""/35, 0x23, 0x7}, 0x2) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000003000)) pread64(r1, &(0x7f0000002000-0x38)=""/56, 0x38, 0x0) getegid() setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000001000-0x4)='tls\x00', 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000004000)={0xa, 0x3, 0x6, @empty, 0xfa6a}, 0x1c) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000002000)="567429c709eaefd546d3707c793f253f062c2925106ffd302e", 0x19, 0x4, &(0x7f0000006000-0x1c)={0xa, 0x3, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6}, 0x1c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001000-0xc)={0x0, 0x2, 0x10}, &(0x7f0000007000-0x4)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001000-0x10)={0xa9a, 0x4, 0x4780, 0x1, r4}, 0x10) munlock(&(0x7f0000000000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000006000)='tls\x00', 0x4) connect(r3, &(0x7f0000007000-0x10)=@ax25={0x3, {"b6dd903cafc99f"}, 0x80000000}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r1, &(0x7f0000004000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000007000)=0x1c, 0x800) 2018/02/14 06:15:00 executing program 4: r0 = signalfd4(0xffffffffffffff9c, &(0x7f000073b000)={0x800}, 0x8, 0x80000) pread64(r0, &(0x7f00007d1000-0x3b)=""/59, 0x3b, 0x0) socketpair$inet(0x2, 0x0, 0xffffffffffff25c9, &(0x7f0000001000-0x8)) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00008be000), &(0x7f000030c000)={0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x7}, &(0x7f0000678000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffe}, &(0x7f0000f2f000)={0x0, 0x7530}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a4e000)='/dev/rtc\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000ec4000-0x160)={{{{0x2, 0x0, @rand_addr=0x8}}, {{0xa, 0x3, 0x200, @dev={0xfe, 0x80, [], 0x0, 0x14}, 0x1}}}, 0x80000000, 0x9, 0x5, "0a14464a9c7c02de6adf47fa988007ccfa2842b89f12e004cac550aaecee20e8310f6c0088e75fb99032d3c5e11f97cc6a6f9f775d72c06508ddbe264375095d755c3f46744d433d83e4fe259a1f7dd4"}, 0x160) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000e9c000)={&(0x7f0000b9a000/0x2000)=nil, 0x20, 0x5, 0xa2, &(0x7f00005af000/0x1000)=nil, 0x3}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000979000-0x11)='/selinux/enforce\x00', 0x800000000000a041, 0x0) timerfd_gettime(r2, &(0x7f0000200000)) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000112000)=""/125) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000f4d000-0x16)=""/22) utimensat(0xffffffffffffffff, &(0x7f0000868000-0x8)='./file0\x00', &(0x7f0000716000-0x20)={{0x0, r0}, {0x0, 0x2710}}, 0x0) renameat2(r1, &(0x7f0000669000)='./file0\x00', r1, &(0x7f0000fe0000-0x8)='./file0\x00', 0x0) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000001000-0x20)={0x5, 0x0, 0x10003, 0x800000000000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={r1, 0x1ff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000002000-0x8)=@abs, &(0x7f0000000000)=0x8) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000002000-0x20)={0x1, r1, 0x10001, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000002000)=0x6, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000004000-0x8)={0x10001, 0x800}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000004000)="cf1c22035ef55b6313e97be746fb81683218d8b16d85727866f691c0dc7a787ae29acd78f83ee2458db4e026b8b7ac75523e1fe410eac663090a1e966b4dc8e417ba1c26c6926ae50fcb369b3e0b11cec1dca2f0b962fa539f14e6c006ea2633751e83b1fd46df87a9e9cd939b9bc917868680ef0b2bc6e26f6085cd421decbf681bd5221c4bf006e2037b5d455de3150278b165e8f276c5f9788ab8f93f7b46cdd6b3fb2e4677", 0xa7, 0x20044054, &(0x7f0000005000-0xa)=@file={0x0, './file0\x00'}, 0xa) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000006000-0x2e)={0xf97cff8c, 0x8, 'SE Linux', "ae872e7017584515af444551b5a9e0a81f3d03e34ba51c47d09a9629253e"}, 0x2e) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000003000-0x1000)="ac334bbc3aa3ec244348cdec82ff1909e338a97f480131bc1dca5f5788e84aa1baa832eb95896365305d322e7235475d256261a3256397ccf47307fad10b60f31b75e362746a5faf7719894f10adc974395c6e3c26375a81d8bace08b272a8d21492e33b183ed43c05b715f80a3c3c7e0772a86755218a9f2373b61ffc43e2aefd8a3c8dce2a0a152e338634cb8bc7614e55f812e353fa8d2cd3b359a1641a68e618db6237d09e93b4040996c31d33110bc492fab72e803344fae034ee290c7b407229318e5e6eadd1915230fa5bb49990a8fe4367bf1cf248546ce494652ed3efde06c979171f351107c4cbd8ae03d723d208b1c38144ed00b6960ddd04ba0286c47ff1469ad906386a92623f386caa5243ac479a0d5b8190d3fd7d3e2dd82bfc5af2dd2c1dcaea22966d16b642061d7b5f13806552def8bd717520772b8efc292398ae20d8eac87ac9a3e515fccae29d3167be22cba6d1530817c547b840143427d317cde6425480bb9375d8cf94ac3109ee474f02b9bc8200387d2a2314eeec8de421ce4cb34b7c9eeb300296115ba63c6c821a830a31cee5e0fb8609aaab71391b5c1cee7191f97a9c97705b80402f7883c071030739d2c016d757a0bf24ca6dbee699cb1440392e2113a90dacbe788651b0da772b02486c5b69b781dca4a5bb6ee0b3c845ea3565412c4caf3b50ef3acf0dac7c937c7b6feadace505f69c01549cdaa3c0cfce74031dcdab3b7b530cd3b8a9053af7d3e44b872e5f59eb53e4150fb3cd6112b0445106ea2e95abb398b1125663e3b79725007856ffc57b561c1b0c82a46fbfd36c155c0c594735e97c04cbdecb940778d9bf7f0c2f83e7716e8eea1610ef0ea1921f49ac460c1234ddda61c19ffa3601fdf121c5e23714e5464f583d1b267ea19b42fabb371803a514e3009846618a8be8398bc3c628a2cd08a9ee1ec7a32814a5735f1a8507de408df754194766f4a4bc8824f0a192e94d312b39bff463f0cf1e7b82013941ec79673d51307246b38b4f04e1d578cbba948b5141fdbe58c5a36cea026f57ee22af99ece5234ad5571bee8bfe29066182269ca9d06de4a1047818405aef701616a2d521000fc2b6f51f6c7742005e62ff7285afec9e9ff01810e9174b2ce9a8f2f5e3c84b8bb59c85980702aa4d3d0bc4a9a3f558b3c85744d80361be03372d47b886a72744a6e34fbb4ccce32c48096f92316b19358c6c078e220fe37282ea290bac23088afbc9081bd179e32c79c8cbe7e40bbd339e3e9c5f78cf6c95e6540ecad68e45bd6afaa255b8ed5a6d6416eaa5de9fc50e26e2f93716169aeb90744275e3848c1ac924b868a611c7ca9e965b10bdcf74328d7cbef05df3d5b1e9fc6609dc15a039db803c20c2a65e24328830a547a94a460bb70e8d6a02050b468e862e6b5372fa3e5165a4017ca272f9f2a536314fbea40a63f4feb5a802f3e10a7479aec8b0f0ae584e207975c5c4eb7252cd8ec39a9cc116ba97f18db1e2db1a4a77d790bd941140249ed6afa2b33aa3f34eacd1d37800143febec19d76540f21ac84694c0107cf02efbc6a11ea3192dc9490d2371db0576b1b3be5a9a8e67b35c7c75fa142e70843febd9a93e42cc7e4e1d10bbe6d5fc0e894c7ce85411c2258c54a90652112755d5b16fe1165c5b61aa2ae5e310fa1d2ade0e7b14e9a3a49a0056aaaa7e80a22e6bc2f68522ba7f87e5b104cdaa9cf9d7c65a77efce0dd6a0db38fb2f81042cb37eacf17fc9c7e8fee1bc493452bb505a31c763cd51854c462d4598584190b79632e6b6f5d5db33e95b9ec859623a9d56760b175087378ad833233d9568f61b0f08a176ea98b496ca47a594e878a5549f175c9c0b86ff16d7ebc9fadff40ce38492099ce3532aae95bed5c9299e6becd6f39188d90efaa16d438d3b92051e5d67202e67ea42ddc6c328a7722702a4b18178474c21909eb92fc09e7a1d234481fa862e3b006af8f15735d21c6298a42e8895290314d617fbcf6431d56c37ac6281a6805f1735912d96cf2059f1ba2a786c3dd9231df45d89931a30c20d37b7dd5cd61adb5e3131bd143c31c1b3d00afcb9bc9dc2ea07a5a4a89391d41d58966601e3a7c46b1c37d6a298bf44b8632f42c912e77c5e15b01bf7c9c83a9ee1cdb5f2bfeab4ce2ac5ac26ec0be55d566883a0cd590d41e1665f766f3f1354643b5f55cf1c2cdf2b15cde5f8f0e2a1d7e662ca0f66a55c9c82a0fcc423bb4512543580bfe9f2fa2fc987477d236345260fc3e2020c0b91fea9b934b42a294c13cccd528af50e2b5c08fd469384dcea361f824255d5c67ade23e83b3cc7603317a0fd0fa1e1bd11f67c011bfd4f5204b9f45b3c8287abfce336034bcf1d72d9f6a9f443277bd8a5d810bbef1e1103a8e437b0a26d92aa267c7693386f15c51a12371aa768048a41c10d7b42dc275443d83d3e9f10947565ec98f51980b23bd5e2408f3c958636f13cd423f2b5b45dcae34494ef5e6080287cde6d530741c5a6c98a85188a72d882ba6111c622afbb4b88fee884012b0fae61df6fac8d96b663ee0886ff63b3de200c50fe352763fcbdf16e1325a0370beaed01c6991ee42073a5f4a9d166f0d67f14858192b91d681e0072be675823a7547f7c1fa48d057ba4e5dd95f6d8b8f1d17d228304c38c839b76a123336d92458552d6d13069d12a35d0411e8af3dcc06f2f74ee3fe0d1bfe8d86c40145c4ded44010d43ece5f82f56119d78ed361f6b0f2791cbc21198371135e370e7d4a054e7a0797dff7c49a308c7319ed0c0d57ced044349bbefd13cc7bed3b882eeb4261ad07a3d3bd1563487885a37b4bd5b94d05eedf02afbad14c48a00c92455a8ab1d09289388249b20856755c63b7fad77b5c9aa653c8351438fc141e6b2e1ad90ccd033f43c06f4bce303665bbe9edc8930d02ee3abee4f5a866edab2338d369de5c5b0f981d70b715544577006cd74a21822b3a46f48639c8392e8bdccb8d35efc2f208d4b5ae3ac49dbb6756e520ce1d21a2b930bb06262d20d697e535fd60ad347cca8e233e6e0e7c6d606e24f9a71709b10bcca215c72f22c431b1de199296cf1d071b2639c26d24d1dfd0ffe4f381d1d9844c100494d4555d58f7ae941b169a8d0c68ffc4ae44aedf3460becd2dba0e0adb011844923d9184983f4b697405b10ec8e768350144468bbd36a74abc61c96d1962a7b335aee8be396ca3c694888066229cf386e771b6e7e53f0903e4e832dc517a1a9384404cd17f823de19d3f43c5cd2c442486b55b6ebf94eb77bef51ca5b86d0535b38951031f57c53044265d9c538645e1a153cd6fe0757c9c437cab9e9a3bf4624c664a9e946ce674dad2ef69006bba11e1a661e1801384f8166195d40f6afeb062f2548b43a768951bb53a179c8209266c640da9458e2173df617343601d0563094d255d9fbb7294b756e7261b9dbbe51c028f6c614721ec8083df273632acfcbba2744fb855523a5a3b7892d4cc1d68bfe2322ebdc5833eb133e8c2be58a0c7fd65afc1136a3ae32683e77c1de29e2be8f042a26d477c187067fc00f1c6f583338fcb0a8c02fa861ffd729dabe7c22aa996c8c04c0dcd9a7686019c2344b576f8fbd0eef663890e515fefc9bc483eb4c310b466bf8c9094b06e8377608b2a58f002a397f7ed802dd86cfdbf787683697e2c0ef47e6a2c7f7e49143c9f0241172eeaf4da0126cf074d140f34d71d84a66ba3dba6024b67bdf0366c96bcc9a0ce49ddbb7f4daf2e5d04e465d517cfd9497e9228ba472c95302928b729525b66fecfd352b9cd7d618a513cbc83dc7e8dbc795d929c5d0b92bdb63a81226c1024f5ad56311b482dd556db4376e7fbebe0e7c0585ddca59d7621587bdd32c28fd34395e0b8ca14f2c3e4ece6b0b351e1960ed67ad20f2f3763e1fa3035f349c0f8655b0ab473544c610eae3f84041b1700b7f15860abda8ce7ee07f0d6f6eabcec56fefef420b7fba1e9b110140d05220863bba6db044fb431b7c85f69cbcad48dd1f255954ca50bf50599617c4b5ec8c02b9d368e60cd9f383c8fa1d91722202ab81767ea48602230c107feb037d892882888e5d2d9190a29b4ef7ff060aef1b008e6b7755b293f2c05fd33fb39c301ed2784a54c7a143826ed5321891d431c058dd2d09648110d5dd95787c50bb0973d08519d42332f491aa507fcdb57bed1e1da23c3fc260944806d8fa6a3828d2621059c0e38b12ecc25ecb771178552f99c43d915e3a0830e3391d793937ab5ccb640a8a38afe583565a2455f2a11d05645a05cfbd871caa2cc1b37e156509105a51568ea7716bb7538e2928d66bb36c813bb5966a718002dc742298083aac30725ac38312db2e63b3a531d9ad3d266a6ea06c96a67ee6e8997573ab0dc87ae690076c234f802942123656c95616e12544cf4bb68411b63c8255739013f85ffe44ad34fdf2737562ebda747099bd37b8e09812359d4c83ca3197a14df49aca9eda673199b1d34e7b9d3dd7380aa5cc5ee59dd2a273c44689466ff5951e10294c68684bae1c514b33d8cdc236cc4640df1af6bf245774359ff5067b91630b37443774c7dfe69fe71700271a3fc3c604b2df56be3578e85605d2a2ad01d462e552b431bd602cf2bcd193f5dba8fbce5d51bca8613fa5d577cbac0b6df02e3078f5e13befeee98367d5d5f8356b904c260b5fa536c9905c04390cc1425087461a717afd413b6424db6774f1fbd07b3463a974bbb8df1fb41a5a920263acd4d25b3fdb5c0809c7a9726d26a92876fa42547a7cf5b8077a84c4ef530d2a4f19a7d85120b3e4d1b141ba74bb62d4710f82942ec3a49d24400df33f7186eb75c16a0f584f2c427fe5d237d6d5ae1da7eab148036bf98c9aee8c340dcbe6c3ef0cc0925861af614b8880ae3a0d1f5a133690322be7f9deba52a2637e3fe94dad3a39df6961a3751c41f904e83b340e7a977dfa4254b5e03f25a933d9e76ffa49f36006138557a1030d1a3be874a7e4c5a3a894b5ab916eb6c4be0382bf396e57f9a6d7d13231c23552d8ca0965fc7b3ba5aa1d870383781fa15a27afdcbef29fa3c91e982ba9762a44a348d697d84853d8ec75b435b89e9f756c65bea0826b251816812f0d7f35f17ef54770a4c668664de1e7bf99d11bc590d4539f2eea273dec0352becbc3745f88e63c287d7c25f0badd04699cd65a4f53414486f8de0adcababc316798737afff6e71a6d4b36088b2e7d47df8bbc2f8eecccac15c59492b7055a7e81ac82cdc1b17ce464422b02a05edf5e717bd55f55d3ebd208f80bf7e1b868e86d91cf7d12dc8055f48b469d76a71f2c00173d91258d5b3367fec81f315520cd4a9965f92127414d117be9804ffbfbeebb167fa14d7439382486a4cf2d5cce50d1df73f8b081fe1ec5071702a9e3a85e2c7f16629b99878bf1fe18dee46dcfe54fbdb635ebf987127c6e6feb665a87bfdfed9eeef02aab91b8944ea1cc6be4f39f5e318cb82224df9b47c2b66f375784dd77eaedbc6e6b0e37c12c68696b6e7c8fb79cff558f8ba39976445c77a120ea253f28d04ab8d1f48f9bfdcbd46c54e7f66de11be742eb8c988e4be76111f4537d22256476419c913b94850456b0e27afca00c58a926139e17a74d0436dd4c014ddc2df9760d00721536e61d9c1ee4f169afc8f073707b3788353f1bf00bfb5522b663137ef110786e6342a2b4179ca31ec43e3cee490ac98e49d946ca46d6578de36213e2e4681d0c7ebad94d59208208b22a38295757da091a28d738317f8cd06fca") ioctl$VT_RELDISP(r0, 0x5605) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001000-0x8)) accept4$ipx(r0, 0x0, &(0x7f0000001000), 0x800) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000002000-0x6)={0x0, 0x180c, 0x1cb}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000004000), &(0x7f0000001000), &(0x7f0000007000-0x4)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f0000001000-0x4)=r2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000008000-0x4)=0x20) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000008000)) 2018/02/14 06:15:00 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00002a2000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001000-0x4)) mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f0000fdc000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000fdc000)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f000065e000-0x4), &(0x7f0000fdb000)=0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000fc2000-0x1c)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc2000-0x8)=[{&(0x7f00005c2000-0xfb)}], 0x1}, 0x0) r2 = memfd_create(&(0x7f0000fda000-0x2)=',\x00', 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000851000)={0x0, 0x10, &(0x7f0000086000-0x10)=[@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}]}, &(0x7f0000fd9000)=0x10) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000fdb000)=""/119, 0x77, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000500000)='/dev/autofs\x00', 0xffffffffffffffff, 0x0) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000437000-0x14)={@local, 0x0}, &(0x7f00006fd000+0xc1e)=0x14) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00006c2000), &(0x7f000083f000)=0x8) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000089d000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, r1}, 0x14) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000e09000)=@hopopts={0x0, 0x3, [], [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x0, []}}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, 0x28) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000014000-0x10)={0x0, 0x989680}, &(0x7f0000013000-0x4), 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x28) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000004000-0x8)='./file0\x00', 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0xf, 0x3e, &(0x7f0000000000)={0x0}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000011000)={0x8, 0x81, 0x10000, 0x3, 0xfffffffffffffff9, 0x8, 0x2, 0x8, 0xbd, 0xbf, 0x56, 0x4}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) clock_gettime(0x0, &(0x7f00008de000)={0x0, 0x0}) pselect6(0x40, &(0x7f00001d1000-0x40)={0x9, 0x5, 0x282d, 0xffffffffffffffb1, 0x9, 0xfffffffffffffffc, 0x9, 0x20}, &(0x7f00001a7000)={0x1000, 0x1000, 0x101, 0x3, 0xfffffffffffffffc, 0x3, 0x0, 0x6}, &(0x7f0000588000-0x40)={0x7ff, 0x6, 0x0, 0x1, 0x1f, 0x3f, 0x0, 0x7}, &(0x7f000083b000+0xddf)={r3, r4+30000000}, &(0x7f0000021000-0x10)={&(0x7f0000f4e000)={0x821a}, 0x8}) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00009b1000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @dev}, &(0x7f00001e8000-0x4)=0x1c) r1 = accept$packet(0xffffffffffffffff, &(0x7f000015a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f000027e000-0x4)=0x14) r2 = syz_open_dev$mice(&(0x7f0000ff7000-0x10)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000d42000)=""/4096) fcntl$dupfd(r0, 0x406, r1) r3 = syz_open_procfs(0x0, &(0x7f0000743000-0xa)='net/igmp6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000e98000-0xb)='projid_map\x00') sendfile(r4, r3, &(0x7f0000318000-0x8), 0x400000ff) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000519000-0x20)={@common='ip6gre0\x00', @ifru_flags=0x6000}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00007aa000)='/dev/rtc\x00', 0x200000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cdf000-0xc)={0x0, 0x0}, &(0x7f0000157000-0x4)=0xc) sched_setattr(r2, &(0x7f000086a000)={0x30, 0x1, 0x1, 0x7fff, 0x8, 0x4a21, 0x8, 0x40}, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000b1c000)) ioprio_get$uid(0x0, r3) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000384000-0xc)={0x10}, 0xc, &(0x7f00003bc000-0x10)={&(0x7f0000210000)=@getspdinfo={0x14, 0x25, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:00 executing program 1: clone(0x0, &(0x7f0000000000), &(0x7f0000b85000-0x4), &(0x7f0000ef6000-0x4), &(0x7f00000a3000-0x65)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffff9c, 0x1, &(0x7f0000001000-0x20)={{0x77359400}}, &(0x7f0000001000-0x20)={{0x0, 0x0}}) timerfd_settime(0xffffffffffffff9c, 0x8000000000000, &(0x7f00002db000)={{0x0, r0}, {0x77359400}}, &(0x7f00001c9000)) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = memfd_create(&(0x7f000003b000-0x6)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f000003c000-0x1)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) ioctl$TCGETA(r1, 0x5405, &(0x7f0000652000)) r2 = add_key(&(0x7f0000166000)='big_key\x00', &(0x7f000033b000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000762000)="5633915aee7dc780a2fd9bb5fed8c91720f65b52c9844fad37b73f2962193137190db35172c1bb8c5dd064", 0x2b, 0xfffffffffffffffa) ioctl$TIOCCONS(r1, 0x541d) keyctl$set_timeout(0xf, r2, 0x0) sendfile(r1, r1, &(0x7f000003c000), 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000001000-0xb)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008e8000)=@sack_info={0x0, 0x0, 0x7}, &(0x7f0000871000-0x4)=0xc) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r0, 0x1000080000089f1, &(0x7f0000569000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="01000000090002fbff031d0000010000c7000000e00003000480fbf502007e23"}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000002a000)='/dev/autofs\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00005a0000)=@int=0x100000001, 0x4) 2018/02/14 06:15:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x1, 0x100000001, &(0x7f00000a1000-0x8)={0x0, 0x0}) getsockopt$inet6_dccp_int(r0, 0x21, 0x15, &(0x7f0000a3b000-0x3), &(0x7f0000ebe000-0x4)=0x4) unshare(0x400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000960000-0xc)='/dev/autofs\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000101000-0xc), &(0x7f0000eac000-0x4)=0xc) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00002e1000), &(0x7f0000f56000)=0x4) mknod$loop(&(0x7f00002ec000-0x8)='./file0\x00', 0xc, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/14 06:15:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00002e7000-0x8), 0x8, 0x0) readv(r0, &(0x7f0000939000)=[{&(0x7f0000ac8000-0x80)=""/128, 0x80}], 0x1) r1 = signalfd(r0, &(0x7f00009be000), 0x8) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000309000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00007e5000)=0x7, 0x4) fcntl$notify(r1, 0x402, 0x4) 2018/02/14 06:15:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000788000-0xd)='net/wireless\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000dfb000)={0x0}, &(0x7f000019f000)=0xc) syz_open_procfs(r1, &(0x7f00002a2000-0xd)='net/mcfilter\x00') preadv(r0, &(0x7f00003b5000-0x80)=[{&(0x7f0000d57000)=""/96, 0x60}, {&(0x7f00005ae000)=""/115, 0x73}], 0x2, 0x0) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x100007, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x0}, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000472000-0x8)={0x0}) bind$unix(r1, &(0x7f0000965000)=@abs={0x1, 0x0, 0x1}, 0x8) 2018/02/14 06:15:00 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xba48fcccf12adf73) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00002f6000-0x4)=0x4) mmap(&(0x7f0000000000/0xcea000)=nil, 0xcea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000098d000)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r1, &(0x7f0000cea000-0x20)=[], 0x0, 0x0) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f32000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000ebe000)=[{&(0x7f0000444000-0xe)}], 0x1, 0x0) ioctl$EVIOCGSND(r0, 0xc0045405, &(0x7f0000ebe000)) 2018/02/14 06:15:00 executing program 7: r0 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$netrom(r0, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@full={{0x3, {"325fad7b9c385b"}}, [{"5975960804b246"}, {"eb6b6815d3f402"}, {"b9cc7500f8c2cc"}, {"378a842b2c6917"}, {"1bb4d24390783d"}, {"9c3224f2c3729b"}, {"d5087e38a91ec9"}, {"1cb0a4847d8e12"}]}, 0x48, &(0x7f0000129000)=[{&(0x7f0000000000)="207ba495d6ff086abcbd57c71d98a7486fbf1a636d0e63101f6ccf70e2bd68e88a053c366d5829826e5559f09326b352800cfe49678aa6ab5894e1ae8fed1042b2f7fff31fe1d90763e67024feb8aadb8335c7510b0f1cc75783ccd34534c2e77115cf9f5cbdd541d147cbe082afbc9866f231d3c8236b889cb81e1b745b9b85354a5e917404bcf3d9493db9f492268c0fb7f3d0712b3e17abe8410c062339eeb823e38342c878d44f1e049e80b42d45925779bedba237", 0xb7}, {&(0x7f0000589000-0xca)="2c6d2ae1389be11219f8901a8589c9d6485ccd8c83916065e20f2d9f0aa2d0203ae8e177734b159b27270ec003148cd4c24b02149a7a689c94913ad00e70d4a5b3c6a47c1e2727fab30a6225f2c7ba12f73c75c96534f5dfc3ea788f29aa9c6ae1dcf9192d58a0feef69d5c577b8a8199650c1119ba8d2df40c17a2799b6e3a76efa22292890969437731fda1698bf2e867cdacd21ed9856b36e14ff3a632375a79148a13b05a06b0f67f00c34b466705a02554c2a4c6a367b9fc8905293c2c3317ee0b590498206f3d0", 0xca}, {&(0x7f0000df3000)="048cae894c6f99edc6ad92fa199da648af4b72fa9875261cf0b5f0fa70376952563c33061a922396251138fc451f15ed5ab3fa71afe7cb00c9a54980cb19071737b1fb2bfe9a247d905b749c7dcd911104b044d899c25e0bb1b9c61aaaf07a01ff610944ee7b3f48254e897b", 0x6c}], 0x3, &(0x7f0000a68000-0x388)=[{0xa0, 0x102, 0x3, "d9dae055b4201a12262cda403113ea115d30cfe5eb3eff5ed0eec154c3e23a5b7f1f33a16c60254596705a0c27848997ba482157c8cca4adcecdc5a2b25d2a95368cec26a7a340f3ade761b0e817a457a4aafc7eb5c392ed9d922e2cb3767fbcf7baea933f389011fa2003d91dca002ca183d652186b3ed62f88a0a4d4c94bffa8ecb357583132369d48cc6d7e76"}, {0x100, 0x100, 0x8, "3b446e8c0ca8879a5d000eca4667f64e7ecd3d7728ffd2b752f4033c978afe1b782f62c2f3e3e679ce8ceaf6700a6f92d7a2189fc8ed11d11c8338238c924c816049f8b5f194176875c70a4a0597d7d1e850b62e7cdcf7ddc692328607229af8fc115fc28beec75dcb37bedd9ee46378c7cac0b4e17726d42730a4074d809558b6f43846d3d04b9873da34792cb377c191be35d0d08163ecdd2b9f591b83e3d3705b3297821be8889d238e0b6d59dd661e166a6157dd836b9b6adc40b2cb23c2681ba79a6c130e096b11b7a139f47f29c6e37c5518a542a02958629cc78d5966e9b1f8106caee341b8d5bb1a26142906"}, {0x60, 0x3a, 0xb6, "5bad79825ac3cc317f3f8d598d6443146ac2d5bfbeded49a22fb21a7c1fd8076b55b8e0931531e394cdf180c066cb8645e3fedd72967e366dd62bc74390c91501c7450bf00dc5aa90c70e81963d4b4"}, {0x98, 0x111, 0xfffffffffffeffff, "8e31061b0fb99678926f460e6da6e36dd668142fe588c33b29b58a1fa884d3c3eb0c7de12518909955135f93cb8a5a2af7f2ee2f48dbb849ab94f2da72c9a1476dc96504ec3929708c1084efcae789979c0edd582d9ebb24c7d24fb0a357e50b960142dc41be419f8e50ae151c4051e49b1145764b31f5d2e536e894f5e7cc7ffd1f679c"}, {0xf0, 0x3a, 0xdcf4, "9e1f498c030927b29ffd590b0537f1387afb01f612e2f2b8d7d4b36fb17cbf4892998fce760251ba7507aa2de2685731b0310f4093208667ad5b7002c7d572a064b9b86b09f5941f1a2c7422136aa91838a8f08eb776aa2cad59ef840ab22b0773e1f944a874a583f59d2426178be7b59d49b8faeb2f4d2b57dd5f864367eb1eec3114e656218dc6103d838695a5b524285c186c7d13c256a2e5ece29c68ba3db99967d79523002c2db5783293786cfb14752653d46e05cb0bddeb90635db8b0e391704ff1d0014274613a1d46c3807463a10fde34c1561cc4e4ae732e45ac69"}], 0x388, 0x800}, 0x10040) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f000097c000)={0x8, r1}) 2018/02/14 06:15:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000efb000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000155000)={0x0, 0x1, 'client1\x00', 0xffffffff80000000, "193037d57ee149b3", "b97d4c2da34e9250bc7271f8611efa698b6a6f34400be420712629d4f622b0cd", 0xffffffff, 0x5}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000ea1000-0x38)={0x0, 0x0, &(0x7f0000c41000-0x60)=[{&(0x7f0000066000-0x2334)={0x10, 0x1c, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}, {&(0x7f00006e9000)={0x10, 0x12, 0x300, 0x2, 0x2, "", [@generic]}, 0x10}], 0x2, 0x0, 0x0, 0x20008005}, 0x24040014) 2018/02/14 06:15:00 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000ab7000-0x7)='nilfs2\x00', 0x20000, &(0x7f00004c0000-0xb8)="fc39274cf712dc9f9798fcff34e7ae69bf0e0c91bc008a41e098a2681be3dc9de796f99f37505c8432b2aa0269e71bddef300c04a837b33173679d0598f09f389578e24c5738d7bd1fc05608b4d68c375f33683272a5070357ee6e0195a9124f78b123b52d94c6c085eebbd4c58a1e861e84bc427283a14152e46fa52671921d6e6c788777924be78e86b31c58ad5b6d4fdecf93c48c62aee4b2a036ba4b499698b65feb9f13fffd353dd3db2e41ec099689159a9f3b66d2") futex(&(0x7f0000000000), 0x8, 0x0, &(0x7f000051a000-0x10), &(0x7f0000000000), 0x0) r0 = open$dir(&(0x7f000020a000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedreceive(r3, &(0x7f0000002000-0x8b)=""/139, 0x8b, 0x401, &(0x7f0000002000)={0x77359400}) recvfrom$unix(r3, &(0x7f0000001000)=""/86, 0x56, 0x103, 0x0, 0x0) symlinkat(&(0x7f0000721000)='./file0\x00', r0, &(0x7f00001da000)='./file0\x00') mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r2, 0x9) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004000-0xe8)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000003000)=0xe8) r6 = getegid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004000-0xc)={0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003000)={{{@in=@empty, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@rand_addr}}, &(0x7f0000003000)=0xe8) getresgid(&(0x7f0000001000)=0x0, &(0x7f0000001000-0x4), &(0x7f0000003000-0x4)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000003000)=0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002000-0x4)=0x0) getresuid(&(0x7f0000001000-0x4), &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)) r15 = getegid() r16 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000003000-0x4)=0x0, &(0x7f0000004000-0x4), &(0x7f0000002000-0x4)) getgroups(0x5, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000003000)=[{&(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000003000)=[{&(0x7f0000002000)='X', 0x1}, {&(0x7f0000002000-0x76)="32528292f1b699bd7b80c4b16ff6959a6c65bed33e7beb6ec1f844b4ebc86c59eb8775bdde380c3449d2950dad3972ee1ac051fed777f9499821f874205f3e93a2f61e6a577f6e1a7c8f7c96834ff7bbb6f7c511ad1bbbe62241aee9c0b94fbcf0dcc96294819854572cc219d45c7419524c997535b7", 0x76}, {&(0x7f0000002000-0xb)="261d49652b833b6b334923", 0xb}, {&(0x7f0000003000)="afaa238af9b590a6d4ac835e2cf03948244f7941579e3225c2020a89d44302d4360a3de4e977ecef23a539f6a2a45fc9923a26b20d2ec9da66cdbef3ccd110c3f2aa8ddd33be82f2a57d1df011294027b152d27fce5688a069a5bd25", 0x5c}, {&(0x7f0000003000-0x67)="83e6fadb68a6cba607e5a70787a1f6d836802e58cea98d7ecd9490a07bb5001d2e6137ead8a27e0e3dbff7cae491bdf18f49bbbb407e8a310d2660af7dacee74c40c0ca62ff6ad2cf5c95096b219c0c7d7aff2f2a6a70afb119f4641abfe970cb95c3dc789a48729658bffd77c1abd771cf260d799d362f844155a1e739e321b73645126d8f7a651c48d9dfc8fe0f38d3bf979b243ebd20aae9abb353c65b7", 0x9f}, {&(0x7f0000000000)="ca66b155dbc69521b94a1dacb8330c050857f761b0f2f2b1be37e0243ecb752451aa7f447d0c768454b9a5af64567c945b5c9b2db089ee8ced4f46567f5f699b19b8366083802f80f47693e148297c551aa90569bc0411267665842e00c0ba601f297f3f5d610ddf1ff1d1d9148d167353b887", 0x73}, {&(0x7f0000003000)="854a247eeb5f05ffff6cf86849c59efc63fbf6caf1f7073ad900c8e4e218786eff551a8a1657f4dacc4da28ff491c7d2945f7f6c1d0e9d6e3b9d971bd3a0c81b294250078276ec22ea2a77574799575ebbb42f8f904a1b953ec32306809b2e89b30db65ec6956d11dde4b2d653622789fa87cc4fd89c95d6df5ef8d770919c8d2c002a143a0441c34a04f732dd2eb0851768791648386b68f338812ee5575d1971b006d3a37e44ba20c43e1aa35edcb36a0df3d000082e", 0xb7}], 0x7, &(0x7f0000000000)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r3, r3, r2, r2]}, @rights={0x30, 0x1, 0x1, [r3, r0, r2, r0, r3, r0, r1]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x130}], 0x1, 0x40) 2018/02/14 06:15:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f000082d000)='/dev/keychord\x00', 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$ipx(r1, &(0x7f0000000000), &(0x7f0000001000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netrom(r1, &(0x7f0000000000)={&(0x7f0000ee2000)=@full={{0x3, {"e3fe3b20d9e8a0"}, 0x6}, [{"754f99de6eaf02"}, {"c8be3feb740535"}, {"e01ba192c6ea69"}, {"780d1c467f8999"}, {"999a351c24be2b"}, {"e5e09958ec7b33"}, {"b3d62939cc4575"}, {"b39af06e3fd6c4"}]}, 0x48, &(0x7f00009dc000-0x10)=[{&(0x7f0000001000-0xd0)="b89c5d68c5a40c44fffd69a562b731fe8213bbd7ed8e1e54c3437e70f861c0a92f3bf5af1ee3adffa8aee286a231f1e5ddf0bd8cdadbdf233e807266df507978967cc4c70f126c8999ce549e5445247ec7b7fad57614fc118b5d06be597fddf835922a794da2340334ace277631ecc49836720ffbb3b9a16d3e81947e929fb50101e62455bdfb43b73c855c4f02406519f76190a9a70ce27b3040f95a6b2e0da1103b44285638737eaa4eaf6b21a2d5032c046816d5043b706ad5c250dc53418f6b61fa634d3a05573f8a637eb330063", 0xd0}], 0x1}, 0x4000) 2018/02/14 06:15:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a3e000)="3167933876727000c9") r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) r2 = socket$inet(0x2, 0xa, 0x0) r3 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00006e4000)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000c5c000-0x10)={r4, r5+30000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000484000-0x44)={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x0, @random="e46167460c7f"}, 0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, @common="65716c0000ffff130100000000000200"}) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/14 06:15:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) writev(r0, &(0x7f00008ad000)=[{&(0x7f0000d56000)="7b319747c4703888a4dc2bd85bf7", 0xe}, {&(0x7f00005b7000)="b976806a5307d600ff629151069fe6b917ad30f1a88d9f43db958588e028ac100ed3fab5600ab7010a81626b4f3b836dfb85f25f2628c48e2298149da561993370f1876fa72a7a11251c7d4b15f05d75a997d3d33b74410b1a5cf6b5c06e4d19c43731877f72d90509799aa44ff9f096a07e0b5d2916c283e4650e191a93d0b48197642df99f8b9a03ec8a24ebf1dae9cc9b98106e75b4de0725fde88fe364c6a9f86f1e5dbe35789242", 0xaa}, {&(0x7f0000aa2000)="dea8203e4ca1fafb33cbadfce8bd58fa8343eedca0778321b8d23c65429c2241e50d8c0fd28352ba0be80683668beaea83f632ce395601e37a3a97d8b49d04062199b08d4e516217738bffd6947248031f69828251e5c622f6e45a32b9b82effebfe062d5bf9d11cb13ebd7b66127e8a", 0x70}, {&(0x7f0000b0d000-0x1000)="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", 0x1000}, {&(0x7f00001a5000)="4de8aed64129928da2998806e60f8b250f2e690a8d81d7177567a9dc273d2b6d563f4151ea56f613e0597a778c9f2f6bb87b5cde3ad5d4489acc1e524362c6460366c1b7a7af63af7353bf52cb1962431507efffdeb940192b4c1cda566e9f3f25d7fc984af950a2f4794a4342083d06ac0b9793aebe052dfe09f5f074f5e9aa7230cd0a6cff92709cd243b5ae7538c86aba263a578f50e2fbb639aee693ea7514e980435db0112c06e41c7480ca0937b68f4663de891005", 0xb8}, {&(0x7f0000919000)="d4df92bbc82af0507aef051ad1ad6a616b511d40395b63074bb60ab813ef5e7d6b3c7108c1a1ef3cede423550b16f3336e6fded6dc288045eb4b56998da31049d4a99a6792dd303f4adf78f7ca3bd51e5a7c1bd5325297b40351ef9c202a8780c4d4f815846606daec1391df6f43d0ea1cf01386c4a020a5c0c42cc26259362f4f64cb660464f1613e7079f2ae442b0dd7211a1c591edd345716296e4fa925d9392cc4d7464c685fca144fd013ba0755974b28d665725a65bb0e0cadaa2b61804d6bcfdda4dd86", 0xc7}, {&(0x7f000087b000)="baeb3bb3ffc1be59ffe2477f617766f81b92be3f5971b3356999adee07bb2d5a57693e5c1bbeb11df95f951519ad620a358df8f5f5db44844a725282bf4d181749af3dba376f9b349df485b314058b84c671fba887ce70f8fcc0ae5d7248023bd26501c0798a875f39dc805b533974e97c3349e42fbded319a6a4b2a4702fe04011325b244214bf0ab411f44604efa7c6a7ab4df03c747c3aeaa1d434c1691d0ecbe991386b7598a7944862091de10e1c337de509d8d16311d7c67ed0a16b28212b4328ef7983b7f670a4f96513e28c061fcaeb271906f", 0xd7}], 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') clock_gettime(0x7, &(0x7f0000eb4000)) preadv(r1, &(0x7f0000007000-0x10)=[{&(0x7f0000006000-0x64)=""/1, 0x1}], 0x1, 0x400000000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000b48000)="24b38bffffffff54115223db", 0xc) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000316000+0xbd9)='/selinux/policy\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, 0x5c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000746000), &(0x7f0000f0f000-0x4)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000f0b000)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000242000-0x4)=0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00001fc000)={0x3f, 0x3, 'client1\x00', 0x4, "b86d5ed8a19d86ba", "672f20e77a7632c0acfb5be4881991a98e66bca1db5579cf0032fb874f1cdd20", 0xd7, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000973000)={@syzn={0x73, 0x79, 0x7a}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000e49000), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000ef4000), 0x0, 0x0, &(0x7f0000c43000-0x10)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendfile(r4, 0xffffffffffffffff, &(0x7f0000432000), 0xe0000000000000) fdatasync(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000796000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}) syz_open_dev$tun(&(0x7f0000249000-0xd)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00009c7000)={r5, @dev={0xac, 0x14, 0x0, 0x15}, @multicast1=0xe0000001}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) close(0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r1) 2018/02/14 06:15:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee000+0x64e)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe}], &(0x7f000000b000)=[0x0]}}}], 0x5c, 0x0, &(0x7f0000450000)="93485ddbbca3025488b0c78646560699c21fe909aadadf7634bb6d09202dda44fe44bf3de78200133423514fc12f33281e9aabd89f911e007a3ed458695a3a0cf80d63e66e0cf47ced3635a073437996462ef3aae57a9da54726c746"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000481000-0x18)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, r2}], 0x1, 0xfdfd, &(0x7f000000d000-0x68)="ef"}) r3 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f00005da000)=""/42, &(0x7f0000927000-0x4)=0x2a) [ 97.667079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28868 sclass=netlink_route_socket pig=20053 comm=syz-executor4 [ 97.684501] binder: 20051:20056 ERROR: BC_REGISTER_LOOPER called without request [ 97.714561] binder: undelivered TRANSACTION_COMPLETE [ 97.719844] binder: undelivered transaction 178, process died. [ 97.726496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28868 sclass=netlink_route_socket pig=20053 comm=syz-executor4 [ 97.744126] binder: 20051:20056 ERROR: BC_REGISTER_LOOPER called without request [ 97.744336] binder: 20051:20064 transaction failed 29189/-22, size 0-0 line 3004 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000dfe000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000)='./file0\x00', &(0x7f0000231000-0x5)='9p\x00', 0x0, &(0x7f00006ca000-0x9a)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000005a000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ca5000)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000d72000)=0xe8) r3 = getegid() tgkill(r1, r1, 0x2c) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000acb000)={0x400, 0x3, 0xd6ff, 'queue1\x00', 0x9}) r4 = gettid() r5 = getuid() stat(&(0x7f000083f000-0x8)='./file0\x00', &(0x7f0000df4000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000f21000-0x4)=0x0) stat(&(0x7f0000554000)='./file0\x00', &(0x7f0000ffc000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00001f7000)=0x0, &(0x7f000098d000), &(0x7f0000909000)) sendmmsg$unix(r0, &(0x7f0000ada000)=[{&(0x7f0000d7c000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f000036c000-0x90)=[{&(0x7f0000c5c000)="c457030fb123c55ec9cc6037815a372cb892fddd117f0c152960d215120990a11aec1e9fec", 0x25}, {&(0x7f00002ed000)}, {&(0x7f0000a82000)="c572da55b6f5f668dd5f500a0751171776915d8d96a7e2d0d1cb48a172fc630a1d5477d694fb4b42facc0cb981060e05aba6891e20aefa20d5b61f56ea34d626f93be1e9bd5c36daa2d5010086dd595592f0939c6bfc24909c0986f8dd75059920c86a9043ab92f8c610fdcfc0b5eda63e8e68f6740c0ffb968d391d5875b0d3c04e005d155e3eabbfd8ef680a0a845551", 0x91}, {&(0x7f00006a3000-0x1000)="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", 0x1000}, {&(0x7f0000732000)="f48d786750005d131ee5583f2f3cadc728ce7e9d88c8817e0f4f4747fb04ddf9ad06affb6e5acc6eb4118409384cc13a222901e0d0a413b8eeaa39be630c58e4b0324f4bd29d2abcd093fb375c61a444183498b0e3e0a6e614cf7493539e1824bfb34f0a08e1916b9bc66ebeae8f28a6d5b8509fefe7c1e597847b0be99a21f78b669fd8072536098d1dd76bf7a9bec10ae8bd0ac6927cea5ffe42429a7b1fd5b2b2638ec9a210838ded7604a4d5a69581e20bd9b0c44588373ee629df8480967ac84f734ef6e83d89abe25b2dc9e002cb2354a261a94e76112babaf6ea214f28f1cf0276852c0d85b396f94b525168251a87f397171b9c917a2", 0xfa}, {&(0x7f00007f2000-0xf8)="ed524398a0994634fda2c532332ea454883fadc08b01f0af3d0372b57ef674191e4e287df12f5917fb4f0626ecb324783fe6df607d24952224c82132b0a627bb22598768f6fa4ab4b17fda43e235dbdb9936bae6de543dff3ca23b6e3d39c68413bfa5711ed8a0437a4aba551a4b292d108407d7587acdbe48e958ac9ec4defb386ec93eae8b56da105eebacf70dcb6b150b639eb07e2d0895d0a75009cc5e4e1b496ea97a59f8fe49c1f46761e23d40cb996c65d55d88f4af8d91816ab56b0bc5adfc11a35f667e4049edd5ffc8b91f5893666fb8fb7b5c7b4b44bb89af27764ed5b569a36dd8968eaad9010120f59b843e22ab15b5ec04", 0xf8}, {&(0x7f0000063000-0x1000)="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", 0x1000}, {&(0x7f00000e5000-0xbd)="309917a63bfd0f685b4f552ad9d3caa04fe714f6d7a25ec772f2faa7a04a8fa2d351d4bdafd5416527599db7ed61a2b0ae3b705943c9eb4ede22ea4e84b8000d07ccae9c002d610681be17a5847619f2d4764b611609ab8f544e4da3f5f24f9aa8166f60ac95eabcde19b55b2966a109ba893fce33b1dcea8dcf9d1ad17b26e599c621c428f792be0eb5229307f8bb8ab46bb58fff2aba2b618c895a81e8a152977d9ed38bba494cab2f9ddf6975277d2b52666583eaf49b0631ac1e19", 0xbd}, {&(0x7f0000260000-0x1a)="3a38a576e4f73296edb167adfe8e32984eba1c0573230ea96c6b", 0x1a}], 0x9, &(0x7f0000879000-0x90)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x90, 0x4000}], 0x1, 0x840) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001ef000)='net/rt_acct\x00') lseek(r0, 0x56, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f000022d000-0x8)=[0x6, 0xffffffffffff9235]) 2018/02/14 06:15:01 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000581000-0x6)="6664001f26d0") close(r0) stat(&(0x7f000032d000)='./file0\x00', &(0x7f0000bc8000-0x44)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000ab2000-0x8)) execveat(r0, &(0x7f0000974000-0x8)='./file0\x00', &(0x7f00009fe000-0x10)=[&(0x7f0000e7a000)='eth0@\x00', &(0x7f00002cc000)='\x00'], &(0x7f00008c1000-0x28)=[], 0x0) 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000655000-0x9)='/dev/rtc\x00', 0x3, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000834000-0x14)={0x8, 0x2, 0x100000000, 0x100000001, 0xfffffffffffffff8, 0x6, 0x7, 0x6, 0xfffffffffffffff9, 0x7}) r1 = fcntl$getown(r0, 0x9) process_vm_writev(r1, &(0x7f0000eef000)=[{&(0x7f0000d00000)=""/214, 0xd6}, {&(0x7f0000441000)=""/231, 0xe7}, {&(0x7f00009d6000)=""/32, 0x20}, {&(0x7f0000635000-0xd0)=""/208, 0xd0}, {&(0x7f000085e000-0xd8)=""/216, 0xd8}, {&(0x7f0000370000)=""/252, 0xfc}, {&(0x7f000081d000)=""/209, 0xd1}, {&(0x7f000020f000)=""/26, 0x1a}], 0x8, &(0x7f0000bcd000-0x40)=[{&(0x7f000019c000-0x68)=""/104, 0x68}, {&(0x7f0000426000-0xcc)=""/204, 0xcc}, {&(0x7f0000f48000-0x1000)=""/4096, 0x1000}, {&(0x7f00002ec000-0x49)=""/73, 0x49}], 0x4, 0x0) gettid() r2 = getpgrp(0x0) prlimit64(r2, 0x0, &(0x7f0000d26000-0x10), &(0x7f0000ba0000)) 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x27, &(0x7f0000efb000), &(0x7f0000df1000-0x4)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000378000)={0x0, @empty, @loopback}, &(0x7f00009e9000)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000d7c000-0x28)={@generic="c01b2c69807305b4331cf7b76b4cc07c", r1}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000c1000-0x1b)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x400}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f000094f000)={@common='vcan0\x00', @ifru_addrs={0x2, 0x1, @multicast1=0xe0000001}}) 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = epoll_create(0x100000082) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000004000-0xc)) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xf7b000)=nil, 0xf7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xfffffffffffffc76) [ 97.760388] binder: 20051:20056 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 97.768105] binder: 20051:20056 BC_INCREFS_DONE u0000000000000000 no match 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d72000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000d26000-0x4)=0x10000) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000c4c000)={{{@in=@local, @in=@rand_addr, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000a70000-0x4)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000886000-0x14)={@dev={0xfe, 0x80, [], 0x0, 0xe}, r2}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f000018c000-0x4), &(0x7f0000b09000-0x4)=0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00007d9000-0x108)={0xfffffffffffffffd, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r3 = memfd_create(&(0x7f0000632000-0x3)='lo\x00', 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000b5e000-0x1c)={0x0, 0x59, 0xa, [0x2, 0x3f, 0x8000, 0x2, 0x7f, 0x20, 0xe3, 0x1000, 0x4, 0x0]}, &(0x7f0000cc1000-0x4)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000ec1000)={r4, 0xd0, &(0x7f0000ad9000)=[@in6={0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x9}, @in={0x2, 0x3, @multicast2=0xe0000002}, @in={0x2, 0x0, @multicast2=0xe0000002}, @in6={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, @in={0x2, 0x1, @broadcast=0xffffffff}, @in={0x2, 0x3, @multicast2=0xe0000002}, @in6={0xa, 0x3, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0xff}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xe}}, @in={0x2, 0x1, @multicast2=0xe0000002}, @in6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x1}]}, &(0x7f000024f000-0x4)=0x10) [ 97.807825] 9pnet_virtio: no channels available for device ./file0 [ 97.810552] binder: 20068:20084 ioctl 8010aa02 20001000 returned -22 [ 97.814842] binder: 20068:20084 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 97.814854] binder: 20068:20084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 97.814864] binder: 20068:20084 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 97.814871] binder: 20068:20084 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 97.814882] binder: 20068:20084 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.853060] binder: 20068:20086 ioctl 8010aa02 20001000 returned -22 [ 97.889500] binder: 20068:20086 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 97.889513] binder: 20068:20086 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c93000)={0x0}, &(0x7f0000a8b000-0x4)=0xc) r1 = syz_open_procfs(r0, &(0x7f00002e9000)='\x00\x00\x00\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0}, &(0x7f000044c000)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00001dd000-0xf)='/dev/sequencer\x00', 0x50000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000363000-0xb), &(0x7f0000acf000)=0xb) r3 = syz_open_procfs(r2, &(0x7f00002ce000-0xd)='attr/current\x00') sendfile(r3, r3, &(0x7f00006c7000), 0x2a) getdents(r1, &(0x7f0000cff000-0xa7)=""/167, 0xa7) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0xe0b000)=nil, 0xe0b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000e0d000)='/selinux/checkreqprot\x00', 0x80, 0x0) accept4$unix(r0, &(0x7f00004a7000-0x8)=@abs, &(0x7f0000502000)=0x8, 0x80800) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000e0d000-0x8)={0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f000078a000)={@common='eql\x00', @ifru_flags}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1b, &(0x7f0000306000)=""/248, &(0x7f0000e0d000-0x4)=0x5) 2018/02/14 06:15:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000ef2000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) 2018/02/14 06:15:01 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000433000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f000061f000-0x4)=0xdfdf, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00009a2000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000-0x30)={0x10, 0x0, &(0x7f000000f000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f000000c000-0xe1)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000edd000-0x30)={0xfffffebe, 0x0, &(0x7f000020d000)=[], 0x10000034f, 0x0, &(0x7f00000e1000-0xd7)}) 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1}}}, &(0x7f000073d000-0x4)=0x2e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0xb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002000-0x4)=0x81, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000002000-0x4)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002000)={0x2, [0x0, 0x0]}, &(0x7f0000002000)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001000)=0x6, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000002000-0x4), &(0x7f0000003000-0x4)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000003000)={r3, 0x6}, &(0x7f0000001000)=0x8) bind$inet6(r1, &(0x7f0000002000)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @rand_addr=0x500000000000}, 0x4}, 0x1c) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000002000)={0x6, {{0x2, 0x3, @rand_addr=0x800}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x118) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000004000)={r4, 0xd5, "42288382ab0f7cdbaae97046a06db0161dd0774f144c73a6307bea876d9986915c0c62e8ee05e068bda40ea98430d99a788b4cc6a8e26e266834280aa405f3ed499fa1fa8633ffc23595f42f35b8f3d38a982f982d4ea4ffb3c6c7ce7690f312acf64159b61ee176ff2305356aeb17c3095c988a4901572552348bda916fbeb7a9d5904e13ae45fef49993bab9123de66768ba875599383f0ad3e766342a4e5e5c17684fa90b3b33553fe15726cee25ed8c337e426297903f80f80aae0efb6ff19a57682089b10dc08f56e757016abaaa4f44cf90c"}, &(0x7f0000002000-0x4)=0xdd) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000003000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005000)={{{@in=@remote, @in=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r10 = getgid() mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006000-0x4)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000005000)='./file0\x00', &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003000)={{{@in6=@dev, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000002000-0x4)=0xe8) r19 = getegid() sendmmsg$unix(r1, &(0x7f0000004000)=[{&(0x7f0000006000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000006000-0x80)=[{&(0x7f0000006000-0x56)="b4a52f47367630dd3155edd3a3a203558a027e2a25fca57a0256e80e9ff82e46671905979c47a1160f11523d707448d0473dd9f86e26fedda0874a8f47b8d58ce154cd7e155786546e71d82aa03c9b265bf5ee3f2146", 0x56}, {&(0x7f0000000000)="6831c703f925dba070561d7c9a38ffcbe72a6cd3fc0217fed1ef8f3208586948a2bbf466481b0a6b02b3fe49a873c7e4fe2fb5c615f99ee7fe92825e759bdac6dc9af0c1c61d24f5b9fd3f929ccb636c4fffda2c44a6fccad9cb4e84194c165221ca1171e664c28c355736d47dafd331dc8ba4563a55fcf582df9b20de9f6c79cdb196e9d36c1c7ea1afab99c961c3b97482b903cd9f062f2da8544a2b2142a5fd0c3966d878f436c98f03627805fb2a91d7b901bea910b2c717ab0883bc00e063baa289ad44bcee3c19ef7cad9d55bac49617f841af952480a03c9646b6cdfc817a95f2", 0xe4}, {&(0x7f0000006000-0xdf)="3a3b96238e9d1aed9909c38b1cb8abc776c11c5a01e90f8879e2d8363008a2ed9cc60dae18952f97bb7c9d4621a85d4b7fd3f92783a9456b54db82f0cc7967121d6236638442f0b63b4286c3557ef259079467074d8170692f094f3ea045658fe100a9c6a9c3e46be18edd0b66be1f7becfd01c731c092a208f2adb6dcd695f7276f4e38e014e5c8b2be241ddda61c435339acd3a1b5099bc7a2675f96ee873f8337c073132b460a3c704e93a9fd6a9250f5aa8e62f47e7387bf9f6b365a8e85c6e09355fe09a9d9275b97c3efe044e0d4ca37b7b8e7525060b918da82e1f4", 0xdf}, {&(0x7f0000003000)="92", 0x1}, {&(0x7f0000001000)="a1a253bb3ef6d72acb85a20bca2ada41c29c36fb8e30a309612b6ff6eaaf2cd92b525ce5b48d1b9347b59d84522111f05f77314b00e13ea79f4eafefbdb32a7d376238ae33c7e94141100400a4cf8feac304602740fa9320e90839d5e6b6e09cabc92ea672d5391c40d6ebced1386e11ce", 0x71}, {&(0x7f0000006000-0x7)="b18de8d67925ab", 0x7}, {&(0x7f0000000000)="338f8486d586c3078f8e2b1532e58702e7062e769969973ac7fca7bd0edbeeb0cedaa884875a78a6a128b6a1bd19073f2748a8cf419de11f9a85b439508db860fe7ded19c2e2ac5c4dda07e1fbfe366cb89eb668d1e29175f1cf447d4eb3044668003359d44bf9e06c512b74eb9842fc867c159b16a948e78be9c3def4b6f36ed67763d374116f4d6d0b095d573c450dbfd25deda271f32d485c804de4de0f62a366293684ee34836e15", 0xaa}, {&(0x7f0000006000-0xb1)="a34693ae43907e0c4db1c71629db12af0888e312188c462a5c4f90527755b32b7c1e27eb4db766efdf66bfc53be6872b729a84a7e0372a679fd63557614bd24769b28585ad10d03fce7406bc6b41329dea21c3ea73c9cee8eabf88ad25f37d025fb3d67c204de334db9dbf25e792cf2ca9ab4552ae4992901be30d67fc9890ccbb2a35edc5e7bdbefce892def2e344dd5cbd1aa1b063a9a42ea10befe442a0cc59a6630cce1a6ba8551f3246e96fd8099c", 0xb1}], 0x8, &(0x7f0000005000-0x100)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r2, r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x28, 0x1, 0x1, [r2, r0, r2, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x100, 0x20000000}], 0x1, 0x4008001) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f000088b000-0xf)='Ocgroup{md5sum\x00') pipe(&(0x7f0000a4b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000247000)={@multicast2=0xe0000002, @multicast2=0xe0000002, @empty}, 0xc) write(r0, &(0x7f0000faf000), 0x0) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000025000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000025000-0xb8)=@ipv6_delroute={0xfffffffffffffcec, 0x19, 0x60d, 0xffffffffffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, []}, 0x28}, 0x1}, 0x0) 2018/02/14 06:15:01 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 97.889522] binder: 20068:20086 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 97.889530] binder: 20068:20086 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 97.889541] binder: 20068:20086 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.918552] 9pnet_virtio: no channels available for device ./file0 2018/02/14 06:15:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) pipe2(&(0x7f000044c000-0x8)={0x0}, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000c3b000)={0x2, 0x4, 0x8000, 'queue0\x00', 0x5}) 2018/02/14 06:15:01 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x200802) r1 = socket(0x5, 0x800, 0x8) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00003c7000-0x11)='/selinux/context\x00', 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000699000-0x10)='/selinux/status\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f00005cf000-0x28)=[{r0, 0x410}, {r1, 0x8000}, {r2, 0x1}, {r3, 0x2}, {r4, 0x1}], 0x5, &(0x7f0000be0000), &(0x7f0000d88000-0x8)={0x3}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r5, &(0x7f0000f13000-0x28)={&(0x7f000069a000-0x10)=@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10, &(0x7f0000d47000-0x30)=[], 0x0, &(0x7f0000f1a000-0x10)=[]}, 0x0) [ 97.958456] binder: 20099:20100 unknown command 0 [ 97.967898] binder: 20103:20105 ioctl 8010aa02 20001000 returned -22 [ 97.975797] binder: 20103:20105 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 97.975810] binder: 20103:20105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 97.975820] binder: 20103:20105 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:01 executing program 0: mmap(&(0x7f0000000000/0xfc0000)=nil, 0xfc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002e6000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000dc4000)={@common='lo\x00', @ifru_ivalue}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000b09000-0x28)={@common='lo\x00', @ifru_addrs=@rc={0x1f, {0x0, 0x6}}}) write$sndseq(r0, &(0x7f000086b000-0x30)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) readv(r0, &(0x7f0000fc0000-0x30)=[{&(0x7f000097d000)=""/123, 0x7b}], 0x1) 2018/02/14 06:15:01 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x5, &(0x7f00003e1000-0x8)={0x0, 0x0}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000700000)=0x3ff, &(0x7f0000f92000-0x4)=0x4) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000058000)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0xfffffffffffffffd, &(0x7f0000b2b000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00009b4000-0xc)='/dev/rfkill\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000547000)='/dev/autofs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000979000-0x4)=0x2) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c93000)={0x0}, &(0x7f0000a8b000-0x4)=0xc) r1 = syz_open_procfs(r0, &(0x7f00002e9000)='\x00\x00\x00\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0}, &(0x7f000044c000)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00001dd000-0xf)='/dev/sequencer\x00', 0x50000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000363000-0xb), &(0x7f0000acf000)=0xb) r3 = syz_open_procfs(r2, &(0x7f00002ce000-0xd)='attr/current\x00') sendfile(r3, r3, &(0x7f00006c7000), 0x2a) getdents(r1, &(0x7f0000cff000-0xa7)=""/167, 0xa7) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x10, 0xfff, &(0x7f0000002000-0x8)) keyctl$set_timeout(0xf, 0x0, 0x3) [ 97.975829] binder: 20103:20105 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 97.975840] binder: 20103:20105 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.994239] binder_alloc: binder_alloc_mmap_handler: 20112 20000000-20002000 already mapped failed -16 [ 97.998438] binder: 20114:20120 ioctl 8010aa02 20001000 returned -22 [ 98.013716] binder: 20114:20120 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.013728] binder: 20114:20120 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.013740] binder: 20114:20120 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.013747] binder: 20114:20120 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.013759] binder: 20114:20120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.048331] binder: BINDER_SET_CONTEXT_MGR already set [ 98.048340] binder: 20099:20129 ioctl 40046207 0 returned -16 [ 98.053501] binder: 20124:20131 ioctl 8010aa02 20001000 returned -22 [ 98.057146] binder: 20124:20131 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.057158] binder: 20124:20131 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.057166] binder: 20124:20131 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.057173] binder: 20124:20131 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x10000000002, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000ee3000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1100}) r1 = creat(&(0x7f00007a1000-0x8)='./file0\x00', 0x4e) accept$unix(r1, &(0x7f0000618000)=@file={0x0, ""/72}, &(0x7f0000dc4000-0x4)=0x4a) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000864000)='net/route\x00') ioctl(r0, 0x3, &(0x7f000088a000)="d96a6e11b5fae9341d77091416ac4209b149d244d89261747809e6b16c979a0ac090f6302e8dbefd3be85db6d5b63ae4aa92391371da2fe7490de1dd1e0ec3b56f9f3926080c60760baddb753b8e30b256e87781f077b8ede5c121774f17bdf30aa23f86ae27fe01fdb58246ba2e6bddbe08486f444338d44542b085452efb10db51b6844e48a29a18e8acfc14178df7619b3b63e91e5efa273ae479a1886692fbc96de73acf60464fe16cfd3e7acbc7048c70b6c89b99ef6c2604cbae") readv(r0, &(0x7f0000a42000)=[{&(0x7f0000e99000)=""/175, 0xaf}], 0x1) fcntl$addseals(r0, 0x409, 0x9) 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000008000-0xd)='/selinux/mls\x00', 0x0, 0x0) connect(r0, &(0x7f0000006000-0x28)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x9, 0x9, "4a7778c9b791d25e809612440412878dc192368f75c2f02566441ebb11cab246f08ac03c10f9b084b78bdbb4947cdd1e99268a2c56aec0aef8e10d2dd662c3", 0x401}, 0x60) r1 = socket(0x11, 0x3, 0x0) sendmsg$netrom(r1, &(0x7f0000008000-0x38)={&(0x7f0000009000-0x10)=@ax25={0x3, {"db7174505f69fa"}}, 0x10, &(0x7f0000009000-0x90)=[{&(0x7f0000009000-0xd6)="0c9ecc3b086de9af9d266d3cf67fb2127e89687f1e2607d1c32cb98ad5c4df9f992e53c3b6dadd278b8629d954f4d2380e9d86f330eafd2f95ab327d07a0f29ca1ce1fcbaf89ce1a8eb0952688ecf9a07ddaabe4c563", 0x56}], 0x1, &(0x7f0000008000)=[]}, 0x0) 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000d48000)) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3c) syz_open_dev$mice(&(0x7f000046e000)='/dev/input/mice\x00', 0x0, 0x800000002000) ioctl$int_in(r0, 0x80000000005407, &(0x7f0000735000-0x3)) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000011000)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x2000111, 0x1, &(0x7f000001a000)="0ec5550f58505855a4a6cfc6705c33d01e370edbf1e4e40d92181e9b5568e617151340b94ae92f561972e56fcb09aa7103f0d0afc2128f52270e780048", 0x3d) 2018/02/14 06:15:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f000035d000)='./file0\x00', 0x3024, 0x1) clock_adjtime(0x7, &(0x7f000031a000-0xd0)={0x4, 0x5, 0x7fff, 0x0, 0x10001, 0x3, 0x401, 0x9, 0x5, 0x0, 0x1d32, 0x7fffffff, 0x1000, 0x80, 0x7, 0x5, 0x9, 0x2247, 0x0, 0x5, 0x7ff, 0x0, 0x9, 0x1, 0x80, 0x100}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000818000-0x1dc)=@newsa={0xfc, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, {@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x32}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) flistxattr(r0, &(0x7f0000f12000)=""/77, 0x4d) [ 98.057184] binder: 20124:20131 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.063065] binder: 20099:20129 unknown command 0 [ 98.063071] binder: 20099:20122 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 98.063077] binder: 20099:20129 ioctl c0306201 20edcfd0 returned -22 [ 98.189723] binder: 20099:20100 ioctl c0306201 20edcfd0 returned -22 [ 98.202140] binder: 20145:20147 ioctl 8010aa02 20001000 returned -22 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000d48000)) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3c) syz_open_dev$mice(&(0x7f000046e000)='/dev/input/mice\x00', 0x0, 0x800000002000) ioctl$int_in(r0, 0x80000000005407, &(0x7f0000735000-0x3)) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x18, 0x0, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0xf) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) sendmsg(r1, &(0x7f0000cae000)={&(0x7f00005c9000-0x10)=@ax25={0x3, {"d6ec137d040004"}, 0x100000000}, 0x10, &(0x7f0000dad000-0x30)=[{&(0x7f0000dfc000-0xce)="cb5a42f7eadb5c4284462832797c5095c599a99f5586fb6ac7daf10d3842ef0b6120737d6055dba95e483a37bdaae5b518fc6097b124bc59c98feee88d3779a91101e00b1781548de36b52ab29dc273c5149721e6ca94028504021807e9ba14ce2cff102ccdf092fca063941109416a36ecca706ae9c85527caa001b5771ee07a621862deb7ffe767c229dc3999c88669f7e7bd3656f47d39e72d3ffa74dfcaeea58b8fa7b75a30fe7795a05a82b9d6b47d3bdfee3f1bf4c84ab5916b6534c652127cc2369514c4372cf6b45a9c4", 0xce}, {&(0x7f0000629000-0x90)="5ab1d714c460f363e2324dcee4d1b6914c02fd84e0650c93c675232abe62ceecc92deed5fc9e77721b9e7836c09207ae1f4395100f05784c6ed3554382bb4cf19257ad725c79447343f127d1a747f5eead49230b27e9661553fbd716e8d652c020853149bc96bba4dbc2c29023af4ce3aaed81c6db4185681dc909e182304d8eb9e4f61184e7cb46396e0f70ab0e23dc", 0x90}, {&(0x7f0000713000)}], 0x3, &(0x7f000001a000)=[{0xd8, 0x113, 0x1, "00ae3e788d38fcdeca131179e6e9790e46a5428bcc1866fef0d9a6636caba476ba972a54ee1a0d8b775434157d81da1c898adf9dafa072fd651ac7d45e1b26207bb4293bdd5f3e69a0e74a86a90f99fc0d7bd0fee6d46bd9968f7c4715aef62e0a9c6da84a6a47de001fb65e78db10de47645cdc3252ccb0ec1be2da8c46784017ab91515e9859b167be3543ee59de18ddf2018796941ed50b31a9ff719f5039824506141847911d758b454d03e7e7755b1695e165b9ace97d180fea7e5a0e72712c"}, {0xd8, 0x1, 0x3, "95b99190ee3fc79028dee113c97e5b41bd0a5125e098d53bc428376a16267b58ac1a45c28904d40a54ae786288e82615039296da799d136e0369e190b1bb16e5ca763bee0d7819aa9e0f3f5cb83894a200627320f2b858a62296e39abb8cd444f90f9587cbb30be09c735ac44eb3c8955596fb1c7c696b5ad19f7b807c2c2f2101166fb03dc3e981d0418cfcc4bc1c914ba100808804b49c562bd1546a5012b2190aae4a7f95a91be87bafda8eb29f918a5d20290c8d32bd14d6aec770bfd3953ddf357215ab5f"}, {0x1010, 0x10a, 0x5a0f, "2a7dfe1aceaa00e66a197e0115451b63bdab19b41fa473f868313aeb38b1e51a34443fe84c72b2bba96e5e7e1c7e45cf319c308ee2b45a9d8aeb32e63e08d4300925005998d6fd25a9d98e61b90978247b241a9088b6bb8f178883f49c1f5d36ea5bab1b00425bc286930f0f7c18e592b28f85e9c1c38966c2fb77ada16f52feb09d9bc8f682ba2cde7f14d627687f3d2ad43a89f3b14fc791cd10bb103f4804963c5e1a037900d8238ac64df3ee208dcecaf957db0c758d3819bc6e9f443d31b1eb01610f093d6ac7d7ce9677351a0ec72d463f686f92d04443f6761ec5ae250416bffe0903893b52e3e6b40e0b383db2976ccf6cb549ab2d8b87a8f3590655edcad49a5cad8eab29ff4872139ff3a1baa64dfc01a216da7cfa95c516c33c496e5a18c1fe8aeb51f988e8986414c2c46298a01c1a9f3f63a8c551380b62f785e7dc2e82ec7a0e0b05482176d498e6ec0efc2787f02df4d331da838ed35859b2a6c12b2fa9cf48d905a3ced1f88406d39200f08d81b9ee453f9fa3fa8ed6265703dea34e79315f9f9c0ac20d663200413d782dc4a6d89583aa3ac0d1e0798d60d5ff0fffb12b1b66ee0c25bcd55502d2096b46b2c87cdc88c04aa0c9df89c9992be139fcc0bc9c27484fff87e5da324ba9ca95a0714e66f6a35b7acef8eb560dc620d468d54c094d5c1888ef86b44c7ad810f65b7263c8d7ef1a783c4a0a27b4a61ef13e6fe735c5d85cac88be620a4418d74ba5dce8aa53684691931313207ba56e43a428d3f7802a8facafd0c50ebbde1876013dad657a04981a73f6853dcf519555b4f2c967b0237b5a8f1840d50c30475b7cd22e042709f1b2b1d0794411690c17f532f1135fecafdb98d4eebc175ec0754ad31cc8b00b3f8f0782dd9f3b17d2e83d00337598b39d1ebf78d4a657f4346c8503d3cfe98bcff101153b630a663ed1c69aa4fd3e5c399b7ada599d0984f09098b66dba33ee7101c2dc338bec2db58647f5243e621ccf591ce1c51b7b29b1cbfabf4a225e22bffda0f738d8e3e845928c222c7a4575b732a236772880e101a9c71925149a1a6dd4982fcfb9e3b7362afad5723ceb62b5676c2a6a98f67f9f75cd4ae5756ede95cb4cccfc94bc301a395bae1a53712b36dc08c82e22e7a9ecadac13baa33bc42006cb747fea12d19e178005c7e8b75eeb4d287e2fc2f067be65c2693b75943baa234ee81f95c3d705e2b82a61d92d275163c550c31affb7b709189848cb905a8275f25c10382b72778274d5bf6ec239f4d8f41b45a202d4b7ee03dc3f971d5e04d629226f598e3422b6590012dfd431ad45c699fc2772068ec5c2f48f772f18e0c76fd2340b43caaf1f3a68fe46bfd6bd42f947e2061eed1e420800e4697d02bfcae8f3081c1f59cc00452c1eeabf69e5cd64d3f77a165b16093965b7af257f3688121bc4d7fe80f1015af3358b03a64029aaed32a2c24ffde9f376b1fbfc35027e47f5f304c3d8b89b3589e60cbebedd1cb127ff473d86c6baaaa91510f7cda504d4f41f3be8077d5583f81d0800544c108d7fc1f9c322c8fa89e4cd9ed7d1d7279733a6e4690e59fcd5aa9f014df1e833e2b0f364ae9a22aabea1d4b44173b8e577d9713fc06dfa5c31ec8fc8f520073146b76acb1643e879bf213a3a725a5367ce795914f3972a6ce0cd43f0ba98b993ee6af77c8ad58f9e88870439e8c6e45e153fde0d917f1e83f8b308ef64def4789b5d8f4b6a0340faf35630af51ff65c4c5d7e71e1ef0d65b423c757d1c1b207f42bc9a5f1153c6510318fb08758f5ae6e29f3601e1542ddca4dd63f60c5f1bb0636bb8cd5cef1189b7c8ad697a74a80205dd791fcf78d545df17b41317cb8f1e600c116e2d75a3b35b7fac452f7ebb7e14ea00e22f831953ddd6245a86aeff473b4c1d9f1ceab1456fa90db7226d29e5405c39a4b0f94dc3cffb20b9008c39435102cb9c6308832647ba1f0de0e2bc3400df45af94c8d37e59d9f545df7850c1aea5fb59e8ad1ba66fec8fcb8c1627d3a5c5a27c9db55a697e860af2985da77ce5fd3b497bb2fcecd61c42d82c64bc077c0effbb538fb748c9ea613160392aaaafd95addc54988371c407f994ae654e6d4ac95babde185b4cfb3c4f2e845d759df0a79e9f2d6ded93882d392db21f149a1b2162894330a205115f7d03a22d42080dec7a9086f1aefd13455920eec278a839777fc970b0f4bf1b50e6d3f37b7a14ae8e4980cedbade45c3813216d7957812682830c8f975e8df7a696bae144b1f510b64163d458d52b895864adabc371163ff241b200eeb0b38a434105e6297d3d372fefcf3aee3403980f61cef020b803944068f741ca4b8af2ec6ddcbbeff6e5bff2682365a837e276ee9ec12857c24b5cde1e46166029f9f8df49020d926b45266be669f65afe34d4b25e2c370853faf8be1a458d4afd196751e8fc914989eb86f72ae55763976e99d9ea3a5191ea18320191b4bc0a5ba23ab0975b951189a9e3e77acfda65b45d60aed374d3caca5d3381f6d811c42bfa67c738d2a94b5dfb3992ea0fe23d293a8554fe0971e81ea605fec582827f312a3d924b9710365c3e812e2e100d70503a22265606da5fb7d7831060288e249fd1aba409d4d3656d835acc839848f4b7801db82dffb08fb2dbe880d456b6b2231301b8b92a9f56d9a7d1bcc800b3197a3d3e60eaf8506659cb04d92ce74c9f3c258ee940ee87e216b8c4ab3340418d000385b73f55b873c13595be256064fad61544cc8709b11cdb771d26cfece12ab7148ad4516fe49bf67118c0b6f60ed287edf6d04266ffdb3d6417b2845addbfbf68cb583fe718649987dfd1f067729f4934fdee37e1bf5dacd477f7a02c8676615a6b376968be125be5f41bb1461580fd9cce1fc8695f4b892a30e829b1f7e0819dce8549ff2e79b31eeb3548230b66c9b7d0987b019c1c831c4ba3db1a2b05e0f5322726ea0c6e93a6f7dcca0c3868cd5b667154da644ffdb88f21bf8d866bc8180ed4d1bbf3e80f88b4bd55c6d8faf9c8ef9acbc02cf297b0c853116b4865af36685ae9a7fd080f031f418638c1a7d8958e2544de63da8b08595e59ebc2fa73986d921aae57ef734d4b57b7c2e7901af7aa2c7220aa6a68d1fbd72209c93a266f6db96a32dd22330b695ee8d0cba1ee3157dbda379951c92d90f88ff1e432e62ffd58af3297a7dec1b480a9d615294aa2453934fbc70f5a597a4805561fba71c0139cbf503981a909a2863db68ca0606a39a449770b29578251ea75b7a113c5d25f1c3c0f61a34681e85b3da70cf509f8efa781eb48a8554a16062a9f96a2c55381bad2dc938624c52ddd68871486a82bb5c972cc0b8608879e629ca471fcb62e0a49e628952ead214a85f9d151b2663fdf37a78b0741e3391baecd4803f2258f2ded943db84ba89daf8de593ea898fecd8a3e1f9de493680214d6183b921d1fabbe42c1f3e1ba21e28b976d81052cc1f4c6776fe03c562ce19cef000b79f2028bfd81c22a05d464152d03de8bbfc5d281816d40989a6da04c8316f9bfa45df2c9232c42aadf32cddf6bdefcc91106865193e472724be60a37ce7d0eb63253cd069849eed6f8844e0179fa86a50f5cfb69caa96607d1508c62072632ed133b4eb3e8b142e02f19a704308e0749a38f1bca291732bdaaf075e346ca61b66bc5dc5412f9eaa4fe220351c066d9d2eefd7c341b9ac823a405aacbccdf9ef0d85e103531f3230de577c0c934fb8b2256f89743dd2a345742e58de196437f1b1e34024c52936d5f4ca60ce7e63c1c8aecdb9f617a8ef305a4b57e4418aa810a9cb7ec203ff9dfe6871f02e6cfb49a9ec768d487c10be805f3bd4214fe846fd43e87adaf41e236ad6035e178b6f85d8fbb1680fb37ba84925480e1ea4743b764e5b32b57301bed11198a9e9564e6a2143c2db6d41d71127f5390b762c50a9a2b704b8c60733ec9f06a7fbac0b24bab87b7e1cd6fceba53957c86a30b749a971a477552d6006dd7382b010722509433ec0bf751cb718c2ad8fdc1f2b68c30ac4a77068ff1551d41ad3b970cbeede42cb44a16ea2fe762b55b99a3baa7d216c8d5790bfeb5ff119d613e35a0d22fa74869f6df01ab79c963d5a35d9cdf7090769c5fb41d89069d214e8baa03129571b44e6cbdc3fdc47047f7e5a0476c4a903686b74214bb0ea7582c67f0075b1aa11bc9741e7249b86bba98470f98e91099fbb9692a48782623953befc5d1ea739b998afba185a029ba93abcc94c69c658a789cb113095ed57b95084cdd5bd9c8a0815ffde380b69650b8d2a5828db26b7d2235325cd97417df65f43a757243fa338ca058323f53d7e21f0647976056afb2562579b96dcbf191e55869e19cd00e522556df19f7d444400671a6cb4e8a384a53d74afdc175f8b3360a0bcba15e9489f9be51fe5823d5c7908c9446cedb3bfb9a5e07171d8278d638aedfe8a534a259bbd7317574c85f66196eb1ca97a7f962945ca54492ea5cbca992ee4a61cd6d78d9192c7a7f47a0395bcb3f018d4addf6271f144811d5f6ae14451ae8f208d32362248433763055d7cbfd3211bcd43bb991f4288554a43cdc79a00f07d8cde59bbc52b2016d25a35a7bd8217ca7672ef3b6b7bffdedd7339619df51d97cadd881156578517583edc8803abdcb2174844aab1e17e904bfb0753640f1a8685c67061be99d07e49a8000e458b17d8970c76a08ca2705e181360e8f803b2910174f0c42123bfab5a586752439d94acbe314c6b70b0a0b7127ef32521ffc4461b271db5f900400d2dfe70a338a9ac22e66692fb46a09dd5ecb619fb8fa0c4e068026e7835140d587eb3ccc6bb53583f319ce3a73024d844c7435369f4470b8ece83b2c4ea054f71003768794a753e101eefd1ac25120bb6cd465e2e797634bbf7b2e09aa7236fe78f937ac09aee9d48fc41e9cf9dc2f82e97642f3390932d2e4ec7b842287d32a31cd6d9fb11cfdabe7495d5b381b06cf8a74c3c4a80682248f3cd8e241237482fbb1477b8efe7f9846c63d0e08cca78c0d842b45f4e82ac5263c159f13203d8a33bd2b6a0d7d4f899179f563c08513e57f0abe163bd31e8268fd0b61f5036caca60b3bc9b95c1402c575a2c7a9f32544598a201b7d7117342494849626b4ef8ac20778a804f7a289f7cd30931092edde74e9be4dff6dff0c062899f5cf0d9d493035ad80a5ff926ca5b6337c0cfd0bada0787d2124d597d154026cf390531c445891b53ca84510be4325338f03989d156d08b7ad919f72f4409677f7d8134f78de419bf56e7bde3126fb77c968b2895380f1d0705be9968f08321ed9742a52a34b48dc5b62ead4c979dd4e10e0c8cc66148d891732a0665f7855c13774649586172bae1f90e708106e6c330002556b8657f1605cc1a8e772a01aeaa0328d001dbd625cf64326fae79962f5a6943ca6912e6f99a40a1c8528567615b1b67286810b226439ee5c50c5ea96f0c219b4015984daa254a80a3591af9ef7b72d22459bc84752a1563b3c39a8a8de2fb53e9ef34a737daee8f69f0be65fd34b7dae99d178f4e9a2a5b1eb887dce93a1c0f6127eca66433d00e129a284f4c3758f47f8c05326eea15bfd2063b568c923fe9b5f8e6c48c3085ba5897171b401922007996ff55413eb372c62a15ba9c52c61e2f1ae4340e053f07acae5b14ce2fa1aa887113fbdbd3c26906c8aa9d76c91dcc1af9f18817f7b9fd3a3c0b2b40a9db034bfdc6a8a141ebe8682674e766f84899520015a7c0d96b7f333c78b9d76de7238"}, {0xc8, 0x100, 0x4b451bbd, "e37c6210e994ff56950075f9ded315e6182e6766d75f9c0f4bc008c86c71b4d24dccbd4211f6cee70d407181e002c37932e58e36fc0bcc55305328a27c58ecadff84d4af521ff38d478a80016275be48f250f2c8d1b175dd8a2c38803184dbc393d1919318dc370b2576c4345386883088a52ca3b98a052ffc9915e4ee1726bc6d69b58c514a73426b12723245f83afff0d8ed252296e4f0c8fffe2f813ea14711240de50d59b3a21359373868caf59f9439ff2b21e3"}, {0x100, 0x0, 0x3f, "f825562789bcdfe211be62c08d16cbfde5f9060730cebd28c0b091e7e6e5440d364e4a2ce42137a6bd317ac2fdc56e4898d80dfe43f5727c11952559c30366de90fc8bd4d65100f954a13a85a954982a0ecf055b32705ab97fd43f72bc2125c6e0facd7a65e9b441ec276841c133ec47b16243593ca4ee78f44881f04c35c37b8851158dee6c2816d83a9a4396428de08c84f16cb57be9d06d84679ac56b65dd2ef683f7414b1ae8a7b160d7a8998d790658129e3b4070f982c7891ee9764b493ca68627932c5ad807cfa7948c0edee990ae5054999d1598a74eabdbeed769b42e77e16f951393d9be9f0915e112"}, {0xd8, 0x6, 0x10001, "44c0b5375d97608b4c7df588272dc2687c256c63605a5836f0e6a94e785e3adf32211729563aca984587724ff4d619ce4a21039be7786415cfbe3f81f80d6fd220d3d66cc2f2d02a8986503f244963f6db7bd7a6a6fd8187170dcb91938d2789c02ce35c16e674ecbd6e1eddb2ecfa8c2395f227c6bed6fb9fd637047a0772c76e8eb7b730b775dcd1649dd64a3aa56c28100d8ec31435b3dc35951d8cd634c155b2d1014d2509429d6e856b0c11ea4666633bafab83934494cde3935196daf16f1ed28b"}, {0xc0, 0x115, 0xff, "6a03a78ce263a931d772a292f3e85dad00a94bff813a0e63bd3f01704726e49f19a8b1219937c9b9a6f64993e5739ebf113fd08ef1a4a6be5653d6bb950d67cd0cf897463e67e53c8d2e0508fab824c7d84c6b3c921fcdc40ec342301d90e471ad12771951284612b8be671e5740bcd517fdcc60a4e3f99c72fbdc17f2230b66a60b899dcb0b572bcf55ab6a4000ab9de6de4b17bc7095f6a6dd3f978871769ee5eb81b9f92813cc6ef2c59eec9bdbad"}], 0x1520, 0x810}, 0x20000040) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x5e}) 2018/02/14 06:15:01 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f000051d000/0x3000)=nil, 0x3000, 0x10200000008) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f000074d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000065a000-0x4)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f59000)={@common='eql\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000a9000)={{{@in6=@empty, @in=@loopback}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000e7d000-0x4)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000fab000)={{{@in6=@empty, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00007fc000-0x4)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000048d000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, r2}) accept4$netrom(r1, &(0x7f000002b000)=@full, &(0x7f0000415000)=0x48, 0x800) r3 = socket(0x1a, 0xa, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000563000-0x5c)={{0xa, 0x1, 0x6, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x8}, {0xa, 0x2, 0xe1, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xffffffff}, 0x5, [0x4, 0x4, 0x7, 0x4, 0x1, 0x2, 0x7, 0x400]}, 0x5c) 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000ca7000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) r1 = syz_open_dev$mice(&(0x7f000052f000)='/dev/input/mice\x00', 0x0, 0x301280) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) [ 98.218614] binder: 20145:20147 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.233029] binder: 20145:20147 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.240254] binder: 20145:20147 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.253776] binder: 20145:20147 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.261366] binder: 20145:20147 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a88000)='/dev/net/tun\x00', 0x0, 0x0) fallocate(r0, 0x1, 0x2, 0x80000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000a1d000)={0x0}) dup2(r1, r0) r2 = request_key(&(0x7f0000a01000-0x12)='.request_key_auth\x00', &(0x7f00000e5000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00003da000-0xc)='md5sumppp0&\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r2) prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000001000-0x6)='./bus\x00', 0x1000, 0x0) r3 = creat(&(0x7f00001fb000-0x6)='./bus\x00', 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000ac0000-0x10)={&(0x7f0000c30000/0x3000)=nil, 0x3000}) creat(&(0x7f0000044000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000f40000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendto$inet(r0, &(0x7f000024d000-0xac)="50ecc5dec9ae5c87f626f51a5f927a0e04e8498e1224ba75ccd6bf045a4b8aebdcf9a911eee7ad8aaf86443fc87bb8eaf42da2adc1b5f036655ade37855e6fca79a771e4db15dd7d996173e8588a689f0fc0a00850c727102f4d11707203f7c30e581e5b2b081a97fbe0e675fea1a6fb47d4b45446a2b1979484d978221509aed16bbbeef07e9fad67d10ac2d0bf2cd76d01caefbbadd9ba0b7bee7e4b8ce4ef81dc10ac10ebc3750325f357", 0xac, 0x0, &(0x7f0000601000-0x10)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00002a9000-0xc)={@rand_addr=0x6, @multicast1=0xe0000001, @multicast1=0xe0000001}, 0xc) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000134000)='/selinux/enforce\x00', 0x8000, 0x0) r1 = socket$inet(0x2, 0xfffffffffffffffe, 0x0) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000df2000-0xab)="1ebc9f28287c8ecb598e9bf9a53179e12c856bfb47948e2f9fabe85e45acf9e7fc4203ac3272685396d56a8673ab35d5613a4cbae8d91795ab3fccc3cc8d311f8847a117fc41146b606caf87739d81407e04d6302cd96a19c1ce30d807e76c467f28a205d090a9341383d54f0a5095be631d3c53b8aa2e8e13ad496882b9c196af60f56c078e0b0d6e5149dc41255101", 0x90) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000816000-0x20)={@common='ip6_vti0\x00', @ifru_addrs={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x11}}}) [ 98.295114] binder: 20187:20191 ioctl 8010aa02 20001000 returned -22 [ 98.306407] binder: 20187:20191 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.322809] binder: 20187:20191 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.330170] binder: 20187:20191 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.337432] binder: 20187:20191 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.345004] binder: 20187:20191 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00002f1000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000ffa000)={@common='syzkaller0\x00', @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) mkdir(&(0x7f0000db5000)='./file0\x00', 0xfffffffffffffffe) lsetxattr(&(0x7f00008fe000-0x8)='./file0\x00', &(0x7f000053d000-0x13)=@random={'user.\x00', '/dev/snd/seq\x00'}, &(0x7f00008a1000)="020000000200000000000f000709002d6a1f06a05882", 0x16, 0x0) 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000a1f000)=0xc) r1 = getpid() setpgid(r0, r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000001000-0x4)=0x4) 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000a7a000)={0x0, 0x0}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000366000)={0x6, 0x0, 0xffffffffffffd1c0, 0xf02, 0x6, 0x5, 0x0, 0x1ff, 0x4, 0x100, 0x5, 0x99}) request_key(&(0x7f0000f8e000)='dns_resolver\x00', &(0x7f000085c000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00008a5000-0x1b)='cpusetppp1usereth0mime_type', 0xffffffffffffffff) 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x4) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x80006, 0xfffffffffffffffe, &(0x7f0000029000)={0x0}) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000024000)={0x0, 0x3fffffff8000000}, &(0x7f0000029000)=0x8) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f000002b000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000009000-0x4)=0x1c) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000029000)=@assoc_id=r2, &(0x7f000002a000-0x4)=0x4) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000002b000-0x8)={0x0, 0x0}) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000000)=""/151, &(0x7f0000027000)=0x97) socketpair(0x8, 0x907, 0xfffffffffffffffe, &(0x7f0000011000-0x8)={0x0}) r5 = fcntl$getown(r0, 0x9) r6 = geteuid() mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000029000-0x28)={0x100000000, 0x9, r5, 0x3, r6, 0x3f, 0x7, 0x3ff}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007f00082d1cb2a4a280930206620100a84309000000000000000503000149dc50ca8a9848a3c728f1c46b7b31afdc0938d54400009b84136f075afb83de448daa7f000000b8220000bf0cec6b1391d4", 0x55}], 0x1, &(0x7f000001e000-0x2a0)=[]}, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f000000b000-0x8)) 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000006000)={0x8, &(0x7f0000006000)=[{0x6, 0x0, 0x6, 0x8}, {0x43e1, 0x8001, 0x100000000, 0x4}, {0x4, 0x800, 0x0, 0x200}, {0x3, 0x0, 0xe2, 0x81}, {0x3, 0x1, 0xffffffff00000001, 0x7ff}, {0xdd7d, 0xaae7, 0xfffffffffffffffe, 0x40}, {0x3aba, 0xb3, 0x8bfa, 0x9fea}, {0x8001, 0x2, 0x9, 0x10001}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00009dd000-0x38)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000493000)=@newlink={0x38, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VF_PORTS={0x4, 0x18, []}]}, 0x38}, 0x1}, 0x0) fstatfs(r0, &(0x7f000000b000-0x81)=""/129) 2018/02/14 06:15:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffa, 0x2}, &(0x7f0000000000)=0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000c10000)='./file0\x00', 0x100, 0x20) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f00003b6000-0x2)) capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) socketpair(0x2, 0x0, 0x3, &(0x7f0000da3000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f000040a000-0x8)=@assoc_value, &(0x7f00004b5000)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00008fe000)={0x0, 0x5}, &(0x7f0000345000-0x4)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000165000)={r4, 0xff}, &(0x7f0000fa2000)=0x8) prctl$intptr(0x200000002f, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000042000)={0x20000002}) 2018/02/14 06:15:01 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000bd000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f000025b000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}, @flat={0x73692a85}], &(0x7f000000b000-0x30)=[0x28]}}], 0x0, 0x0, &(0x7f000013d000)}) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0xa, 0x7fff, &(0x7f0000003000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000000)=""/131) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000003000)={0x0, 0x7, 0x40, 0x9, 0x800, 0x80}, &(0x7f0000002000-0x4)=0x14) tee(r1, r0, 0x20, 0x5) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000003000)={r3, @in6={{0xa, 0x1, 0x8, @empty, 0x3}}, 0x0, 0x10001}, 0x98) rt_sigprocmask(0x3, &(0x7f0000002000), &(0x7f0000003000-0x8), 0x8) 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000fc5000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000860000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000024f000-0x8)=@assoc_value={0x0}, &(0x7f00004cd000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000eee000-0x10)={0x40, 0x208, 0x8000, 0x9, r2}, &(0x7f0000729000)=0x10) socket$inet_dccp(0x2, 0x6, 0x0) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c6e000-0x17)='oom_score_adj\x00') creat(&(0x7f00008a1000)='./file0\x00', 0x40) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000f11000)='-4', 0x2}], 0x1) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) pipe2(&(0x7f0000a9b000-0x8), 0x80000) getpeername$unix(r0, &(0x7f0000606000)=@file={0x0, ""/64}, &(0x7f0000f19000-0x4)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00008ca000-0x1d)={0x0, 0x15, "74115b462e5d8b9f1b31b065130ec4ffe1c8a2bff0"}, &(0x7f0000626000-0x4)=0x1d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000c4000-0x8)={r1, 0x3}, &(0x7f00003d0000)=0x8) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00001c3000), &(0x7f0000ef8000)=0x4) 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) poll(&(0x7f0000003000-0x20)=[{r0, 0x4088}, {r2, 0x18}, {r2, 0x2}, {r2, 0x431}], 0x4, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 98.488138] binder: 20210:20222 ioctl 8010aa02 20001000 returned -22 [ 98.509900] binder: 20213:20218 got transaction with invalid offset (40, min 0 max 64) or object. 2018/02/14 06:15:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c66000-0x6)='ppp1]\x00', 0x0) r1 = inotify_init() r2 = openat(0xffffffffffffffff, &(0x7f00004ae000-0x8)='./file0\x00', 0x0, 0x22) r3 = creat(&(0x7f0000fe0000-0x8)='./file0\x00', 0x20) r4 = getpid() fstat(0xffffffffffffffff, &(0x7f00006d4000)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b5b000-0x11)='/selinux/enforce\x00', 0x200080, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00008ee000-0x8)={0x0}) r9 = syz_open_dev$binder(&(0x7f0000cbd000)='/dev/binder#\x00', 0x0, 0x2) r10 = accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000037000-0x4), 0x80800) r11 = openat(0xffffffffffffff9c, &(0x7f0000261000-0x8)='./file0\x00', 0x1, 0x10) r12 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000619000)) r13 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000067a000)={{{@in6=@local, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@empty}}, &(0x7f0000832000)=0xe8) stat(&(0x7f0000d1e000-0x8)='./file0\x00', &(0x7f0000119000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = geteuid() r17 = getegid() r18 = epoll_create1(0x80000) r19 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000927000)='/selinux/access\x00', 0x2, 0x0) r20 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00006e0000-0x38)={&(0x7f0000215000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00001ec000)=[{&(0x7f0000019000-0x25)="4a034843dcd6684c0cd50b22ff0140608de98ea5bd63632ace0baf23a360d90bf0c0e26f98", 0x25}, {&(0x7f000040f000-0xd7)="c3bad65b76331dfd54d128da94f17588cface207b08e5dffdc49f992e9dbce01b6629605f092f0da5f4cd8e897d55c2dacdb390b2be230508b2a6bfcf8626bfb7c4372db0ed41f8f4a6c96130bbf8df67e3372abe2377a687441d0484075477eb5f2cee630b7a8b381c8b03926fc6a93c10946de0b9085e0972cebc7ef46fa4652ae68b1cad16b1581a0cdaec5844276fd44f7d454effb0e9a558dae6f9ccbc37d7a5923d358b04ff5dace41a6991dd45d353f4243cedee48f086384187f8ff818d217ed88dff39ffa026b7ada2bcfb89602e2d8b9db1d", 0xd7}, {&(0x7f0000412000)="975c54437cfe8c0fabeb2af098a6f611a01ce64b300c5d9fc5ab4dc6cead1a87dbcfd717cac026e11ee44896460a65e5833bb70ada41e65fc4bee3b318b4b3360cae61addb91b86f2b0d047c4cc03bbbe5fd7710726690b2cfe32d20e6780f123499ce65cb3a71e15034b0ccd1d16c47bd96d87c33b5fea80d6de4a3b4601c7886ead193e11263eef028434a947cfe42c6c8493d1bbdcfd2fa1ed39e39dae077307b405ac01151dab35e41b30b899fee88add02697c9c3881ac5df29f7b735cfdf6df209c86c5a465540013dcd", 0xcd}, {&(0x7f00007fc000-0x44)="35f1abb807d1a376fe060085770c1c40702a9f1329bccab599b817757a4d842a574b5f0a33ada92074fa1425b8836bc89a2806ef15a5851067ff74bc8a292ae6f46851db", 0x44}, {&(0x7f0000b59000)="76ef7e30997d8570af1db9fca7a58048fa9043c245d797fffc662986e5ee753f55dab5ca4951070e8210a4626fcf98485fb3b35fec6aba6f5b92b602727451e052b50c4791f1207611b2c61d9b5d88ea8449a3dd1de4bc72c6a54661a233a449ff998ce7fa945992538e2b31c60ac2b5cc8ff40eee0eba7e76e8c3f14bf0058c432666da10c87facd321ae61c3d47d20762171b6d35e281c93cb3d340b03e96b1e0782025a832a", 0xa7}, {&(0x7f000046c000-0x97)="a7aa0f4cbf0ac3f45cd5eb257c734f91c0beb5420d155e3dc470fa27bf92e8bf7957f8c7b639ab7376b0027a707e1eb941ab4dc5a3df64c147cb7d05b311d50519bfa114c7c3ea3cc6e1c6df20da4405a194abbd8c222b26f4ee636fc274ae9cc1481a9575b796184d6edabbaff26188da8b3489ac7fa8c2513eef6a16e9ee097984e977aad0b4e09a01e809f05bc9807fe14ac1a39b81", 0x97}, {&(0x7f0000833000-0x6e)="e7a262ee9c64ea8648c6ad64783c50836e528bc8e82356989ed17fadf4fb8732ec866446ebc9ea53657f0f23b19f33d439edeff0a9bdda6a80c601bc4fbc960f2e58efff4f6d514c7ee24bd787d8f11264d37d44f0f564998633a64fa2c3f35705ad8d69bbd0bb3d8b4f40983200", 0x6e}, {&(0x7f000054d000-0x5)="8c4dc4acdc", 0x5}, {&(0x7f0000f5b000-0xcc)="38df6140b9030849be0c5725060dae16e58e65e3dd4df531a297b1dcefb70bc38cc259d218825e584f43ceed6f18f114cf7799f0caf8e898ccfc92c9a9b8eb8e4c7a219946a2d178dc539f1e6b29df0f27c9465112c04e1a1aedc3b358bd987aced8ae2b3e73444cff27cc2deda8894f754a979829ed7efe9d635320a9342aeef906014f90e7e1be7e2dc4ab31b1a9ff12b2f89a87a943dbd904795f2aeae8ec6e3d6af93149311ee7dc61165645f4f8ed5b726b53bc2b1ec50930c8602ac02244789b5dbf89f21c8d1de0b2", 0xcc}], 0x9, &(0x7f0000bc7000)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r7, r8, r9, r10, r11, r12]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, 0x0, r16, r17}, @rights={0x20, 0x1, 0x1, [r18, r19, r20]}], 0xc8, 0x24000804}, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000054d000)='ramfs\x00', 0x3, &(0x7f0000313000)) removexattr(&(0x7f0000300000)='./file0\x00', &(0x7f0000dd4000-0x18)=@known='system.posix_acl_access\x00') 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000102000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000604000-0x10)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000d3f000)='/dev/rtc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000f43000-0x10)={0x5, &(0x7f0000beb000-0x28)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00002fb000-0x8)={r2, 0x2}) 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) fcntl$getownex(r0, 0x10, &(0x7f0000d1c000)={0x0, 0x0}) sched_getparam(r1, &(0x7f0000af8000)) [ 98.525312] binder: 20210:20222 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.525376] binder: 20210:20222 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.525386] binder: 20210:20222 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.525393] binder: 20210:20222 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.525402] binder: 20210:20222 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.538470] binder: 20250:20251 ioctl 8010aa02 20001000 returned -22 [ 98.541029] binder: 20250:20251 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.541041] binder: 20250:20251 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.541050] binder: 20250:20251 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.541058] binder: 20250:20251 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.541068] binder: 20250:20251 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.584208] binder: 20261:20269 ioctl 8010aa02 20001000 returned -22 [ 98.584872] binder: BINDER_SET_CONTEXT_MGR already set [ 98.584881] binder: 20213:20254 ioctl 40046207 0 returned -16 [ 98.585320] binder: 20261:20269 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.585332] binder: 20261:20269 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.585343] binder: 20261:20269 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.585350] binder: 20261:20269 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.585360] binder: 20261:20269 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.725216] binder: 20213:20218 transaction failed 29201/-22, size 64-8 line 3190 2018/02/14 06:15:01 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000005000-0xad)="13", 0x1, 0x0, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000007000-0xa)={&(0x7f00000c5000-0x93)="134e721c060000000000000001012053d1c199b0c4cbd7ab0296e7154fea8aa900000005f65b2bf975fd831ef5ec461bb6c0a3532a9a203d11f67732285e058ecec7b40e37910727b26b20338b84e5cc285a589a7f324ca94a7da40be1b70c09820899b3091c2484fb00000000000000ff1bafeb30fc119c5957f1cbdbc28571f9898d9a1ead4d0400000000000000068239", 0x92}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000006000)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007000-0x4)={{&(0x7f0000009000/0x4000)=nil, 0x4000}, 0x1}) close(r1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000003000)={0x1, &(0x7f0000004000)=[{0x2, 0x9, 0x10001, 0xffffffff}]}, 0x10) 2018/02/14 06:15:01 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a43000)="666400000004bb") getdents64(r0, &(0x7f0000f73000-0x159)=""/528, 0x210) getdents(r0, &(0x7f00000ba000-0xc3)=""/195, 0xc3) 2018/02/14 06:15:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e19000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x545d, &(0x7f00005b8000)) 2018/02/14 06:15:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000037b000)='/dev/rtc\x00', 0x30000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000cf0000)=""/103) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000567000-0x8)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fa4000)={0x1, &(0x7f0000f96000-0x10)=[{0x6}]}, 0x10) write(r1, &(0x7f000008e000-0x26)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26) 2018/02/14 06:15:01 executing program 3: mmap(&(0x7f0000000000/0xf71000)=nil, 0xf71000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) fremovexattr(r0, &(0x7f0000503000-0x15)=@known='system.sockprotoname\x00') mmap(&(0x7f0000f71000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000f71000)="26656d30bb706f7369785f61636c5f6163636573736e6f646576232a7d2900", 0x3) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000aa7000)={0x1a, 0x6, 0x1f, 0x8, 0x100000000, 0x0, 0x100000001, 0x4, 0x5, 0x80000001}) 2018/02/14 06:15:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000049000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f000069b000-0x1)={0x8}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000d30000)={&(0x7f0000b79000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f000013f000-0x12d4)=@newsa={0x138, 0x10, 0x29, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in6=@loopback={0x0, 0x1}}, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x33}, @in=@multicast1=0xe0000001, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00003e9000-0x38)={&(0x7f0000c5b000-0xc)={0x10}, 0xc, &(0x7f00002bc000-0x10)={&(0x7f000021e000)=@flushsa={0x14, 0x1c, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:01 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000bd000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f000025b000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}, @flat={0x73692a85}], &(0x7f000000b000-0x30)=[0x28]}}], 0x0, 0x0, &(0x7f000013d000)}) 2018/02/14 06:15:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000f66000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000757000-0xe8)={{{@in6=@local, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000c6c000)=0xe8) getgroups(0x1, &(0x7f00005a7000-0x4)=[0xffffffffffffffff]) syz_fuseblk_mount(&(0x7f00001f9000)='./file0\x00', &(0x7f0000849000)='./file0\x00', 0x7000, r0, r1, 0x7, 0x7ff, 0x1000010) signalfd(0xffffffffffffffff, &(0x7f00009b0000), 0x8) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r0, &(0x7f0000447000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) fcntl$setsig(r0, 0xa, 0x18) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='\x00\x00\x00\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0}, &(0x7f000044c000)=0xc) r2 = syz_open_procfs(r1, &(0x7f00002ce000-0xd)='attr/current\x00') sendfile(r2, r2, &(0x7f00006c7000), 0x2a) getdents(r0, &(0x7f0000670000)=""/167, 0xa7) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000776000-0x20)={@common='nr0\x00', @ifru_flags=0x9000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b1d000-0x4), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f000056a000-0x78)=[{{&(0x7f00001fb000)=@hci={0x1f}, 0x6, &(0x7f00007be000-0x20)=[{&(0x7f000023b000-0xd1)="fbe07f9ff6f3438a6c9d808bd8ba3c97e653b23099160770663454570d5c7da8e56a72c339b5f6d42ec5258cd655a114540b93f496c4bb16079034dc9a2594e41b833cb82eed207fc521b62af2e8b95a2b8b54674d04eed2f6a6ed66d7a708f129372d540ed348ea8c8307d0e836e03ffeda0c0a6be3e46736f2411c3e3059d71e96", 0x82}], 0x1, &(0x7f0000bae000-0x1d0)=[]}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x51, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000469000-0x40)=[{&(0x7f0000460000)="55536ecdd90a4c11342989bac5eccc65a620180ded0d67150c11582f0545ccefb348d8fd09", 0x25}, {&(0x7f0000a0c000-0xa3)="6ed6206397d047692a325a84607c674fb232867db35be97aab39bbdf485e0763e46533a4a572309a5d5e3f4b015252d06e0b744dcad7bbe8c27c7b563b8c5be8d4fad62549c136cc3649b47e2c0cb0e6447bf6f69369b8e9d609b5712b253aa9389d7b60756e90de5547a8e4e5228bcd0649da6fab84b0baa55301a9b8fdccca63ded9e843b0ac0d49b3372d0b6cde27ec40cc516afbc55dd617b3431de69a19421245", 0xa3}], 0x2) sendmsg(r0, &(0x7f0000b26000)={&(0x7f0000334000-0x26)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @rand_addr}}}, 0x26, &(0x7f0000b84000)=[{&(0x7f0000158000-0xc7)="746f8ab05498dc8ab585aff14202fe590887d71700f5b44a43302cff2a91818a2d558cdbda4145e414ec0c89", 0x2c}], 0x1, &(0x7f0000261000)=[], 0x0, 0x8000}, 0x8041) sendmsg$nl_route(r0, &(0x7f0000e7d000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000212000-0x10)={&(0x7f00009d4000)=@ipmr_delroute={0x1c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x80}, []}, 0x1c}, 0x1}, 0x0) 2018/02/14 06:15:02 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00002d1000-0x9)='/dev/ppp\x00', 0x28080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000b47000-0x4)=0x2, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x52000)=nil, 0x52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x40, @fr_pvc=&(0x7f0000002000-0x4)}}) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000001000-0x8)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000045000)=0x0) syz_open_procfs(r2, &(0x7f0000038000)='auxv\x00') sigaltstack(&(0x7f0000006000/0x3000)=nil, &(0x7f0000005000)) [ 98.735097] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.743892] binder: 20279:20281 ioctl 8010aa02 20001000 returned -22 [ 98.759228] binder: 20279:20281 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.773196] binder: 20286:20288 got transaction with invalid offset (40, min 0 max 64) or object. 2018/02/14 06:15:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000001000-0x1000), 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000c17000-0x15)='/dev/pktcdvd/control\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f000079c000-0xe)={0x0, 0xe08, 0x3, [0x7ab0, 0x6, 0x1]}, &(0x7f00003dc000)=0xe) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f000018f000-0x4)=r2, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001000-0x1), &(0x7f00002cb000)=0x4) [ 98.773221] binder: 20286:20288 transaction failed 29201/-22, size 64-8 line 3190 [ 98.777390] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.824419] binder: 20279:20281 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.832184] binder: 20279:20281 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.841051] binder: 20279:20281 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xffffffffffffffff) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000a04000-0xe)='/dev/keychord\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000c15000-0x8)={0x0, 0x400}, &(0x7f0000d50000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000775000-0x8c)={r2, @in6={{0xa, 0x3, 0x1, @empty, 0x800}}}, &(0x7f000066b000-0x4)=0x8c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000ddd000-0x6)={r2, 0x7}, 0x6) sendmsg$nl_route(r0, &(0x7f0000015000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000029000-0x1c)=@ipv6_delroute={0x1c, 0x19, 0x60b, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x2}, []}, 0x1c}, 0x1}, 0x0) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000094d000-0x8)='./file0\x00', 0x11) r0 = socket(0xa, 0x3, 0x2000) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000009b000-0x38)={&(0x7f0000936000-0x10)=@in={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[], 0x0, 0x40010}, 0x0) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000c52000)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f000091d000-0x6)={0x8, 0x3, 0x5}) write(r0, &(0x7f0000cda000-0x22)="220000001800070700be0000090007000a00001e0000000900f8ff0005000280ff45", 0x22) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00008df000-0x12)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f16000-0x30)=[{{}, 0x1}, {}], 0x30) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000e69000-0x1000)=""/4096) 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f000095e000)={0x3, 0x3}, 0x8) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000a29000)) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000751000)={0x1c, 0x1, 0x800004, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x1c}, 0x1}, 0x0) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000038000)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f00003c0000)=[{&(0x7f0000514000)=""/28, 0x1c}], 0x1) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000df3000)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000b3b000)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) r4 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f0000fc2000-0x1c)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc2000-0x8)=[{&(0x7f00005c2000-0xfb)}], 0x1}, 0x0) 2018/02/14 06:15:02 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000001000-0xc)={0x3e, 0x8, 0x4}) r2 = dup(r0) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000225000-0x1000), 0x0) [ 98.848466] binder: 20279:20281 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000402000-0x5)='attr\x00') readahead(r0, 0xfffffffffffffbff, 0x9) creat(&(0x7f0000bf8000)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x40, 0x1) 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x880, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000cf2000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000143000)='net/if_inet6\x00') readv(r1, &(0x7f0000635000-0x70)=[{&(0x7f0000a7b000-0xdc)=""/220, 0xdc}, {&(0x7f0000242000)=""/254, 0xfe}, {&(0x7f00008f7000-0x1000)=""/4096, 0x1000}], 0x3) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfa5000)=nil, 0xfa5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) r3 = socket$inet(0x2, 0x5, 0x8) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000fa5000)) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000237000)={&(0x7f00005b9000-0x40)=""/64, 0x40}) 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000b16000+0xc3a)='/dev/sequencer\x00', 0x100, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000565000-0x8)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r2, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r3, 0x0, 0x1}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) r4 = memfd_create(&(0x7f0000a27000)='wlan0].keyringnodev\x00', 0x1) timerfd_create(0x1, 0x80800) sendto$inet6(r4, &(0x7f0000f22000-0x1000)="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", 0x1000, 0x8004, &(0x7f00007c5000-0x1c)={0xa, 0x0, 0x80000001, @ipv4={[], [0xff, 0xff], @rand_addr=0x6}, 0x2}, 0x1c) 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x3, 0x4, 0xfff, 0x4000000000, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x10005}) r2 = syz_open_pts(r0, 0x8000000006) r3 = dup2(r2, r1) writev(r3, &(0x7f0000b88000)=[{&(0x7f0000b63000-0x1000)="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", 0x3ea}], 0x1) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/autofs\x00', 0x428402, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x110) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x7fffffd) r2 = mq_open(&(0x7f0000296000)="2dc887", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2}) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000c93000-0x8)={0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000e8e000)={0x0, 0x8, 0x6, 0x10000, 0x9, 0x5}, &(0x7f0000a01000-0x4)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f000000a000-0x6)={r4}, &(0x7f0000195000)=0xfffffffffffffde4) mq_timedreceive(r2, &(0x7f0000712000), 0x0, 0x0, &(0x7f000041a000)={0x77359400}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000689000-0xc)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f000042d000-0x8)={r5}, &(0x7f0000ded000-0x4)=0x8) [ 98.899042] binder: 20322:20331 ioctl 8010aa02 20001000 returned -22 [ 98.908245] binder: 20322:20331 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 98.918608] binder: 20322:20331 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 98.918956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 98.928122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) pipe(&(0x7f0000b7a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000c36000-0x8)={0x585d, 0x4}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000288000-0x10)={0x6, 0x0, 0x5, 0x6}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009c6000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f000093f000-0xc)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f000075c000)={0x20002009}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000a6f000)=0x5) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000e9f000-0xc)) 2018/02/14 06:15:02 executing program 4: r0 = socket(0x20000000000000a, 0xa, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000001000-0x1e)=@pppoe={0x0, 0x0, {0x0, @broadcast, @common}}, &(0x7f0000150000-0x4)=0x1e) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000905000)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0xe}}}) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000c58000-0x11)='/selinux/enforce\x00', 0x111100, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000cbf000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, 0x0, 0x1000}) 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003e000-0xc)='net/netlink\x00') llistxattr(&(0x7f000055d000)='./file0\x00', &(0x7f0000a43000-0x89)=""/137, 0x89) sendfile(r0, r0, &(0x7f0000882000-0x8)=0x10, 0x401) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) fadvise64(r0, 0x0, 0x4, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 98.970476] binder: 20322:20331 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.979138] binder: 20322:20331 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 98.987443] binder: 20322:20331 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.028654] binder: 20380:20382 ioctl 8010aa02 20001000 returned -22 [ 99.044318] binder: 20380:20382 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.057869] binder: 20380:20382 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.070717] binder: 20380:20382 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000512000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockname$ipx(r0, &(0x7f0000c09000), &(0x7f000086b000)=0x10) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000051c000)=[{&(0x7f0000b8d000-0x49)="480000001400190d09004beafd0d8c56", 0x10}], 0x1) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0xaad000)=nil, 0xaad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000808000-0xe)='/dev/keychord\x00', 0x1, 0x0) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f000002a000-0x90)=[{&(0x7f0000676000)=""/100, 0x64}, {&(0x7f000007f000-0xfb)=""/251, 0xfb}, {&(0x7f0000aad000)=""/133, 0x85}, {&(0x7f0000aad000)=""/103, 0x67}, {&(0x7f0000523000-0xee)=""/238, 0xee}, {&(0x7f0000101000-0x60)=""/96, 0x60}, {&(0x7f000054e000)}, {&(0x7f0000aae000-0x2f)=""/47, 0x2f}, {&(0x7f0000aae000-0x16)=""/22, 0x16}], 0x9, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000062f000)={0x0}, &(0x7f0000773000+0x43d)=0xc) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000aad000)={0x0, 0x19, 0x1, @tid=r3}, &(0x7f0000866000-0x4)) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00004ff000-0x6)={0x14, 0x731d, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000aad000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000aad000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00001e9000-0x50)={{0xfffffffffffffffe, 0x7}, {0x8, 0x9fb7}, 0x7, 0x3, 0xd68}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000059000)={&(0x7f0000675000/0x4000)=nil, 0xec2f, 0x3, 0x10, &(0x7f0000926000/0x3000)=nil, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x8, 0x0, &(0x7f0000aac000-0x18)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) mmap(&(0x7f0000aae000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000963000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000330000-0xc)={r5, @remote={0xac, 0x14, 0x0, 0xbb}, @dev={0xac, 0x14, 0x0, 0xa}}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00007b7000+0x421)=[@in6={0xa, 0x3, 0x2, @loopback={0x0, 0x1}, 0x8000}, @in6={0xa, 0x1, 0x102, @dev={0xfe, 0x80, [], 0x0, 0x19}, 0x9}], 0xffffffffffffffda) 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$setown(r0, 0x8, r1) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000614000-0x10)={0x0, 0xffffffffffffffff, @empty}, &(0x7f0000217000-0x4)=0x10) fcntl$setsig(r2, 0xa, 0x5) mq_open(&(0x7f00000c1000-0x1)='\x00', 0x80, 0x0, &(0x7f0000a51000)={0x0, 0x6, 0x6, 0xba, 0x4, 0x7, 0x1, 0x4}) syz_open_procfs(0x0, &(0x7f0000a34000)='ns/pid\x00') 2018/02/14 06:15:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000006000-0x20)) timerfd_gettime(r1, &(0x7f0000004000-0x20)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000e67000-0x10)={0x5, 0xbbb6, 0x80}) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f000028e000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) bind(r0, &(0x7f00008fd000)=@nl=@unspec, 0xc) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpid() r2 = fcntl$getown(r0, 0x9) setpgid(r1, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r4 = syz_open_pts(r0, 0x0) dup2(r4, r3) ioctl$TIOCCONS(r3, 0x541d) 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000366000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000742000-0x4)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5f000-0xb)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r0, 0x1) 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x2, 0x4250, 0x1, 0x3, 0x8, 0xfffffffffffffc00}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f000022a000-0x10)={0x370, &(0x7f0000309000)=[]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00008e4000-0x50)={@generic="13f1e0d5d6e4e8ed00d221f430096488", @ifru_flags=0x2000000202}) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 99.078869] binder: 20380:20382 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.087790] binder: 20380:20382 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000c39000)=0x2e0d8f0b, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000057d000-0x6)='vegas\x00', 0x4) [ 99.135819] binder: 20398:20405 tried to acquire reference to desc 0, got 1 instead [ 99.150394] binder: 20397:20411 ioctl 8010aa02 20001000 returned -22 [ 99.150869] binder: 20397:20411 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.150881] binder: 20397:20411 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.150891] binder: 20397:20411 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.150899] binder: 20397:20411 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.150907] binder: 20397:20411 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.196644] binder: 20398:20424 tried to acquire reference to desc 0, got 1 instead [ 99.208184] IPVS: Creating netns size=2536 id=15 [ 99.223242] binder: BINDER_SET_CONTEXT_MGR already set [ 99.223249] binder: 20398:20424 ioctl 40046207 0 returned -16 [ 99.228228] pktgen: kernel_thread() failed for cpu 0 [ 99.228234] pktgen: Cannot create thread for cpu 0 (-4) [ 99.228246] pktgen: kernel_thread() failed for cpu 1 [ 99.228252] pktgen: Cannot create thread for cpu 1 (-4) [ 99.228253] pktgen: Initialization failed for all threads 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000dec000-0x20)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000752000-0x20)) epoll_create1(0x80000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000c0c000)={0x2, {0x2, 0x1, @rand_addr=0x80000001}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2, 0x1, @loopback=0x7f000001}, 0x100, 0x0, 0x8, 0x2739, 0x9, &(0x7f0000a23000-0x10)=@generic="7204ec441468f67a2a4f283dd81acdd5", 0x8, 0x5, 0x5}) mkdir(&(0x7f000022e000-0x8)='./file0\x00', 0x4) setitimer(0x1, &(0x7f0000bda000)={{0x77359400}}, &(0x7f000036f000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000f8e000-0xc)='/dev/rfkill\x00', 0x800, 0x0) write$selinux_user(r1, &(0x7f00006d2000)={'system_u:object_r:inetd_child_exec_t:s0', 0x20, 'staff_u\x00'}, 0x30) 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000574000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000080004534, &(0x7f000033c000-0x48)="07c3242339cea02a3acaf33fc2f644ed738e5ff260699629832da6fed0c2efb4a951e633cd325249b9b8295aefd899cdb58550fcde7faf3d3e647467d39a684149e35a49a1c95604") 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x4d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00003ef000)={0x0, 0x0}) r2 = gettid() mmap(&(0x7f0000ae0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ae0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ae0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000ae1000-0x4), &(0x7f0000ae1000-0x4), &(0x7f0000ae0000)=0x0) mmap(&(0x7f0000ae1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000ae2000-0x8c)={0x0, @in6={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x0, 0x16}}}}, &(0x7f0000959000-0x4)=0x8c) mmap(&(0x7f0000ae1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000923000-0x45)={r4, 0x3d, "99eddd0a76597b0dd2bfc4693ca30027bc66f69288a79bf1a431f62bdc888edac293a819c893741f6b9bb0daca70f7dca8676f491ab5a695cf96251fbc"}, &(0x7f0000ae1000)=0x45) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00004e6000-0x28)={0x3, 0x9, r2, 0x9, r3, 0xffffffffffffffe4, 0x5, 0x81}) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xe8d000)=nil, 0xe8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cab000-0x5)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000df9000-0x27)="260000002200470105001e000000000000006d20002b1f00c00000000000000000c7033500b0", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000da9000), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000d78000-0x12c)=[{{&(0x7f000086c000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x14, &(0x7f00007ce000)=[]}}], 0x1, 0x102, &(0x7f00002ba000)={0x77359400}) 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00005b1000)={0x20080522}, &(0x7f000067e000)) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00007dd000)={0x0}, &(0x7f0000360000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000066c000)={0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000f70000-0xd)='/dev/binder#\x00', 0x0, 0x2) process_vm_writev(r2, &(0x7f0000690000-0x8)=[{&(0x7f00001a0000-0x8)=""/8, 0x8}], 0x1, &(0x7f0000d1a000-0x10)=[{&(0x7f0000525000)=""/60, 0x3c}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f000032a000), &(0x7f000075f000-0x4)=0x4) 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000001000)=@sco={0x1f, {0x3, 0x100000000, 0x40, 0xfff, 0x4, 0x3f}}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001000)={0x0, @in={{0x2, 0x3, @multicast2=0xe0000002}}, 0x2, 0x8, 0x800, 0xfffffffffffffff8, 0x9}, &(0x7f0000001000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x204, 0x26, 0x3, r1}, &(0x7f0000000000)=0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001000-0x22)={0x1, 0x5, [@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xc}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xc}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @random="f11589ebd4c4", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init() pipe(&(0x7f00001f5000-0x8)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000198000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000be4000)) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000645000)=[{&(0x7f0000c40000-0x1000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000001000-0x87)=""/135, 0x87}], 0x3, &(0x7f0000001000-0x8e)=""/142, 0x8e, 0x8001}, 0x10d}, {{&(0x7f0000000000)=@can, 0x10, &(0x7f0000000000)=[{&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000f24000)=""/239, 0xef}, {&(0x7f0000720000)=""/119, 0x77}], 0x3, &(0x7f0000000000)=""/230, 0xe6, 0xbd}, 0x1}, {{&(0x7f00006da000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000430000-0x30)=[{&(0x7f0000dda000-0x97)=""/151, 0x97}, {&(0x7f000021d000-0x55)=""/85, 0x55}, {&(0x7f0000000000)=""/225, 0xe1}], 0x3, 0x0, 0x0, 0x1ff}, 0xffffffffffffff38}, {{&(0x7f00005e6000-0x58)=@alg, 0x58, &(0x7f0000128000)=[], 0x0, &(0x7f0000000000)=""/38, 0x26, 0x3}, 0x9}, {{&(0x7f0000001000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x10, &(0x7f000000b000-0x60)=[{&(0x7f0000467000-0x3a)=""/58, 0x3a}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000001000-0x3d)=""/61, 0x3d}, {&(0x7f0000001000-0x7b)=""/123, 0x7b}, {&(0x7f0000001000-0xac)=""/172, 0xac}, {&(0x7f0000001000-0x48)=""/72, 0x48}], 0x6, &(0x7f000086e000)=""/45, 0x2d, 0x9}, 0x2}], 0x5, 0x100, &(0x7f0000a90000-0x10)={0x77359400}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000047000-0x18)={0x0, 0x5, 0x30, 0x4, 0x4}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x615b8710, 0xdcc, 0xfffffffffffffffb}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) signalfd(0xffffffffffffffff, &(0x7f0000ba6000-0x8), 0x8) connect$inet(r2, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) close(r3) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000db0000-0x83)=""/131) ioctl$KDSETLED(r2, 0x4b32, 0x1) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) mq_timedreceive(r0, &(0x7f0000bed000-0x93)=""/147, 0x93, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000ab4000-0x9)='/dev/sg#\x00', 0x80000001, 0x800) 2018/02/14 06:15:02 executing program 7: prctl$intptr(0x1c, 0x7) prctl$intptr(0x8000000000001c, 0x5) socketpair(0x0, 0x1, 0x1, &(0x7f000053a000)={0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00009c8000-0x4)) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00003fc000)='/dev/snd/seq\x00', 0x0, 0x3ffe) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) r1 = dup3(r0, r0, 0x80001) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000002000-0x24)) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000002000-0x1000)=""/4096) [ 99.355123] binder: 20440:20446 ioctl 8010aa02 20001000 returned -22 [ 99.371762] binder: 20440:20446 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.379930] binder: 20440:20446 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.387902] binder: 20440:20446 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.397691] binder: 20440:20446 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000045000-0xc)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000f1c000-0x10)={0x1da, &(0x7f00009e6000)=[{}]}, 0xfed7) 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000001b000)=0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$random(&(0x7f000001b000)='/dev/random\x00', 0x0, 0x210100) munmap(&(0x7f000001a000/0x2000)=nil, 0x2000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@rand_addr, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000011000)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000003000-0x10)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f000001a000)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000002000-0xc)={0x0, 0x80000, r0}) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f000001a000)={r3, r4, 0xccc}) syz_open_procfs(r1, &(0x7f000001c000-0x7)='mounts\x00') 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0xa202, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x400041, 0x0) write$sndseq(r0, &(0x7f000078a000-0x30)=[], 0x0) ioctl$TCSETA(r1, 0x5402, &(0x7f000032d000-0x14)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000ea4000-0x6a)=""/106, &(0x7f0000db1000)=0x6a) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$ipx(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000134000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000ff4000-0x4)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)="e802633668b99fa1c045039c10fc81b95953bcb9d351f8483a03127cab942b82b2c1f3c6082b909a03dfdf016ed6b97461928bbde7a10b96fe4fe51c12fcc150fa2faf1c84131b2f1f89d02e91df4f561ab3f2896f5ca40d7290e6e49d3f049cef8ba0c8c750366ee14198bd90e7b9155cf02420cff1364efcd865cf12bed8d1ab314ef1f6782f0da48bf3d13db7d7789daec3c6cda7e86d6bc69ba91a2ebbcdb2bf6ce05b2c3fe78cca200ad7dcbc6c2a77a375ebb732986c018e9f14b3943d64681c7092c6c27e0e45a0d2c3abc00cb67ba4c5dcc7bb08066c7261dc8275409df57a6060544ce6af175b458b12213e562ed36091a7f026af", 0xf9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f00005a1000)={&(0x7f0000f80000-0x58)=@ipv4_delroute={0x2c, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0x800000000000ff, 0x0, 0xfe}, [@RTA_PRIORITY={0x8, 0x6, 0x400}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000), &(0x7f000025e000)=0x14) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000b54000)={0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000064000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000001000)=[{&(0x7f0000009000)="390000001300090469000000000000007f00804003000000460001070000001419001a0004000200feffff6e0200000000000000000003f500", 0x39}], 0x1) r4 = syz_open_pts(r2, 0x2000) readv(r4, &(0x7f0000121000)=[{&(0x7f000056d000)=""/1, 0x1}], 0x1) dup3(r1, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r0) dup3(r5, r2, 0x0) [ 99.406973] binder: 20440:20446 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.446991] binder: 20468:20482 ioctl 8010aa02 20001000 returned -22 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0xf6b000)=nil, 0xf6b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)) eventfd2(0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000f6a000), &(0x7f0000131000-0x4)=0x4) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000070d000-0x8)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00005c8000-0x8)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000d13000)=[{0x6, 0x7}, {0x8, 0xacd}, {0x6, 0x3ff}, {0x8}], 0x4) sendto$unix(r0, &(0x7f00006b2000-0xda)="e106a2abc5c59c651de2ff97a0be932047c4f932fa073596b13b41bfebbe71da23af0a47b6cc96c9663704529de3b9b292eac3a2ea08c55d20dd881a0cf19b6b1b5e5a7eb6065b523d12490d862e7d86cf60dec43d14878aff4344049a9598b74e343732ab96ebbc96e9e0feaebc02c2c3df11d32433ec9c0bb0d38272b0ae34af498b048e275090f8ea4eb91e233ee851dc756995038c0a26028cec945f025d03361cbdd981e53f6852e9f383a7bd63f1436c99ab40447b3bcc86656c7abc49d15f483e4ae411aedb29f685bc1ff5d8926c70b4981808807863", 0xda, 0x0, &(0x7f00009fe000-0xa)=@file={0x0, './file0\x00'}, 0xa) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d1000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00004fa000)) symlink(&(0x7f0000050000-0x8)='..', &(0x7f0000194000)='./file0/bus\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x80000000000004c, &(0x7f0000b55000-0x4)=0x1000000, 0x4) creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) 2018/02/14 06:15:02 executing program 6: mprotect(&(0x7f0000002000/0x5000)=nil, 0x5000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x10000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00004f0000)={0x0, 0x9, 0x10}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000000)={r1, @in6={{0xa, 0x2, 0x1, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x8}}}, 0x8c) madvise(&(0x7f0000975000/0x1000)=nil, 0x1000, 0x400000000a) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) open(&(0x7f0000001000-0x8)='./file0\x00', 0x101000, 0x100) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000070b000)={0x0, 0x7530}, 0x10) r1 = dup(r0) readlinkat(r1, &(0x7f0000893000)='./file0\x00', &(0x7f0000f47000)=""/202, 0xca) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000f93000), &(0x7f00008c6000)=0x10) keyctl$join(0x1, &(0x7f0000a24000-0x5)={0x73, 0x79, 0x7a, 0x3}) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000005000-0x510)={0x6, {{0xa, 0x0, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x98}}, 0x0, 0x9, [{{0xa, 0x3, 0x7, @empty, 0x1}}, {{0xa, 0x1, 0x6ad3, @mcast1={0xff, 0x1, [], 0x1}, 0xe}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x0, 0x14}}}, {{0xa, 0x0, 0x81, @loopback={0x0, 0x1}, 0x3f}}, {{0xa, 0x0, 0x5da, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0xc986}}, {{0xa, 0x3, 0xc20, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x3, 0x10001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}}, {{0xa, 0x3, 0x100000001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x23e}}, {{0xa, 0x2, 0x80, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x8}}]}, 0x510) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000c6d000-0x20)={{0x0, 0x2710}, {0x0, 0x2710}}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000007c000-0x10)='/dev/sequencer2\x00', 0x111000, 0x0) clock_gettime(0x0, &(0x7f000080a000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000b01000)={0x4, 0x4e8, 0x1, 0x0, 0x17}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000ba1000-0x8)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000b84000)={0x0, 0x3892}, &(0x7f0000f8b000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000d81000)={r3, @in6={{0xa, 0x0, 0x9, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x7fff}}}, 0x8c) write$evdev(r0, &(0x7f0000e58000-0xc0)=[{{0x77359400}, 0x0, 0x7, 0x1}, {{0x0, 0x2710}, 0x0, 0x8, 0x5}, {{0x77359400}, 0x0, 0x2, 0x80}, {{}, 0x3, 0x99a, 0x40}, {{0x77359400}, 0x9, 0x7, 0xf510}, {{r1, r2/1000+10000}, 0x7, 0xffffffff, 0x8}, {{0x0, 0x2710}, 0x6021c592, 0x2, 0x52c0}, {{}, 0x9, 0x6, 0x80}], 0xc0) 2018/02/14 06:15:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000d20000-0x43)={{{{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "000000092fd482fe0c84e8d02892a7239b5487351f35087ecc3c455ab89c7d1592a8b32dd879712104b296b39b2bf9e01a0ab977887e4efcf61e6799516905a69cc4a241ca12207634df5ea882899a30"}, 0x160) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001000-0xc)={0x0, 0x10000, 0x20}, &(0x7f0000381000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x2, 0x5000000000, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3f}}, 0x6, 0x6, 0x14, 0x6, 0x1}, 0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x7) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000372000-0x16)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7f) 2018/02/14 06:15:02 executing program 5: prctl$void(0x15) clock_gettime(0x0, &(0x7f000022a000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000001000-0x10)={r0, r1+10000000}, &(0x7f0000001000-0x10)) [ 99.465042] binder: 20468:20482 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.475633] binder: 20468:20482 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.482761] binder: 20468:20482 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.489778] binder: 20468:20482 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.497794] binder: 20468:20482 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003000)='/dev/pktcdvd/control\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000003000-0x10)={&(0x7f0000004000/0x2000)=nil, 0x2000}) stat(&(0x7f0000009000-0x8)='./file0\x00', &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f000000d000-0x98)) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000014000)='./file0\x00', &(0x7f0000015000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000107000-0x4), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000000f000-0xc)) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000e000-0x30)={0x0, 0x0, &(0x7f000000d000-0x98)=[], 0xfffffffffffffe97, 0x0, &(0x7f0000c3d000-0x2)="561a"}) 2018/02/14 06:15:02 executing program 5: dup(0xffffffffffffff9c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000213000)='/selinux/mls\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000425000)='/dev/rtc\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008a6000)='net/tcp\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00007d0000-0x8)={0x0, 0x0}) fanotify_mark(r1, 0x2000000000040, 0x10000, r0, &(0x7f0000001000-0xe)='./file0/file0\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$ax25(r2, &(0x7f0000000000)={0x3, {"c46bb87f2ee3ba"}, 0xf9}, 0x10) getsockname(0xffffffffffffff9c, &(0x7f0000e2e000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @empty}}}, &(0x7f000020d000)=0x2e) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f00003e1000), &(0x7f0000573000-0x4)=0x4) 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00007c2000+0x7c4)='/dev/keychord\x00', 0x201, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000261000-0x8)={0x0, 0x6}, &(0x7f00007e2000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000009c000-0x8)={r1, 0x3}, 0x8) write$eventfd(r0, &(0x7f0000025000-0x8)=0x9, 0x8) close(r0) 2018/02/14 06:15:02 executing program 6: openat$ppp(0xffffffffffffff9c, &(0x7f00001f7000-0x9)='/dev/ppp\x00', 0x10200, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000756000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000001000-0x8)='./file0\x00', 0x2, 0xaa) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x18, 0x0, 0x400) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) dup2(r2, r2) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$sock_SIOCOUTQ(r2, 0x80487436, &(0x7f0000006000-0x4)) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x3ffffd, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000004000)=@assoc_value, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_create(r1, &(0x7f000001b000-0x35)=@access={'system_u:object_r:dhcpc_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x32, 0x37}, 0x35) openat(r1, &(0x7f000001c000-0x8)='./file0\x00', 0x400400, 0x15f14aa7e9438162) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000018000-0x4)) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000008000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080021000a000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/14 06:15:02 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x4c, 0x0, 0x0) socketpair$inet(0x2, 0x1, 0x100000000, &(0x7f0000c4d000-0x8)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002000-0x57)={0x0, 0x4f, "9b86529ebec3b8a8312278a12f6e15d75256ba64c058f2e60d9b91688aa6891e6eeb19e6c3ef8b17386a146733a8dad2b9d32c5353ee2454fc9c62877621c9adf47e4c6558ef8e8c7e8a75acae8c91"}, &(0x7f0000000000)=0x57) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001000)={r3, 0x8f5e}, &(0x7f0000001000)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 99.541755] binder: 20485:20498 ioctl 8010aa02 20001000 returned -22 [ 99.549320] binder: 20485:20498 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)='/dev/usbmon#\x00', 0x4, 0x400000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000000)={r2, &(0x7f0000000000)=""/29}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x2, 0x0) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000006000-0x8)={0x100000000}, 0x8) dup2(r0, r0) write$tun(r3, &(0x7f0000001000)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "c0189e", 0x8, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @empty, {[], @icmpv6=@echo_reply={0x81}}}}, 0x34) readv(r3, &(0x7f0000003000-0x20)=[{&(0x7f0000003000-0x6c)=""/108, 0x6c}], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001000)=[{0x8, 0x178}, {0x2, 0x400}, {0x4}], 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000c0c000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000002000-0x51)=""/81) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 99.579026] keychord: invalid keycode count 0 [ 99.598069] binder: 20485:20498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.607033] keychord: invalid keycode count 0 [ 99.610671] binder: 20485:20498 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.610679] binder: 20485:20498 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.610689] binder: 20485:20498 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.618881] binder: 20530:20531 ioctl 8010aa02 20001000 returned -22 [ 99.619196] binder: 20530:20531 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.619207] binder: 20530:20531 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.619215] binder: 20530:20531 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.619222] binder: 20530:20531 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.619230] binder: 20530:20531 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.648839] binder: 20514:20526 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 99.665646] binder: 20532:20537 ioctl 8010aa02 20001000 returned -22 2018/02/14 06:15:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00003c1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000902000)) r1 = add_key$keyring(&(0x7f00005ce000)='keyring\x00', &(0x7f000060a000-0x5)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) pipe2(&(0x7f0000ea3000-0x8)={0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000630000)={0x3, 0x2, {0x1, 0x4, 0x9, 0x3, 0x4c}}) fcntl$dupfd(r3, 0x406, r0) 2018/02/14 06:15:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ad0000-0xf)='/dev/sequencer\x00', 0x24080, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f000050f000-0xc)={0x0, 0x1000}, &(0x7f0000958000)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000faa000-0x108)={r1, @in6={{0xa, 0x2, 0x2000000000004, @empty, 0x6}}, [0x1, 0x9, 0xfffe, 0x5, 0x39eb, 0x10001, 0x10000000000200, 0x80000000, 0xfffffffffffffffd, 0x8, 0xfffffffffffffffd, 0x8, 0x200000000000, 0x6, 0x10000]}, &(0x7f00008ad000-0x4)=0xfffffffffffffe8d) r2 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00002ce000)={0x2, 0xffffffffffff0001, 0x0, 0x1, 0x8000, 0x8}) write(r2, &(0x7f00009c1000)="b67af0adaf5ae675feee78146144205c79789e094b02fd89004b4543b447a358fe2b49e5690a8a485f091344db4b7f93d0cc3bfb72e69662da4136872864bc61eed87be0fdb97c2c399bc4794d5e09d63c764585f852279a349e8b3675db5397a7ab77c9c134182a8d668df093510bfa1d", 0x71) fcntl$setstatus(r2, 0x4, 0x42400) 2018/02/14 06:15:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f00002f0000-0xa)='encrypted\x00', &(0x7f0000672000)={0x73, 0x79, 0x7a}, &(0x7f0000b45000)="9b", 0x1, 0xfffffffffffffff8) r0 = syz_open_dev$sndtimer(&(0x7f00005fd000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat(0xffffffffffffffff, &(0x7f0000da7000-0x8)='./file0\x00', 0x121a80, 0x190) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000aeb000-0x1b)) 2018/02/14 06:15:02 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @broadcast}, &(0x7f0000965000)=0x10, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000810000)={0x3ef817ce}, 0x4) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000001000-0x30)) socket$unix(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000864000)='net/route\x00') readv(r2, &(0x7f0000a42000)=[{&(0x7f00004c7000-0xb1)=""/177, 0xb1}, {&(0x7f00007d9000-0xb9)=""/185, 0xb9}, {&(0x7f0000e99000)=""/175, 0xaf}], 0x3) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) ioctl$VT_RELDISP(r2, 0x5605) 2018/02/14 06:15:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00009fc000-0xc)={0x0}, &(0x7f0000af7000-0x4)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000068000-0x16)='net/connector\x00') mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000770000)={{{@in6=@mcast1, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000517000)=0xe8) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f000019c000-0x50)={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x4, 0x5, 0x500, 0x100000001, 0x0, r3}) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f00001f4000-0x9)='/dev/sg#\x00', 0xdf8e, 0x0) 2018/02/14 06:15:02 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2}) clock_gettime(0x5, &(0x7f00003f1000-0x10)) clock_getres(0x7, &(0x7f00000c4000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000712000), 0xfffffffffffffd34, 0x0, &(0x7f000041a000)={0x77359400, r1}) 2018/02/14 06:15:02 executing program 1: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000112000-0x8)='keyring\x00', &(0x7f0000ca4000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000fdc000-0x6)='logon\x00', &(0x7f0000503000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000fdb000)='.eth0systemkeyring\x00', r0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000fc2000-0x1c)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc2000-0x8)=[{&(0x7f00005c2000-0xfb)}], 0x1}, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00009b6000)=0xfffffffffffffff9) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tee(r1, 0xffffffffffffffff, 0xb8, 0x6) [ 99.665942] binder: 20532:20537 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 99.665953] binder: 20532:20537 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 99.665962] binder: 20532:20537 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 99.665969] binder: 20532:20537 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 99.665978] binder: 20532:20537 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:03 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b9b000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000deb000)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000002000-0x44)) 2018/02/14 06:15:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0x2, 0xfffffffffffffea6) recvfrom$inet(r0, &(0x7f0000f84000-0xc2)=""/194, 0xc2, 0x2, &(0x7f0000a3b000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) 2018/02/14 06:15:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000f53000-0x8)='./file0\x00', 0x4000, 0x1e1) sendmsg$nfc_llcp(r0, &(0x7f00005d8000)={&(0x7f000051b000-0x60)={0x27, 0x4, 0x970, 0x7, 0x4, 0x5, "e79ccdeff45d3a8fd89569698352efab13fab35c6e83fb07f8b6a414cc4db44b7b9fb852c6be8bd86289daab10c082b2176f7718309d8fbf2ed7ffc265b61a", 0x2}, 0x60, &(0x7f00007a9000-0x40)=[{&(0x7f0000cc7000)="316948f428389496b7cdfbc516075d821563ae026c7018fa61a78cb74e3394f162316bdb334bc1f3eb8253223e38031ca76b6ce0013ba643121dac79fbae1abc3a0d21be320714917aa46a8f12ed7247f534e4a241e5", 0x56}, {&(0x7f0000b50000-0x60)="fec6409c1c92194fa19f4760b7da897abbc53fcb3933870090309a7a571314264fb8670544691edc3747d7d4682dccb4ce6520834e0abe2970ff3ef7ac5420c2a1406776b3f770676831ffd15bf6d45e1d9c74e4af488f4a07a613337c9e8937", 0x60}, {&(0x7f0000e5c000)="f3be9110dd796826d0b256da462bd90d1e642e7e438cc0a22011893e78eb95a0d5e120f94010ab55bf465ad850fc3a657e1c1662eed14eec82def896cacfaec3a931f35b6d5f3d1d2a6c9470983a33b7f9a8f09d34ce2daf193f9a45bd89e0b4cc4035081bdfd153d4b6242b2f92d0813abcc48ffa9d77ab777100a65a71ad926911e620e408c447a8f83363035b802b29d2aeb92c8c8fd0ab44ccab87d11429c119cbf5", 0xa4}, {&(0x7f0000344000-0xfb)="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", 0xfb}], 0x4, &(0x7f0000c67000-0x78)={0x78, 0x102, 0x100000000, "89b3d7bac9d817044dc5c6b546a5035759ad734ad7ad515990f02e221d44859959fd473dc5f6611496aedc7aae7ba181d79873aced332f0dad218e6f685baad71646189102d7043d449ced69bd13ef7fceed0407ee9c2bb126be545e1de00006073639eedf8e71"}, 0x78, 0x24000800}, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000547000-0x19)=@random={'trusted.', "76626f786e6574302f6367726f7570a700"}, &(0x7f0000291000)=""/105, 0x69) ioctl$VT_DISALLOCATE(r0, 0x5608) fsync(r1) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000fb7000-0x4)=0x1, 0x4) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00008be000-0x4), &(0x7f0000031000)=0x4) 2018/02/14 06:15:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00007a7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/14 06:15:03 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x101002) r1 = accept$netrom(0xffffffffffffff9c, &(0x7f0000a80000+0xdbb)=@ax25, &(0x7f0000ef2000-0x4)=0x10) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000988000)) write$evdev(r0, &(0x7f0000d41000)=[{{0x77359400}, 0x4, 0xff}, {{0x0, 0x7530}, 0x4}, {{}, 0x80000001, 0x8}], 0x48) r2 = dup3(r0, r0, 0x80000) write$sndseq(r2, &(0x7f0000eaf000-0x30)=[{0x101, 0x1, 0x7, 0x10001, @tick, {0x40400000000}, {0x5, 0x8426}, @raw32={[0x80, 0x6, 0x6]}}], 0x30) 2018/02/14 06:15:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a}, &(0x7f0000001000)='.', 0x1, 0xfffffffffffffffc) prctl$setmm(0x23, 0x7, &(0x7f0000480000/0x1000)=nil) keyctl$instantiate(0xc, r0, &(0x7f0000189000)="28a30e59839febb57cd1822202b8b44366a91833709098131c10a8bebd2304a2b9113744aca8bf0eb9d49d4f93c508bfb43db26014066a046a5dd322eb811cdd0d6d50bd6b43cab218ff018dfdf11a5aa971234a1d136d04679378d89f160ed2a1d3710b438c7b1d49bc96257167331f066fa79f4f1df49ea7fc3a6b90f88fc59d8f78bda12be6b812abc30a2ba03a2c90b0cb0933c909ef255d7ace83c49d8e42d33bf81288db2d3bba51a8503b50427c84001b5fadc92e7819fb6cfb04a47a7398c20735942120f73185658217a49332d113b06e12c977650aa6d8c87c3e70eed60ec2fa4589938578f58c26ae32531053fefcd8fe88a8d2de6caec2197677082a0fd0dbed35b8a366695daea91976f1aa22035f0100441fec0cc67209500705228af2cc2a88c07cbf0ad7e62357a4ee2e4bd7874cb8ce17e5f44cdebb93375d8295ecfe0e7d3c61082a0aed7ee0aa254c94b685f6f76264fc0ed4c07e7248e57bec4674d9848db0d83364df7d91db713a25a8d53a9957e5e238821a69bcc32432c5ab75a7a265d8d570308f33bee1ad681ab3d52483361c7d9f18885ff2444542f5e0633ec4a2e6fd0a63b3f42cc62d7b29f4d061adb18a214d893e53c5a732995f5989b227f0077df1975ff85686ba14023fddd4910c12e59218f655176f7d3c627bbd69cb5af1756cb669c7c572353ea7a5889d956f2124186f573f05908535b2aef1d84da5ae55298cfe9be2503ff32afd19e230c3894a0e4c74eb80ca6e77893340bbbc22ae453f221ffe04d63bae52377b2c9d447d37eac00940a811b7ad195f5092cc2fe7dc55846f8b4d4fe36fc8bb922dd914152c2825e23fd9094d33a6175571ac7433e71e118c75c2d8f1fdae5dd70ceda09d5897f188e4204beca87fd2519548522c8231cc4823287101d793dab1e0ab0dc3abf85cb2ac10cb4efe2685f7a0d69c361e0b9c09a2ba9cb6698d12f4d1422c365fd5aa7ac2c6cd9a9f866c804b7ef66d2047bef17173cb16da39ae767e50ceec41e8818feebef41633d1a36ac38ca3b7d6f0beb93081a81f48469545c659f1b76b44f07b065508457037ba2e64cbd02972cd68aba78181148650115cbb06c6bfa9c22491a21656e802fa5f913a0328f50faf9164187eb29b8127f8460933212c541e089f5e6ff3ad4a714d7c04c023bc73c4106f3b94b865b6a9f15ed93b9f0d548a179de6035679f33fa3a8c8e57c7a7f89d7cffcb5cbb36f37051856b5cb6140ad911bdd7dc8fa7cf07a8760cc6960a72f7d15df880f7a3780061e0964603821cf1087db5a85f496c391e92e1c0d15edb5e6da92563518e3b4ac7cef023b9844f2cb1b7ceb9f17a3b002ec795ef20469c3b5270c9d3808c0475ca619a364d9a6a36227ae3498fedb85ae5618e328a45d7278b44dd06b5c30e6a7c8eefaa92156ee781eab75c6eb1429aad3096940eec2cef7e4a7cd83836f65071bdb1555f276fc0bbc704eb31b73dfdac384ab0e44b041211ce829d16aeb41d8342346150d8827a6e67c87fbeffefde56212642497980b87cf64d0a53155f0f9eb1173e147d4e21b4f75cb19ed17659bc9ac7fe9f436e189b380374249a3f05886d98b6fc689ccfdc24fc624433da277c1d5786311a163cc901fb4b8764db36ba724a44aa14a6838bebdf140bc9397d199eb384b3d8ea53f9bd52a3ef4bd5156bfc24332393e139725b49ba369befa091d28633622b7567f41de55dd9dc500880fd919fb4b9b5b4b9947578ae0879398f2ef6ccfe60b73eb854f1f356f91b6378f0126a6d39db92424c5191f6983b5de479f8a30c72cf3f81bd8472b3078261e7b16359f9fc46c49b9ab7568220adbe5529ad283763a35ed7d303c648d542255581452984f2c31d010dbdc3f043c8fab9bc0c7fdebfe46e1d76724a744369442acbc031b8fdb88868e256c1616680f1e5db6e29d54143d8ec2d1f6e09f3e29c156d0723e93b75a722ccad62044430382928901807f761a3016400262a66b36e881f4f7a5b82fa9022bff126103e89a3070674760bd655bd874537656f66584f5aad48a459fc8a543259e2ba3313361fa1ea53fbeb1c315e293db7f4f12a1c41260d2f3c476cf48715dbea64f598e4088e8db437aa37a19702a2256d1c1618db2a15650a5f1b51bfbc6dfd414cb33229f65ab0f3c94888393b77afa31021d2f31cd49da2375baf80e7407785ecfe07a1397d9093a096279945556e37e28696682fff5feac2a199c5c9cb2c83a401303786e3c3cf7f5c1a5e61ee046396febe358999669e854da77648d4c2e0fbc6ee0684c15fdf2dd5ed26d2e5ca8f0857b702bfa730cd5135120f9fe118511537e18ed4502deb6eed4d9775b559b400b851b37a5d99f0f09a71c00ac9e3cf260a35098fae5188e3dc3b77967fba544b6f3e18541e4488f34a080ab4d406c646e5b004ea229bd7f7b805159c35de17447218be8d3a91506477dc1d73259ffc28cb41886e7d9350565da9cd89011771d9c0df9e7ad8c26e4c50cb3d82d1b6212655933279dd9a28d3396f5b7d0f11ec9d11d89e161a9de487aa720a848531d64f0fc274c5a317ffddacb3a39ecc9e41624cf6889ecb1d455d664ae13dcace1c405bc0259726bc5e5b89e0521acbbe837cbf74a927a94e21094aee5caab37ffb0bc25ca2af724c6311447d2933dd4785e88e28d5b7e82b49cb74aa78c18a4c4cafa6060c2c6cdf7820f493f9d293b76136676d47101989a2ee320a5ea523795a07d9b31b7f86cd78a0d5088f367d0458128f5e6fc55fe01a869c64a469ed411bbadc6113f3b24819ca4722e437c44200ca2981c571e14685037d6f37d24997d25b74ba31e71d42a947c61add71834bca52dc29d9a7bdf7eee350fdcc7d8a3737a05373d694ef4ede34a20e4282ba4725878ea4fdefb281f4256d9da1a56fb944ffc3217a786a1678f0c8f8ab384c7a23005b50e871e4ef6f6cd223c97f793193da464585165302c78cfefd4d935337ea225936ea3afc210b69bd499cc0181d0b46bee96b03e89d1779918429d44a66902ceec579774d1473ceb0c56479ab633473f02f5253488bcbdff30dffce3fb22ed3361e360b8c47a229caca5db4ff175b72669ee42ad3e8f90f08907c3cb9871058c60f3cb4d61552b6584b5154096e001f0085d321152f0df063c3378a247c496361df20cb347f994edc46b2d550256748bbb85625afdcb5625114d4ed3c0da89abd38349f811e3343b99615a7554261c497e5b9880936dbcb1ed8844c37de82a6de7bc7f4e96842284cbcc31689808e1b37938f107b9a89ac3a7339d78376fdc70881aeb519ba7ae0dcd67bc0d838a2ee51d3cf66154535bd16afbcda96fb0b64a9d4c05dd8c15f18483c702f59746e4fc59ba0c7d5150444d908b6abd1f4aa1d1f4d0f8591cd24b1fb9c18af0620a5afef538b2c9f4cf2108264642117ecc5817a88ce2d609dd9221ad44bba9c4bf27a936bb56cb7daa32c0a1cd5297382941ae70fb69d78f4f243ed553b2fbcb492e2b578beaef14936a723717f2eab8f468e47d64dcb4c6efa829aec84c1d6711bff797dfb8d9abca09dd2c629568cb15bcea602c87faf52baf77cafb9f8668615724dc8a7bb6cf9cf084c38dc92abbd64e122f7ab196813cd783fb332718d53895f17f27f7a3cf332894b20e497589a4ab79d0d157066f0ae070b6245737f55c272714a78cbf7c302410bba47ff0c929b8f183b8b7d5df42886bae31d3711de9b5ed88079afacb6f5f1268acf3a667f0bece4b37b5349c94a61d27abe165526e47d3e99b5699c1acdedba96d455292930f100d7d5700bfeb9c4445be3ed62bbc70bc6ffaf2130381ad82f68779ee2867e5ba17d96a18dc344506596ecfd467ec942f442139f3a907e83d8073985864cd171a83eeffbc37507f77c87fb1a81d00346bdaa298657083eed808aaab473f544521dbf7987d53cd67b58307b287dd823b25d9a2d9c58a851b387e8dc638f86eedb818a7d7dd0bfa017539d9cd5f0bbdc6576f618c0387604213b674d66fdd6c6fb2e38bda3f9d6421ed00e0644bccfd3067fe322b55d2c62ff1be05f817117f08faaa5d9f9da2b06bbd71151ad417e672364c1b384a439cf475f4f2f5505948569daa0755317eedf42bde99148baf48a438063d3f6edd37574e50c42319d52edfd0eed4ecf2416fb9ab43667bc8dcc1782d4c04deab531bbc063f1368ad86e1070e0974d77e28f405314af97c11340c633e752357bc692081d592c32bee1e08bd89ff3d7a55c5f426a2fe0b63fa63bfcb0c5235b8f48b5859a5bd0b9130757517ddf7bd79a14203a59c1cc4546f0767fd7bdc31c31527868d0983d69eeab11f30ac20427a6914afc3f18c30889281269944430297ec70756d398d2bc3865473a244bb4c1552f22f8af0dc03913d819c6407919c64860aa7414d4f95482f6088e89093852d2080813ef9ed5e8b617869a4e58526136f3a93342f4b3b40d6ab66f8a1b1fdb2b9861a1fefa91c0bca89ef39d5c4a2ab2565a781a739280f9e305ac275095e43af78bda70e73a8fc1975fd56f4787a94682265807450c25744f294b3fbe503dabeeedc866b38138585963ccf8f16a46ea3ee87076ddd3da0e401f3dbaf762b58f350103ea88174297d5d66dca72456d63b01a4d0d010435df68e72cfd98aa93577df289d9e63fbe1bcece53287d7e9d07c23f0859c2396b37dd6ed221555474aa0496d8ce77752aa06d6464e75cd5a352370fdec44642489ed5f99411c3343bfce3cf0ed35b83ed4e18689df7ce754b186d6e008939b874ad091c6be3ffe2919b853715dc555011d26b29badc1336d4bb7a69cbabc86b49783cf6621bc8c5d031f693b096d08199a4b9371bd68033d013a1ac92dd6647f8be836f9a11d609fe14889869482879d73db9b61c1c0a734b31676a8af66136bbf0d987ef80151181837188e23f2896b976e2b64cb00171d4e1d5ae2527a5d2d64dfceedd979966cd5ed90e2b2e607f2c94f2ca62be1ecb599352aa85e8f6da48dffac3d37ca7c114917abbb5013368b0c39b706a01cdd695589929c2eddb1cba8689ef3f33cfbaf67f8712821cf959fa7e78a3a2b9738ac03b4c1cb431faba241c90e94cf4eb347b0fb1897a0ea4fc81fecac2ba69451eb374b279695aa414a6f49579d66d73a61f6f48a7b7d2557f0f752388f429a71c23f413ee17ae09cf4ecce46e248ce04aed76066698e46ed0f4619aa69ab64bf24497495d6749699cb9fefbf35b678b41990f46aa4ba0ad9f5bd0c859a0033bac525ebf0cbd4e417d0cdd36483f25546d4553498b4a19cc49ecc38763c637d27658752ca4dbd6e2dca4142d424057cfec9d7d5377ad2fb9668f8edce08c39d1c41913a941289ec0e1790f9aaef1b3540306512f3d2b6d13769be03fd0231af45107a6b7d2b2fa1d68ed0fece6a02861fb7284465180767f036513fa46e820ae06a5255807996ff0d3683a9db65e9a2c2919f54c4ff73c494d5209f30eb3bf4a48983b19fe967b12dacbead5f7c04303e87631773c534f9a622065b2f89243ec10ade19e40f17a0bc0b6dce3f5aa498e1bc6289aecbc9f13346fac2159458152839d2475e53aef36b77fca5b2eb86dea87ef28664820c2dd56dac25789eb29dcd669f66d57338569124c64ed343daff5dd37d795c4d9029e635f77f6f124525c3928cfbd1537027505b229c9e98f9f0db2b85f08dd4bac587c815d5b4928c08baff04f19e6550367b22512ee76f25233dfd8a1ac12994118a81f32c5a6cb0", 0x1000, r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000cf9000)={0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x319}) request_key(&(0x7f00001c4000-0x6)='.dead\x00', &(0x7f00002cc000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f000095d000-0x18)="73797374656d8a70707031707070306b657972696e672500", r0) [ 99.791128] binder: 20554:20558 ioctl 8010aa02 20001000 returned -22 2018/02/14 06:15:03 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000011000)=""/129, 0x81}], 0x1, &(0x7f0000002000-0x50)=[{&(0x7f0000002000)=""/203, 0xcb}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/14 06:15:03 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002000-0x9)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000023000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001275, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004ba000)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000fae000)="290000001800310900390001ff0000070200000000000006800000000c000800040002007a0ef4ff01", 0x29}], 0x1) 2018/02/14 06:15:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000e4b000)=0x0) syz_open_procfs(r1, &(0x7f0000a13000-0x8)="656e766992816e00") mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) r2 = syz_open_dev$sg(&(0x7f00001f4000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000b58000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000690000-0xa0)={0x0, @in6={{0xa, 0x1, 0xffffffffffffffff, @loopback={0x0, 0x1}, 0x6}}, 0xff, 0x1000, 0x1, 0x10000, 0x6f6}, &(0x7f0000124000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f000023c000)={r3, 0x4e}, &(0x7f0000a96000-0x4)=0x6) 2018/02/14 06:15:03 executing program 3: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fb7000)={0x0}, &(0x7f00002f5000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fb4000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r2, 0x4101, &(0x7f000037a000)="9577c56e9915d000f4ff070e61641ead0d64b9de9fe3a20d388768b7b1858e72b1e328ae6ee23ee7d06a0659cdd4c2fc6305f448d185d4a07071175a3858a9c833b3f5cd867204c4486bafa72ad5472915a1bbcf6142ca09c8") [ 99.846737] binder: 20575:20578 ioctl 8010aa02 20001000 returned -22 2018/02/14 06:15:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00005bc000-0x4)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00001ca000)=r1) sendto$inet(r0, &(0x7f000017d000-0x3)="03", 0x1, 0x100000004043, &(0x7f0000ee6000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/14 06:15:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000b8a000)={&(0x7f00009f7000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @multicast2}}}}, 0x32, &(0x7f00009a2000-0x20)=[], 0x0, &(0x7f00008ec000-0xe4)=""/228, 0xe4}, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000896000)="10586a746b92fac81eeb98a85d2d48f456976ed3abcc8f84f51ba1ea7c99ba0675a12b37c47ca78b10869264bb2fb5", 0x2f) writev(r0, &(0x7f0000301000-0x10)=[{&(0x7f0000e6f000-0x15b)="2900000020001900013d181000da000402000000000000179e0000040d000600000011000000000008", 0x29}], 0x1) 2018/02/14 06:15:03 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000aa1000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000c24000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0xef90, 0x0, 0xfffffffffffffffd}) fcntl$notify(r0, 0x402, 0x80000000) 2018/02/14 06:15:03 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setrlimit(0x0, &(0x7f0000013000-0x10)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00003c4000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000068e000-0xf)='/dev/sequencer\x00', 0x1c0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000939000-0x4), &(0x7f0000c95000-0x4)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/14 06:15:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x800) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000d04000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x100000000}) 2018/02/14 06:15:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x1000000100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f5000-0x4)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000232000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000a0b000-0x2c)="000100003e02001400f4977d7b22b8d7004f653b", 0x14, 0x0, &(0x7f0000e72000)={0x11, 0x400000000800, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000e9e000)='/dev/hwrng\x00', 0x0, 0x0) timerfd_gettime(r3, &(0x7f0000535000-0x20)) 2018/02/14 06:15:03 executing program 1: r0 = socket(0x2000000011, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00009ad000), &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000001000-0x11)='eth1]md5sumuser!\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002000-0x2e)=@ethtool_dump={0x40, 0x9, 0x7ff, 0x1e, "c329d3b62564de923acadcb35f440af440debfbf2ae96a038a39ebd41f99"}}) ioctl$TTUNGETFILTER(r1, 0x801054db, &(0x7f0000001000-0x13)=""/19) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000051f000-0x50)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}}) 2018/02/14 06:15:03 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:03 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) listen(r0, 0xf22f) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f000083e000), 0x2) 2018/02/14 06:15:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000938000-0x13)=""/16, &(0x7f000021b000-0x4)=0x10) r1 = memfd_create(&(0x7f0000b1d000-0x3)='^@\x00', 0x1) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000fa2000)=""/159, &(0x7f00004c0000-0x4)=0x9f) [ 100.040271] binder: 20601:20607 ioctl 8010aa02 20001000 returned -22 [ 100.072875] binder: 20617:20620 ioctl 8010aa02 20001000 returned -22 [ 100.083060] binder: 20617:20620 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 100.100195] binder: 20617:20620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 100.128963] binder: 20617:20620 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 100.152594] binder: 20617:20620 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 100.160643] binder: 20617:20620 Acquire 1 refcount change on invalid ref 0 ret -22 [ 100.183945] IPVS: Creating netns size=2536 id=16 2018/02/14 06:15:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000fe9000-0x4), &(0x7f00001a7000-0x2)=0xb563a0f1ff13d24e) 2018/02/14 06:15:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x1000000) restart_syscall() r0 = syz_open_procfs(0x0, &(0x7f0000baf000-0x8)='uid_map\x00') writev(r0, &(0x7f0000d76000-0x10)=[{&(0x7f0000962000), 0x4c}], 0x1) 2018/02/14 06:15:03 executing program 6: r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000cc6000)=@ax25, &(0x7f0000042000)=0x10, 0x80000) dup(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000c7000-0x90)={0x0, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) 2018/02/14 06:15:03 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000562000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0xffffffffffffffff, r2, 0x7fff, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000002000-0xe)='/dev/keychord\x00', 0x40000, 0x0) pwrite64(r0, &(0x7f0000cf4000), 0x0, 0x0) sync_file_range(r0, 0x8, 0x2, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000002000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0xb60}) 2018/02/14 06:15:03 executing program 5: mmap(&(0x7f0000000000/0xcda000)=nil, 0xcda000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000cd6000-0x10)={0x0}) setitimer(0x0, &(0x7f0000a0b000)={{}, {r0, 0x7530}}, &(0x7f0000cd5000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000097000-0x10), &(0x7f00005e1000-0x4)=0x10) alarm(0x6) 2018/02/14 06:15:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000e07000-0x11)='/selinux/enforce\x00', 0x400, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d05000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00001be000)={0x4, 0x6, 0xc70}) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000898000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000011000-0x204)={0x14, 0x7, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000427000)=""/146, &(0x7f0000855000-0x4)=0x92) 2018/02/14 06:15:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e46000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000855000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f00001a3000), &(0x7f0000fb3000-0x4)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000a77000)=[{&(0x7f0000bc8000-0x66)='1', 0x1}], 0x1) writev(r2, &(0x7f000047c000)=[{&(0x7f0000227000)="786c7c61a0e051cc116b4b161f27658a745384408c7b192b5e75630bf7e87225bc8720f3e7b15b19181bfea80476ad629d76b32ab19aaa4c3cf4dc9b4b2718d84b8dca405724dff05cbddc40045bd5c73faf0b5cbff88d6d85f3a21a12fe27dcc50f53234680792ec25a7776e110e656e824908b788f18584ab23c5712", 0x7d}, {&(0x7f0000d0c000-0x1c)="191c29d7a7394444906245e49e7603bda31517a7fb1cae51a4323c63", 0x1c}, {&(0x7f000032b000-0xdc)="47dd2a233d81f26ea1f2d43099542aca369bc8be57cd02c4ab8be3ee32fe53fe588cf304ec0b772e02303fe9d6f891837d216be02da0b525775c0fcdb25f51112400c55000bc2c6c82948ff1e16454f1ecbf04b81034a577b6a937b88dd0bb9df7119786435919101c9540ed8653151a2daaff62aa5629af3ca81d990bac92ab3820d8b701eec247853c3e6c939e055018d19c5e73e130f9e9df088226f4873431e1c11aeb4acf642bb8537ba74a0c74d7c8128d7f7bd9b5d119d69b71dce4db359a493d8d3314db303c5fdc6e3e2f23c1ed8e59631949090d12760f", 0xdc}, {&(0x7f0000dd7000)="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", 0x1000}, {&(0x7f0000abe000-0x75)="def571bb0613b34024767f75bccb1777cc7b7e220f754033f4abee13268b7c45958c0038106ded0bb32199423236eb80bfa6c2cced1ce5c8fde7e3f76fffa56eb526d5624e4d8734584f59d93a5f590bdfe32e88a49dc16c0f739c44fca511565bb8ea41a16629f90d32d4f3cde34713b28f8b01af", 0x75}], 0x5) 2018/02/14 06:15:03 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x101) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000315000-0x11)='/dev/vga_arbiter\x00', 0x40000, 0x0) sendto$unix(r1, &(0x7f0000a98000)="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", 0x1000, 0x4080, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00002a7000)={0x14}) socket$inet6(0xa, 0x3, 0xfffffffffffff8d0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00006a3000)) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000cf0000)={0x0, 0xffffffffffffffff, 0x0, @empty}, &(0x7f0000a3a000)=0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000158000)={0x6fceba0a, 0x4de, 0x1c0000, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x1, 0x7, 0x6}, 0xb) poll(&(0x7f00000ea000-0x30)=[{r2}], 0x1, 0x0) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000fe7000)='./file0\x00', 0x2000, 0x4) mmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000fe7000)={{&(0x7f0000405000/0x2000)=nil, 0x2000}, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) epoll_create(0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00003b9000-0x4)=0x51) poll(&(0x7f000085c000-0x40)=[{r1}], 0x1, 0x400) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fe0000)=0x3) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001000-0x4)=0x0) ptrace$setopts(0x4206, r0, 0x5, 0x100004) syslog(0x3, &(0x7f00001be000-0x25)=""/37, 0x9) [ 100.758516] binder: 20766:20774 ioctl 8010aa02 20001000 returned -22 [ 100.798155] binder: 20766:20774 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000f1000-0x10)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) bind$inet(r1, &(0x7f00009c1000)={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xc}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00002be000-0x1)='.') fcntl$getownex(r0, 0x10, &(0x7f000064f000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f00000c4000-0x8)={0x0, r2}) readlinkat(r1, &(0x7f0000578000-0x8)='./file0\x00', &(0x7f000040f000)=""/4096, 0x1000) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000f65000-0x28)={&(0x7f000001e000/0x4000)=nil, 0x80ce, 0xb, 0x3, &(0x7f00007cc000/0x1000)=nil, 0x9}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000db7000)=0x101, 0xfffffffffffffeac) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000659000)={0x2, {{0xa, 0x1, 0xffffffffffffff1b, @empty, 0x1}}, 0x52bcdc5ae980088, 0x1, [{{0xa, 0x1, 0x800, @empty, 0x20}}]}, 0x110) readlinkat(r1, &(0x7f000061a000-0x8)='./file0\x00', &(0x7f00008cd000)=""/69, 0x45) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f00009b2000-0x1000)=""/4096, &(0x7f0000ab1000)=0x1000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000c15000-0x4)=0xf88, 0xfffffc5c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000ce2000-0x98)={0x0, @in6={{0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x10001}}, 0xfffffffffffffffa, 0x6}, &(0x7f000011e000)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000c38000)={r3, 0x1c, "29f877515c2f3b70f95752350798a8ed97d78590dabccfecc751ee2e"}, &(0x7f00009e8000)=0x24) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000ca9000-0x10)=@buf) symlink(&(0x7f0000ed1000-0x8)='./file0\x00', &(0x7f00009b8000-0x8)='./file0\x00') sendmsg$nl_netfilter(r1, &(0x7f0000e07000-0x38)={&(0x7f0000376000)={0x10}, 0xc, &(0x7f0000446000)={&(0x7f0000871000)={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x24000000) 2018/02/14 06:15:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) r2 = fcntl$getown(r1, 0x9) sched_getscheduler(r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="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", 0x502}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) recvmsg(r1, &(0x7f0000a33000-0x38)={&(0x7f0000856000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @mcast1}, 0x1c, &(0x7f0000ce4000)=[{&(0x7f00004ad000-0xbf)=""/191, 0xbf}], 0x1, &(0x7f0000156000-0xc2)=""/194, 0xc2}, 0x0) recvfrom$llc(r1, &(0x7f0000873000)=""/144, 0x90, 0x0, &(0x7f0000a2e000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) sendto$inet(r1, &(0x7f0000e7f000)="90017c848956abd3e78fae15e8644727676273b7602cb1bb44aaabbdafac8317a9a20adb62a87e91d4afb1de29acd0172f624210def735c85ee6868200120e47bc5f0bd43e96b5478f06cba5ca7069fd240221b672d6543c8fc972d61066da47f5e4ee2dd3793013764106ca73b6533f3c6209098600ab9dd89f07fedfbaada35a1a11ee96fbf724e89690216118f4cbdcd656718059abd7466b5d", 0x9b, 0x1, &(0x7f0000eba000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000ff8000)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000548000-0x5)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000df6000)=0x2481) ioctl$TCSETSF(r0, 0x5404, &(0x7f000080b000-0x24)) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000f51000-0x40), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0xfa7000)=nil, 0xfa7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fa3000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000720000)={&(0x7f0000e07000-0x40), 0xfffffffffffffdf0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000050b000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000fa8000-0x8)={0x0, 0x80, 0x2}, &(0x7f0000fa8000-0x4)=0x8) mmap(&(0x7f0000fa7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000fa8000-0x4)=r4, 0x4) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xffffffffffffff6b, &(0x7f0000027000)={&(0x7f000001f000)=@ipv6_newroute={0x1c, 0x18, 0x781a251f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, []}, 0x1c}, 0x1}, 0x0) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001000-0x8)='./file0\x00', 0x40) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000de8000-0x10)="ef8a80c13f9045ea08d4cc6cbc854d71", 0x10) mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000001a000-0x18)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000007000)={0x7fff}) ioctl$UFFDIO_REGISTER(r1, 0x8010aa01, &(0x7f0000007000-0x4)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) [ 100.815677] binder: 20766:20774 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 100.828761] binder: 20766:20774 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 100.854085] binder: 20766:20774 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(r0, 0x2, 0xfffffffffffffffd) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f38000-0x9)='/dev/rtc\x00', 0x103700, 0x0) syz_open_pts(r1, 0x400000) writev(r0, &(0x7f0000d49000-0x10)=[{&(0x7f0000a5f000)="29000000200019fff63d0014000000060200003215f50005000000040d001000000000020002000008", 0x29}], 0x1) signalfd4(r0, &(0x7f0000a19000)={0xc1b7}, 0x8, 0x800) recvfrom$inet(r1, &(0x7f0000f48000)=""/48, 0x30, 0x10000, &(0x7f0000f4a000)={0x2, 0x1, @loopback=0x7f000001}, 0x10) bind$pptp(r1, &(0x7f00007e7000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x0, 0x11}}}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000bad000-0xe8)={{{@in6=@local, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00009db000-0x4)=0xe8) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000ba9000)='/selinux/create\x00', 0x2, 0x0) stat(&(0x7f0000f0c000)='./file0\x00', &(0x7f0000ebc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000035000-0x8)='./file0\x00', r2, r3) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) renameat2(0xffffffffffffffff, &(0x7f0000011000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x101) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000315000-0x11)='/dev/vga_arbiter\x00', 0x40000, 0x0) sendto$unix(r1, &(0x7f0000a98000)="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", 0x1000, 0x4080, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00002a7000)={0x14}) socket$inet6(0xa, 0x3, 0xfffffffffffff8d0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00006a3000)) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000cf0000)={0x0, 0xffffffffffffffff, 0x0, @empty}, &(0x7f0000a3a000)=0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000158000)={0x6fceba0a, 0x4de, 0x1c0000, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x1, 0x7, 0x6}, 0xb) poll(&(0x7f00000ea000-0x30)=[{r2}], 0x1, 0x0) [ 100.875376] binder: 20766:20774 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:04 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000975000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000153000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000bb8000-0x4)=0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000eb6000)=[{&(0x7f0000074000)="390000001300094700bb61e1c3e9ffff0600000002000000450000000000800019001a000d0000000006280ff4000001fd17e9ffff061f0400", 0x39}], 0x1) bind$inet(r0, &(0x7f0000de9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:04 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) userfaultfd(0x80800) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000006000-0x10)=@ax25={0x3, {"d0b77204a1ce47"}, 0x3}, 0xfefe, &(0x7f0000002000)=[{&(0x7f0000010000-0x55)="5500000018007fafb72d1cb2a4a280930206000000a84309772623692500090021000149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0xfffffffffffffdf7}], 0x3, &(0x7f0000004000)=[]}, 0x0) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x24, 0x1, @thr={&(0x7f0000000000)="b5ca4b9b17be21784d04647b35b4aeb525017b90e15a385845d85eda06b49764684584e97128282a99430236", &(0x7f0000ac7000)="529a5633e8819bd4a86a77fa9a102999141f1af65643c12d2126a04c58a3533dc6299a629708582248c20d121008a9ee"}}, &(0x7f0000833000-0x4)=0x0) clock_gettime(0x0, &(0x7f0000b47000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000816000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000a61000)={0x0, &(0x7f0000482000-0x8)=[{0x80000001, 0x10001, 0x8, 0x4}]}, 0x3e3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@common='bcsh0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000127000)={0x0, 0x0, 0x0}, &(0x7f0000253000)=0xc) r6 = getegid() setregid(r5, r6) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0\x00', 0x0, 0x2) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f00001bb000)=0x6) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000741000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000464000)=0x80000001, 0x8) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000099000-0xc7)="10b3ab88d599ed1631164076a1653105117d906876a67bec3cebf0851293005d199d1c51d9e2fcd201804b1e055792797e78546bbfb7d1b5a60738de477dd051171a569506e293ffbbcc15dc1c8d2d563f41fbaa321685c4410f898e6771efc180898f62fe6513b10420cab1c597ef4fb4ed5e80c54baa711f871d4298b737e744b0a0caa1410f9d", 0x88) accept4$packet(0xffffffffffffffff, &(0x7f0000931000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f000072e000-0x4)=0x14, 0x80800) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000d29000-0x50)={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x3, 0xafd, 0x91, 0x100, 0x1, 0x400000, r1}) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) pipe2(&(0x7f0000880000)={0x0}, 0x800) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000957000-0x4e)=""/78) write(r0, &(0x7f000087d000)="260000001200470020000083140022e3041000ff01000000000000010009749d060010000500", 0x26) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000119000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write(r0, &(0x7f0000738000-0x1a)="ff4be0a1278d1acea260f01293f812317eb00d0c99e4e49ca2a3", 0x1a) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000289000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfa2) clock_settime(0x1, &(0x7f0000f83000-0x10)={0x0, 0x1c9c380}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000077a000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x40200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000035f000)='/selinux/enforce\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000690000)={&(0x7f0000001000-0xc)={0x10}, 0xc, &(0x7f0000001000-0x10)={&(0x7f0000001000-0x2f0)={0x2f0, 0x38, 0x101, 0x5, 0x0, {0x1d}, [@nested={0x1e4, 0x66, [@typed={0xc, 0x93, @fd=r1}, @typed={0x98, 0x5b, @binary="e26491d92e364adb7e5c863951b472d3512209308c9965c4128bd27234709377f51e83984919136558e070dccf738b209c771905610f7f36765c80c7597452ad6b8610d846ed6d5fefcd674efce80b423e19e2792ff6b3662cf7d3bd76cfd5c840282cba665b4910d90570fad747b31a31c940eca8a017df88c3fcf0cce0ecd8460ab31653171f66f87e98ab618de359"}, @typed={0x18, 0x84, @ipv6=@empty}, @typed={0xc, 0x49, @pid=r2}, @generic, @generic="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", @typed={0x8, 0x5f}, @typed={0x10, 0x27, @u64=0x63c7}]}, @generic="6b8cf0937c7faa65f081e6299f88e56c67726d9f76c5c52dd7e9aed5a7a9381e33592bee3d85b11d727136dd651053d6433211c71b35693f06875465e4fc5f151e0376338d148183bfe6748e9997703b36b270b16d6b7febb6516d49ac65a4b95dc801509cd247166fa677e986ae4766d0ca4cb378118b5699455df6efa6a3349ae3a6a423773584d9a17a4f656410de5465e6", @generic="0a5d9da574a11de6b41d8cc4d6a0dd6b87e2a27a7454c1ec0631b6bcdaa1569a5475ee5dc430cc613df28261789370c688bebca490d8e7aa04732e547afce49d3e2a9235bf157138a9fc371416fe859f4349016f086b9d4341750e25221f3af35d91c9ee4d"]}, 0x2f0}, 0x1}, 0x80) mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f000000a000-0x38)={&(0x7f0000002000-0xc)={0x10}, 0xc, &(0x7f000010a000-0x10)={&(0x7f0000f70000)={0x14, 0x13, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x1f}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000d74000+0xa22)='/dev/sg#\x00', 0x40, 0x6082) pipe(&(0x7f0000d75000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f00005e0000-0xa9)=';', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f00003e2000)=[{&(0x7f00005dd000)=""/4096, 0x1000}], 0x1) fcntl$setpipe(r0, 0x407, 0xb056) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000682000)={0x2, 0x9, 0x1, 0x5}, 0x10) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002000-0x8)=@assoc_value, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r1, 0x1, 0x2, [0x5, 0x7]}, &(0x7f0000000000)=0xc) getsockname(r0, &(0x7f0000001000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000d57000-0x10)=[{r0, 0x1045}, {r0, 0x202}], 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b46000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00007fa000)={0x2, &(0x7f000017c000-0x10)=[{0xc}, {0x6}]}, 0x10) faccessat(r2, &(0x7f0000486000)='./file0\x00', 0x80, 0x0) write(r3, &(0x7f0000983000), 0x0) 2018/02/14 06:15:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x2, @broadcast=0xffffffff}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00007ae000-0x10)={0x2, 0x2, @empty}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000e46000)='/dev/usbmon#\x00', 0x7, 0x400000) sendmsg(r1, &(0x7f0000fe3000)={&(0x7f0000b4b000)=@pptp={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x20, &(0x7f0000fbf000)=[{&(0x7f0000da7000)="08b3bc2f1ea51633d3e0ae2e5bf4c8b7b4a55b40300ab194ae52831c1aa3315f49d7d39587483254f13d98c7b74bca4377d583382adb5837315ed8b2793e90f97ba1de5889151e6091570ff22299a7a19254b253a26516294c759c0a402b440c50327ed30f31c5e6ca6a9f877e3af6ed534ea25038687d11a85e0d4ea557fab294da0be60333f299f0ca1aebdbd7f9cd329c2ca4f721313f19409046ed4daf8fce6139714847b8c9426204f06c31ea", 0xaf}, {&(0x7f0000ee6000)="eca9e041ce9e6f280a532a2349e292fff060f74c0f43f2b28944a458003ddf33ab40", 0x22}, {&(0x7f00000e5000)="ea082c04fe25e49043b58c52e6e22dd53b6c5f4399457aca1f07bd9e4170db82d2b03cab2c081aec4847c49488de17d6d5ff5ef2b7dae2195f5a930042d0ace9b76ceac04d087c55aa2ebabdf241ed702b20a399cf4cbcd8a165d1c15b665b22259295815facfc4ab45c2750dcc314c66dff464946504a4fcf8ad7d95a9d136338776b89f753a2c7ad5ff29b78cc1406f3a7883be19e476c052d9971daad9b78c365322d60ae957d6c42", 0xaa}, {&(0x7f0000ae4000-0xd4)="9d7ddbd4ebbd417810e9bf638ac333188373450f5d10b753e233dd6596a15c433808974a7debffc7b98ba74fe061b6da3a898046edb91efabddf518cc5aff2865f01b059258e792eefcea960733cc273c2a268160694052db06af787df778dd22b4bb94fe3485969ec5d16bb0a948ba79ddd907ca612fa7ed24d7276933c48fa020724b98c55a2f8459f7de5454022bdbb247f9f6e938ca76ea638b3640bf858ac9d2211fe112d17a1cf3454abdbb3488d45bc16ce2f513021f0ba48ad243125464b54009bb15db0d970a8926fc82ab774808b58", 0xd4}, {&(0x7f000030e000)="74a00aad3b4c42bf2d3f223d9cafe2f7b710874aca50302097d8e885b971ddf44e60ed62174662300f3076a43531cda8489a9125f5c98716bb6bce675f20d09affdec41c1a420aa50decb0ef656aa68598f38fe317f94e7834db57cd1d7d9bc8bd6c36aacc5661b9c377344008c0", 0x6e}, {&(0x7f0000f45000-0x9d)="6d0dffd50458aa0bb9688415f2019cf96307dd5f9e7a62e3393032d2a88b28c7f9b71d18199968dfb2a993db34a5cf844cf78f980a0e7aadd97eeaa0bef653b861dab7230d5b4fddd63835f83600743255831570446923f86ed06bda1ae6df89c332a243b4ca271024f5be5b575b863a8d088984f9a4ffaf13a91c4f28ae588a1dffb3f8f688ff2ca4cc4af821343d1b4edf008d74de7e10d034146cd4", 0x9d}, {&(0x7f0000a10000-0x24)="03aeaaed8d2bb9f25911b27503c8373b7b51c431a73541911342c50fbb54bd396bf4c691", 0x24}, {&(0x7f0000ade000)="cf99775439bc36865d05b11eb1afef5a71d939612f7e7b821096e304922c170577346c5cf71decf6016f", 0x2a}, {&(0x7f0000061000)="c8612e46e445451ac7ecf0d8e2d5862d8d503b668d42ab7cb0d944684c32796ed5568c602c7b8a50a4add7729b8c1365b00e21ca233def26b0641653de79621f828485313b2631191951fb34cbd43cc9f24abb02abe83ab9d36681de56042703a29673b1f5c846b7d85a70b7fd9c81d5d2a2c65616965eeefc04ae6f6a8de21b721266", 0x83}], 0x9, &(0x7f00008d6000)=[{0x68, 0x11f, 0x3f, "cf9d12e975067a7d3e0b9a250c144c119c78a3baa4876681da3306c226c0a8ffba435ac18d655d50b611c48138679260f9656282cd8b7234ec790485c0f56243edd37af08ebc3f61a10cae3cc2de5357ab2b2b1d64"}, {0x38, 0x197, 0x5, "ce16fe7e37ac273e84cfeaf47767f27ed2294f915e2aa87529f862950d14a22e7628e260"}, {0x80, 0x116, 0x0, "b31aa87a6e86305d915ec7d8053398fea39d05e11c8b685a8cbce4715c152adcefba2ffe9188ebdc90853b3d8c1f3311c0e7290faabe3f127e713b46db1a1a043f8fd6b9d227e4323b3ea9e8306f2961fa69c00d34af778865e36019fd6816c04297b21155ceb0748f2325909432"}, {0x20, 0x111, 0x8, "166b8cea8e059548eaea38cf00537b"}, {0x60, 0x11f, 0x3, "d0ccf5789eb21d149feb583f96be253717a60a15b58b3026159034a071fa0dc022070f37cc9c25cbd88d40a299221b40ee248cbf97001fd9dd56e199b120e7974f5f8d720d86d6431ac7b67228"}, {0x1010, 0x11f, 0x0, "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"}, {0xc8, 0x103, 0x6, "d0b25a7d920fa15bbfb1e829c69a15d95cf4a3db65993d260f9f2089df1b5e21977495251973e6822dfb83cb4ac8bd4a0678585a258c20eedd9c5f74b17757b243f7cf2b210667c56d45b615ca43f34f7bdae03a304c746c0f6cb9b5a25fc123497ad111e32eae609ae80570857e4450c2f8fc2fe14bf7ea4b380a3570d87738a275a6955b269377e165c92b9924398d52ee8a888866a655bcfe24e48dfab800b542273e1b34c80b021113686d1b48c9f8e1e56cf2"}, {0xc8, 0x11e, 0xfffffffffffffff7, "9242f831c326cd6b49d6e06ab56fbe18054f4a1ea302602430ca856937da9d4b1746acd82406cd54be7fa99b9f4e6413dc02e1c645505f3be94733f032a6ff2bc383694e1ac2405dcbdf1edcaf1cb230a2f3141d3ca063b07e12a3ed3297fc61edbf8013f8fb374315a880a1014144bb1b5be1d7be62576ac66e0ad7c4b2596fd39028b4b4725b5faaa20fda65d6d63cab64bd30948f27f1ed152a3aa3a29e94f9ce22dcce57604df2d9af707f7d56e509"}, {0x68, 0x88, 0x400, "e1e7fd4d6f9728c333ccbd8d9bb8456382ee6702466e3502098fa0733b86a427e0a62b986357e3e687072392986ef27b741698710650ce02b6be274361b2bc7598abdbb6294339f3d4295cc4f15086e388"}], 0x13a8, 0x40}, 0x80c4) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x400) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000875000-0xe8)={{{@in=@dev, @in6=@dev}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f000098a000-0x4)=0xe8) openat$dir(0xffffffffffffff9c, &(0x7f0000ec2000)='./file0\x00', 0x8000, 0x8) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f000082b000-0x40)={0x0, 0x6, 0x1}) r1 = creat(&(0x7f0000554000)='./file0\x00', 0x44) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000715000-0x1c)=@req3={0x3, 0x5, 0x7, 0x5, 0x6, 0x3ff, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_unlink(&(0x7f0000fc5000-0x5)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x3d8, 0x20000000, &(0x7f0000e0b000)={0x77359400}) r3 = openat(0xffffffffffffff9c, &(0x7f00007ab000-0x8)='./file0\x00', 0x280000, 0x12) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000033000-0x18)) syz_open_dev$sg(&(0x7f00000b8000)='/dev/sg#\x00', 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000e98000)) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00004ad000-0x1e)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @syzn={0x73, 0x79, 0x7a, 0x0}}}) mq_timedsend(r0, &(0x7f0000fe6000-0x1), 0x0, 0x0, &(0x7f0000439000-0x10)={0x0, 0x1c9c380}) ppoll(&(0x7f0000571000-0x30)=[{r0, 0x4}, {r2, 0x100}, {r0, 0x401}, {r2, 0x208}, {r2, 0x4}, {r2, 0x8000}], 0x6, &(0x7f0000d3e000)={0x0, 0x1c9c380}, &(0x7f00000b8000-0x8)={0x1f}, 0x8) close(r0) 2018/02/14 06:15:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) r2 = creat(&(0x7f000054b000-0x8)='./file0\x00', 0xbf) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000093000)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @loopback=0x7f000001}}) getsockname$ipx(r2, &(0x7f00003af000), &(0x7f0000538000)=0x10) [ 100.990906] binder: 20835:20839 ioctl 8010aa02 20001000 returned -22 [ 101.008944] binder: 20835:20839 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.019685] binder: 20835:20839 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000363000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00007c9000-0x4)) socketpair$inet(0x2, 0x80000, 0x7ff, &(0x7f000015f000-0x2)={0x0, 0x0}) ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000853000)="300f55423e6ac79969b8c779705914190fad542e84f42e67be77f63c81d16a600c46540f20e24c2a75448ddbc707c3073f65b484d2c0029a7af48ba608849142f79dbdbe3d18c4950b3c6138fd5ece0db645202102b24e4541d937a8283195c081be2898dad0c55fd4ad157d2d1e5c8078b9649a8200a54b2679e490ac946d6fc5d2f0548809f23867a5aab812dbde5ab18e1830481de6f9ff83a2d21aaa0cda4c996fe6eeb359c2de115cb802f7ae") [ 101.059229] binder: 20835:20839 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.078016] binder: 20835:20839 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.117586] binder: 20835:20839 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f00008de000-0x4)) readv(r1, &(0x7f0000da8000)=[{&(0x7f0000778000-0x75)=""/117, 0x75}, {&(0x7f0000d7e000)=""/4096, 0x1000}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000194000)='/selinux/enforce\x00', 0x480000, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00002b5000-0x78)={0x101, {0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xc}}, {0x2, 0x2, @broadcast=0xffffffff}, {0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x1a0, 0x5, 0x6, 0x8001, 0x7f80000, &(0x7f00007e1000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x4, 0x8431, 0x3}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) unshare(0x2000) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/14 06:15:04 executing program 1: mmap(&(0x7f0000000000/0xfba000)=nil, 0xfba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000c96000-0x9)='/dev/sg#\x00', 0x1, 0x802) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000fb4000-0x1)=""/4, &(0x7f0000bea000)=0x4) bind$netlink(r0, &(0x7f0000fbb000-0xc)={0x10, 0x0, 0x3, 0x40}, 0xc) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fba000)={0x1, &(0x7f0000fba000)=[{0xb6b, 0x953, 0xfe, 0xfffffffffffffffa}]}, 0x10) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xe00000)=nil, 0xe00000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x7, 0x1000008) mmap(&(0x7f0000e00000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f00003c9000-0x5f)=""/95, 0x5f, 0x100, &(0x7f0000e01000-0x1c)={0xa, 0x2, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x200000001}, 0x1c) set_robust_list(&(0x7f00000b4000)={&(0x7f000066f000/0x4000)=nil, 0xdba9, &(0x7f000054d000/0x2000)=nil}, 0x18) sendto$inet6(r0, &(0x7f0000e00000-0x1), 0x0, 0xfffffffffffffffe, &(0x7f0000c72000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fcb000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000eb000-0x8)='./file0\x00', 0xffffffffffffffff) chdir(&(0x7f0000163000)='./file0\x00') r1 = openat(r0, &(0x7f0000bf7000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000020000-0x9)='./file0/file0\x00', r1, &(0x7f0000020000-0x8)='./file0\x00') mount(&(0x7f0000d78000-0x8)='./file0\x00', &(0x7f000060f000)='./file0/file0\x00', &(0x7f00002a8000-0x6)='exofs\x00', 0x841068, &(0x7f00001c8000)) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3ffffffffffffffe, 0x114a) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000e28000-0x78)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x64, 0x0, 0x0, 0x0, 0x0, &(0x7f0000f79000)=@syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/14 06:15:04 executing program 4: mmap(&(0x7f0000000000/0x42000)=nil, 0x42000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000010000-0x20)=[{&(0x7f0000037000-0x16)=""/8, 0x8}], 0x1) write$eventfd(r0, &(0x7f000000f000-0x8), 0x8) mmap(&(0x7f0000042000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000043000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000004000+0x1dc)={0x0, 0x0}) mmap(&(0x7f0000042000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000043000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000043000)={0x1, 0x8035, 0x1, 'queue0\x00'}) timerfd_settime(r1, 0x1, &(0x7f0000043000-0x20)={{r2, r3+30000000}, {0x77359400}}, &(0x7f000002e000-0x20)) writev(r0, &(0x7f0000001000)=[{&(0x7f0000021000)='u8\x00\x00\x00\x00\x00\x00', 0x8}], 0x1) 2018/02/14 06:15:04 executing program 1: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f000068c000-0x8), 0x3) pivot_root(&(0x7f000088a000)='./file0\x00', &(0x7f0000d33000-0x8)='./file0\x00') 2018/02/14 06:15:04 executing program 7: r0 = memfd_create(&(0x7f00003aa000)='cpuset\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000001000-0x20)={0x40, 0x0, 0x1, 0x7ff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00006ed000-0x10)={0x4, r1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000ac9000)='veno\x00', 0x5) sendto$inet(r2, &(0x7f0000de2000-0x1), 0x0, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r2, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000e8e000-0xe)=@known='system.advise\x00', &(0x7f00001c7000)=""/229, 0xe5) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000df1000-0x9)='/dev/sg#\x00', 0xe31a, 0x10000) stat(&(0x7f000039e000)='./file0\x00', &(0x7f0000da7000)) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000c2d000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x0, 0xffffffffffffffff}]}, 0x38}, 0x1}, 0x0) pipe(&(0x7f000095b000)={0x0}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f000005b000)=0x2642) recvfrom$llc(r2, &(0x7f00007d7000-0x43)=""/67, 0x43, 0x20, &(0x7f0000b89000)={0x1a, 0x0, 0x32, 0x7, 0x3, 0x20, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 2018/02/14 06:15:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000ad9000)='attr/current\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001000-0x38)={&(0x7f0000000000)={0x27, 0x8001, 0x6, 0x7, 0xfe, 0x60d, "31a0526a67bcfa87bbaa24839074d2ba1e81ee8141c3348458691d7bfce3bf2a496f9c9def5fb94ed4a24bef40e148393856fcb0ea36cfad2c996680f20925", 0xfffffffffffffffb}, 0x60, &(0x7f0000e56000-0x90)=[{&(0x7f0000000000)="99ee816b494f9c257675363b22be34ac6a67a10cb5b8da6f3b6631b6edfb2bb3952fa7bec96ba2f4de24b07f3b6f2295c9f35777b2631b5c81b923ee83063b80a3b76c699dcee288031ecd416d6a17d3b720973d75fce64f91d872befa47ceb1537a1799a1adf2da6a8ebb3c025146b2a77bd6008b74f716d57314676d9cc3539dee6d017febfad16f1a35caa30e856ac7601503e4e2d3", 0x97}, {&(0x7f00007f0000)="2f240e3ca6015ff7", 0x8}, {&(0x7f0000001000-0x4)="821f75c2", 0x4}, {&(0x7f00000f5000)="1315bb9838961789fcd455053c709d8b931e23acc20c2efbeced8226de73d4c00f9fb9452287df20fd7f639bfb8dca31c8f782b07b23928ff4860f1888e3e717a4813e6ced798bd2ad30986cd2a4559711601b0332bec227c06bcc1d7e2828bd393ada0f9d8c624f11d7cd447be17c6f787ab2145fa7e4f4b0110b432bec9ae39a33e1c2abf105154407e84bf4f3a2125ab05dc016911c52b0299ec12830eb578d3beda7f554ce3e7d00fb302fccaaa85719cac972b22175a98b846a1903ad46ccb65cf655253a59554a96bea9fb21b2a2845eb205682d81a9582758f85a708382fe97b51def23b0a1f6d50079981a3368edcbe4c5c7", 0xf6}, {&(0x7f0000512000-0x76)="472e01e3dce005a5b2a7c973f5031e33c2cb138e57ec5cacdef06a22f868409fbc4b2f13e2413fe01d11d3ef5f379525009b19480b8326d3fdc67358e4ac832df3d43c32aa6479939abad3dbb925f439da967eca069b622304a90cd4bff831f60e4fb91144231442fb7c645f15922828c7a43ad34d41", 0x76}, {&(0x7f0000a4b000)="51d0529a02c8d44b9aeb745e71", 0xd}, {&(0x7f000036a000)="9f71c491008ee6d3db142afbe34702c52e3eb7f9208c08934cb9836e1f3891c889e799c8bfcad9d8f8853d431bca4474b923ba65dc36124963cf83a3e2ee87a660787f95cc99ddee8a7fc89849035f0ad48605e13fc415091a37c2ce62e9e6a498dc2d9479fe27efeb9b6597a6f3417de2643f184c503acaa563c8cb1559cdc3dc8dbe16df545df479a753a5813402b04020", 0x92}, {&(0x7f0000ab7000-0x9)="2eece820d5063f950c", 0x9}, {&(0x7f0000001000-0xcc)="025042becc18e2430a940139338506e1a921870bb6d09723ddeddba83c307a3d92a183762e3bbf56fa2ee884b6c03f75dd1b57fa5c9ac096d1934d36327fec45a56247c00508aa5f4b02144e073a79fae2ecfa10d133a9dc0ad033ee968f920613926d25d995d1380b07a1b8f9a879173368124702a387b6f5325d9b105c4fb79e69ae50ec423146f8fc94a765c2f17d0413b30723c9a56adb1b42fd9e9be24baf8cfc782f2a88d69e98b1a3a46b30b03310d04d2ab99d5f4766f2207af983511ec567da4e53eab49a0f4259", 0xcc}], 0x9, &(0x7f0000000000)={0xa8, 0x1, 0x8, "0bc3f4a754956fd57bec8a03594846a6c2c3262113516ffc78e0db894d47feca7f2a305d8e8c9fed890387e9ee3429a697ef214e00e7f7dbbc3b93e4006902b2cba0394996ed6cd17ec5e941706422d63e13561d9847361ef8afb45a1861ab4fca4e97613ac835eac6bcb8fe11330a826292cf86e44365d1d8f70996e12714e92083857e09c0f7d6458b8e888efe27c2d3c23d6a"}, 0xa8, 0x40000}, 0x40000) fcntl$setsig(r0, 0xa, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x6, 0xffffffff}, {0x7, 0x81}, 0x3, 0x4, 0x3}) 2018/02/14 06:15:04 executing program 1: r0 = geteuid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgroups(0xa, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) syz_fuseblk_mount(&(0x7f00007a4000)='./file0\x00', &(0x7f000078d000)='./file0\x00', 0xc000, r0, r1, 0x8, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000635000+0x43e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000fde000-0x8)='./file0\x00') mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f00009a3000-0x8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f0000bdd000+0xc23)='./file0\x00') poll(&(0x7f00006cd000)=[], 0x0, 0xff) pivot_root(&(0x7f0000798000-0x8)='./file0\x00', &(0x7f0000119000-0x8)='./file0\x00') pivot_root(&(0x7f000035a000-0x8)='./file0\x00', &(0x7f00007d8000-0x8)='./file0\x00') [ 101.206037] binder: 20887:20896 ioctl 8010aa02 20001000 returned -22 [ 101.221030] binder: 20887:20896 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.235666] binder: 20887:20896 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.244461] binder: 20887:20896 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x8c41, 0x0) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000581000-0x6)="6664001f26d0") ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00001c7000-0x4)) syz_open_dev$sg(&(0x7f0000b36000)='/dev/sg#\x00', 0x9, 0x80) execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000843000)=[&(0x7f0000019000-0x13)="2d5d000a09d0766d6e657430"], &(0x7f00008c1000-0x28)=[], 0x0) [ 101.262195] binder: 20887:20896 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.274431] binder: 20887:20896 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.287585] binder: 20923:20924 ioctl 8010aa02 20001000 returned -22 [ 101.297305] binder: 20923:20924 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00004a7000)='/proc/self/net/pfkey\x00', 0x2020c1, 0x0) prctl$void(0x7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000774000-0x18)={0x0, 0xfffffffffffffffc, 0x20, 0x8, 0x6}, &(0x7f0000597000-0x4)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00001e1000-0x8c)={r1, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x8c) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000bb0000-0x30)={0x40, 0x1ff, 0x10000, 0x5, 0x7, 0xb801}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f000098c000-0x38)={&(0x7f0000b57000)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000473000-0x25)=[], 0x0, &(0x7f0000eba000-0x60)=[{0x10, 0x0, 0x1}], 0x10}, 0x0) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000004000-0x4)=0x80, 0x4) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 101.307439] binder: 20923:20924 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.315234] binder: 20923:20924 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.322394] binder: 20923:20924 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.329846] binder: 20923:20924 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000aff000)='/dev/random\x00', 0x0, 0x0) unshare(0x400) writev(r0, &(0x7f00001f5000-0x30)=[], 0xff) r1 = getpgid(0x0) ptrace$peekuser(0x3, r1, 0xa1e) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00005c0000)=""/228, &(0x7f00008c3000-0x4)=0xe4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x852b}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000886000-0x4)) splice(r0, &(0x7f0000b04000-0x8), r0, &(0x7f0000f51000), 0x4, 0x4) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000e2a000-0x4), &(0x7f0000fb8000-0x4), &(0x7f0000001000-0x4)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f000059c000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/02/14 06:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000146000-0x9)='/dev/sg#\x00', 0x7fff, 0xc0000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x3, 0x2, &(0x7f0000a56000-0x8)={0x0, 0x0}) r2 = socket$inet(0x2, 0x0, 0x3) r3 = getpgrp(0x0) fstat(0xffffffffffffff9c, &(0x7f0000074000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00008dc000-0x8)='./file0\x00', &(0x7f00001d4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = inotify_init() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000a69000)={0x0, 0x80000, 0xffffffffffffffff}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000def000)='/dev/rtc\x00', 0x101200, 0x0) r9 = signalfd(0xffffffffffffffff, &(0x7f000091d000)={0xb783}, 0x8) r10 = fanotify_init(0xa, 0x1400) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00006f7000)='/selinux/create\x00', 0x2, 0x0) r12 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0}, 0x4000) r14 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000677000-0x4)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r15 = accept4$ax25(0xffffffffffffff9c, &(0x7f00009a6000-0x10), &(0x7f0000000000)=0x10, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r16 = gettid() stat(&(0x7f000027c000)='./file0\x00', &(0x7f0000993000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000e4c000), &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x4)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000d43000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001000-0xe8)={{{@in6=@loopback, @in=@rand_addr, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001000-0x4)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000f9b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r22 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x4c0, 0x0) r23 = socket$packet(0x11, 0x3, 0x300) r24 = getpgid(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000589000-0x8)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000497000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r28 = accept4(0xffffffffffffffff, &(0x7f0000001000-0x1e)=@pppoe={0x0, 0x0, {0x0, @broadcast, @syzn}}, &(0x7f0000000000)=0x1e, 0x800) r29 = openat$ppp(0xffffffffffffff9c, &(0x7f000022c000-0x9)='/dev/ppp\x00', 0x40, 0x0) r30 = socket$inet_udp(0x2, 0x2, 0x0) r31 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getgid() r34 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000c17000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r35 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0xa, 0x401, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r37 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r38 = timerfd_create(0x5, 0x80800) r39 = socket$inet6_sctp(0xa, 0x5, 0x84) r40 = getpgrp(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001000-0x4)=0x76) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000566000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = socket$inet_tcp(0x2, 0x1, 0x0) r44 = epoll_create(0xb8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r45 = mq_open(&(0x7f0000001000-0x1b)='!systemeth1.em1eth0./)user\x00', 0x1, 0x100, &(0x7f0000344000)={0x3, 0x1, 0x6, 0x8001, 0x7, 0x8, 0x8}) r46 = socket$inet_sctp(0x2, 0xa17aa2d9cb01da76, 0x84) r47 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001cd000-0xa)='/dev/ptmx\x00', 0x80000, 0x0) r48 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ca2000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r49 = accept$inet6(0xffffffffffffffff, &(0x7f0000132000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f0000000000)=0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r50 = timerfd_create(0x0, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r51 = accept4$llc(0xffffffffffffffff, &(0x7f0000001000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0x10, 0x80000) r52 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000bca000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r53 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r54 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000001000-0x4)=0x10, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r56 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000000)=0x8) r57 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000044000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r59 = accept(0xffffffffffffff9c, &(0x7f0000917000-0x20)=@pptp={0x0, 0x0, {0x0, @empty}}, &(0x7f0000000000)=0x20) r60 = syz_open_pts(0xffffffffffffff9c, 0x0) sendmmsg$unix(r0, &(0x7f00003b3000)=[{&(0x7f0000001000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000d60000)=[{&(0x7f0000669000)="bcd4e1fdbb406150d68c825b10ad5b9e22f85feede66100bbef7338648fe65d5dfe39b1a82249b26", 0x28}, {&(0x7f000094c000-0x40)="97e477ce67404b113d7ba6eef2abe6670cf4bc4e76cc564576939d29928b4c0491c4684b8e6de210dd47b994e8929698210fa1de8826f833ade8a1018fd6680a", 0x40}, {&(0x7f0000000000)="15627bebb94e5cb6f13fb72844e7d003814b487cab47336d359fceea7c040f5c4cdeec51b7e82cb651377ca9ee1dba0c125b30275c06a9e3e9311ac671bdf777679ac106cf7e7127408154fcfcebcf939170ddc38fa223cb91c0ebfb548bf48ab9c41bd59b7b5687ba410968fbbe8fcf937c69e34fc479230dfa73f744231922b636dd6bdc1c5851a84c104d158a434cc1c323c84ce9e318e95d54ab16509d7b0d951f9845365e94a5eda91c4e1a960ff760e5b7de0e74b65acaaab0224a778e76d0ab67d419a36c39c731e86a5a57a225bb63bddd5d5f2a6a8f64", 0xdb}, {&(0x7f0000152000)="e01e2d0ec4b9792fe63a84be26c20f3ab791cadd7f0a240e2f7fe90593d7f42f1268aeed8979ebc08ed8a8986e9b15ab62864d11381a3e67587a0f1b9beaa17ffd74c69d536a343312ce2f83b0410f49d4224deca81644b27119e230bf92c5b1daddf81b6b70e30f786070859794a6d22e2ecfebc249c43052148aa75e1de4bae939190706ba5c74131b699a02d819db71894bfcef0956954bedbaaf8521c78c30e45ef797ced05740776561592a093244102cdda72991007afb023920", 0xbd}, {&(0x7f0000001000-0x7e)="219595588853b216cf87a5fdfe6bcd9c130ebd20759152aa3539f72ca0572e6e0aa2feebdbbf8b0f69137de85e0460fc4a84038c590462e1ce9658a9c9b5187f7fd24a9766a648428f028dec7846bb9b5e8f5f9a46fb8af6e8df5d48ba6f2996f8dae93d025794787e4fda73ba8f49948d491357bcc7c3ce708d0f3d0255", 0x7e}, {&(0x7f0000638000)="260de94ebf8604d7e9606ed643ea5a3b7dfdbf80165ff3ecfcd07d2be40094a63cffd648093af1d19e1beba90e8be1bc6dffb97783c73e0d049681e891aabba510a57b2192cbb3ec46ede73b358295b24dedcaa9b3e9541607e7752850759db4d8360de7826a639da2dbd39e8b1586549e77b44171922bd21622819adfd232ac269bb940fb4fff360c8566d6e95be425377b53e47202cadb30f2882492b7e9a93877fc4b94b49e35b5bc70ebaad7edf1c364fecc858261", 0xb7}], 0x6, &(0x7f0000237000)=[@rights={0x18, 0x1, 0x1, [r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r6, r7, r8, r9, r10]}, @rights={0x28, 0x1, 0x1, [r11, r12, r13, r14, r15]}], 0x88, 0x4000000}, {&(0x7f0000001000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000000)=[], 0x0, &(0x7f0000001000-0x20)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x20}, {&(0x7f00006b8000+0x61a)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000000)=[{&(0x7f0000dbf000-0x1000)="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", 0x1000}], 0x1, &(0x7f0000000000)=[@cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x18, 0x1, 0x1, [r22, r23]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x20, 0x1, 0x1, [r27, r28, r29, r30]}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @rights={0x18, 0x1, 0x1, [r34, r35]}, @rights={0x20, 0x1, 0x1, [r36, r37, r38, r39]}, @cred={0x20, 0x1, 0x2, r40, r41, r42}, @rights={0x30, 0x1, 0x1, [r43, r44, r45, r46, r47, r48, r49]}], 0x120, 0x80}, {&(0x7f0000939000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f000082e000-0x90)=[{&(0x7f0000001000-0x3a)="74f22a60f8a42e6150356e45cd981f9eb253b49443580d596e489d25631f09ca91e2a81358a379c65a50f5e3d7f7dd15f1badb48e581f6df7b20", 0x3a}, {&(0x7f000031d000-0x1000)="d6c511f11a27e7727536bca44c5799d95debc793b208490c3e1b349a3ce6bdbf69d6ab96a5e5267dce6fbce9152de7b306f826ea5ab47ef8f23ffc57c4f04067ae82314b9aaa68e0fce2d0791cfb50c5096862880f66c5f72c4e24948ccf5ea14b45f4310a50e613732dc8966b0360e6c1602f805e6b39cf40335b9924b6ead80cfdb4fb1f29df1529c263e12e2502d1ad58b47564db039d8e72c3690144c1d7c80a75bb34178488182a5088fc530f2a367278ba49f815a4f5cf688a52e18da0b83f7fbbd3d73072d15c84e6e25d5340ecb055c8f16a6b2bfc7600069a54994d0e7f289182d20f57051fc985b7eb4e5f3ba33441663fc4d5821ca7fafaf1621b9dee439ccb15f5215eccaadcef0a28089950481e25c789213d601b9caf5bdfc38a384822f38f4dc54f5b81c5a5187e165f8d0e46f53f0a285a780fb0b0d2656074071f3c60ce3847f1a79d56569276fcc53d7ca8575797495d775e4e154176322f55363a245251f74f042cb9c94a941a099cece2e4f64b76f09b1e2023bd8e93e0ba03569efb2cd80041339cfc0807d87474d9385f213e649f54e3063a5f57086e7fcc46025e032fcde47921b388ad3816a01a1269ea122a6302e1793127c23f5b1a87fef9b837ad61e3076d5af4f2b7d287903174a2f6d51f9a1adb6b501032b4e86fde5095f93e5fd6f926d2c1de1b749d2b23d6d6703fee54ad1b3f14fd0170a5399baf31ce4c3ae44235426f9a5eca76bb9fe2543de9483a290d621677637c8c7ba916c9f5ea7172ce6169477a7e76deeddc664b9ca63398f8a628c42148a74135219e99b8d083ab6df388a7af7a512ee36821e2c417c212797f68c4594cc1d62e97cf3fc90d7f191baaa5ae1bd31ef6e9e9436d5e8f12849e699f8709fdf0b53292c70a741ae5ad84334e0a71948c07a45e0b1cf31e17fd99f78c3c6fb55ba5c073e2c7013b466fce00018b246170d107dcadc8552f7df27805f01129f87d0ad224634ffe85582c994d7c920e84a08a9be66a328778e0bc7c2c2445cdfeb58683af5a53b81f97827c49016d21bd8a695dd4ba533388b02340fa6b9499a726ea58603b5a5e886a3edda96e4f3f3374e9608294c4d6c41ca26f9516d010529e4a328f7612c70e46cc210c6bb6566313d2546c1382f5f161727969b5039488fd9e7070ae75a3a1c6fd1daf9177235cecdc829c60636e3aec2aa567e4eac34d6994caae7d170423e46cef688990ccf39d0af5545e5861066d9bb6ca058572a50c6618dc799133aeeb934944811e9d698bfefb28d1d133cf93f55d3406b36ae59cab44052c4363e5c6b453ef8a033934f2d74d17cb7a115fb3a4bee34177be53b7a70c2c2effbfa534aaac4250852b339469ecb61bafc6ef21764dbc0a0a25ee3ea4e139e1960b88ba135979352b1e42738fbee3d199b757747b89b7a85876903c57af6032bd82016c2944f38318ccaf4840fdc24a4d85c28b4cb80fd0308f9a4efce7593bcb7237a72310ca890988e2da2e7ba6326de7e6a960a88d5c7be80b4b83b1a5020dc054c85b994b2b931f092529c246471fb491f673185dc48e799401267832cd2fafa91f2e60e8d77e488dc42533ad03ba014c5d0e7a517e01f3487f18b40b1d5343d3793cfc20128003e884f9437f2815386746e33a7208a26745abc0209ac18aa2b77a00e8e5dcb62ebc147f1466e7f15b25f74034bcb3e34ffb0b216e1d5794879179cf4f63915c4bdc49a0914f9a8c8fd229d3134bc95a831ce8c7fbb4c18fc9ac9ca5aa9bc77c9fb1f6e302ed55d4b52285530be6b5a4e179e73303a1aad2d4fec7427b8b42cdbae76244335c2887ed00f3e52f3505ac1149ba1a64601249d3ddef249935a1deb43025e9e2518cc24452f42450340f57083d695eddd5faea8c7f6925aaaafb7e387374a9576bf835957078085604dfc43b45f47e89fda0a6a71ecfd41c86ad03c1ed7d61a90cf7a3f3cb4c8ec377b8e8d1e6d8f6b4aabfcac947197f1ae507d565071bd485c78e1245a445f2a5b123a6090187f46af2f4cbb7fe646493cbe92cff53212d5c81fd30c58ee12068cdcf9f039751df2e917deb143f92e7a9bd4c80d6ec060075cd75b99af52c2f9955e903025742627c0ae1cd3a7a667317956a66c30e1be4f0cd85f45f5ca1f9d9b04f31623c5d3ae82f31b8ba7cd7d94395e9efd9d351354bce1bbc3287a28525bd020020718f6e70625be82d21aa9f277fba31e0a5b3a7d07f10d838f4543de1a440c6cdf3d40723c3e8974bfe654d9d85602e997bcc2741ae6eb24101faf2dd5303710f75cb230a89287b37029abcfbd91dab748385f140d44a2668326a88e3edb63d9d10ea65bbe4d869db9bef5d594d8040cbac15539de617a7b073a8c20c7761f0e0b18acc7987d54e670d00de3dd04542b02e2b493ab111a95cae727cc2585962c0017999602ab0acd9e4bd4208404c182cc7bc858c314c7f38724d0c3828bf3fc95605ba0c9321b98c1431284fabd5edec865186e1a5201934815da0e52038d1ab6ece3b7eb15728abda5d8adfb5667dee76bb71a1d0208cdeb1bc0b95f77938eae5f5c052a262a34dab56f1e9b71a4edd6a1120bd0beeeaba56f5beebf0d93e4dc96daf5b910fda84d499fed9a820df78c4d6d7f478989dbad1517133522a41a781aecfc9ec8143b00943767d1f20bd5971b9fe803211167b2ae7c9f100852ef52e9eea52531d1e04585704bd84cc6b6dc3faccb748a71cbbcfbf3f9168a4887e340af32997d1a4261998526c07f59a64545be23772bd6abfe01556e31d958188a4adb447db57b9c72c828f036f5b1b503e6222a557cea477267381b9c1291dff04be712f4bfb15c651f167f240fd2447e42b8a829aa6675ed206d7da7352deef737bbb78d670d71898e5f16cce4d3724cd9c2bbd7be11cb68dfac657af546a143f55ea031fbb34cb719966c9e2775025f1e66a8dc85bfd9879dbf046d3bb1da520cd8d2a9fd8296521ca0c5355579d4c69ad5d7ce1866e3626ce73af28da821bd6ffbf062531521991aa95071c420415f9b6f99de5a8b4cb538e68348020412ee8e02960dc1a3e3825c90e49ac3166d4a8d56f6a622b5612589638a8fe4b9a5e41ca1d909fe0f21a211c5cc4f2973e044a5c4ca2984a12a5210c75a66f79050f2f78656c60eef46c599c112f00c909050d96ee899102c0eb32b4657dbaacf92c3aa31e067ec0a93f6683ccce3a02f5c914585b5846f3ac886f13fede5431ddd5d2b0a51157e90e745eb044a820b5030d1abdb66c8a7fcd858b15a749c6310d389d66fc556d28bb0174cf0307a3c78132d1c5e11b4f9ef3a6187dd18e882240a72aabf2feae81e811caa22b9c1cc0a7a4f6a6af334ab80daac3c2af2d8c26030b1ba52b0fd309324994b0ad2916a6c8f8d748a08f26b21004d69c408c80552de90ab9099c0088f560214577204fcefdac3f089e354fc7d5952de3b5fe22ea7f2f42583101793cb02bac576fe0c8dec35e3518bf95293d9bc36c9250afee333fbfb21a253824dbfb1ce8988995c72cd277c92ef9987d76691f54238e12b52fbe38a3f8e841a7b00618433672ea492519bd26075a67ad9a7c78ffa6153573c28029d40882f329eb1ac521c28005d4ee953231b4e817cfc2a9ee8ab494613da13ea8bbcf0492c34347fa071a1817a5e2814b9bc00c5323129fe174f589c531c1c786f042f42d17656545978070128bad6925d2b42d8da415dfba18a27c9eeffab01b20b11e85a422d1a690b42e7e7ac44bd0a84762a7f1f0c0bf435b085d7e80bb084ec14bbf4b5a7d819e3c662204d17a1ed07546d1f8fd216f3b128c4adb6d741d79cd333d0d792cf7603a370a56c037e8dc9fd41287e873d6f91f0698bb4bfa9a5df51ee5c77c572c6d019a6cf1f2493875acb70be1d8a64eaa51cd0ab5085bbb57f38fd6b3bcae8fe9626c3b431b04670e12624b6dfdc25eaf7bde7135e3845b874398f948a0b49d955b6a07ccb1c7cb8620aa1a3e3c903cd19768f07fdafec5aa96204805c42f038b9ce4952a47a74b3ea9599694842f79af6d97d2c49f0ebcefbac78a14cd52066440c4c3c8268adbdf4c9a3b20c3eed459955fc44369833bd577c68577b28a3e6b5c4a9d54f208cad8d61ea90471a85cbb38fef4b088fde937a49dd0cfacf1348f4763ac24ffb38cce30dd9b5d3f0196ff6fcaee444478a5c9c373f553e00feb1167aea80b83116ac329017ef61a24efb91067c43159cb538d08aea81cba310887a7481d3e8444d1e2fe854597d7812dc9ae8d1ac11edc54f17f49b793d638c89322711cd8b3b59bc4f528df9d8852dc739e618f26c24b46bf3f13db881d286fb61e5ca74ff941ba7447d9c237e3632030e50a593b0b717ae5ac59cef6395879d45b2d2f1d5251c7f4a32e9ebf6fe3832619ae99c4e8804a4427eb00469a9d72b02257e1f8de5c35c349227524904551ac7a76388649505fe3613fc3273b891096d99b33b3d99cb4f0bd8f964720a015f2ffbd883f939bc39add68e2ec4b6bb076d450a3d632d499a943f8c0e26f8e6629180d946dec86a3cec25ef501c28599166f82569cad694a5af751180b339a278e8e069ea3bb9f311ce2aea5a1c7c0b5a4e78ee2887c29749aefb09f99dc7a75649004c79ef98c92932dbdd09f14581f6a30d092eb3c3dacc9375041b5b54674da1f6c4d8a4cd02f69f8323558ca7fb217aba8b74f5eab28e594529bc4fbf4228fbcb617f249939faf932ca03e8e10d122ca51fc4c8443e6269db73aa69d8702cba265e338780da8ba8379e15b6effcce59355f1b5c8508e5da67259fe09f94cee8f938dc47d39e3785c436b15d92edaac178142ea4d14d67f8e7b7d00b7775ba8ffc91b0db19f464a1106955a76242bb1d694e7cfe6ded96df373fd661bc51a1d0ea71442e5eec35370ce0d8d3476f3a7eedcd5baf8c765ef69fe7fb9ef97de2e7634c6c01fe93fc2207cc8ca95710583d82b5b90ac8677083a8bb31649237ceda3dc3f6a8665601837c07f4c8a1009bdc73c29c751865ac371c91b10a1ab578f351e14d663e106703d2ca422c5a157db89c878d19bb794586a7628507cba39c27f6fda101bb13830943c6e55f6047cc9d8d9f59c371b759d34d8c378c0bcda7fafe5131b29d835656f554b11df661b243dbf3e96ee14d19ee262176aad4a726b47227bb4000f10cd7182fa762778af6a4b36e2860637ae2a521e7a4f79fa5ebfb771bc4e5bc7fa83d85c72b658314cb7d52fe76d5f7993ea79b0c5043efa4a45607059d04f31230159f4b998038d763c75efa0f39e1ab20c76e6f29ed386236d1d26621e0b57abc62f2d25ba42ff2db8caaae79f5cd3d9fd51b6c3e96bab630540606bee2c6f2055701d78fe82f99a513e46b2713e1f0fa411f8a2efdaf13a22ca5ca9154df5541d2166cade953ac2c7118cbbc140ae3bfdc15538d7bdec2fe6e1276c3370cdd377070f17ef11315f205161f8563a8f4c28e134d64bd06c680ccd9f78ee28caafa35b0578d8d1e0260a4f42d04f58d5a26cb6b10a005753413b918a498b661d7dc9d018bbe2ea60611d14ff71d96028f4a4200d47f66b49076c2163292c1aa5e64156f35d095f4a1c2911b4bd419241ee973a1203103e5bfcee1db8685f7b083316645a0b33030be0dd9a52252221de8eca73b2f2c3914f7c05d002b41d2d82930e50e1fbccccae323aee6011b032e1d73a42ad2ddd319ea82d82e6b8993fa31eeb03e6113a0d975d3a99283051cd06dd14c86d8493c49d16a8f95389985f017380", 0x1000}, {&(0x7f0000991000+0x5ab)="9829ff9f16a1ddb2e5be1ca01fb975736938fcd74ddaab80705c7a8920ce48c37007113db818b9e8d50e02ba2660138d1f02fd90cc7ebc9aa883e86080605cd9292f48f666c974838d206c76151983296f5c29641834315f46df995ad3cfa1af2fca03095be543fb76e740f968379d2323e08dee108d8b995989e18f633dfae712e04616ff614790431b1a1a6b1dc53acacc0e25d0e619c7a75eec8524e376598039ad5b4e56734ca616797bc5b97d767627001607263131ac004c6e291a3b41bac73cb289ba54dbade52dcb30", 0xcd}, {&(0x7f000037b000-0xae)="6c782d64af97b564850e7d557d5c69531712d28d979bc8ea4f3458dcbdabf3f98082f0073709820587213ada8c98994628b2120ee96665bd5a5d883bb55062bd22f9897914eb425a62b9a32c33e2e377a9ad847dc1133e738b79acc8b0687c2be488da3d462c7ab9a85aaddf5d49af020a9dcb3fba7c8b505b5297fcf38bf20cb3bec9a1ae873654ab5446f081e8e42559e36d5d0734d13190bcd09510f26f3dcbb317727df758e97a69fc447542", 0xae}, {&(0x7f0000d2f000)="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", 0x1000}, {&(0x7f0000001000-0xf7)="47aa4b0bee0dea311ed0c4381408b14b5cc7a1ea81d180113b489a06d72756c261e0f9ce49f7b22c758f0c7dbb01ce45be2b534d83d12e038fec03cfbd424fe4cd397a8062926c4b7ada8edf8176a11ebe1464c876b5865453f4eec35145b08176a0db1109a5774c5fcbca4255751b800e4deeb793f7a44ed6b914607a7ffe83d9a76cd275c5d6a9197168071da1bf84a33864af5c8f26ab0a70f1a6f454f560ca9133d549396fcc4b2d9714e96ee7ac3352b44d104fa90e2d1254d771a0f1bf9dc6b278b67850cb54e18ec76fd1eb811124815ed53c90e3f50ba4e8b76999934b228420d9bcf185f0708ebf087e999575b9fb2b0edf13", 0xf7}, {&(0x7f0000001000-0xb7)="22b13fe8f93d3ec0ea9daa0ac874a42c4e6875b2973f917351b1b7747dead8e06bea5d53783a677d8d6166fcc7f9097ba3e4253821b9dab3e397d37c9a3af029e7a36c4497e5bcdc641c878f8208b4c32eb92a87bd61c28d69b4290c53430abb1d17287e5f4f6bddcf0fa424921d44cb924ce18369aeba1b2e796d54f44057c82093d40e9fc49102d1adb7c95f2859fc59a3471e6616fce70f942ba0e258d5936173698acd156ac096d498f709b0da03e2048f24dfb73d", 0xb7}, {&(0x7f00002a6000)="ea12f26d37b39ee0e82dfc2e50a0e3e05e1f03f2b4ca5e135f4c1407a04e246b73d1c448a476b89e7d03c7d2c0215d48bd7c063b8f22ff2aabddb4312d95e6a8bc1ebece70b731", 0x47}, {&(0x7f0000278000)="98e27181eb91ba6e5cb520827fc52bb9441101bb26265197ce6199995a58d8556aeb2a4f", 0x24}], 0x9, 0x0, 0x0, 0x40000}, {&(0x7f0000e78000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001000-0x10)=[{&(0x7f0000626000)="ae58be54672ab9618aa420525d84187e39fb71d898324265a0316471b0949351b17231096cb09a54e647dd187c1ec3ce6384450139edae4f21e06d2d241cf2e80e4363627c0412", 0x47}], 0x1, &(0x7f0000976000)=[@rights={0x30, 0x1, 0x1, [r50, r51, r52, r53, r54, r55, r56]}, @rights={0x18, 0x1, 0x1, [r57]}, @rights={0x20, 0x1, 0x1, [r58, r59, r60]}], 0x68, 0x800}], 0x5, 0x4040080) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00003f3000-0xe8)={{{@in6=@loopback, @in=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000eef000)=0xe8) setresuid(r61, r61, 0x0) syz_open_dev$loop(&(0x7f0000613000-0xb)='/dev/loop#\x00', 0x5, 0x0) 2018/02/14 06:15:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f00002f9000)={@local={0xac, 0x14, 0x0, 0xaa}, @rand_addr=0x200, @local={0xac, 0x14, 0x0, 0xaa}}, 0x9) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000fa8000)=@req, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f000009e000)=""/1, &(0x7f0000001000)=0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000003000-0x10)={0x6, &(0x7f0000001000)=[{}, {0x0}, {}, {}, {}, {}]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000000)={r4, 0x1, &(0x7f0000001000)=[0x5], &(0x7f0000003000-0x14)=[0x8000, 0x6, 0xff, 0x7, 0xb684], 0x10, 0x2, 0x5, &(0x7f0000002000-0x8)=[0xc9a6, 0x5], &(0x7f0000001000)=[0xffffffffda063871, 0x0, 0x5, 0x78e, 0x1, 0x7f]}) waitid(0x1, r3, &(0x7f0000002000-0x10), 0x80000000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000001000), &(0x7f0000001000)=0x4) write$selinux_context(r2, &(0x7f0000000000)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) syncfs(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000976000)={@common='sit0\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f0000ed8000)}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008c0000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mkdirat(r2, &(0x7f0000be6000-0x4)='./file0\x00', 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00003c0000)='/selinux/enforce\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00009f9000)={0x0, @in6={{0xa, 0x3, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x7ff}}, 0x5, 0x1000, 0x3ff, 0x8, 0x20}, &(0x7f0000011000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000691000-0x8)=@assoc_value={r4, 0xff58}, 0x8) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0x9a6000)=nil, 0x9a6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009a6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009a7000-0xe)='oom_score_adj\x00') setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00006bf000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast2=0xe0000002}, 0xc) write(r0, &(0x7f0000017000)='+', 0x1) r1 = inotify_add_watch(r0, &(0x7f0000247000)='./file0\x00', 0x800) inotify_rm_watch(r0, r1) 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffff9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f000002a000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 2018/02/14 06:15:04 executing program 5: r0 = socket(0x20000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001000-0x18)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000a3c000-0x10)={0x0, 0x7, 0x763a, 0x40}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001000-0x8)={r1, 0x1}, &(0x7f0000000000)=0x8) [ 101.387910] binder: 20933:20945 ioctl 8010aa02 20001000 returned -22 [ 101.399201] binder: 20933:20945 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.408837] binder: 20933:20945 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.416918] binder: 20933:20945 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000701000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00007db000-0x8)="e4a445eb7fff051c", 0x8) close(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000b07000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000e81000-0x20)={0x6, 0x0, 0x10001, 0xab95}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000abb000-0x10)={r2, 0x751d}) 2018/02/14 06:15:04 executing program 6: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000fa9000)='/selinux/checkreqprot\x00', 0x42000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000732000)={0x0, 0x7b, "ae6e68a4590d06dfbd7da795f738874589a98047ce7002594d1a4b1982eab1b5da1f0a4470c595df209795e48834ab29707412704d5186467b922e70c30bac46371417731dfbeefd7f74fc2ed6a03d87bdcdc08da69e6e17fd365100fb2fbd5debbb73508f7ce1ec78b5d8f2144ca83b2c84a4f84616593c1b2e24"}, &(0x7f0000001000-0x4)=0x83) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in6={{0xa, 0x1, 0xea, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, 0x9}, 0x98) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netrom(r2, &(0x7f0000008000-0x38)={&(0x7f0000009000-0x10)=@ax25={0x3, {"11b6dbf3ff00"}}, 0x23c, &(0x7f0000009000-0x90)=[{&(0x7f0000009000)="0c9ecc3b086de9af9d266d3cf67fb2127e89687f1e2607d1c32cb98ad5c4df9f992e00000009278b8629d954f4d2380e9d86f330eafd2f95ab327d07a0f29ca1ce1fcbaf89ce1a000000000000dcc57ddaabe4c563fcdcb4849c063c12bc7bb5feac990365defde3e651ec10720f79ee40f9f8660779427d9507c17ecbb9470102079bce273b", 0x56}], 0x1, &(0x7f000000a000-0xe0)=[{0x0, 0x116, 0x7fffffff, "5b9af0012ca6051476c86d68697b64373b573d1055deee0454439f"}, {0x0, 0x105, 0x2, "0a90e7b1b0a548dafc5d5bebd80e13f52273b0b276b0ed48ee6f2d97c59b792ab9df94937bbbe2c76e1c4dd45879fa0fa349c30388114d100af6031faebc2d7f9556279dd0c4f6d28212b506685224f593bb6c2c7ab4847811cb5c9f13422c6c5d8b0ce37b1560c69c2704ce5bbbf1613a8353429b8f070ce30776330c238fb0e4f9bdd3a5a5c3a6d87e4d46635b6204a15213a257040df96fdbd0c0"}]}, 0x0) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0xfb7000)=nil, 0xfb7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000fb8000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$llc(r1, &(0x7f00000be000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000fb7000)=0x10, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00001ff000)='/dev/sequencer2\x00', 0x410000, 0x0) poll(&(0x7f0000c0b000-0x20)=[{r0}], 0x1, 0x0) r2 = geteuid() mmap(&(0x7f0000fb8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000fb9000-0x8)='rxrpc_s\x00', &(0x7f0000fa9000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000165000+0x895)='/dev/sequencer2\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r3) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002000)=""/137) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 101.432861] binder: 20933:20945 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.444151] binder: 20933:20945 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:04 executing program 4: mmap(&(0x7f0000000000/0xf78000)=nil, 0xf78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e79000-0x5be), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000f78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00008d5000)='./file0\x00', 0x100, 0x44) mmap(&(0x7f0000f78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f000063c000)=""/111) poll(&(0x7f0000d07000-0x8)=[{r0}], 0x200000000000031b, 0x0) [ 101.482333] device eql entered promiscuous mode [ 101.487008] binder: 20971:20974 ioctl 8010aa02 20001000 returned -22 [ 101.487264] binder: 20971:20974 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.487275] binder: 20971:20974 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.487284] binder: 20971:20974 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.487295] binder: 20971:20974 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.487515] binder: 20971:20974 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000036b000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000990000)=""/95) get_thread_area(&(0x7f0000be7000)={0x5, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x4, 0x2, 0x5, 0x7, 0x4}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000d30000)={&(0x7f0000b79000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f000013f000-0x12d4)=@newsa={0x138, 0x10, 0x29, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in6=@loopback={0x0, 0x1}}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x2, 0x33}, @in=@rand_addr, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00004ad000-0x8)={0x0, 0x2}, &(0x7f0000df5000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000f12000-0xa0)={r2, @in6={{0xa, 0x3, 0xea, @empty, 0x6}}, 0x40, 0xfffffffffffff246, 0x6, 0x8001, 0x1}, 0xa0) sendmsg$nl_xfrm(r1, &(0x7f00003e9000-0x38)={&(0x7f0000c5b000-0xc)={0x10}, 0xc, &(0x7f00002bc000-0x10)={&(0x7f000021e000)=@flushsa={0x14, 0x1c, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:04 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./file0\x00', 0x0) r0 = open(&(0x7f00002e5000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x8000, 0x0) r1 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) lseek(r1, 0x8000, 0x0) renameat(r1, &(0x7f0000db4000-0xa)='./control\x00', r1, &(0x7f0000fd0000-0xa)='./control\x00') 2018/02/14 06:15:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00008ff000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000ddf000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000328000-0x98)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000e7f000-0x3)=0x6) readlinkat(r0, &(0x7f000075a000)='./file0\x00', &(0x7f0000903000)=""/7, 0x7) faccessat(r0, &(0x7f0000125000-0x8)='./file0\x00', 0x80, 0x1000) 2018/02/14 06:15:04 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x7, 0x0, &(0x7f0000000000+0xd40)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x15, 0x100, 0x8001, 0x8, 0x10000, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x10) mmap(&(0x7f0000000000/0x943000)=nil, 0x943000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000941000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00003b2000-0x2c)=@ethtool_cmd={0x34}}) 2018/02/14 06:15:04 executing program 1: mmap(&(0x7f0000000000/0xeb2000)=nil, 0xeb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000e51000)={0x0, 0x0, 0x2, 0x60f0, 0x2, [{0x859, 0xffffffffffff519a, 0xf3, 0x0, 0x0, 0x80}, {0x6, 0x3ff, 0x7, 0x0, 0x0, 0x2000}]}) ioctl(r0, 0x8912, &(0x7f0000eb0000-0x9)) 2018/02/14 06:15:04 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000001000-0x18)={&(0x7f00005c6000/0x4000)=nil, 0x500, &(0x7f0000ee8000/0x2000)=nil}, 0x18) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000df4000-0x10)={0x9, 0xfff, 0x8, 0x1}, 0x10) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f000067a000)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000ad9000)={0xff, 0xfffffffffffffffd, 0x2, 0x4, 0x5, 0x4, 0x4, 0x4ac, 0x0, 0xfffffffffffffff9, 0x800, 0x81}) rt_sigsuspend(&(0x7f0000ee5000-0x8)={0xe4af}, 0x8) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000854000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00006bb000-0x8)={0x100000}) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000057000-0x11)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000c80000-0x4)) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6c000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a1000-0x20)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x200000}) 2018/02/14 06:15:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000d85000-0xb)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00007f2000-0x8)={0x19fb, 0x1f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000083e000)='/dev/pktcdvd/control\x00', 0x24001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000ad8000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000a4000-0x20)={0x7, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f000042d000-0x10)={0x400, r4}) sendmsg$nl_route(r1, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f00009e5000-0x8)={&(0x7f000041f000-0x5c)=@ipv6_newroute={0x24, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}, 0x1}, 0x0) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000d30000)={&(0x7f00004ab000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f0000223000-0x1f0)=@newsa={0xf8, 0x10, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@dev={0xac, 0x14}, @in6=@dev={0xfe, 0x80}}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x3c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f00002ca000)='/dev/sg#\x00', 0x4, 0x214000) recvmsg(r0, &(0x7f0000b74000)={&(0x7f00000a2000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @remote}, 0x1c, &(0x7f000012a000)=[{&(0x7f0000d67000-0x11)=""/17, 0x11}, {&(0x7f0000740000-0xff)=""/255, 0xff}], 0x2, &(0x7f00009c8000)=""/8, 0x8, 0x2}, 0x140) getresuid(&(0x7f0000a4e000-0x4), &(0x7f0000de1000)=0x0, &(0x7f0000f0e000)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000d36000-0xe8)={{{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, @in=@broadcast=0xffffffff, 0x1, 0x8, 0x0, 0x7fffffff, 0x2, 0x0, 0x80, 0x0, 0x0, r3}, {0x3ff, 0x6f0, 0xffff, 0x1, 0x5, 0x9, 0x1, 0x6}, {0x4, 0x80, 0x80, 0x100}, 0x7, 0x5, 0x0, 0x0, 0x2, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x2}, 0x2, 0x3f}, 0xa, @in=@dev={0xac, 0x14, 0x0, 0xd}, 0x6, 0x4, 0x0, 0xffffffffffff0000, 0x5, 0xfffffffffffff7d8, 0x2}}, 0xe8) fremovexattr(r0, &(0x7f0000ad9000)=@random={'system.', 'trustedwlan0,]{\\securityuser\x00'}) getpeername$packet(r1, &(0x7f0000b39000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00005cc000)=0x14) sendmsg$nl_route(r1, &(0x7f0000e31000-0x38)={&(0x7f0000962000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000fd7000-0x10)={&(0x7f00006fc000)=@ipv6_delroute={0x2c, 0x19, 0x3, 0x0, 0x0, {0xa, 0x14, 0x10, 0x0, 0xff, 0x2, 0xff, 0xb, 0x100}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_UID={0x8, 0x19, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8000) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000020a000-0xe8)={{{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa0}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, 0xe8) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000c31000)=@ax25, &(0x7f0000656000)=0x10, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000997000-0xc)={0x0}, &(0x7f0000902000)=0xc) fcntl$setown(r1, 0x8, r2) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000688000-0x90)={0x200, {{0x2, 0x1, @loopback=0x7f000001}}}, 0x90) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x1, @empty}, 0x10) [ 101.769384] binder: 21007:21018 ioctl 8010aa02 20001000 returned -22 [ 101.788872] binder: 21007:21018 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.801671] binder: 21007:21018 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.816434] IPv6: NLM_F_REPLACE set, but no existing node found! [ 101.820628] binder: 21007:21018 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.820636] binder: 21007:21018 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.820645] binder: 21007:21018 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.838884] binder: 21037:21039 ioctl 8010aa02 20001000 returned -22 [ 101.839183] binder: 21037:21039 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.839193] binder: 21037:21039 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000004000/0x4000)=nil, 0x4000}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0xfffffffffffffffd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000013000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000011000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_settings={0x6, 0x1, @cisco=&(0x7f0000013000-0x8)={0x6, 0x7}}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001000)={@common='bridge0\x00', @ifru_flags=0x400}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000012000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000004000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000618000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000073a000), &(0x7f0000f67000)=0x4) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) getrusage(0xffffffffffffffff, &(0x7f0000001000)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) fsync(r0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000017000-0x124)={0x1, 0x1c, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x80000000000}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:05 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000810000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x20, 0x1, 0x8001, 0x6, 0x7, 0x5e8, 0x80, 0xbd4, 0x0}, &(0x7f000035b000)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000-0x8c)={r1, @in6={{0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x401}}}, &(0x7f0000000000)=0x8c) gettid() fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_getscheduler(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000ae0000)='./file0\x00', 0x40000, 0x8) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000308000-0x8)) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001000-0x64)={&(0x7f0000000000)=[0x8, 0x9, 0x9, 0x4, 0x7, 0x131e, 0x2, 0x1938fdce, 0x8], 0x9, 0x3, 0x3, 0x100, 0x0, 0xe90, {0xde6, 0x9, 0x80000001, 0x1c, 0xfffffffffffffff8, 0x2, 0x7, 0x70f, 0x3, 0x3, 0x6, 0x5, 0x2, 0x0, "182d96d173b277a9903bcc2e8b92141ce70d5f991dda48172a90df4c30030bdb"}}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 101.839202] binder: 21037:21039 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.839208] binder: 21037:21039 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.839216] binder: 21037:21039 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.848201] binder: 21042:21044 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.848213] binder: 21042:21044 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.848222] binder: 21042:21044 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.848406] binder: 21042:21044 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.848414] binder: 21042:21044 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.859364] binder: 21046:21047 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.859375] binder: 21046:21047 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.859388] binder: 21046:21047 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.859433] binder: 21046:21047 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.859442] binder: 21046:21047 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.893354] binder: 21053:21057 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.893366] binder: 21053:21057 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.893375] binder: 21053:21057 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.893381] binder: 21053:21057 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.893389] binder: 21053:21057 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.904556] binder: 21058:21059 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 101.904568] binder: 21058:21059 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.904577] binder: 21058:21059 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f000000a000)="6dee109664259225af0b8e3aa8f158773761c2a6530462b944f428971c2c4bc8"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000007000)={0x985, 0x4b, 0x4, 'queue1\x00', 0x101}) r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f000000f000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @dev}, &(0x7f000000e000)=0x1c) sendfile(r0, r0, &(0x7f000000c000), 0x10000) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f000000f000), &(0x7f000000d000)) sendmsg$key(r1, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000009000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x12}, 0x1}, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000011000-0x10)={0xba4, 0x1, 0x9, 0x5d0a, 0x0}, &(0x7f0000010000)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000006000-0x8)={r2, 0x20}, 0x8) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f000000c000-0x9)='/dev/sg#\x00', 0x3, 0x23ffff) openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x400400, 0x0) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000aa5000)=@req={0x50, &(0x7f00004d1000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffff9c, 0x0, 0x3, 0x2, 0x3, {0xa, 0x1, 0x2, @loopback={0x0, 0x1}, 0x5}}}}}) accept$ipx(r1, &(0x7f000066a000), &(0x7f00005d2000)=0x10) socketpair(0x10, 0x3, 0x7, &(0x7f0000a9c000)={0x0, 0x0}) ioctl$TIOCEXCL(r2, 0x540c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f000027d000-0x6e)="2400000052001f1d07000000000904000221071008000100ffffe80800460000e6000066", 0x24) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000029000-0x4)) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f000076f000-0x14)={0x2, 0x3, 0x1, 0x3, 0x200}) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00005e8000-0x11)='/selinux/enforce\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000c78000-0x10)={0x0, 0x0, &(0x7f0000202000)=[]}, &(0x7f0000ba4000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000406000)={r3, 0x4}, &(0x7f0000ac4000)=0xc) r4 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000975000-0x4)=r4) sendfile(r0, r0, &(0x7f0000c46000), 0x0) faccessat(r2, &(0x7f00008da000-0xa)="e91f7189591e9233614b", 0x20, 0x200) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) creat(&(0x7f0000c4b000)="e91f7189591e9233614b", 0x7) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0xcdd000)=nil, 0xcdd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000a0b000)={{}, {0x0, 0x7530}}, &(0x7f0000cd5000)) mmap(&(0x7f0000cdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000cde000-0x8)='./file0\x00', 0x0) mmap(&(0x7f0000cdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ax25(r0, &(0x7f0000cdf000-0x10), &(0x7f0000cde000)=0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000cdd000)={0x0}) mmap(&(0x7f0000cdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cdd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000a11000-0x40)={r1, 0x3, &(0x7f000091f000)=[0x9, 0x6, 0x6], &(0x7f0000cde000-0x20)=[0x10000, 0x1, 0x5, 0x80000001, 0x0, 0xba4, 0x2, 0x6], 0x40, 0x1, 0x6, &(0x7f000049e000)=[0x401], &(0x7f0000cdd000)=[0x9, 0x80000001, 0x5, 0x7, 0xfffffffffffffffb, 0x0, 0xea, 0x2baa, 0xff, 0x6]}) alarm(0x0) [ 101.904584] binder: 21058:21059 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 101.904592] binder: 21058:21059 Acquire 1 refcount change on invalid ref 0 ret -22 [ 102.039315] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.064522] binder: 21065:21072 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.072803] binder: 21065:21072 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.080714] binder: 21065:21072 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.088032] binder: 21065:21072 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.099277] binder: 21065:21072 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:05 executing program 7: pipe2(&(0x7f00000b8000-0x1)={0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x60000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001000-0x4)=0x38bf, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@rand_addr}}, &(0x7f0000001000)=0xe8) fcntl$notify(r1, 0x402, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000000)={&(0x7f0000a04000-0x60)={0x27, 0x0, 0x67a7, 0x3, 0x5, 0x200, "ecde808a5cfe19f038b7d06c9f4d1c1ed3b7470b622ecbb9086699ce2772174d6a2254079d36eddbb6b5f6f04b7b1a993475b71ef3985cf6826f4c1767e88e", 0x1001}, 0x60, &(0x7f0000001000-0x40)=[{&(0x7f0000f76000-0x1e)="76d7cc5293e10cb105f5cc176ad86572853f57c8a97f8befe3bc500b0d88", 0x1e}, {&(0x7f0000001000-0x2a)="ec6edd67147d2b658686483ad0084adf70493ee55fa4084448740d62e0649cdac3be3845213879ad9279", 0x17}, {&(0x7f0000000000)="614fb069d48a5821e6165fba873561ee429e8ade180b4804cea8b6cd1682ef057072e1071170c969dd49275f7dce81c6f6088db37355c779cb07fb08d07bd15972a11b559a24159551c5ed07a6ddee4688afdbeed93a67fd78ba07ae8acd518d0f038902e122f25bef8ae8441525819188cc6efab5cdec2affb323fc", 0x7c}, {&(0x7f0000a31000+0x38a)="bae4cfc94976b34b2bd8e4b9be6b7fae1e2e145238165e71fb0f86a9451e238ba1f2a6dd7a91d2", 0x27}], 0x4, &(0x7f0000000000)={0x30, 0x18f, 0x1, "c9da88652f8b7f62ed5249b9a5d571f713829245c497de5bbf42447e"}, 0x30, 0x4000000}, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2018/02/14 06:15:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f000036e000)=0x10) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0xf0b000)=nil, 0xf0b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000f0b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000f0c000-0x10)={0x2, 0x3, @rand_addr=0x7f}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000edf000-0x1c0)=[{&(0x7f0000eee000)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000de4000-0x70)=[], 0x0, &(0x7f0000f0b000-0x120)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}, {&(0x7f0000f0a000)=@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10, &(0x7f0000f0b000-0x60)=[{&(0x7f0000f0b000-0x1000)="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", 0xee2}], 0x1, &(0x7f0000f0a000)=[]}], 0x2, 0x0) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00001c1000-0x8)='./file0\x00', 0x2001, 0x22) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00006bc000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000ae7000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00008fa000-0x8)={r1, 0x8001}, &(0x7f0000b7f000)=0x8) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00001c5000)="7bef44daebb690f4d2024f94dfd05bf4e3e12e67dd1380ea86f9a8dffbe674934d540735eb0f701b768e0d96a47b71b87fd1a11d9787611a068ecf44bc3552e55f99c89516913d1e7a80ac10d7551d622ec4d3da1781a207e5ca1ed30249276acd557b3d5f5729be11fdec908e3e37895b1339ef36c55ad667e94f842c8a53068d395dbe106a57363328357837d837ff8e0ad20a551e051a6276a8f9bcb4bdefd7c017e35f3d19439a4ffaeb2fde2b9ec5270314565e1ca029ea71b4d1d5621313945e58ba1f761eb7504c21f58f63d446da1e7979ab3feca40c3b1e22bc92e19c745f7c73f93b5250f6b3497e39ee3791fff22ff0c02b4f29fd4904b9869d7e090fd2c5321e52a22e315c923977e216c4dee8fd8207713a43f56acaca9495caad0576ce660085a20069e49dc833e9ed286bc67ad0aa39982f4a1797942b80db91b17c7c730ff9f85125fe100cb09d78180db65ca51b175422966c37a4dae8fdd0ef8d888cab9c06591eb60b6950c4d9298df0a684949c50e0934d98511c8748f37e157371d2d6f05ba61c8f0eb4e098a12382171b817b9578521c79a8d4ef7dfc2cc64840cf9dc93945bc67592b7f30631f5c4d90de4efe3d8c4b13ff596a46aa92bce4f6ec9f7ae1dc1c51245e17b4aa1aadfeed64a7446dd7702ffef534785bfc6e4f7dc6af81e6cd9400761d841cb75657ab78bc6cafdcab75476b211b2a615ec1fb806bb243d5fa08cf7a4e8b09e56be78ca41fac26e9380d5d1a0351694a5a88a71cd04f546b32eab77eeff96bc7a125859c7047eccee511a97da666146a223eec92d4e5a6b925ea8f4dbdcae4f034e26d021757850860d99dca673e19675de8a212360fea56712a4b08ffcecbdfff566a9b0c9622ff02fdb1f2dde4122e31c2dbb6f4af13dfed29f113c2d50719959cacfbd2eddd7f2aebd9c4619a40316ab998a8589ff6162462f4cec6361d42d006ddc9e2d683945818bfb081954d86df5cbba5ba9d60fb291cda5136e2c659e482f2a950c20664316049dc7764a4ee08d8be68449bdb6da350a80736f4c3832e07c36d83e111f78ec751b5340d5bddcf39b7e891ff06fed696a42597c0e152657218599d0bdb2e47afd9a5dd629e9e44c4a2ab1a3d6377355903ed7dd7974468d302535cbcf361a6500d7411d196df261e987fd7c398e2822f8fe26cddf8145d522fadbe240ea4032aa316ea3bd4f3c3f9148c55ba85b764f31214ad7d03f84f5a6baa837153dfc13bf5df9dca7cd155cdbd6b20af978ce49fc6e5dbcb0c7df5ab9285f08ddf5df685bd1d949e66b895110fbcf4cb3e027d3af88a62d9b24ee7c65fb4c0acc28c825c07ceb6c3070ccf58938965e930a14a638110755bbeda7686e150420b7df349c16df7d97ed6456f57f3c47f411eac81c06ffdbd0f06c8701ff340e3da132d891cf97df7b3f1ef497747930b4c1b56b4f5207c3464717b391cca9537903d934aea96fd90dd6a740e4a6904f818edb84a98d337bd910cb84b42b106535fab3be86558f822f63394b2b751c802dda2c1f5a7c62bf82d88ec36d29654eb869f4357c99ab1fe973e56d658d29a5f01f908acd2a4f1a1f32140db4f9e33387ba3bdc5c20e156516c85d80f7773bf9d8dc86ca78bae4d908921df6db692db30c7e7c9d8d1d6c4cf0362ebbe23d676b9746054786d27ae8788e9a9a031327137ad39fdb1b055fc87c410f368ad895c4aa0334b7cd64069d82a306633af4a01f88e9329ffb565ef48789ef9c513cd6ff56ea6b1d3bd530cce0986be11c53c6b15cc048985a85d098fd41708109c84cdfdaf038907eebbfb315f5c1f627402a698ee0736f73a6a21182ea50d8f5c28432978c66b0253bcce056364ef600f3bac7ff7d1e1893754a9c628015910aaaf6a12ecc4f8b906d8fede57a619c7525d4aa13d53188475cfa39540a5726edba2854f28575dafcef3171dfe9a4c8eeb170a63a2f40b786788154409165057dfbb9719cf2d917c8af8becfd5a3130824ad3f7ed3983d6d8eccbb66fe7b93b8f5a40f04bef00ab2d70894944059380eb8ffc8b793b4a2feb9cbcb6bd6c5294ae9069e198313792ed2fb2dccc74916aa1345c06188ac46facad01d11953f8d420a6144fb615cdd265e0322a00047f9b2fd72d63dfb4e1f0db5969ce33982e7df1d84891ef5f3e8390e5e8aa4a4b2837e0bd88f9a2677294974ca283ba22c51a89b1a61499302ad6f0831bfdd05c60d6b9450590b08bd5281d1c154bb79ba6a6e9c473fbe6acfedf8891325aa22af134854a8ed0b45c556b850e6542ded4c3d9e3083020c66a8926a9c3915faacf4474f083f2b89185d06070fa7f0edb53f7ee32f3aa8894f27ad98bbe351361f8dda8b7844f181cd7da3e70c1d28220920de9824b4cb19aae2f2b9d03e4f93e5c1e8bd2e446c7908f47c946df6e20889adbec5385eefe8582e81cd4dd3dafd7fd47a233e1c8e48456f6faa00395c9a529f589e1dd2d34e39e543d2a91870a643749d33d4e5a21cd33b35befd12d22602fc061d99742c4aae4fc68c25641e15dce32329118ebc2658f3a5a88efae64eb5982b20f758232fdd61e40f89eea2426c185000f29d02ffdcccf262d4f78a286c0f9b1138f445b7b1ca810fd4ee8f5e4237cc2f9b076d0bc2e44596459292f9b13abfbfcd12a68c1ececd45744c27a38a0cbeb190e72bf0139d9fdcc4bd51349fba7393775b58945f835f59b3ddad6452a49f8e2ecbba905b20b0e4fd55a9794768ae752ad257de46b636bacffaeb7fc822e830e56f66086cb367687983c380496830c46fb39384d066943b877504e092d63c99ec32c292dc63a6e9456317e413d02c59dec5264d75d6ebfa92cf09324d65a78d3b4d51a6e66742c29f547f7f21d72d92e7e3ea511cddfe1cc781b7127f3afabf0d522bb00f413e7047f0cfe4eaf63e0c2faf984f49d21288a3bcc7ad97cc424e76c7c9abdc246caedf96f04771f95a6a724798744cb9e35075f7a78a7055b298840f3240f5d0d8469661c1b8e12a06d9a4241652ffbb1d43e4d03747bc44a8cb984cbcccf33818320f9c87c9dfebb549cc0220cef2c10ca81e748a670a9d2617e3c0566141a215311b1899171ebd033bc55e8a1550492949f8130fdc185aa0f32e07edada3ad7e87a11428d8cc05b128c3e77bcca10f2e03919f7e608480b748f38b4cbbe1d66da3d38862ca1011b95bd484cc01ca8a0c52cc96a92771ee5ba49ec056f3bb29cde817cae102631bfdcc320656fc99d9111300dee865310a844bd7446cf35589725c03b99a30b03df0331dfd3a83ee811e8c4422ee4fc955196c28adf7ddaeb97c22c1f0471a3cf05a50114a0603811ff705c7403d43bc1f3d2f4014546bbf8268d073482daa7676735c0ca059d080bc5d0daab4879e9c04431868605a6f56a553ac3ecb1efcefe775a023bb7c8a3ed7379210b1def3d23ffca7e6def20d8bf523d1af98acf67695be5f1c3978183bd2b1fa1f9a76db4eeaecae33226a5cf9a5df6edc9b1cb116d81a7e15c493fc7c60e2e2d3c8c7b2e57ab7520fefe78f5a40ebe2b0f2c40e2b08142e945c2f9c4f4120218180ecb56ebf9fe8278f2527328b6ef9b8761fe08010638676f6ae9db9f1e49dd3033ab9254b4ce32ba81ec3b001319a96d46f21cd71cee40f7ad93d59f9c509d1189a2d06fcc7ec75d09016e7857a53ef5c07022ff5bef8315efb6db48ab41ee1cb32848fd47d959d62f0fc6ac3e2866a36bf5f1ad9a215133a756149bd9f20622a5a9cd5713580ae38605911bf2c94fe7aa96284ca1062c7f0af9431692df7590668b6c92225ec77fd5758ae9b86173910f950ed3c9a6eef7f534eb77f5599c947231d4c392e426e4e7a7de90419586be153580555c490c259855a0816e9b43f13e2d8f5bfa3a2cac291973484a2f28f6b92979eaac4835430beea5066e90a673b59de9b411007eefabd713e54823b3a2a980b7271eb6536b1a485605bc5671cb852284b3113818e64a4424b287985a20bdc06bee67400daa764bfc2de04c32a0544f3b274bac27f4c26bb13b79d988233d2ba4ec048ac6131d25aa0e3d846fa887378e07b9a5dc88852b6878272cbd9d2dd95a08d90afabf46f9ac58be6e365529bf0699f258959702dcafacc1992d9fc6b1acad5a4437dd8bc4eea203b70c7ecba62c7ae364910bfde5e5dbd9beff7a02095a7137237368df0d86895914d577654a5602a5bda8343eb12d1205fc8d1e6e1a993cf852ae2c81f0b3a3601b40cf37fef6c487e2cf11cc8dbff6bb3288f5e00c2b07b6fc75e475cc07e7c26b3a46e5f64d79b42bb62563e4adf743898a31421c06459902c416702e943f05ea1d5a0f5e6e65f102e97a10eae2b3fba92022969690055bf3956226120b32e1b5d4e69bec181763883f0b236cf00bec0c5b5fe136ffbd6a34f1e9ed8660c33d92f196ef94169dea8703b965904d60fed80cd1a79039943f2115467260ca86c1055cf149c02e0fd60cc57bab81f9bf7268db7d4746962388324f422bd77b4bfc5fabb7429720792b22a240dffa3d454842accdeeeda68869667a80c1d92e901cc7dbb3a34a07a14b91faa377a6bac5b2c0b8416d57f8f123f7f14f8b524c06050b1e32c83c72ad9402353531130ba66daf03ea65604b98cbb361da0b0fa452d531c2ee814c9e4d657d7b4b59ffb6bf4835fd4adbf4ca1620a322ab594f5ba250e01dfd6317df9829c0e6acbe4fbfd6d48ba8328f8fb3cbaefe2781cfb16b504f3f9a5e5026f28a4087a0be7b9a5b556209ab8d1015d6c46098cb4af9c8725f9b937f11fccbea11bde8249dc0016ca8e7f0349b17a7bb35533ef21d01bc9609b76fa491f42b444acc58075f8b9712511e1c251ab1b5ae964fe3b63bc7a8aeda0ca50930cc836ee1cfaf2612aedd12f5248582e8e2e6832504f235c06689097acab8ea34047cf55f2d45ef00ab2a5155bcd965098dfd52e1ac4650409c23fe7934e815e20173f1eb49b98ff32c3afe0ea033aae4e375eacdf1cbe0c1fa1fb60f5d792dce9192db2efc5cbe5fbff0eb7d11d4abc5f8dcbed671d9e55a59e0890fd41ead639531f66fd4c8d8615d8762609fdeff8c17fd53d7ebd8ec689c71f21ff2155ae03186543bad7e0ff30f8fa72783d7357b6b7b2ea987b66c158b82811dc19d4f90845d8e8bf016bd2f2ea7bfb6e826c4c22e0310841482ff95cb55407192044a43fa850cad373db80308e36f91b3d8923a2784319f3d61bb2e7296c9f406f303c106c9cd111e8feed9a8b7b39be66805ea66cc40d816c09914980ea04f87161c727df9846eac07ab9b51b3ea0753d68a92c53d113580428c626075b1135b18caaec9bb0c29ee71c2fcc296e271e110665d289897791e99fcbbcba785fb6d4beaed7c04ef16ef940cc0bb3765ff5109461cbc371a449577dc8038ed810745ec874e0fff7d0a686b7c5c0014a53cd08c601aba8d221967c51763b4a98d676bbd10c8c989aae7da210e1e7ba8175fcff5ffc0417c1e1fee0f581b03b4e27c5846c6b6c80ac993260201c5154142ca53bee72a844e74ae2e13c2177f8a4a1096062327da0e9c3a44fb2fbde48b2b14fd3b37dad3ae50bbab5fbe88b47334bfd14e36e2611a0f7126dd2036c8cdec2cfeb28013d6dc8e2daaeadae8a21b174f2e667901b550defec13b5d591505b78840bcb23319392ed8ac9f25ac57e7bda277f7677ebd0988de8e88a217f973c7d02f80337c6377515c0ca4ad89a47171ee16ea4033e09679662944acaa98dd9daa80f034ccd3ff29f3") process_vm_readv(0x0, &(0x7f0000a23000-0x40)=[{&(0x7f0000d73000)=""/16, 0x10}], 0x1, &(0x7f000099a000-0x90)=[{&(0x7f00008c2000-0xef)=""/239, 0xef}], 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000c4000)={0x0, 0x0}) ptrace$getsig(0x4202, r3, 0x8, &(0x7f0000f30000-0x10)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00004a7000)={r2, 0x1000, 0x9, 0x401}, 0x14) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000e4c000)='/proc/self/net/pfkey\x00', 0x228280, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000d40000-0x4), &(0x7f0000010000-0x4)=0x4) r1 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000717000)=@ipv4_getnetconf={0x1c, 0x52, 0x40d, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@NETCONFA_IFINDEX={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000c81000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1100}) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0x364000)=nil, 0x364000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000364000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getaffinity(r0, 0x8, &(0x7f000026b000-0x8)) mmap(&(0x7f0000364000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000364000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000365000-0x5)='ceph\x00', &(0x7f0000364000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000365000-0x7)='GPLGPL\x00', 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000360000-0xa)='id_legacy\x00', &(0x7f0000360000-0x5)={0x73, 0x79, 0x7a}, r1) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000003e000-0x8)='keyring\x00', &(0x7f000001d000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f000003d000)='trusted\x00', &(0x7f000003d000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f000003e000-0x82), 0x350, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000028000-0x8)='keyring\x00', &(0x7f000003e000-0x5)={0x73, 0x79, 0x7a, 0x1}, r1) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000609000)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00009c9000-0x8)={0x0, 0x0}) r1 = dup(0xffffffffffffff9c) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000591000-0x20)={"5be5a201276a7f840a4369a8cf201714", {0x4, 0x1, 0x8, "917d560779ed", 0x1}}) r2 = syz_open_procfs(r0, &(0x7f0000ac7000)='comm\x00') connect(r2, &(0x7f000043a000-0xe)=@l2={0x1f, 0x5, {0x8, 0x9, 0x9, 0x6, 0xffff, 0x9}, 0x7ff, 0xf284}, 0xe) preadv(r2, &(0x7f00009d6000-0x10)=[{&(0x7f0000882000)=""/96, 0x60}], 0x1, 0x53) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44042) readv(r0, &(0x7f0000005000)=[{&(0x7f0000002000)}, {&(0x7f0000001000-0x8d)=""/141, 0x8d}], 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) pipe(&(0x7f0000003000-0x8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000001000-0x38)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000007000-0x48)={0x2, 0xf, 0x6, 0xf, 0x9, 0x0, 0x7, 0x1, [@sadb_x_nat_t_port={0x1, 0x0, 0x1}, @sadb_sa={0x2, 0x1, 0x3, 0x0, 0x8, 0xe2, 0x1, 0x1}, @sadb_lifetime={0x4, 0x2, 0xffffffff, 0x81, 0xfff, 0x1}]}, 0x48}, 0x1}, 0x4008000) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000001000-0x26)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, &(0x7f0000001000-0x4)=0x26, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x2d, @mcast1={0xff, 0x1, [], 0x1}, 0x3ff}], 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000003000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r1, 0x4000000000001269, &(0x7f0000c26000)) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8a1) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004000)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000003000)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000004000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$llc(r2, 0x0, &(0x7f0000001000)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001000-0x450)={'filter\x00', 0x7, 0x4, 0x400, 0x108, 0x218, 0x218, 0x108, 0x318, 0x318, 0x4, &(0x7f0000002000-0x40), {[{{@arp={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, @empty, {}, @mac=@random="c10f0f125be7", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14}, @rand_addr, 0x0, 0x0, @mac=@empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="e6d764d2efa6af3fd6c75c73ceb310f2", @common='bcsh0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}, {{@arp={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='lo\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x450) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000003000-0x3a)="ba9fd473b3b1d8c9b45393dde58b13b1c034d0b5932812dbb5c47ef9f28b961190163bb6165c1c9c819025dcfdf56f9653afed296fad100515e3") socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000006000-0x14)=@known='security.capability\x00', &(0x7f0000006000-0x1d)='LED\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1d, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r2, 0x8906, &(0x7f0000001000)) [ 102.198702] binder: 21086:21093 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.206507] device syz0 entered promiscuous mode [ 102.231510] binder: 21086:21093 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:05 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000002000-0x8)='./file0\x00', 0x400000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001000-0x5)='reno\x00', 0x5) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001000-0x4)=r1) pipe(&(0x7f0000005000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f000049a000-0x8)={0x0, 0x20, 0x80}, &(0x7f000055a000)=0x8) write$tun(r4, &(0x7f0000e56000)=@hdr={0x1, 0x1, 0x1, 0x7, 0x1000, 0x9, @ipv4={{0x17, 0x4, 0x8000, 0xfffffffffffffff7, 0x158, 0x3, 0x8000, 0xc51b, 0x33, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[@ssrr={0x89, 0x13, 0x4, [@multicast1=0xe0000001, @loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, @dev={0xac, 0x14, 0x0, 0x16}]}, @ra={0x94, 0x6, 0x10001}, @lsrr={0x83, 0x1f, 0x0, [@remote={0xac, 0x14, 0x0, 0xbb}, @dev={0xac, 0x14, 0x0, 0x14}, @local={0xac, 0x14, 0x0, 0xaa}, @loopback=0x7f000001, @broadcast=0xffffffff, @dev={0xac, 0x14, 0x0, 0xd}, @local={0xac, 0x14, 0x0, 0xaa}]}, @ra={0x94, 0x6, 0x8001}, @end, @end, @ra={0x94, 0x6, 0x800}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0xf39, 0x6, "826b29f9d6b126f33d1cdb356fd380a31ccba3d0db10c9a1e59dbc1e4ef3062d4e3c8955fcef46324d701fc9603ab5eca5084914b84a6a34c665b3b436a41084796d51d31e3aa984529b957e7aa96cf78456074274e83c99a159e68296bb0a3a69a0e2d20a6aaf50cc912845a5c0f527c71435c2dc0316d94bb44d0b2f347f7079a1608da4ac6e63a0736e894582f155e31b5c8bd146bf6faf893eb28c09b01d01776749dba6c52dab9f34b90ec53924fc56672a2fbad99705bdf577ed9ef0567d101d6adb8cad51b7de7161d258d5ba60be2f3ddd728c3136b98c698f4c98479d43162451d10b0eccf844c19f98719ceebbbba3"}}}, 0x162) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000002000), &(0x7f0000002000)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001000-0x8)={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={r5, 0x1f}, &(0x7f0000001000-0x4)=0x8) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000774000-0xc)={0x0}, &(0x7f0000b16000)=0xc) sched_getparam(r1, &(0x7f000070d000-0x4)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000855000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xffff) connect$inet6(r0, &(0x7f0000e2a000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00007ee000)={0x100, 0x1, 0x9db, 0x9, 0x7f000000}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000b35000)={0x80}, 0x1) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xd, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f00009c5000)=@ipv6_deladdr={0x74, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x7, 0x8}, @IFA_FLAGS={0x8, 0x8}, @IFA_FLAGS={0x8, 0x8}, @IFA_FLAGS={0x8, 0x8}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80}}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x74}, 0x1}, 0x0) r1 = memfd_create(&(0x7f00003a7000)='\x00', 0x2) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000d0f000-0x2)) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f000036c000-0x30)=[{&(0x7f0000b51000)="ebb29c2aa804af648d63b2908439b40213", 0x11}], 0x1) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000557000)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) writev(r0, &(0x7f00002e7000-0xa0)=[{&(0x7f0000cee000-0x89)="2c1407e3883fe48531d586685b3b4a234f80ce948a", 0x15}], 0x1) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000fa0000)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000e22000-0x8)=0x10001) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x0, 0x0, 0x7}) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f000036a000-0x4)=0x1, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000082e000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f000051f000), &(0x7f000059d000-0x4)=0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xffffffffffffff8a, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00009c2000-0xa0)={0x0, @in6={{0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, 0x9, 0xb14b, 0x9, 0x7, 0x2}, &(0x7f000078d000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000d51000)={r2, 0x9, 0xd7, "de92f061646f03e99292809574d19daf831c0b6ff408eaaa8369a700508183506869efc3437d8cb7f8cd2c9ed64aa3469017579afd6bb0963c23ffc3c259d9b7a20db0a810bec1c4f06b825f72835fe4eebc9badee346b22a72e48da17338639ef54291a37c70555e69f0ea7f1e7b1a9b30b679ab2ba8a3ec002b4b1db2cfa60623b8f0685b31330fe0dfc13a2deaf0df14ed9e950b5623d46574a87ef716e9dbd8df4ba062e7a6939f4579e1e27bbda953af600f1a4c185d47c8741bc6138d76576b7488100c8bb2aec9d5c8b1288b2a3183782e08a51"}, 0xdf) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0x45000)=nil, 0x45000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000045000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000045000)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000043000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000042000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00'}) fcntl$setsig(r0, 0xa, 0x5) write$sndseq(r0, &(0x7f0000001000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x7ff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"1097030f0d49bd34d4f6bc0b"}}], 0x60) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f000002c000)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f000003a000)={0x0, 0x807}) mmap(&(0x7f0000045000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000046000-0x10)={0x80000000, 0x9, 0x616}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x73d396b8b89408d2, @time}) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x80000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000a33000)={0x0, 0x0, &(0x7f0000001000-0x10)={&(0x7f0000000000)={0x2, 0xa, 0x7fff, 0x0, 0x15, 0x0, 0x7, 0x2, [@sadb_key={0x13, 0x9, 0x450, 0x0, "eb4dd9d6381d41878121d6ae1f078983940b19491fafe93a35912a03e9123b4980fefd6ac8841110ad85d5c25ae90114492262d71132b58f5ba8913e7be33e5da23f8718fd61168ed478b20fe8b9df81501e70e06d23b59ba15ef9f18cefbd2a090ccba8d9a764493f7284e425e2614870058812636f4c2635e7e729e51c9df7cb5c47f4d69a790b1514"}]}, 0xa8}, 0x1}, 0x80) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000007000-0x38)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000004000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x200000000000007f, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in=@rand_addr}}]}, 0x50}, 0x1}, 0x0) [ 102.245928] binder: 21086:21093 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.253998] binder: 21086:21093 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.267906] binder: 21086:21093 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = accept4(r0, &(0x7f00008a9000)=@nl=@proc, &(0x7f0000cca000)=0xc, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000e6d000)={0x0, @in6={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x2}}, [0x1, 0x6, 0xed, 0x3, 0x7f, 0x6, 0x6, 0x5, 0x100, 0x80000000, 0x3, 0x400000007, 0x5fe4, 0x8, 0x100000]}, &(0x7f000061a000)=0x108) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000294000-0x6)={r2, 0xe54c}, &(0x7f0000f2c000-0x4)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000054e000)='veno\x00', 0x5) shutdown(r0, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000c24000-0x90)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) getsockname$unix(r1, &(0x7f0000f20000-0x8)=@abs, &(0x7f00005d6000)=0x8) [ 102.327276] binder: 21121:21127 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.350282] binder: 21121:21127 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.358233] binder: 21121:21127 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000a13000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x800002283, &(0x7f0000a11000-0x1)='k') ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000554000-0xc1)=""/193) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80008000e, 0x7) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000bbe000-0x4), 0x183) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDSETMODE(r1, 0x4b3a, 0x7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000a1c000-0x5c)={{0xa, 0x3, 0x1ff, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffff8}, {0xa, 0x3, 0xfffffffffffffffe, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, 0x8, [0x2, 0x7, 0x1, 0x79ab, 0x3, 0x9, 0xfffffffffffffffc]}, 0x5c) openat(r1, &(0x7f0000271000)='./file0\x00', 0x80800, 0x0) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000a4a000/0x2000)=nil, 0x2000) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) 2018/02/14 06:15:05 executing program 1: prctl$intptr(0x1d, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000f8b000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ipx(r0, &(0x7f0000001000-0x10), &(0x7f0000c11000-0x4)=0x10, 0x80000) [ 102.373188] binder: 21121:21127 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.394650] binder: 21121:21127 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 5: r0 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f000024e000)="240000001a0025f00000000401111f0e0a0300000004bf00000009ec0800030005dcf300", 0x24) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f00004f8000)=0x1, 0x4) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xc34000)=nil, 0xc34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000941000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000c34000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000c35000-0x8)='./file0\x00', 0x10000, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00001dc000)=[@in6={0xa, 0x1, 0x7fff, @loopback={0x0, 0x1}, 0xfffffffffffffc01}, @in6={0xa, 0x0, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x40}, @in6={0xa, 0x1, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x2}], 0x54) waitid(0x0, 0x0, &(0x7f0000c30000-0x5), 0x9, &(0x7f0000023000-0x90)) 2018/02/14 06:15:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c1f000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f000017d000)) r1 = syz_open_dev$sg(&(0x7f0000402000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0x2, &(0x7f0000001000)={0x0, 0x0, 0x7737, 'queue0\x00'}) ioctl(r1, 0x1, &(0x7f0000001000)) openat$rfkill(0xffffffffffffff9c, &(0x7f00006a8000)='/dev/rfkill\x00', 0x101001, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000801, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000cb0000-0x20)={@common='bond0\x00', @ifru_flags}) timer_create(0x3, &(0x7f0000273000)={0x0, 0x2b, 0x1, @thr={&(0x7f00006c3000)="01786c75f9813dc138fc14d0cd0358f685a67ed552a9339a7464ba33140f290696259a093bfaf196cb052089f044a6d8d86245eaabbb6b039130a917928ca654196a389dcb3220672a8df2c97b44c6420c79110e96187c31f9d12fdf19edd5883b774b6029ccb2e9cf04664f0407d9857847cd82bf14683be71e2c67d276a4a4ff9622e717019e860ef3bccde727e3efff5860a94598210e029b2fa1e00bc50cf75236e2", &(0x7f000032e000-0xde)="feca36fbbe9697209ed86d1b076aacb3fdea763649089150b974debca010513fcc80bf1da589ca94ed30056917838c020e9bad0881a95aa67ec6d755f24fb74767de7021380d85a39f588eef891e4bbe82f50d0690ed14130d9bfa3f81b23e53635ef4d5cb02558dca35ebeaa4ea98bc894a2d2c1708f4d5f88bc1f28cb973c711501242fb67aeb14823bdd7c2adba03015e5c2e3934dbc2f32fa30b4ba401530ebcd62cf66e2b82fd4223e5733a145bd4d46521a14488df38b42332987b2441442475d70cd17f2b1f0987acb1f86145b0b75f839ddbff97fcc4f2fba869"}}, &(0x7f0000a71000)) pipe2(&(0x7f0000268000-0x8)={0x0, 0x0}, 0x4000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00008e3000-0x8)={0x9}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00002af000-0x20)={@common='tunl0\x00', @ifru_addrs={0x2, 0x3, @rand_addr=0x9}}) timer_create(0x3, &(0x7f0000759000-0x60)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00007a3000)=0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000059b000-0x4)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000761000)=0x9, 0x4) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000dfd000)={"05007f00000e00150000000000da6b4b", {0x4, 0x9, 0xfffffffffffefffe, "a29fa8ff976b", 0xf8}}) timer_create(0x1, &(0x7f000012a000)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db4000-0x4)) timer_gettime(r2, &(0x7f00008fb000-0x20)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000ab5000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000f7c000)=0x400, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000a4e000-0x10), &(0x7f00009f7000-0x4)=0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000988000)) mlock(&(0x7f000044e000/0x2000)=nil, 0x2000) r3 = dup(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000163000)='/dev/ppp\x00', 0x101000, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000db3000-0x4), &(0x7f0000d98000-0x4)=0xfffffffffffffcfc) bind$inet6(r0, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e78000-0x1), 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000ba5000)={{{@in6=@remote, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000a33000)=0xe8) getsockopt$inet6_tcp_buf(r4, 0x6, 0x0, &(0x7f0000001000)=""/4096, &(0x7f0000b1c000-0x4)=0x1000) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) sendfile(r3, r5, &(0x7f000070f000-0x8), 0x8000fffffffe) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000004000-0x10)='/selinux/policy\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000002000-0x67)={'system_u:object_r:ld_so_t:s0', 0x20, 'system_u:object_r:logrotate_var_lib_t:s0', 0x20, 0x35, 0x32, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x67) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000004000+0xdcf)="498d8b00adb826e6661565a22d90c778717a09328f02efa8c64049b714aec267cec332423945308970ebfb7e5641580c57561bd4a600206f9026c25844b9392d25c19c62b1c5586dd5fbb4c0a52634cc060642ce0389aae8178b16e6d8fd5b9d9e56ab59bfd0588bcf9c12b46eb062716ee98b4297f9", 0x76) dup3(r1, r1, 0x80000) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000003000)=""/30, &(0x7f0000000000)=0xfffffffffffffef6) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/enforce\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000f44000-0x4)=0xabf, 0x4) inotify_init1(0x80800) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000002000-0x78)={0x6, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, {0x2, 0x2, @empty}, {0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x8}}, 0x1, 0x1f, 0xa133, 0x5, 0x200000000000833f, &(0x7f0000001000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x400000ff, 0x0, 0x8}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2000000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000ec9000)={0x0, 0x9}, &(0x7f00001ae000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f000082c000)={r3, 0x8}, 0x8) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000ffa000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xc4b6}) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000d8a000-0xc)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f0000806000)=@bridge_dellink={0x30, 0x11, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x10, 0x1a, [{0x4, 0x1e}, {0x4, 0x1c}, {0x4, 0x1e}]}]}, 0x30}, 0x1}, 0x0) fsync(r0) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fd2000-0xa)='net/tcp\x00') preadv(r1, &(0x7f0000b79000-0x70)=[{&(0x7f0000a75000-0x8e)=""/142, 0x8e}], 0x1, 0x101) exit(0x5) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000f79000-0x4)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}}]}, 0x190) recvfrom$inet6(r0, &(0x7f00006d6000)=""/255, 0xff, 0x0, &(0x7f0000d69000)={0xa, 0x0, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, 0x1c) [ 102.497689] binder: 21168:21182 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000009000-0x5)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000008000)='user\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x59)='md5sum&cpuseteth1#security\'vmnet1$posix_acl_access,&$procposix_acl_accessem0cgroupGPLem0\x00', r0) fanotify_init(0x40, 0x0) r1 = request_key(&(0x7f000067a000)='user\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000001000+0xae3)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002000-0xe8)="0f", 0x1, r1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000003000-0x1)={0x6}, 0x1) keyctl$read(0xb, r1, &(0x7f0000007000)=""/4, 0x4) 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000102000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000daf000), &(0x7f0000de7000-0x4)=0x4) fcntl$setownex(r0, 0xf, &(0x7f0000cbe000)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000042000-0x4)=0x0) capget(&(0x7f0000a5c000)={0x20071026, r3}, &(0x7f0000faf000-0x18)) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000001000-0x4)=0x9, &(0x7f0000d1f000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x801) r3 = dup3(r2, r1, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000f5d000), &(0x7f0000647000)=0x4) write(r2, &(0x7f00000b5000), 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x100000001) 2018/02/14 06:15:05 executing program 6: socketpair$inet6(0xa, 0xe, 0x4, &(0x7f00001f2000)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000084d000)={0x0, @empty, @dev}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001000-0x14)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000ef3000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x100000001}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000efa000-0x4)=0x1, 0x4) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000c3d000)=""/68, &(0x7f0000b3e000)=0x44) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000799000-0xb)='asymmetric\x00', &(0x7f00003bd000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000ef8000-0x6)='*user\x00', 0xfffffffffffffffe) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000127000-0x11)='/selinux/enforce\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000065d000)=0x52d6dd7c, 0x4) r2 = request_key(&(0x7f0000940000-0x5)='user\x00', &(0x7f0000857000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000e2c000-0x2)='%\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x1, 0x2, r2) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f00003aa000)=[{0x80}, {0x6}]}) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f000025c000)='/dev/net/tun\x00', 0x0, 0xf4102) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006ab000-0x50)={@common='gre0\x00', @ifru_ivalue=0x451d7397}) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f000067d000-0x4)) syz_open_dev$sg(&(0x7f0000c76000)='/dev/sg#\x00', 0x7f, 0x4000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e35000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) [ 102.539794] binder: 21168:21182 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.554938] binder: 21168:21182 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.562556] binder: 21168:21182 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.570137] binder: 21168:21182 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000aee000)={0x80, 0x8201, 0x3, 0x8, 0x0}, &(0x7f0000050000-0x4)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000526000)={r1, 0x33, "afc035d6ea9efc31fc330d9fe243139a7166b7db4c55c64ea1d562fa38ad3ad9b5831afc91075566a95784f1a40d18d474ec6f"}, &(0x7f000024c000)=0x3b) sendmmsg$inet_sctp(r0, &(0x7f0000dcc000-0x188)=[{&(0x7f00008bc000)=@in6={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c, &(0x7f000077b000-0x50)=[], 0x0, &(0x7f00001a0000)=[@init={0x18, 0x84}], 0x30}], 0x1, 0x0) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) write(r0, &(0x7f0000899000-0x26)="26000000120047f181ff050d43000100fffffffdc200ffff0000000009227fff050019000007", 0xfffffffffffffe0b) [ 102.608560] binder: 21215:21216 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.628831] binder: 21215:21216 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.637946] binder: 21215:21216 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.645945] binder: 21215:21216 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000f9b000+0x1c5)={0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000d6c000-0x8c)={0x0, @in6={{0xa, 0x0, 0x7fff, @dev={0xfe, 0x80, [], 0x0, 0x14}, 0x8}}}, &(0x7f0000a39000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000c95000+0xb4)={r1, 0x4}, &(0x7f000024e000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000317000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00008e3000)='/dev/sg#\x00', 0x0, 0x400000) epoll_wait(r4, &(0x7f0000c28000)=[{}, {}, {}], 0x3, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000fc8000-0xc)='/dev/ashmem\x00', 0x100ffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f000099b000)={r2, 0x80, 0x0, 0x8000, 0x8000}, &(0x7f0000ee0000-0x4)=0x18) listen(r3, 0x0) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00001a9000-0x8)='./file0\x00', 0x10442, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000bb000-0x8)=@assoc_value, &(0x7f0000491000-0x4)=0x8) fgetxattr(r0, &(0x7f00005c0000)=@known='security.ima\x00', &(0x7f0000f33000-0xbe)=""/190, 0xbe) ioctl$TIOCLINUX2(r0, 0x40305828, &(0x7f0000e1b000)={0x2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000ad2000)={0x0, @in6={{0xa, 0x1, 0x1d, @loopback={0x0, 0x1}, 0x401}}, [0x7, 0x3, 0xfff, 0x1, 0x2, 0x2, 0x32dc, 0x2, 0x80000001, 0xff, 0xfffffffffffffff8, 0x0, 0x8, 0x20000000, 0x3]}, &(0x7f0000556000-0x4)=0x108) getpeername$ipx(r0, &(0x7f0000eb1000-0x10), &(0x7f0000bf4000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000254000)={r1, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}}, 0x8c) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000001000-0x8)={0x80000001}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001000-0xef)=""/239, 0xef, 0x2c) mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) close(r1) read(r2, &(0x7f0000fd6000-0xa8)=""/168, 0xa8) 2018/02/14 06:15:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0x0) stat(&(0x7f00006c3000-0x8)='./file0\x00', &(0x7f00005e8000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f000000b000-0xc)={0x10}, 0xc, &(0x7f0000013000-0x10)={&(0x7f0000835000)={0x1a8, 0x2c, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {0xffffffffffffffff}, [@typed={0xc, 0x29, @fd=r0}, @typed={0x8, 0x8}, @nested={0x180, 0x4b, [@typed={0xc, 0x47, @u32=0xffff}, @typed={0x10, 0xf, @u64=0x3}, @generic="494ec7314516a8562806826f0024f3055bfa4ff2fd6ec84fcb03cc01d9eaa6bb7ed20f153859626dd58b948a8a98d622b4a00630872159d1ab6ebbe67ec719f90d19a4e7aa8805c3d3d065bf4630d2438ba3de2ca0832fe705e7eeb1a5ab228c537c", @generic="6617b61a2cb293e3f25fafefde95660a2b6986282678f67cfbcce58b362f4245e2f23169716e38d9afe2dd7589cf430eb50c6df70c62021a5f098f61beb47cd05f57b54e10c9b5346bef28215b6650ae36df1469b421ba119744dfb52f8179bf8bbfcff9268464b9c9aaada79137470505bccd4e6447191d3ce95c91aef6a6145ffc245fe1e0430dc90cbf3a5cdb89e2e718dddc4d2c0ef91f77ba9ca49da485652e78214ac85addc0e0aa3e9c4e198e8e5ed6b7ee57e5475d88ae4b332b0f0427023028c0ac587f437bc4976ea538ec6e102211391b59abed3e", @typed={0xc, 0x4e, @u32=0xe83}, @typed={0xc, 0x59, @pid=r1}, @typed={0xc, 0x23, @uid=r2}]}]}, 0x1a8}, 0x1}, 0x0) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xc2e000)=nil, 0xc2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c24000)={0x0}, &(0x7f0000c24000-0x2)=0xc) r2 = getpgid(r1) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000b3f000), 0x1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000c24000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) mmap(&(0x7f0000c2e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000c2e000)={0x0, 0x0}, 0x84000) mmap(&(0x7f0000c2e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c2e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000c2f000-0xc), &(0x7f0000c2f000-0x4)=0xc) ptrace(0x4207, r3) ptrace$getregs(0x5, r3, 0x7fffff, &(0x7f0000c2c000)) 2018/02/14 06:15:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) socket(0x2, 0x80800, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f000082e000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00008d2000-0x8)={r2, 0x2}) r3 = syz_open_procfs(r1, &(0x7f0000197000)='smaps\x00') setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00009eb000)=0x100000001, 0x4) readv(r3, &(0x7f0000635000-0x70)=[{&(0x7f00008f7000-0x1000)=""/4096, 0x1000}], 0x1) [ 102.656993] binder: 21215:21216 Acquire 1 refcount change on invalid ref 0 ret -22 [ 102.685520] binder: 21243:21247 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000006a000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00009b3000-0x4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r3 = socket(0x17, 0x40000000000f, 0x6) ioctl$TCXONC(r2, 0x540a, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000f76000)={0x0, 0x3b, "c772db947a5ef5103e29110b3d24ba9881eebb66464c6285cca593c9f8222c5bc31d4a497fc19628c40872dc1a677ca2ba72ddc874a3a8bb2a7df7"}, &(0x7f0000f33000)=0x43) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000c86000)={r4, 0x1000, "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"}, &(0x7f00009e6000-0x4)=0x1008) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000d04000-0x40)=[{&(0x7f00006ec000-0x8a)=""/138, 0x8a}], 0x1, &(0x7f0000c0f000)=[{&(0x7f0000ba6000-0xf2)=""/242, 0xf2}, {&(0x7f0000a24000)=""/113, 0x71}], 0x2, 0x0) 2018/02/14 06:15:05 executing program 5: mmap(&(0x7f0000000000/0xe8d000)=nil, 0xe8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e8d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000e8e000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00006cf000-0x1)={0x2}, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000cab000-0x5)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000049c000-0x154)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x33}, @in=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) lstat(&(0x7f0000d56000)='./file0\x00', &(0x7f0000550000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f000017f000)='./file0\x00', &(0x7f0000574000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00007df000)='./file0\x00', r1, r2) 2018/02/14 06:15:05 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:05 executing program 0: mmap(&(0x7f0000000000/0xa7a000)=nil, 0xa7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000a75000)={0x0, 0x0, 0x30004}) mmap(&(0x7f0000a7a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x80f, 0x6, &(0x7f0000a7a000+0x6e2)={0x0, 0x0}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000a1e000)=0x7ff) rt_sigtimedwait(&(0x7f0000a72000)={0x7fff}, &(0x7f0000a7a000-0x10), &(0x7f000044a000)={0x0, 0x989680}, 0x8) [ 102.703192] binder: 21243:21247 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.707621] netlink: 388 bytes leftover after parsing attributes in process `syz-executor7'. [ 102.724816] netlink: 388 bytes leftover after parsing attributes in process `syz-executor7'. [ 102.733874] binder: 21243:21247 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f000034d000-0x9)='/dev/sg#\x00', 0x9, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7f42, 0x80, 0x4, 0x81, 0xe7, 0x7fff, 0xffffffffffff397d, {0x0, @in6={{0xa, 0x3, 0xc9, @dev={0xfe, 0x80, [], 0x0, 0x13}, 0x2}}, 0x100000001, 0x10001, 0x80000001, 0x4350, 0x8d0000}}, &(0x7f0000426000)=0xb8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002000-0x8)={r1, 0xe2}, &(0x7f0000002000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000270000-0x8)={r1, 0x7}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000097c000)=@int, &(0x7f000098f000-0x4)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000184000-0xc)={0x9, 0x1, 0x0, 0x8, 0x3f}, 0xc) add_key(&(0x7f0000547000-0x8)='big_key\x00', &(0x7f0000e83000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000810000-0x89)="316f8565321af78be083e9ad303421ba472f0b2b00c5e3b2f3bc2dbfd7a346cf64d67f7ea37f5ab76c7cb61f52adcf74f9e65af7d497a1309b1349f8f4e4d9c37a0a1b7237581cd8f8ac6e1e902d4d49fd34880047037816bded593cf3cc627719bb8ff21611e8780716f7e285443912052c7a32bc39a2ecef39bedc2e5b00e3fde2a431f64e09e358", 0x89, 0xfffffffffffffffa) r3 = add_key(&(0x7f0000055000-0x8)='rxrpc_s\x00', &(0x7f0000ff3000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000d14000-0xa3)="1c10ca3856f12d4d20bc6a44a8e48467c03f3bff3e584fd92595884573f86c5fa1e020dfda8a774c5d9466c19cde8b33fa43e5827e44c31e4dffdd78dfca62c6ee549b3b578c3295275c0eb02561d6bd304efdaa8a9bbd5303e04b1487899309d87b56640e6cd0148b7c3a46da8379c36bfe909b4f4fb7baeaa0a57c23fc78634b1893a84d6a3d3695a25df9672f7613aa799c0112b22472e5bb70c0dfc7474794def3", 0xa3, 0xfffffffffffffff9) keyctl$invalidate(0x15, r3) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000686000-0x5)={r1, 0x0, 0x0, 'K'}, 0x8f) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0x3b000)=nil, 0x3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000955000-0xa)='/dev/ptmx\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000bd9000)=[], 0x0, &(0x7f00006f4000-0x18)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000f4000-0xe8)={{{@in=@empty, @in6=@ipv4={[], [], @local}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f00004b0000-0x4)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f69000-0xc)={0x0, 0x0, 0x0}, &(0x7f000083f000)=0xc) lchown(&(0x7f0000210000)='./file0/file0\x00', r3, r4) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x9) r5 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000005, 0xa012, r5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009bc000)="6f6f6d5f61646a00aceb048ace6a7fe4299541856162c2caee4ddcec07751e2f54b9cbf0357fa60e7f8e7f6304370006f19190212c4a9e569adb10d57a4df1ac9de547a489ee151288214d250681714c92c72529697f2a774835bb6f09301d08f3c72fbbd90fe9775e40875adddc5c6c9f923b2d5899a66add2811c07319d9ddba60e2b798d5dbc662") writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='15', 0x2}], 0x1) poll(&(0x7f00002f2000)=[{r0, 0x8000}, {r0, 0x2}, {r0, 0x8000}, {r0, 0x8082}, {r0, 0x8408}, {r0, 0x1000}], 0x6, 0x3ff) sendfile(r0, r0, &(0x7f00008e9000)=0x1, 0x9) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$VT_RELDISP(r0, 0x5605) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000e17000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x9, 0x0, 0x4) [ 102.733881] binder: 21243:21247 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.733889] binder: 21243:21247 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000732000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000271000)=0x3, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000898000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000011000-0x204)={0x14, 0x7, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x3, 0x1, &(0x7f0000a37000)={0x0, 0x989680}, &(0x7f00006ad000), 0x0) clock_gettime(0x6, &(0x7f00003e0000)) r0 = memfd_create(&(0x7f00000b4000-0x1b)='/userposix_acl_accessvmnet0', 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000ee8000)=@assoc_id=0x0, &(0x7f0000fdd000-0x4)=0x4) clock_gettime(0x6, &(0x7f0000e38000-0x10)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000-0x1000)=""/4096) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000e7f000)="f713a149329a99db3e6a70a43481af3f4533f9b62e35c920f84cb7d3931215edecc230def324334a74ddcd40a8e385a409edf90bd44236f3c113931b37de1faf29df2e439cba7738308c6b7bceb5fa8aaea9f5e6b44891ac94a906031570335d23599920cad6b98ee1a20f8d2eee6949714b57afcb04e6832c21bed1b95fb881b2a6603c18bc00dcfb728ac2cb2f3e8a7a3f0983d2c9e91171c671e42bc575eccfaf7e8ff38dbde9135b7a88bdad783fae36a0150fc6a9b7df0b0475c460add859cc051a9bfc77332b7758994575f8d3da7a07f8bc6f9770b4da5523bf0e28a72279593401d7077a1d8f94f177122e07", 0xf0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000c6000)={0x3ff, 0xa, 0x5, 0x2, r1}, &(0x7f0000bc2000)=0x10) 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb6000-0x10)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) dup3(r1, r0, 0x0) socket$netlink(0x10, 0x3, 0x17) fchdir(r0) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xffffffffffffffff, 0x5) r1 = getpgrp(0xffffffffffffffff) ptrace$getsig(0x4202, r1, 0xfffffffffffffff9, &(0x7f000095f000)) r2 = syz_open_procfs(r1, &(0x7f0000616000-0xd)='net/fib_trie\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f000033b000-0x14)={0x6, 0x2, 0x1, 0x7d8f2a8}, 0x14) fstat(r0, &(0x7f000073c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f000029a000)={0x0, 0x80000000}, &(0x7f0000f46000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000770000-0xc)={r4, @in6={{0xa, 0x0, 0x8, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x6}}, 0x8, 0x9, 0x16e9, 0x7, 0x9}, &(0x7f0000ad8000-0x4)=0xa0) setregid(0x0, r3) mq_getsetattr(r2, &(0x7f0000082000)={0x200, 0x2, 0x8, 0xffff, 0x4, 0x7, 0x6, 0x80000001}, &(0x7f0000e0d000-0x40)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000940000-0x9)='/dev/ppp\x00', 0x15adccf1c76e803a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000d5d000)={@common='lo\x00', @ifru_flags=0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f000091c000)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000318000-0xc)={r6, 0x80000, r2}) 2018/02/14 06:15:06 executing program 1: prctl$intptr(0x17, 0x80000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000925000-0x8c)={0xf8, 0x6, 0x8, 'queue0\x00', 0x5f3}) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f97738795af87125e", 0x10) openat$dir(0xffffffffffffff9c, &(0x7f000018e000-0x8)='./file0\x00', 0x200000, 0x100) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) getsockname$unix(r0, &(0x7f0000723000-0x6e)=@file={0x0, ""/108}, &(0x7f000088d000)=0xfffffffffffffe7c) r1 = getpgid(0xffffffffffffffff) sched_getattr(r1, &(0x7f000009e000), 0x30, 0x0) 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00001bf000)=[{}], 0x1, 0x8d) r1 = gettid() bind$unix(r0, &(0x7f0000ad0000)=@file={0x1, './file0\x00'}, 0xa) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000584000-0x4)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r1, 0x15) [ 102.839483] binder: 21297:21303 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.848455] binder: 21297:21303 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.857532] binder: 21297:21303 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.864662] binder: 21297:21303 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.864677] binder: 21297:21303 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000089d000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000fba000-0xb)='/dev/hwrng\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000e9f000-0xc)={0x4, [0x9, 0xbc, 0x7, 0x200]}, &(0x7f00000bc000-0x4)=0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00002a5000-0x11)='/selinux/enforce\x00', 0x181082, 0x0) accept$llc(r2, &(0x7f0000565000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000d7e000)=0x10) [ 102.906338] binder: 21317:21322 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 102.914806] binder: 21317:21322 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.924152] binder: 21317:21322 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.934290] binder: 21317:21322 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 102.954782] binder: 21317:21322 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000aa5000)={0x1, &(0x7f000065b000-0x3)=[{0xd1a0, 0x7fffffff}]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00009ae000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f000008a000-0x4)={0x2}, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000379000)='/dev/rtc\x00', 0x18500, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00009fb000)=0x400) syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f000094d000-0x4)=0x6) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x3, 0x1, &(0x7f0000a37000)={0x0, 0x989680}, &(0x7f00006ad000), 0x0) clock_gettime(0x6, &(0x7f00003e0000)) r0 = memfd_create(&(0x7f00000b4000-0x1b)='/userposix_acl_accessvmnet0', 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000ee8000)=@assoc_id=0x0, &(0x7f0000fdd000-0x4)=0x4) clock_gettime(0x6, &(0x7f0000e38000-0x10)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000-0x1000)=""/4096) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000e7f000)="f713a149329a99db3e6a70a43481af3f4533f9b62e35c920f84cb7d3931215edecc230def324334a74ddcd40a8e385a409edf90bd44236f3c113931b37de1faf29df2e439cba7738308c6b7bceb5fa8aaea9f5e6b44891ac94a906031570335d23599920cad6b98ee1a20f8d2eee6949714b57afcb04e6832c21bed1b95fb881b2a6603c18bc00dcfb728ac2cb2f3e8a7a3f0983d2c9e91171c671e42bc575eccfaf7e8ff38dbde9135b7a88bdad783fae36a0150fc6a9b7df0b0475c460add859cc051a9bfc77332b7758994575f8d3da7a07f8bc6f9770b4da5523bf0e28a72279593401d7077a1d8f94f177122e07", 0xf0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000c6000)={0x3ff, 0xa, 0x5, 0x2, r1}, &(0x7f0000bc2000)=0x10) 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fa4000)={0x1, &(0x7f0000f96000-0x10)=[{0x6}]}, 0x10) write(r0, &(0x7f000008e000-0x26)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26) connect$ax25(r0, &(0x7f00000c8000-0x10)={0x3, {"15f7e37f258f30"}, 0x2}, 0x10) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f000064f000-0x5)="8907010000", 0x5) sendto$inet(r0, &(0x7f0000fef000-0x91), 0x0, 0x20000000, &(0x7f0000fd3000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendmsg$unix(r0, &(0x7f0000ccc000)={&(0x7f000008e000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000cd9000-0x90)=[], 0x0, &(0x7f0000051000)=[]}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000584000-0x4)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() tkill(r1, 0x15) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000c4a000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000a2b000-0x8)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000c9b000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00002ba000)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00009fe000-0x4)={0x100000000, 0xff, 0x27800000000}) 2018/02/14 06:15:06 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001000-0x4)=0x3f, 0x4) openat(r0, &(0x7f0000a08000-0x8)='./file0\x00', 0x400000, 0x1c0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000029e000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000c92000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000e07000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00004b8000)=@syzn={0x73, 0x79, 0x7a, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00006a0000)={0x0, 0x10001, 0x400, 0x1}, &(0x7f000022f000)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000bc5000-0x10)={0xfffffffffffeffff, 0x8000, 0x8, 0x0, r1}, 0x10) link(&(0x7f0000f00000)='./file0\x00', &(0x7f000038f000-0x8)='./file1\x00') 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000f65000)=0x6, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000cd6000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00001e8000-0x4), &(0x7f0000b9f000-0x4)=0x4) 2018/02/14 06:15:06 executing program 1: unshare(0x28060400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000211000-0x20)={0x3, 0x5, 0x2, 0x79f79df1, 0x0, 0x8000, 0x8, 0x5, 0x0}, &(0x7f0000886000)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001000-0x20)={0x80, 0x7, 0x204, 0xfffffffffffffffb, 0xb31c, 0xff, 0x8, 0x9, r2}, 0x20) sendmmsg(r0, &(0x7f0000978000)=[{{&(0x7f00009d8000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x32, &(0x7f0000f3a000-0x20)=[], 0x0, &(0x7f000072c000)=[]}}], 0x1, 0x0) r3 = accept(r0, &(0x7f0000f5f000)=@sco, &(0x7f0000b26000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0x401, {{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) 2018/02/14 06:15:06 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000ac4000-0x10)={&(0x7f0000f51000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000a000-0x15)='/proc/self/net/pfkey\x00', 0x301000, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000000b000-0xc)={@remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f000000a000-0x62)=""/133) fcntl$notify(r0, 0x402, 0x6) r2 = syz_open_dev$sndtimer(&(0x7f0000003000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x7, 0xcf, &(0x7f000000c000-0x8)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000002000)) setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000008000-0x4)=0x5, 0x4) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000020f000)=@newlink={0x50, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x1c, 0x16, [{0x18, 0x1, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @u64}]}]}]}]}, 0x50}, 0x1}, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000a8b000)=0x4) 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000019e000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) clock_gettime(0x4, &(0x7f000030c000)) clock_gettime(0x0, &(0x7f0000e44000)={0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000a62000-0x68)) nanosleep(&(0x7f00004de000-0x10)={0x0, 0x1c9c380}, &(0x7f0000bb4000)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={r2, r3}, {0x40000}, {}, @connect={{0xb15}, {0x401, 0x1}}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000117000)={{0x5, 0x1}, 'port0\x00', 0x20, 0x20000, 0x3, 0x4040000, 0xffffffff, 0x4, 0x1ff, 0x0, 0x7, 0x1}) openat(r1, &(0x7f0000a2e000)='./file0\x00', 0x10000, 0x40) unlink(&(0x7f0000f86000)='./control/file0\x00') link(&(0x7f00007eb000)='./control/file0\x00', &(0x7f0000e7e000-0x8)='./file0\x00') fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f000094b000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000fb7000)=0x32) connect$pptp(r0, &(0x7f0000102000-0x20)={0x18, 0x2, {0x2, @broadcast=0xffffffff}}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000050d000-0xc)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000113000)={0x0, 0x1ae, 0x1, [0x200]}, &(0x7f0000e15000)=0xa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00004a4000)={r2, @in={{0x2, 0x3, @multicast2=0xe0000002}}, 0x9, 0x3}, &(0x7f0000e4c000)=0x98) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req={0xffff, 0x100000001, 0x401, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00003fa000)={0x0, 0x8000}, &(0x7f000020b000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000dc5000)={r3, 0x5, "8dadc496cf"}, &(0x7f00005e4000-0x4)=0xd) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r0, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(0xffffffffffffffff, 0x0, 0x8000, 0x4) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 103.035498] binder: 21350:21352 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 103.047244] binder: 21350:21352 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 103.060214] binder: 21350:21352 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.067291] binder: 21350:21352 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 103.075239] binder: 21350:21352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.117714] binder: 21379:21381 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 103.125788] binder: 21379:21381 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 103.133194] binder: 21379:21381 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.142804] binder: 21379:21381 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 103.150699] binder: 21379:21381 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000287000-0xc)={0x1, 0x0, [0x0]}) recvfrom$ipx(r0, &(0x7f0000ab3000-0x2d)=""/45, 0x2d, 0x0, &(0x7f0000008000)={0x4, 0x1, 0x3, "160a47216143", 0x3}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000043b000-0x4)=0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000854000)={0x41, 0xad48, 0x7f}) pread64(r0, &(0x7f00001f8000)=""/129, 0x81, 0x2) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000f6c000-0x4)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000f7c000)=0x8000, 0x4) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000a87000)=0x7fff, 0x4) 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f000081a000)=[{&(0x7f0000034000-0x1000)=""/4096, 0x94c}], 0x1000000000000229, &(0x7f0000f81000)=[], 0x9a, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000039b000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00009b5000)=0x2) 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$packet(r0, 0x0, &(0x7f0000073000)) bind$netlink(r0, &(0x7f000002f000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) mmap(&(0x7f0000fd6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00002ba000-0x18)=@generic={0x2000000008007, 0x2004, 0x4}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000002d000-0x4)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001000-0x4)=r2) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x43e) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f00007fc000)=0x52e, 0x4) ioctl$sock_FIOGETOWN(r3, 0x400454d1, &(0x7f0000001000-0x4)) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000c9d000)='/dev/sg#\x00', 0x668b, 0x20080) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f0000a81000)=0x7) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c08000-0x168)=@newsa={0x158, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x20, 0x17, {0x42, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}, 0x1}, 0x0) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xf73000)=nil, 0xf73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000e1f000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000f73000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f74000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f75000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f75000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(r0, &(0x7f0000f76000-0x60), &(0x7f0000f75000)=0x60, 0x80800) write$fuse(r0, &(0x7f0000c11000)={0x81, 0xffffffffffffffff, 0x3, @fuse_notify_inval_entry_out={0x7f9, 0x2}}, 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f000000a000-0x38)={&(0x7f00007ec000-0xc)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000f70000)={0x14, 0x13, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, []}, 0x14}, 0x1}, 0x0) mmap(&(0x7f0000f76000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f76000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r0, &(0x7f0000f76000), &(0x7f0000f77000-0x4)=0xc) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000003c000-0x8)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00009aa000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f00004d9000)=@file={0x0, './file0\x00'}, 0xa) bind$unix(r0, &(0x7f00004c5000)=@file={0x0, './file0/file0\x00'}, 0x10) r4 = syz_open_dev$tun(&(0x7f0000445000-0xd)='/dev/net/tun\x00', 0x0, 0x680000) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000e0000)={@generic="37e927fa729f2ab24980c6c2083e6bee", @ifru_names=@common='bond0\x00'}) sendmmsg$unix(r3, &(0x7f00000bd000)=[], 0x80, 0x0) sendmmsg$unix(r1, &(0x7f0000fa3000)=[{&(0x7f0000498000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000b71000)=[], 0x0, &(0x7f00007a3000)=[]}], 0x1, 0x44) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r0, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(0xffffffffffffffff, 0x0, 0x8000, 0x4) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003b000-0x6)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x7, &(0x7f000000e000-0x20)={0x0, 0x1, 0xb9c}) openat$keychord(0xffffffffffffff9c, &(0x7f0000354000)='/dev/keychord\x00', 0x20100, 0x0) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000010000-0x6)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r0, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00009df000)={0x8, &(0x7f0000fda000)=[{0x0, 0x8, 0x3, 0x7}, {0x5, 0x621, 0x2, 0x4d35}, {0x9, 0x800, 0x1, 0x8}, {0x9, 0x401, 0x19, 0x8}, {0x6, 0x100, 0x3, 0x1}, {0x3f, 0x2, 0x3, 0x1ff}, {0x9, 0x3f, 0x9}, {0x0, 0x4, 0xffffffff80000000, 0x401}]}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000087000-0x18)=@get={0x1, &(0x7f0000e15000)=""/4096, 0x8}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f00000f5000-0x6)='./bus\x00', 0x400000, 0x1) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}]}, 0x80}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000fbb000)={0x0, 0x0, &(0x7f000090d000)={&(0x7f0000194000-0x1098)={0x2, 0xb, 0x0, 0x9, 0x213, 0x0, 0x3, 0x1, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_key={0x10, 0x8, 0x398, 0x0, "cb0eea3357dd44dd432c9b88fe93b2fa3373ebff003f50964d09bceaf0c78e86c7573954d52c892cf309c38078eea672863fd3f0d023e7bdd5eec9a716468d15b290e0815926b6a35bc14ed3b2dde588f92da0c8ed53fb95d19c4fe1e7ec6ae0535946cee17811085c4c8ee3f5692bd6ec57fa"}]}, 0x1098}, 0x1}, 0x80) sendmsg(r0, &(0x7f00009d8000-0x38)={&(0x7f0000186000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000038000-0x50)=[], 0x0, &(0x7f0000203000-0x4b0)=[{0x10, 0x1}], 0x10}, 0x0) 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x7, 0x71f) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f000076d000)=@newlink={0x50, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x1c, 0x16, [{0x18, 0x1, [@nested={0x14, 0xb, [@generic="ecbf6409e798b72a1384629ffe"]}]}]}]}, 0x50}, 0x1}, 0x0) [ 103.288269] binder: 21398:21399 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 103.302429] binder: 21398:21399 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 103.312101] binder: 21398:21399 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.330845] binder: 21398:21399 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000ec5000)=@abs, &(0x7f000070c000-0x4)=0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000045b000-0x4)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000a25000-0xe8)={{{@in=@empty, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000e7000)=0xe8) r4 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000011b000-0x4)=0x0) lstat(&(0x7f000015f000-0x8)='./file0\x00', &(0x7f0000018000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00007e3000)={@generic="4e4d1a014b30cf2108233eb4c99c66ee", @ifru_flags=0x800}) lstat(&(0x7f0000caa000-0x8)='./file0\x00', &(0x7f0000f60000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f000084a000)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00008f8000)={0x0, 0x8001}, &(0x7f0000562000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000b65000-0x14)={r9, 0x6, 0x6, [0x81, 0x81, 0x5, 0x2, 0x2, 0x5]}, 0x14) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000783000-0x4)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000220000)={0x0, 0x0}, &(0x7f0000e5f000+0xb1b)=0xc) r12 = getegid() r13 = fcntl$getown(r0, 0x9) r14 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00001fc000-0xc)={0x0, 0x0, 0x0}, &(0x7f00000cd000-0x4)=0xc) r16 = getpid() r17 = geteuid() r18 = getegid() sendmmsg$unix(r1, &(0x7f0000be1000-0xa8)=[{&(0x7f00003dd000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000599000)=[], 0x0, &(0x7f0000226000-0xa0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xa0, 0x4000000}, {&(0x7f0000ce9000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000003000)=[{&(0x7f0000ea4000)="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", 0xfe}, {&(0x7f00007f4000-0x13)="8bda706c4cf15c9071671c255effa432ced589", 0x13}, {&(0x7f000080a000-0x85)="626f8a2437171b2bba978c6ea02651de7e4c7a698f361e38fdb927064044354e943684784da0f24b205f8697a7c38f7633d89bc4a90ab0639345e5f1abf801a231721b85a1d4e3b9eb44ee4dc5e2189e6bb70028ca6e472c86af3fa82c2315598f3b9a6005da195df027afa2b7aa151ceb74f85f196127c65d1000944152e53612ff46b22b", 0x85}, {&(0x7f00007ab000)="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", 0x1000}, {&(0x7f0000084000-0xe1)="9e0179c2aca1b7de71af923156c101b3ccd8cb5dfec19aeed03a4ae886be3583e48eaff552cd8ffc86cab79a33def51ff465b80f0b582772accb8647397e1937ede13065f73773e175d0aec1996bc093fbbe22cd7574fe770890beceec02c84350877b016c337c33a35917f5a4e89caa93102b1ecc5961f06cd33099548e4e7086a9e55b7580acd12bd53a6577aea2896ca4f2dbc9dfb2acd5041f6b83e26cdaee7be5c21805b7a271c19cd0a25e5e14d6f9f461ee0de092c249857ce5582f20b0414fbd35c2e324554202c54938fc308188a82d1ef42aabd29aac50d25caf0f42", 0xe1}, {&(0x7f0000bd3000)="35c13f6ea8603e990aade83091bb1e68a0fe6270a0b07672315e558bb381018f47cf9e7a906ffbdfa0ce65bbaa572c02d30f134df1b3fe09ccb47c022f85480c8f688e4a7ec7dc42ecc09b30842b369d7a0c699990", 0x55}, {&(0x7f00002c9000-0xdc)="7e14640eb0187e28098cdce1ea2e09ea746e43868231632f648e1d69065bb1108aaffd6662c7de1835980e8f3b02d61cf0984577b20999e7b3b74d77eb826e8f34db78191f79171f1858367d78e591cd5d25158f22b565ef3e8defe949ba41598c911e942580114f7f449bc3c68a655911db20cab9d56b196a5149151ced14d14e1b10f0d35b9eec4e046b6f0f3633504537eaf662d4529f4ca585a6c01fea49316ccdf1fbe14b63ea8614d6f1cc3aef468b8690e412dbe41d769ee999d4aefef93c2d5d086fab695ec19dc2b89a1e35d6c0b345c593307a4f3fe932", 0xdc}, {&(0x7f0000faf000-0x2a)="e924e80457d85eb931860182a9abda8f6e4a6f0bae772f2d8ba382429fe04c080a7a4b21778085891452", 0x2a}, {&(0x7f0000275000)="98508fecf788da03b4ffb1cbcd0a64371ae43d61a213c196e4de6bba2789dce8aebe00509818621e1fccc4bee665cbe6eb1307ae8f639e4dea2c6d0a76d34843e7d1419225e2a560", 0x48}, {&(0x7f0000011000-0xd3)="72fec31c4d03042b359e00265aaaddb5007c5a0692939d89a10e4e309e8b0adaecd413485446ec78c5315ff532b1c68124fd6ce86a51c3c7711ce858fabd80bddc35a0ac6ba3330027d9b21c3449498b8e3c0d36ada3a8b74f825609f743cbbbb5d408a48c4886849c80ed19fd48aeaba8f35b2a3b3e9a32f5efdba7f6f2d84b5f8594f67628eae9727c1488222fb55b77556549de4e94d7f184af8b8e3511c4f982549bc4a0a4cdeee6d88eca3c8def8710dec329e3ec1fd9f1253a8bc5fc844c80b6ca9ae0d6bb95026a72b0de529932c50e", 0xd3}], 0xa, &(0x7f00005ca000+0xbca)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18, 0x80}, {&(0x7f000061b000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00002cc000)=[{&(0x7f000071e000)="21b181baf9fc2fef6bcc0ae7f4e8ac5197", 0x11}], 0x1, &(0x7f0000d08000-0x40)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x40, 0x54}], 0x3, 0x4000) sendmsg$nl_generic(r0, &(0x7f00006d4000-0x38)={&(0x7f00001e5000-0xc)={0x10}, 0xc, &(0x7f000089e000-0x10)={&(0x7f00002e4000-0x20)={0x20, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@typed={0xc, 0x87, @ipv4=@multicast2=0xe0000002}]}, 0x20}, 0x1}, 0x0) [ 103.338642] binder: 21398:21399 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.368081] audit_printk_skb: 24 callbacks suppressed [ 103.368187] audit: type=1400 audit(1518588906.572:103): avc: denied { ioctl } for pid=21427 comm="syz-executor1" path="socket:[45031]" dev="sockfs" ino=45031 ioctlcmd=0x8903 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 103.409321] audit: type=1400 audit(1518588906.622:104): avc: denied { getopt } for pid=21427 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000001000-0xa)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ec2000-0x8)='./file0\x00', 0x0) r0 = inotify_init1(0xfffffffffffffffd) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000fb5000-0x1b)=""/32, 0x20) 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44042) readv(r1, &(0x7f0000005000)=[{&(0x7f0000002000)}, {&(0x7f0000001000-0x8d)=""/141, 0x8d}], 0x2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000009000-0x12)={@generic="94713c452d8937e99c46ce5daf220556", 0x6}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x99) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000008000)=0x4) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f000000a000)=""/224, 0xe0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000000a000-0xa0)={0x0, @in={{0x2, 0x0, @rand_addr=0x7}}, 0x81, 0x5, 0x6, 0x6, 0x63}, &(0x7f0000007000-0x4)=0xa0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000009000-0x4)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000005000-0x8)={r2, 0xe05e, 0x1ec74dc8}, 0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f000000b000)={@common='vlan0\x00', @ifru_flags=0x2100}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000005000)=@known='security.evm\x00', &(0x7f0000008000)=""/209, 0xd1) socket$key(0xf, 0x3, 0x2) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r0, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(0xffffffffffffffff, 0x0, 0x8000, 0x4) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000028b000-0x10)) nanosleep(&(0x7f0000245000), &(0x7f000072c000)={0x0}) timer_create(0x0, &(0x7f00005b8000)={0x0, 0x26, 0x2, @thr={&(0x7f00007b7000-0x4c)="f7eb900bf673563088e1529b7ab46cda2022e510d33d2b5d756966e2354b8a9278233fb977eec4e70be5bb59a7b6670916430340255c74e361ce6504c02abc5f1d3c7070a4714090eacd7524", &(0x7f0000cf1000-0x86)="7f8271a9910afabcc8fcbbb375ac6ddf2c5547a52020193c88dfe7c16f0112928187a7f7ac5a72d5735061ced1cd4b430c1290b25fc41ce20462f62aa928486b1ec19887c9c1d470becd3c2c4e0531fe009ce86d25d6601f4345983961b67ee50b6fa83b4143371b9c06668ff9d817ea0651b38d8e93e14cf34a75690ae54681cc94ff5ab39f"}}, &(0x7f0000103000-0x4)=0x0) timer_settime(r1, 0x1, &(0x7f00000b1000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000096000), 0x0, 0x0, &(0x7f00008e8000)={r0}, &(0x7f0000048000), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000933000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="010109070007000000fa000011000200dfff0000054e0000000000000004eb00"}) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000d000-0x18)) mkdir(&(0x7f0000027000)='./file0\x00', 0x40) open$dir(&(0x7f000088e000)='./file0/bus\x00', 0x4a3fc, 0x0) syz_extract_tcp_res$synack(&(0x7f0000b31000), 0x1, 0x0) 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000000)={0xffffffffffff7fff, 0x20001000, 0x2000, 0x9, 0x8, 0xfffffffffffffffa, 0x140000000000, 0x7, 0x8, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) socketpair(0x11, 0x2, 0x6ac0, &(0x7f00001f0000-0x8)={0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000260000-0x8)=0x9, 0x8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000b39000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) shutdown(r0, 0x0) getgid() connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) close(r1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000252000+0x86d)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00003ae000)={0x0, @in={{0x2, 0x1, @rand_addr=0xf83d}}, 0x80, 0x3}, &(0x7f0000f2e000-0x4)=0x98) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000abd000-0x10)={r5, 0xffff, 0x4, [0x4, 0x7f, 0xdad, 0x100000000]}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f000054a000)={r5, 0x2}, &(0x7f000029f000-0x4)=0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00008fe000-0x5c)={{0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, {0xa, 0x3, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x800, [0x4, 0x7, 0x4, 0x6, 0x3, 0x2, 0x0, 0x4]}, 0x5c) getpeername$unix(0xffffffffffffffff, &(0x7f0000bd7000-0x8)=@abs, &(0x7f0000360000)=0x8) accept4$ax25(r3, &(0x7f0000165000-0x10), &(0x7f0000c16000-0x4)=0x3be, 0x80000) 2018/02/14 06:15:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x9, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x4) futex(&(0x7f000000d000-0x4)=0xfffffffffffffffe, 0x0, 0x4, &(0x7f000045c000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f000099e000), 0x20) r0 = socket$inet(0x2, 0x80000, 0x7ff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000911000)=""/4096, &(0x7f0000f5d000-0x4)=0x1000) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000a2b000-0x10)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x80000) getpeername(r0, &(0x7f0000f90000)=@ax25, &(0x7f0000d25000+0x268)=0x10) mkdir(&(0x7f0000635000+0x43e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f00008da000)='ramfs\x00', 0x0, &(0x7f0000e24000-0x2)) pivot_root(&(0x7f0000594000-0x8)='./file0\x00', &(0x7f00000fa000)='./file0\x00') 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000c67000-0x10)={0x0}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000df5000)='/dev/hwrng\x00', 0x24040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000dfe000)={{{@in=@broadcast, @in=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@loopback}}, &(0x7f00003cb000-0x4)=0xe8) sendmsg$nl_route(r2, &(0x7f0000fda000)={&(0x7f0000f60000-0xc)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f00003fe000)={&(0x7f0000a20000)=@mpls_delroute={0x70, 0x19, 0x2, 0x0, 0x3, {0x1c, 0x0, 0x20, 0x8, 0xfe, 0x0, 0x0, 0x2, 0x2000}, [@RTA_DST={0x24, 0x1, [{0x2, 0xfe0, 0x8, 0x5}, {0x1, 0x5, 0x8}, {0x9, 0x4, 0xff, 0x15}, {0x100000000, 0x401, 0x65, 0x2}, {0xfffffffffffffff9, 0xffffffff, 0x0, 0xf4f9}, {0x101, 0x2, 0x9, 0x7fff}, {0x10000, 0x9, 0x6, 0xffffffffffffff7f}, {0x8, 0x200, 0x4, 0x5f9}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xac}, @RTA_DST={0x20, 0x1, [{0x6689, 0x4, 0x10, 0xffff}, {0x8, 0xffffffffffff0000, 0x8, 0x6}, {0x80000000, 0x9, 0x513f, 0x2a}, {0x1, 0x3, 0x1, 0x4}, {0x5, 0x3, 0x20a, 0x3}, {0x8001, 0x8, 0x0, 0x81}, {0x1ff, 0x1, 0xffffffff, 0x8001}]}, @RTA_OIF={0x8, 0x4, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x8000) process_vm_readv(r1, &(0x7f0000a64000)=[{&(0x7f000071f000)=""/161, 0xa1}, {&(0x7f00001b6000)=""/32, 0x20}, {&(0x7f000021d000)=""/94, 0x5e}], 0x3, &(0x7f0000f6a000)=[{&(0x7f0000e33000)=""/155, 0x9b}, {&(0x7f0000cd3000-0x2f)=""/47, 0x2f}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {r0, 0x9}}, &(0x7f0000e60000)) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00004f5000-0x8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000890000-0xf)='net/ip6_mr_vif\x00') sendfile(r0, r1, &(0x7f0000023000), 0x26a950b) r2 = geteuid() ioprio_get$uid(0x0, r2) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000f1b000)={0x0}, &(0x7f000052d000-0x4)=0xc) connect(r0, &(0x7f0000117000)=@generic={0x0, "e2536246f43039ce3247c3eba6a49dcbc921590dcc42810eec3852f2c62ff52cdb3dc384220dde7def73fb84a58ae6a867f0204fba7c868f1153fc107ecdb4c1d1ec89121321afda10ab1947e5532fcaa6f527e42db1700af409d7e5435559eb2c519f83d83f1df99ee0fd76eb267cf2e995b67f02115f64d5af81910617"}, 0x80) recvmmsg(r0, &(0x7f000084c000)=[], 0x0, 0x0, 0x0) r2 = dup(r0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000d9a000-0x75)=""/117) fcntl$lock(r0, 0x5, &(0x7f00009fc000)={0x2, 0x2, 0x0, 0x4, r1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000090a000-0xa0)={0x0, @in6={{0xa, 0x1, 0x0, @empty, 0x1}}, 0x7, 0x401, 0x7f, 0x874, 0x40}, &(0x7f00007d9000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000087000-0xa)={r3, 0xffffffffffffcd68, 0x1, [0x400]}, 0xa) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000a2a000)={0xfffffffffffffffb, {{0x2, 0x2, @loopback=0x7f000001}}, 0x0, 0x7, [{{0x2, 0x3, @multicast1=0xe0000001}}, {{0x2, 0x3, @broadcast=0xffffffff}}, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x3, @multicast2=0xe0000002}}, {{0x2, 0x3, @empty}}, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x12}}}]}, 0x450) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000b25000-0xd)='/selinux/mls\x00', 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f000099b000)={0x27, 0x6, 0x8, 0x3, 0xa88a, 0x3ff, "6821b6e6760e44aa1c9146134d98bd3bbea67f5f33cb569ec6a7dfe8df74619c7075f763b01c51e0ed419fb6a682b7275fd9ca0971e2a824acad9de085c5a6", 0x80000000}, 0x60) 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000d000-0x18)) mkdir(&(0x7f0000027000)='./file0\x00', 0x40) open$dir(&(0x7f000088e000)='./file0/bus\x00', 0x4a3fc, 0x0) syz_extract_tcp_res$synack(&(0x7f0000b31000), 0x1, 0x0) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000da9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000cfe000-0x4), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r2 = epoll_create1(0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000720000-0x11)='/selinux/enforce\x00', 0x18a41, 0x0) ioctl$KDENABIO(r3, 0x4b36) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000bd000)) write(r0, &(0x7f00000c8000), 0x0) close(r0) 2018/02/14 06:15:06 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 103.496698] binder: 21435:21447 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 103.504925] binder: 21435:21447 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 103.512799] binder: 21435:21447 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.525081] binder: 21435:21447 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 103.534524] binder: 21435:21447 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:06 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000011000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000004000-0xc)={0x60000000}) timer_settime(0x0, 0x0, &(0x7f0000002000-0x20)={{0x77359400}, {0x77359400}}, &(0x7f0000002000)={{}, {0x0, 0x0}}) timer_settime(0x0, 0x1, &(0x7f0000011000)={{0x77359400, r2}, {0x77359400}}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005000-0xb)='/dev/hwrng\x00', 0x10000, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netrom(r0, &(0x7f0000001000)={&(0x7f0000005000-0x10)=@ax25={0x3, {"8e3cda2db8ea68"}, 0x1f9}, 0x10, &(0x7f0000003000)=[{&(0x7f0000000000)="90332b27ad9f1a1f6867d7bc13d65eae291cd4b34a3bb2f4d0b0fcd59d2906e28df9fa5881cdc9446ac4b7ef9d65ab7b727e11b143ea7217e29a751a0742221022bf1b69c6ef69c8207c79683e30a97b940128c92acdb83df04f16a0da9d033c37ca8fd224fc4b2dd0b051722137162e44aef0023cc7d48fb711e21cc597a13653b012d3001ae2383985e9e95fb440213e1b77e2698c6dccfe6e55b85e5d1a798f04161f83cdac63fa56222e33705c06b1458aa42cc2787e71b80c0d80b6c430f0844271c5e70a43dc7d4ce4b748", 0xce}], 0x1, &(0x7f0000003000-0x210)=[{0x70, 0x11b, 0x7, "7f564ec5907f44144f7733cd55dfee7362cec712247995f3cd3b61688273543958c7d00105adaeaf042bcddd543f9ce35f5fede72f824d4bc9e805d2d09f683edf8f16193aaf2ae237e93393b42d8ab7d5edd04a8f4715d67d71964b"}, {0xe0, 0x116, 0x8, "c6705318e8601aa9715224b3f3666d3c5e234e219f09fd352b349bf57b7d05b813a346d774587838e73c6815b3a3329e51f52cd15985c467e8e070df9bccec811f5cdc195fbc142102b7ddc7bc238d220e2254a270721bf55b42157b0311e585a9f21f4eebada329c10a5ddffbcc16daca67fd8b3f29858a5c4219ce55b4d43b3affa411587e48a7fb2fd54ef1bd2ccf0cacd8a0244225efdead6a14896523ea515a9f1255342a5bf6a24eb4fde796d52a28f26c5b3991b5e8f565708632828c552d3bc22c672ddd8ba47e"}, {0xc0, 0x10e, 0xffffffff, "b118ee755bbf1a528cc235d8fec27f469bebdb84d80a7842672cb98f84a1680fc47641f684985579ad475864ba4cc403e59069ec4a270d25807c3bd3d365e6789446d11ef13fd25ccd45f971faacd0c926d1e9756f4eea4c2d018eb1cc4cba01517290690932591e67e98eee5ad74ccc04d6182ccbe2f67d67619c269fff29817c308ac9a64790dd9f078a4c52fd1d057444bf8610ceb9f361fc258490228a227833fce607a80ccc7d684dec9f13b984"}], 0x210, 0x4}, 0x4000000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) splice(r1, &(0x7f0000003000), 0xffffffffffffffff, &(0x7f0000004000-0x8), 0x2, 0x0) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0xd76000)=nil, 0xd76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x9) write(r0, &(0x7f0000d1f000)="1f000000f90300ff0000000120ce00000700090000000000010000000101006e9e0000000000bbffff74dd677293e251cfe3528533a5c57874172888529c20d6b46d0a03c583555e7022c7643cf24d930a243c12f4e10741aa0bb4b03d20c93c72dec7923e7ba268e475365b97575be928825d4f993059cda6bca8cc2cb9231db9454d7a746a3e065df4e73958cc722441f303c8e96ade921dec2c6beca9e700b044a8d9666ebad95db84ea7dcbfa8a5a2d8abbbf0fd372854387fb07b92", 0xbe) mmap(&(0x7f0000d76000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d76000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000d76000)=@add_del={0x2, &(0x7f0000d77000-0x10)=@generic="5e45224ab9f3f55be50096acfce5f383", 0x7}) 2018/02/14 06:15:06 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00007cf000)=@syzn={0x73, 0x79, 0x7a, 0x0}) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f000051a000-0x10), &(0x7f0000000000), 0x0) 2018/02/14 06:15:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000002000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, &(0x7f0000014000-0x40), &(0x7f0000012000), &(0x7f0000002000-0x10)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) fcntl$addseals(r0, 0x409, 0x4) 2018/02/14 06:15:06 executing program 1: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000e000)={{{@in6=@dev, @in=@multicast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000026000-0x4)=0xe8) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000025000)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000025000-0xb8)=@ipv6_delroute={0x28, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x2000000000000}, [@RTA_MULTIPATH={0x254, 0x9, [{0x9, 0x326f, 0x0, r1}]}]}, 0x213}, 0x1}, 0x0) 2018/02/14 06:15:06 executing program 6: mmap(&(0x7f0000000000/0xffd000)=nil, 0xffd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80801, 0x6) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) recvfrom$packet(r1, &(0x7f00003d8000-0x56)=""/86, 0x56, 0x0, &(0x7f0000584000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000ced000-0xe8)={{{@in6=@loopback, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000ffd000)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00006e4000)={r2, @local={0xac, 0x14, 0x0, 0xaa}, @empty}, 0xc) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000ffd000)=@pptp={0x18, 0x2, {0x2, @multicast1=0xe0000001}}, 0x20) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00004c5000)={0x0, 0x2, 0xe5a2, 0x7}, &(0x7f0000fff000-0x4)=0x10) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000793000)=0x3ba7) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00001cb000-0x20)={0x0, 0x40, 0x200, 0x7fffffff, 0x0, 0x2b73, 0xf62, 0x6, r3}, &(0x7f0000d15000-0x4)=0x20) 2018/02/14 06:15:06 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 7: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000f000-0x10)='/dev/sequencer2\x00', 0x440, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xfffffffffffffffb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005000)={@common='eql\x00', 0x0}) r3 = getuid() mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000f000)={{{@in=@loopback=0x7f000001, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x3, 0x53a1, 0x3, 0x7, 0x2, 0xa0, 0x80, 0x73, r2, r3}, {0xd2c, 0xfffffffffffff001, 0x7f, 0x0, 0x7, 0x2, 0x2, 0x400000}, {0xfffffffffffff68d, 0x5a95, 0x7, 0xa3}, 0x400, 0x5, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0xff}, 0x0, @in=@broadcast=0xffffffff, 0x2, 0x3, 0xa36339c752cb43e3, 0x4c, 0x401, 0xf914, 0xffffffff}}, 0xe8) exit(0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/relabel\x00', 0x2, 0x0) syz_open_procfs(r0, &(0x7f000000e000-0x8)='ns/net\x00') 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:06 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000001000-0xa)="ebbbcf2dde2130e68995", 0xa, 0x40000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80a, 0x0) bind$inet(r1, &(0x7f0000952000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/14 06:15:06 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 103.676954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. [ 103.713553] FAULT_FLAG_ALLOW_RETRY missing 30 [ 103.721555] CPU: 0 PID: 21492 Comm: syz-executor4 Not tainted 4.9.81-g1a93831 #33 [ 103.729181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.738511] ffff8801d895f6b0 ffffffff81d94e69 ffff8801d895f990 0000000000000000 [ 103.746486] ffff8801cd656410 ffff8801d895f880 ffff8801cd656300 ffff8801d895f8a8 [ 103.754463] ffffffff8166268a 0000000000002a2e ffff8801d92188f0 ffff8801d92188a0 [ 103.762438] Call Trace: [ 103.765000] [] dump_stack+0xc1/0x128 [ 103.770336] [] handle_userfault+0xa3a/0x1310 [ 103.776366] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 103.783348] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 103.789722] [] ? handle_mm_fault+0x117b/0x2530 [ 103.795920] [] ? handle_mm_fault+0x1fc3/0x2530 [ 103.802121] [] handle_mm_fault+0x1fd1/0x2530 [ 103.808150] [] ? __pmd_alloc+0x410/0x410 [ 103.813829] [] ? futex_wait_queue_me+0x3e9/0x5e0 [ 103.820209] [] __do_page_fault+0x5c2/0xd40 [ 103.826064] [] ? mm_fault_error+0x2c0/0x2c0 [ 103.832005] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 103.838643] [] do_page_fault+0x27/0x30 [ 103.844150] [] page_fault+0x28/0x30 [ 103.849399] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 103.856209] [] ? core_sys_select+0x34a/0x730 [ 103.862238] [] ? core_sys_select+0xa8/0x730 [ 103.868181] [] ? do_select+0x13b0/0x13b0 [ 103.873863] [] ? __might_fault+0x114/0x1d0 [ 103.879718] [] SyS_select+0x158/0x1e0 [ 103.885138] [] ? core_sys_select+0x730/0x730 [ 103.891167] [] ? find_mergeable_anon_vma+0xd0/0xd0 [ 103.897715] [] ? security_file_ioctl+0x89/0xb0 [ 103.903916] [] ? do_syscall_64+0x48/0x490 [ 103.909685] [] ? core_sys_select+0x730/0x730 [ 103.915712] [] do_syscall_64+0x1a5/0x490 [ 103.921394] [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000-0x30)={0x0, 0x0, &(0x7f000000b000-0x10)=[], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d004b801400b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a352ffb61fba5ea33823f4f692f0131697905e7a88f0"}) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000004000)='attr/exec\x00') mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000005000-0x2)=0x1) 2018/02/14 06:15:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x80005, 0xff, &(0x7f00007ba000-0x8)={0x0, 0x0}) mount(&(0x7f0000400000)='./file0\x00', &(0x7f0000cb1000-0x8)='./file0\x00', &(0x7f0000167000)='debugfs\x00', 0x2000002, &(0x7f0000fac000)="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") setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000e88000)=0x9, 0x4) accept$packet(r0, &(0x7f000040f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00008ab000)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00003e7000-0x14)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, r2}, 0xfffffffffffffecf) mkdir(&(0x7f0000637000-0xe)='./file0/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000daa000), &(0x7f0000eb6000-0x4)=0x4) mount(&(0x7f000095d000-0x10)='./control/file0\x00', &(0x7f00009bc000-0xa)='./control\x00', &(0x7f0000f66000)='mqueue\x00', 0x0, &(0x7f0000f80000)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f000091a000)={{0x3, 0x0, 0x9, 0x3, 0x1ff}, 0x2, 0x5}) symlink(&(0x7f0000af6000-0x10)='./control/file0\x00', &(0x7f00004e0000-0x10)='./control/file0\x00') 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000004000-0x8)='./file0\x00', 0x20000, 0x184) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000003000)={0x40, 0x0, 0x0, 0x4}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003000)={@generic="35a2ab4ecaae496302f365bd9c47b616", @ifru_settings={0x80000001, 0x1, @cisco=&(0x7f0000004000)={0xb6, 0x94d2}}}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000001000-0x20)={0x86, r1, 0x3, 0x10001}) rt_sigprocmask(0x3, &(0x7f0000002000), &(0x7f0000003000-0x8), 0x8) r2 = getuid() mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000003000-0x4)='./file0\x00', &(0x7f0000003000)='./file0\x00', 0x0, r2, r3, 0x6, 0x9, 0x200000) accept4(r0, &(0x7f0000001000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002000)=0x14, 0x80000) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00007d2000)='./file0\x00', 0x6000, 0x1) r0 = syz_open_dev$sg(&(0x7f00002b1000)='/dev/sg#\x00', 0x4, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00009df000)) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00008db000)={0x0, 0xffffffffffffffff, @dev}, &(0x7f000056b000-0x4)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f000077e000)={0x1}, 0x4) perf_event_open(&(0x7f000025c000)={0x5, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000c01000)='/dev/rtc\x00', 0x181400, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000868000-0x8)={0x0, 0x7}, &(0x7f000073a000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00001d2000)={0x5, 0x4, 0x200, 0xffff, 0x10001, 0xff, 0x2, 0x695, r3}, &(0x7f0000ba8000)=0x20) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000e39000)=""/4096) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000039000-0x8)='./file0\x00', &(0x7f0000022000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f0000038000)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000a95000-0x11)='/selinux/enforce\x00', 0x200, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000313000-0x24)={0x800, 0x5e6, 0x3, 0x8c, 0x3, 0x3, 0x0, 0x2, 0x5, 0x8, 0x0, 0x6}) connect$inet6(r4, &(0x7f000085b000)={0xa, 0x3, 0x1000000000000, @empty, 0x4000000007}, 0x1c) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x1, @multicast2=0xe0000002}, 0x3, 0x0, 0x2}}, 0x2e) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000096000)=[{&(0x7f00000ad000)="580000001400192300a14b80040d8c560a0600000000e076000543d8d8fe5800000004ca7f64643e8900050028635a0004fbf5100002000000000000001c04ed5dfffff5000022000d000100000500000001000f536e06ce", 0x58}], 0x1) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffff9c, 0x1, 0x15, &(0x7f0000f0e000-0x10), &(0x7f0000b85000)=0x10) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000ff7000)=""/221) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000f18000)={0x1000, 0x0, 0xf48, 0x5, 0x8, 0x9}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f000030d000-0x10)={0x77359400}, &(0x7f0000ff8000-0x10)={0x0, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x2, &(0x7f0000ff8000-0x90)) clock_gettime(0x0, &(0x7f000000b000)={0x0}) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ff9000-0x50)={{0x100000000, 0x1}, {0xbad8dba, 0xcd34}, 0x3, 0x7, 0x1ff}) nanosleep(&(0x7f00005da000-0x10)={r2, r1}, &(0x7f0000030000-0xb)={0x0, 0x0}) futex(&(0x7f0000ff6000), 0x0, 0xfffffffffffffffd, &(0x7f0000ff7000-0x10)={0x0, r3}, &(0x7f00009bd000-0x4)=0xfffffffffffffff8, 0xfffffffffffffffd) 2018/02/14 06:15:07 executing program 7: syslog(0xa, &(0x7f00001be000-0x25)=""/37, 0xfffffffffffffdf7) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000a41000)={@generic="7f44c83f5b63ce5156f28afc15e3c367", @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}) sendmsg$nl_xfrm(r0, &(0x7f000014e000-0x38)={&(0x7f00002a7000-0xc)={0x10}, 0xc, &(0x7f0000f9c000-0x10)={&(0x7f0000f8f000-0x120)=@newae={0x40, 0x1e, 0x409, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in=@rand_addr}, []}, 0x40}, 0x1}, 0x0) 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b00000-0xe)='/dev/keychord\x00', 0x200000, 0x0) r1 = add_key(&(0x7f0000b5e000)='cifs.spnego\x00', &(0x7f0000c80000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000f28000-0xe7)="1a633d9fe19e814eafc22ce8701cb49d9649ed094b4a359d9c5f2e44b4401f3f848d4a813e486de0baf115f09fb66d2b74567a585b6edc7f2a95a6e57795fd0e1fd50816a46a502423633a4ebe5b5c482c0412cfea6adf8b75219d471a7a9db3adbc3916fb04ac187defb889fa0c99cff3493930c852ec0c055ce6cef6d88a42fe7d953c8f825cf96ab1dbc8f11b693ab44d5b532d7d7400cca4e917cfe1214396e6487571c83451cddec81b5458ef837070b507eb334256d62e6f0668c5901401d1d45b7598e9cf90b0d8e9d3ab01f22dae6ea492b6d1f6ab309a0253341f01a7e841446736cf", 0xfffffdcc, 0x0) add_key(&(0x7f0000efe000-0xb)='asymmetric\x00', &(0x7f0000be1000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) setsockopt(r0, 0xffff, 0x8, &(0x7f0000b62000)="0927ed6bd97949ce5f", 0x9) sendmsg$unix(r0, &(0x7f000079d000)={&(0x7f0000de4000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000ea6000-0x20)=[{&(0x7f00002e9000)="4ed31edc4b4b7f31875538bb0a81d9ec9d1bfba18d26bc179b06dd027ea808daa331e33b98328f47a6af75922263315e07032719146cd3a7f91d08f54e25c4b0d4522181f3edb35207a43d18f7cf233656840403aa6212fb36af8a582d859b258f35e5c8963b76feb0e5ad7d99315213716ee4b7cae787", 0x77}, {&(0x7f00006d4000-0x6)="d3dbb46c6755", 0x6}], 0x2}, 0xc001) ioctl$TCSETS(r0, 0x5402, &(0x7f0000ed8000-0x24)={0xfffffffffffffffd, 0x7f, 0x5, 0x7, 0x6, 0x6, 0x1200000000000000, 0x4, 0x20, 0x4, 0x4, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f0000443000-0x18)=[{0x5}, {0x6}]}, 0x10) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000e9f000)) writev(r3, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) dup3(r0, r3, 0x80000) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = dup(r1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00006cd000-0x8)={0x0, 0x3}, &(0x7f0000dde000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000215000)={r3, 0xfffffffffffff800}, 0x6) writev(r0, &(0x7f000013b000)=[{&(0x7f000055a000-0xdc)="580000001400192340834b80040d8c560206f8ff000400000007000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$void(r1, 0xc0045c78) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x1, 0x40000) r1 = dup2(0xffffffffffffffff, r0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000ae5000-0x8)) r2 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000d4e000)={{0x5, 0x80000000000001}, {0x4000000000f, 0xfff}, 0x4}) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000045c000-0xb)='projid_map\x00') open(&(0x7f000038b000-0x8)='./file0\x00', 0x400800, 0x80) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000e41000-0x4), &(0x7f00009d9000-0x4)=0x4) close(r0) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000008000)=@generic="a0ce67c5b6ff6e5021aa629d06f24e68") sendmsg$nl_route(r0, &(0x7f0000017000)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000032000-0x8)='./file0\x00', 0x1d1000, 0x44) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f000002a000)={0x399000000000000, 0x1f, 0xad2, 0xffffffff, 0x5, 0x1f, 0x81, 0x11, 0x1, 0x7fffffff, 0x1}, 0xb) [ 104.064348] binder: 21526:21545 ioctl c0306201 2000afd0 returned -14 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) getpid() getpgid(0x0) getpgid(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000ed3000)={0x1, [0x0]}, &(0x7f00005a8000)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000a8a000-0x12)={r2, 0x80000000, 0x5, [0x7f, 0x4, 0xffffffff, 0x9, 0x20000000000000]}, &(0x7f0000cb9000)=0x12) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000e64000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000a17000)=0x0) r4 = getpgid(r3) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000e53000-0x8)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000ae0000)) fcntl$setown(r1, 0x8, r4) syslog(0x2, &(0x7f0000a2d000), 0x0) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96", 0x1, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) bind$inet(r0, &(0x7f000088f000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000efa000-0x4)=0x3, 0x4) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0x0, &(0x7f0000137000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000483000)={0x0, r0}, &(0x7f000042c000)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000040b000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00008ea000)={0x18, 0x0, {0x3, @random="f98cff884499", @common='teql0\x00'}}) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00003d8000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000403000)=@fragment={0x62, 0x0, 0x6, 0x5, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000074d000)={{{@in=@dev, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00005df000)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f000033c000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, r1}, 0x14) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000093b000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000b22000-0x68)) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000756000-0xe)='./file0/file0\x00', 0x0) chdir(&(0x7f00002d7000)='./file0\x00') umount2(&(0x7f0000f66000)='.', 0x2) mount(&(0x7f0000cab000)='./file1\x00', &(0x7f0000f33000)='./file0/file0\x00', &(0x7f00003ec000)='ramfs\x00', 0x1000, &(0x7f00002d5000)) [ 104.116772] binder: 21526:21535 ioctl c0306201 2000afd0 returned -14 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f00006b0000-0x30)=[{r0}], 0x1, 0xfffffffffffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00004a2000)=0x6) tee(r0, r1, 0x1ff, 0x2) ioctl$TCFLSH(r2, 0x540b, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000548000)={@mcast1={0xff, 0x1, [], 0x1}, 0x1f, 0x2, 0x3, 0xa, 0x7, 0x9, 0x7}, &(0x7f0000209000)=0x20) openat$ashmem(0xffffffffffffff9c, &(0x7f0000427000-0xc)='/dev/ashmem\x00', 0x80, 0x0) 2018/02/14 06:15:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000dd2000)='/dev/random\x00', 0x0, 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000b72000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x2fd}) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000bc7000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00009dd000)={0x0, 0x0, &(0x7f0000c55000)=[], 0x0, 0x0, &(0x7f00004f1000-0x2c)}) r1 = socket$inet(0x2, 0x4, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000237000)) 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000723000)={0x0, 0xffffffffffffffff, @multicast1}, &(0x7f00002b3000)=0x10, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000a2e000)={0x6, 0x100, 0x3774, 0x81, 0xa0, 0x3, 0x6, 0xde, 0x7, 0x7fffffff, 0xffffffff}, 0xb) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000c85000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$unix(r2, &(0x7f00007f6000-0xa)=@file={0x1, './file0\x00'}, 0xa) sendmsg$nl_netfilter(r0, &(0x7f000037a000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f000068b000)={0x14, 0x4, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, []}, 0x14}, 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006a2000-0x10)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000ff000)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000d3d000-0x8)={0x0, 0x9}, &(0x7f00003db000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000e71000)={r4, 0x7d, "851a9dcf9aad286faac030e151367f5eaebe285f5b2ef415d4004d02a0888029318a529a1618848027412c1746530a94d0e68949f38cc15a4603b82bfb41a8a4c36c05aa1c46983c4b0f3295d1f06ed37bb7ffae38de099397761883da5b0333127b890a512dc26a6ac8816398a67ce5d9ab2885b0dde2c4e35903a9bb"}, &(0x7f0000a1f000-0x4)=0x85) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00002f0000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000a23000)={0x0, 0x40}, &(0x7f0000800000-0x4)=0x6) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000fc6000-0x10)={r1, 0x3, 0x2, 0x7ff}, 0x10) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000a80000-0x15)='/proc/self/net/pfkey\x00', 0x10400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000bc2000)) r1 = memfd_create(&(0x7f00000bc000-0x11b)="00e0e4c207d73a3d6f0b2ea77af83c2b3a4eec177f600acf78df514c67188c56c1f6e55fc5392a20166108ef7e477fb28a900825a87da145d7c030a8bcc39b21885c37f22d58ea26783bb5078f26947043ec76f571b0f66aa37d1d241656020000004e915f8e7e6efed7eb25e884ca4e1e8252c619cc6a9ef9d3e0773b63268f52f04209b246f1eaf80f38ac725da8d49c004b76762386cf668e952cd619489cc3468bd9b0c9e52211443c48d772b302088bc659f3bce4ac1bc491d46c6ef26c8749a3daabd2242e40e92fdd196cc89a6196990ac56d294eaa5ba06bb0bc0ef54a443a63d2b67f4f45a3b2340b8ee068a3ebf5e5621c5eef2e93310a70c719bd5509945fdcb0173c51ce067f3568a91854f01f294d1b5c7d99c7ba", 0x0) mmap(&(0x7f0000fb3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000fb4000-0x97)="99", 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r1, 0x0) mincore(&(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000fb2000)) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0xc0481273, &(0x7f0000007000)) shutdown(r0, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000002000)=""/4096) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f7d000-0xc)='/dev/autofs\x00', 0x20001, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f00006e5000-0x4)=0x4, 0x4) r1 = syz_open_dev$sndseq(&(0x7f000036d000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f000092b000-0x58)) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000002000), &(0x7f0000002000), &(0x7f0000004000-0x4), &(0x7f0000002000)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000004000)=""/23) waitid(0x0, 0x0, &(0x7f0000003000-0x7), 0xc1000006, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001000-0x108)={0x0, @in6={{0xa, 0x2, 0x4c08, @loopback={0x0, 0x1}, 0x4}}, [0x100, 0x6, 0x1f, 0x3f, 0x8, 0x5, 0x3ff, 0x4, 0x3, 0x4, 0x9, 0x1f, 0x6, 0x80, 0x6]}, &(0x7f0000005000)=0x108) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init() ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000003000-0x20)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000006000)={r1, 0x21, "062e08a6b8ac9a9ba4c60755c8edd38f749310d6c5ebeb84963b1c01d75cf2f9e3"}, &(0x7f0000006000)=0x29) [ 104.276202] binder: 21588:21601 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.290921] binder: 21588:21601 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 104.301203] binder: 21588:21601 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.309427] binder: 21588:21601 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) mmap(&(0x7f0000024000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000025000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454d4, &(0x7f0000001000-0x4)) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001a000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000002a000-0x10)=[{&(0x7f0000012000-0x3e)="28b45909c04690755124d3a9f7ebe91a123be3a6919d5ae04924cff53d9bebb070acfb66d12c84b4c3adce83cc12e562a4d5acb627519210a02c13ec1b79", 0x3e}], 0x1) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f0000029000-0x4)) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x1000000000101140, 0x0) readahead(r0, 0x8001, 0x2) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000001000-0x8)) socketpair$inet6(0xa, 0x802, 0xe251, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000010, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000543000-0x8)=@assoc_value={0x0, 0x8}, &(0x7f0000c3e000)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000e42000-0x10)={r4, 0x3, 0x4, [0x1f, 0x8, 0x1, 0x3]}, &(0x7f0000637000)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfc4000)=nil, 0xfc4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) getsockopt$inet_buf(r6, 0x0, 0x61, &(0x7f0000003000-0x1e)=""/30, &(0x7f0000000000)=0x30d) getpeername$packet(r3, &(0x7f0000b6b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000cbd000)=0x148) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00009fb000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000e5f000)={r4, 0x23}, &(0x7f0000516000)=0x8) getpeername$inet(r3, &(0x7f00009f4000-0x10)={0x0, 0xffffffffffffffff, @local}, &(0x7f0000f2f000)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000eaa000)={r5, 0x6, 0x4, 0x8, 0x1f, 0x9}, &(0x7f000089f000)=0x14) socket$key(0xf, 0x3, 0x2) fcntl$dupfd(r1, 0x0, r3) sendmsg$nl_route(r3, &(0x7f0000045000-0x38)={&(0x7f0000f71000-0xc)={0x10}, 0xc, &(0x7f0000ea9000-0x10)={&(0x7f0000a91000-0x54)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x2c}, 0x1}, 0x0) accept$inet(r3, &(0x7f00009bb000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000438000-0x4)=0x10) lookup_dcookie(0x4, &(0x7f0000ec7000)=""/168, 0xa8) flock(r2, 0x9) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00002a1000-0x6e)=""/110) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0x0, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 104.321067] binder: 21588:21601 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000bfe000-0x12)='/dev/loop-control\x00', 0x440, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00005ff000-0x8)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f00007a0000-0x1b0)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) fcntl$getownex(r1, 0x10, &(0x7f0000883000-0x8)) [ 104.351328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18112 sclass=netlink_route_socket pig=21628 comm=syz-executor0 [ 104.356080] binder: 21630:21631 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.356091] binder: 21630:21631 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000083f000-0x15)='/dev/pktcdvd/control\x00', 0x4000, 0x0) getsockname$llc(r1, &(0x7f0000d96000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000074b000-0x4)=0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000b41000), &(0x7f000039e000)=0x4) open(&(0x7f0000462000)='./file0\x00', 0x1, 0x8) bind$netrom(r1, &(0x7f0000817000-0x48)=@full={{0x3, {"6c183cb76cd54b"}, 0x8}, [{"1a5c95b3662ed0"}, {"6d3d782caa5b8b"}, {"7c4edbc504ea2f"}, {"84cd909f85a595"}, {"8b713c03849e79"}, {"c1b6d1033b354b"}, {"3a3dc38197db14"}, {"19ccaad1d7ecc0"}]}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000649000-0x154)=@newsa={0x148, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@replay_val={0x10, 0xa}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x148}, 0x1}, 0x0) [ 104.356100] binder: 21630:21631 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.356106] binder: 21630:21631 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 104.356114] binder: 21630:21631 Acquire 1 refcount change on invalid ref 0 ret -22 [ 104.362605] binder: 21633:21634 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.362616] binder: 21633:21634 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 104.362625] binder: 21633:21634 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.362631] binder: 21633:21634 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 104.362639] binder: 21633:21634 Acquire 1 refcount change on invalid ref 0 ret -22 [ 104.438052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18112 sclass=netlink_route_socket pig=21645 comm=syz-executor0 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000401000)="f4d6a2b779ab78310624780da3af2e730a6801e6") r0 = open(&(0x7f0000fc8000)='./file0\x00', 0x4400, 0x12) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000d05000)=""/98) mknod(&(0x7f0000973000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r1 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r1, &(0x7f0000aa0000), 0x0, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/14 06:15:07 executing program 7: r0 = memfd_create(&(0x7f0000e0c000)="76620000000000000002", 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x1, 0xffff, 0x1db}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000d7b000)={0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000345000)={0xeaa7, {{0x2, 0x1, @multicast1=0xe0000001}}}, 0x90) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000eb5000)={0x7, 0x5}) sendmsg$nl_xfrm(r2, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00004f3000-0x1dc)=@newsa={0x1b4, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@rand_addr}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0xc4, 0x14, {{'sha1\x00'}, 0x3c0, 0x0, "938777e1092893c8c156e35f6cce6e2be93f15e4c1793d4d01de8f03880a547e10d9f2c2795657d50c005d7818dbae34c91612eae3cc5a187a396002d804e7706cc3d6e16913ac76efd084d767a9983f518d946b52adfd57ddcffc6a4eba10520d431e4c3150604beea9bc0d49c991e56eb694f69eff2cd7"}}]}, 0x1b4}, 0x1}, 0x0) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x17) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000027000-0xb)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f000000e000-0x108)={0x47, {{0xa, 0x2, 0x2, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x5}}, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xa2}}}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000008000-0x38)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000013000-0x10)={&(0x7f0000016000-0x30)={0x14, 0x32, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6171) getsockname$netlink(r0, &(0x7f0000015000-0xc), &(0x7f0000024000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fde000-0x8)='./file0\x00', 0x0) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000fe2000-0xa6)={0x0, 0x9e, "b7522d81cc842f729f2fbd3127f6c632885d0bb32e583c4ddd0f34c63dae6747da2bbc98269533fe7848d98a1f6b32e4947a9b55e4513a555ec1da2c6bcc1e6fdf6ef9bc1fc2672365c4773ad6e219f7ff4c40232b0a03e9737a354fd6fdf488a7a6a997247b094e651b4ffc226301ff245d8793d03ecfd0598b0dd08d991fbcd4b88f50fb43c3137a7a4c20221fdd23ba816213341097098516f16cdffe"}, &(0x7f000034c000)=0xa6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f000027c000)={r2, 0x8}, &(0x7f00002a1000)=0x8) r3 = open(&(0x7f0000f52000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00007dc000-0x8)='./file0\x00', &(0x7f000018d000-0x8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r3, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000424000-0x8)='./file0\x00', &(0x7f0000102000)='.') mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000028000-0xb)='/dev/hwrng\x00', 0x40200, 0x0) 2018/02/14 06:15:07 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) read$eventfd(r0, &(0x7f0000043000), 0x8) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000733000-0x4)=0x1) pipe(&(0x7f0000884000-0x8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {0x400000}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, 0xe8) ioctl$void(r1, 0x5451) sendto$inet6(r1, &(0x7f0000893000-0xb4), 0x0, 0x0, &(0x7f0000e53000-0x1c)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) fcntl$notify(r1, 0x402, 0x1) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x7d) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001000)="57ab5873a4e1e7d83f23da6a2f751d4c", 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000001000-0x4)=0x2, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003000)="b4114869a321eefdaa9e6b0f8bdfc27ca3cdfa437205583775a92bf4ed027ab303ed2d7db55e13d842818770802f0bd20f986d244a2434b2df65f58fa118dfe1e3a8e9bece44e6b4057c04e9aab469c4999882237b8c36387979d108afb69701467cf3111ec7dbb39f005bbcf817ca5cdb720247844f69e016129d0763f3dffb2833f84b8d44b8122addf172eeeb553d9532abebf955be327bd02de2e4a86a73822987db192fc6c808d81ba3f0e2b48fcc3e44173402a5cd04d9b6c7383ca32c70a2141be6a9c508a4da9640428525a59a0340d2eccc2a228d641e43fdf6f6d39bf3af626e869bbfec77a72ac2cabdc744c552", 0xf3, 0x4000, &(0x7f0000003000-0x1c)={0xa, 0x0, 0x8001, @loopback={0x0, 0x1}, 0x800}, 0x1c) prlimit64(0x0, 0x9, &(0x7f0000002000-0x10)={0x0, 0xfffffffffffffff7}, &(0x7f0000001000)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000004000)=0x87) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0xffffffff}]}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d0c000), &(0x7f0000e33000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x80000001}, {}, {0x6, 0x0, 0x0, 0xffffffff}]}) tgkill(0x0, 0x0, 0x6) 2018/02/14 06:15:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000093000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000d49000)=0x5, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r1) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000b4c000)='/selinux/policy\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f000057c000)={0x0, 0x0}, 0x8, 0x5) syz_extract_tcp_res(&(0x7f00004fe000-0x8)={0x0, 0x0}, 0xffffffff, 0x0) write$tun(r0, &(0x7f000087a000-0x3a4)=@hdr={0x0, 0x0, 0x401, 0x4190, 0x6ef, 0x0, @ipv6={0x6bb, 0x6, "3db383", 0x372, 0x3f, 0x8000, @empty, @remote={0xfe, 0x80, [], 0x0, 0xbb}, {[@routing={0xbf, 0x10, 0x2, 0x9, 0x0, [@mcast2={0xff, 0x2, [], 0x1}, @empty, @dev={0xfe, 0x80, [], 0x0, 0xc}, @dev={0xfe, 0x80, [], 0x0, 0xb}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}]}, @routing={0x0, 0x6, 0x1, 0x7, 0x0, [@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0x0, 0xaa}, @loopback={0x0, 0x1}]}, @hopopts={0x33, 0x4, [], [@pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x1}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, @hopopts={0x2e, 0x13, [], [@hao={0xc9, 0x10, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, @generic={0xba, 0x89, "ef2316a59853649ef6b56b0c3097a7c20b8c71c03afbe2ba83c82e0231509cb04d29eb61baaafc06976f9e0abd0a3c68125a6e383455ea759f8489c9cfae11348c5dda0e14f50aff908c33699f99c34dfb16dfa3569218ec36f4f8dbbb85be812577d7bc396b657e02371c6c607ea581c9a44d2d698a51ce0af3e3995ce957e2e6ad9d125c866e3bb4"}]}, @hopopts={0x3f, 0x12, [], [@enc_lim={0x4, 0x1}, @ra={0x5, 0x2, 0x2}, @generic={0x5, 0x82, "9d34d0b108c3b04da79210d33fd047964a7230bf6fb0ccae696bb2cb31c97d0ccef36028d7e76e40c19a00613d2f80bcd15d194e804ef8644dbacd83d4d19c412a8428fdf1145a0bca8c150dba54f4db17d188bb4f91bcec5127cc19c23d3f6b3642f44f412b0b052029216d6d2baaeb313dd07788ca8eb94631d1b5794fa042e140"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}]}, @dstopts={0xbb, 0x8, [], [@calipso={0x7, 0x40, {0x0, 0xe, 0x100000000, 0x3, [0x100, 0x9c, 0x7fff, 0x0, 0x1, 0x9, 0x4]}}]}], @tcp={{0x2, 0x0, r1, r2, 0x7, 0x0, 0x19, 0x2, 0xd29, 0x0, 0xe4eb, {[@window={0x3, 0x3, 0x1}, @mss={0x2, 0x4, 0x6}, @nop={0x1}, @md5sig={0x13, 0x12, "56bd1f70139b582329f55c6935686ff6"}, @md5sig={0x13, 0x12, "4d13e37f7f59b2bbc052c188a3abddfa"}, @timestamp={0x8, 0xa, 0x2, 0x5}, @sack={0x5, 0xe, [0x1, 0x5, 0xdb]}, @timestamp={0x8, 0xa, 0xff, 0x5}]}}, {"52970df8a80456e55456892f4119217c087cf582bc01e652c069c41bbd723a34a1bc505431e92b91be6aff32159ad0dbdcc9c65ee42d54d7b605825632f36c4b9ced9a12925a00019401258aee099281e06a210a090c3e218001734661d1618dbdc0b6193071f774ae8c112c15d66743816aca81045bd33cd47fa1524ef456a87557dcdba0b5cd6dbd86c1a9"}}}}}, 0x3a4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000136000-0x4)=0x2, 0x4) connect$inet(r3, &(0x7f0000d38000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect(r0, &(0x7f0000001000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6784d5b407cee0cf2a345c88a3ddd32ee22497149389842f428e719a74271021d7bf1100a7eae3bccbee1e69cbfa6906cc051f5dfb46a7d81beb0c04160a78"}, 0x60) connect$l2tp(r0, &(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x2, 0x0, {0xa, 0x2, 0x2469acdc, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x9}}}, 0x32) [ 104.557232] binder: 21653:21655 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.574963] binder: 21653:21655 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 104.582500] binder: 21653:21655 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.592522] binder: 21653:21655 BC_DEAD_BINDER_DONE 0000000000000001 not found 2018/02/14 06:15:07 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000+0x9db)='/dev/usbmon#\x00', 0x6, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000a93000)={@loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, []}) ioctl(r1, 0x8918, &(0x7f0000000000)) 2018/02/14 06:15:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000001000-0xad)="a73deb4d1092cc3edde3b078909fc26c4482fb1beb458357f8dff2ee19e41dfd6f02a0a2fc38e1d1b4c9fa617915f3c8b92ad037375141a4919008df8dc6ddefa57c923e93ed55f475d8dbbbfef65e0f0ab77016b587e35693ce87dff47a7fbf51f344cd8fd15369e75ce809d05d37fa25cfd3d357f35020a205f5ccf39811719803c1770e175f28f5705f93120b133ab3bf3873727b74aba28fb6ee957b8a07347126144fb4844dd5ac9d7e85") r1 = socket(0xf, 0x803, 0x5) write(r1, &(0x7f0000001000), 0x0) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x101002) r1 = dup(r0) write(r1, &(0x7f0000255000)="2000000014001d07060e00000000ee001100e8fff608ffff", 0x18) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 104.611219] binder: 21653:21655 Acquire 1 refcount change on invalid ref 0 ret -22 [ 104.650794] binder: 21696:21701 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/02/14 06:15:07 executing program 4: waitid(0x1, 0x0, 0x0, 0x40000008, &(0x7f00005ea000)) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000007000-0x9)='/dev/ppp\x00', 0x181000, 0x0) accept4$ipx(r1, &(0x7f000000a000-0x10), &(0x7f0000003000-0x4)=0x10, 0x80800) syz_open_procfs(r0, &(0x7f000000e000-0x8)='ns/net\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000072000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000006000-0x28)={@common='dummy0\x00', 0x2}) ioctl$TIOCCONS(r2, 0x541d) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000005000-0x8)='./file0\x00', &(0x7f000000f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fchown(r1, r3, r4) 2018/02/14 06:15:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00008a4000)={@generic="bd6c8aa53497b8297f77bb5afbd2e189", @ifru_flags=0x1}) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r2, 0x400454d1, &(0x7f0000001000-0x4)) syncfs(r0) [ 104.663641] binder: 21696:21701 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 104.671422] binder: 21696:21701 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.678431] binder: 21696:21701 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 104.687113] binder: 21696:21701 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000129000)={@common='lo\x00', &(0x7f0000b5f000)=@ethtool_pauseparam={0x17}}) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000184000)=@dstopts={0x6, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [], 0x1}}, @jumbo={0xc2, 0x4, 0xe3}]}, 0x20) getsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f62000-0x4), &(0x7f0000002000-0x4)=0x4) 2018/02/14 06:15:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0xffffffffffffffff) dup2(r2, r1) sendmmsg(r1, &(0x7f0000d96000-0xf0)=[{{&(0x7f0000d37000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58, &(0x7f0000836000)=[{&(0x7f0000b4d000)="7750d2b656778399bbbd993d064a7c48adb64439be399a40d78b5dc5ace9e71d376b98e0f365910833277813bfaa9773da7a6dfca1bdf66a66c9bfcba2c92baf4cf14246710f64a8166f8f40b52c0340feafb53fe5987e704741a38f83f0b87a3c1f271596f52b1e42c45a55f8c2dea998bb510bfd58c0aa2e0005d4515bc400936e97a0badd0f627783f8a6089c95176aafb4b629345ac474a7f053c6421d7a7179de511741e132f94a6c4d76ecce4aab2566e347a3af6251041e4afcf5fe3074e5212eab994cd291ccfad94cf8a3b128068f0511d8a013f2bdc0f5b8e179a4fe5695e1da5e08b61219d4e8a9", 0xed}, {&(0x7f00000ca000)="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", 0x1000}, {&(0x7f000066f000)="3a9b19f9f94dd8861a4a3777d738baf039dd88a1d4add7fb8d65b2171f6389462ec3fab29a1b4f012bc6a986c03394cd0b8803500f9c42f780c3e119aab0fe40e7036f62a4899afc275c949ea24af6e718228a26b4b53f2cefb8cf7211b4880c5baa502699c7452ea0bbe4a0634fbc9261e83007c4ab4a8525e45a17eb2e6eaa12d272e1d09317b7b4df0c58de0625daf65e5c86acd5510d1896e029bad8858b49ad8b516d04a9557b2100dc2412c928418fe8667061ad4e8db57d675e7273a5ac4052", 0xc3}, {&(0x7f00002a1000)="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", 0x1000}, {&(0x7f000025b000-0xa9)="b36942f8c6fae70bd91f87c94bd3b69a1ebac499b7a3efd364f1cdb38bf01afbb33e24f00b6ed9adf24b9a2cea3bf44dfb99fe4c8315b7dff7c06c3942b662053db171ea3442b32ee3fffc6f429827c2c8b8e463151a0db54f13dff87322b0bc806fc8bec27a915d7ee5d0143ee725ffaaf126ba57b71b480fd8f3cdaef131e89529d7dcfbe86a7af0ae1fa5c4eca28f1d4e6e18a902a3400c12ff3089c8495413bba1ba72d3e5b97d", 0xa9}], 0x5, &(0x7f0000725000)=[{0x1010, 0x10f, 0x8e, "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"}, {0x1010, 0x10f, 0x7fffffff, "77c05d1085000a52f8814952371ee238960f274aab60f8a6d0ec281867ef40cf29a976938652c7ecdf378cbef0fb6fd7f745eb7fb8d3ef8e29306eaba8704fdbe2b15518f05a2076dd14246e12f4f554e7217a2fdb9622194514c2c3e360e4af628022fa4c8390dc284e2fd1a37121eb9d335f056490f88a1f1bf40ff106e62028236986e0a96af255478d330c59074da9db038d2758bd6e0c208fb0a749ac0a9bfcde8d18d72b71f4f12ec36e0a3a0601dc32add032d406b107746784cd1fedb3900a070f0ff4029a50f27bad0ee3a33b01bbe519edd5a6a2dd132eb707171bb1ed209ca765d09ad503587cd6577f6da296ebdd97afe6bcd37a652b56ce73867000eee673e5a190c4c7dcc3952c8a36b491e292fc921a3d5a9e3bdd323930332b05e3c32f0a61270e9a100a45d7df531d6ac26fba18f6631fc2b3e6a2c91eb9c8ffb2339a9825db8b39aa9e6f61699c7b8a8075fcb1dd8b3b9ae4051ea91899b070404a90dd89c01db22a2e2c16a8fe8de0815221ab8a6a201dbc3256e9e1026e34d9febe859c374f91c987c9e3feeb411094ca27ef8b7e36bbd704808de306adab7ee509a1e9f6278fca017a3af50be6b065ae17b1537285505c028dc0cfac8955b1a94c4513ef54d909bb840de0568f9a5754243aed7a5207372d4ea8c6b92791d81c5867393c0cd38603c32aa0d40513c697b27a36e3a5f2421a7f30b37893157ad9e618922f966aa8396e0a13bfba516e96bbe71d745b60155fb94839d73cacb729f57a6e508e29e5c88acd8a98247ebf4aef3d678c880f32c8cd221b33b0e38e0ec462e9dbd7b52e42bf6337718a67e34601f0838db7eb37b817a492e05dd89a06760704d50c85ec1c2301e2afa8d8bbebab898459ac45ca911d6ce5d1a7047308a4e99869a2addcad2ec6c1d84859b392d2ad13c567bd3d71f819bfe09c97288424486568925b2aeaf875e1cb2827da5a7c2bbb2f0aea52ad615ee9588c08abb131a88e7bc1b4210074aeab6ce0e95b153944cf330a48e9fac16b2e097af82138fe8f2d42c1e03b438756f66f942a1e007515d5465c9c832d4d6f353cd0e3a1df6fddec2bd5d4b5b025b936b455c6c24b0cba1f43370ad22c068ef8c650c4587da5b0eab7c54ddbc36d9ceb75d8f792d117ca20102ea1589dd0a1e83c86451a66afc0d73d8fe18b09204c90bdca9cc126beab1ebc553de0851133e9a871784e572ba281485594aecde5a2da4772406a969890445e7447631e5554340eb48c9beaf50db092f3bd4f1069fdbf033c6a742d219b4cb82c56947e774c808ad8fb8d4e2bf7899fff115bacd261b53a6a1d0d253502d3a10277604894110e913b68726b3805ecd8e134197ec4095d77380d5bcc5dbb13ae997ee778ea56b11aa1b9e71a9bd67c1ec4d4d0b2debf566f190ec34827890e64fe99e5bcd06a5ca31b131028a25e0bfdd5279dfe67427b1cec3692b990c250717b31d64371f466c00a066f0f901faa731d40c6563ae6e48761a8197db8932a3dbffc7b2a6c33551306b114ea3850072de4b4a41bc87075ee504ddccce1e5a37d2fd1fb0a3ad3c523d34475a73e50dbb427fd764f9024f2a4f9e00f0a3e4817dda86af468151e7917f42a695f1106e1d2885a10edece0ed598c74d68b285d9939a126861d33843070e6cb7839900a76236e5b9854e2aebd0bf1bb418e3eaf84418a37ca7351654113120423832c39d7df26ef93844a77c0b76af6531ef5bc5f991dabc537eba9db057bac15ffb5f625b55c752b153eab2ff974554cb9c8af9be4dc0145c8cc9da0f3074292e7908df1a1bf2884de31b13584cbf66d8c545d8d16e828d5ff5c519b082498e8c3611e3e11269c324bf21d6146a9651ca9546053b5bc063b88c268ef5f7f82e0170ce5d5ec1efb3f028062a3ea3d25b289000d9764ca68e2f18bfdac46d2f22c4ca9ce107951e58221c470881ae9969081625d9412bff92a7cdd88eb4269515eb4ba2900dc2a832e62050193520f86fb802a31170f74e1f7e08fd51d739ea6da854c009a281a2d2fa76ac342fb0ca7f136e4aec7cb604fe0a987cc562f8340126c31c0f7d9d63904af152cadb4537d9bbb1470984b27890de9d97e85754405e1492ba64f53576dbc2e34aaac186fefda369a02ae510cf0f4a362bf3607f401a377b1514e9bf537ad182981d70a101467c8ea642ff4181f7118f0404371ed3e62a69241366f4a01a79909bac8d3168065457f74cdd78f0d141ca1a3370200907fb780d07f17898db9194819d8096d42cb08a01b49d48603b7106ddd06bffd4d4d55e80c0a6c8b67674a340719997c64abbd0ef93f8caa2829f3162a31922159a521a10dd1b15285506462c20f4cea82cf1748e566bfd8a6ad9a965b149904237134d1315ffcc419fcbf5105c36ec07b73bc6bef7ecaf91638697b2fe6163f824f2f86c062eec9d69e71ce7a705010934a50b5499d9f44caa21acd8f43a1debddcacc2f64321a53877fac9c6d712ea1a910aa6c4e0f179de8befb3641b93e3e7286a4110251daca444d7511fca27c23590e2263592d9d2c0abff7e6b95ea0f33989302c14355e3aca4bb8fb0f8ad67405c5862f1db541b10389242e5bf43802c7f1b3ca42a2a4dbb2353c7d09cab574c4947671bb45b18cf5585b7e80ddf4b002a5b9691bc08fc0ae2e9c2a361d2b56bdaa2b27622f3956067c49bd00f3e3264270cdc4d0b6628dc731b107871daf83d03fa81f4c38eb88d0d13cd52218fcecb99dbfc1ed284ba18a92efd3a4552beb6ad724268962965a60b88bdfe4c9560edc71d8a7c68cfb07c38fcda034ad0acd003b28d1ad222e8f3537cf9b9bdd9a26f470579b525c822732da71c61e15228d93e07deda06b8029d1906cfe73a76b9c5a0dd0a41ecfb1ea985f6b2f660273ad41d0d1908dc866c8d4ecca3a84f4e68d4a2c1a21d0f6913d66fc02b2b1fe967abefac049b0d6bdff1957d3a15263cb3498a88feb24432c1d73e6c3deffd2e335b621a1debf6361b415e8512fdd790acfbc3fb99b5b6aa93c6e77f078ff21df4b3c914bfc586d5286d23d22905144f1018116ce3e8e56df43cf9717e63a326be97aaa780aa259b733df915be487a726a78f583cb010c4c1b72a7552ca65b8fd299d339f746f259887228160b04f943a00c0b967e4dd52191ccf0408fd798c8f90baad616ca0813f8d96f4e270b966b2a52f1a5bf5ecc25a73958b53f0905a85b71868febe074fe6ed00ec30231fbe6769a0e10393ed7cad1fe5d6a0b9256fbf12c810ccd880be61157120125990c9fa98a03a4cd7cf6a55d0afe1d4714f85fe1b225570a3fbc5434b5f13d506fcdfda64457b2a248bcb2a356eb5f43122710574553314ddfa3be104dc6f2d15882e1165cc5a42b4208a2db6019b0a4dc259ac63dddea312c8f896b3ec566eb9c7902518c47cbd6031b6981cd29b28322b37c8f6d70745ebe3c007d2ccf3c563da724523eb2e74baad472569690c1e65af3d2bfb4bf5c9f7f5c241c70f85e3d3986a78ffcf569cbb34fee636a5beaba6dd6afaf7aaebe0ca0406b82f8908b109f16ca2d21188623223031f06bf580c699e68fa92e4d739a83ec85b3b54c26086099d473f54d83adbd642f1718fe0bfe4883ba9c240c5079cf673c70dc861b695828b6e8b9490b883658bc624953ed04706ab970ad3d91bfa09edf99b087f8d604ee9ace29b79e0c3007dfc7615c0d9f32c2f5d7e54c368da800be50bc5dba477e88e1d5f8235e723adac267964379e83180bdb53469dfac07c974302a2cbc59f42a8e6e69fe80074095a25fdafff1920a86e1ad41384b66e36efa5b174a63c8a95e67c61af66f26a3f0fed7bb990d2c546cda7fb559cfd241e1efb4b51ba3bebeeba0ce83af5912562aefeb04f0ffed30577a5a5811b52f5288785c863c85f0cebce7c7c1e791a7f10d34a87c690fefb4c5d561d8c9993048bda46ee981b3c8410c50079eb21874a6cf08f85a0b79cc63ef6b6d472f44c9a016eca1402f090ff78c23c7a8ba8a9e4ef1f809611c16f2012122c2928f60d6914a5096d2987bf99bdc950b6152fdf08cc64619f166c602dcad490b55b9a27e812f76afd5255f3f9a183890e6f585746473d1bdad27694d9d797a0d5704f0e67e20eb197a976913f5d12948b9d9365ba3ad267f2f4773d151540b4093c008bfc495c95751184f605f082c2504f4db942296125146778e75f0bab5ac194b434eca61014c9eae6a65ae35833745598412dbe4bc4fcd65c07fe458b2ddac6de085a1df952eb16adb9c6632a906a124e7b84abb0a458539bfa7a34b4c5438364650e3f28b6177b8c04d96d8171313c0144304bb143bffaa670ebc14cb05c7fa5198d1cbec78f0b949b3520a7f6863b1faf7188e7a56fc2ae976e6a73c9e7566c62bdeba73f19aec2cb608cc4e43da18b38206c33abc8b525e15df2b85c359d5ec80dd1279fc66176e279bb0203e59d86660e3b0468faee123a8c255b55d9c376e54dca1e3ae44c891c17554613357628d273f3a83356d689cd97dae41d6854a98d7fa8246d707281d78bfec2234f832cd39c7a35d2ab45eb7822355e011713b818494e1e6cfae01bf0cfdd18faecf77bd7d288cc9988f18969be56cebb7a025058cdb4f15e67c8abfb5a972c61bdc2c74211a443f702ea2fce62248dfeb3fed8acb274416228fe80169060a11664ba75ce941e2ca47fa85e415b97158cc6de3925625f470c957a26926fa5ce34fb5200da8c2c1b6f069f0a6790bcd65d87a18e04c8090ea0093811bb832cd6ffd86070db8391362ef5baadbe07bdd2d270c7349fc40ab31243d3e1aa02130322475714a9350e50ad407dfe4d117071d686d9da10777cf5186beb7f11b34e61c5d1726d5bd46d4ab45cb5abb93e29716f4c3b8391e718fd155cee86138b612baa329823b259d419b373dcd2afa2508f878ed9ab14e683e533350149d529a5be5c607f7afe6f7669e94f7174f5c8678dfe6b2c05e3c9e14a5442ff82b8b6d0fb4a591d780a83902cf442eef5b1009b5b35adce4ec39b7e39b90887d035cef4f6ee4df1a81ad613a955d9a1e5df223bbb72ab18ef5264b422e68f565ea934b3da89e26f1f56d3be1443d2f18224e7eac3a8fbc96a5ae8758ef685b458d0dacb5d406fc62d12a088ad66f3a5329bf037f22a733cc57f1aac474daa71bf772b993f141e721b74db755e631cfa54dd6b5ed36fa1fc7091b5e3c5efa8d509337dc967081196894ba95f1264eb1a72ed7c2718591c4dd52b477b9c64631f810c35f31dbf10c773b40e1ac4b5ca82dfe41633cd6137815031837173d024fabf4c6aa4647515054fb94ffafcd011573bc60a74fb981fe754c8b87db15e25d88d8c4b0e8ac36493fe89d77214a12acccd2a93aaee63af02aae7b2b7fd9d66c4c681afd2ceaab8caa1eb3dc140e50ef40ff26b2d061df20619f168e4709445e592b5bc3b36987a26f0c1eb315dbbe808c01d0ff36f549c32b7ed0bd50c8c0c8efcdcbc145c816bb31b7bff2c7c91d0b582caf558ca013f4872df86f1fad66583cbc2fca15e56d4e90b598d4740b6f5f8c31b1e411605e247a78dc42281f3dd439cb4733983ceb1a2c6fccdc152dc7eb34ca9f05426fea99f9b5154b80f2bacfcd6061a5316e0b99d1968cc7daa821f00dd88ca18d59e86556747beb13d1899ac3cd207196604c84c3a953fd42eb44e2347d0bcec8aeb5eef25b726450368bb9068ff147c3acd0a8d33392603320e03c181cba5cc7dc6fef835e5a2d487718fb0e0488bbf452"}, {0xa0, 0x119, 0x40, "23f5a4d7463df986f230485f648d929a82979768d7cf47967d2cdc015badb6b1d3a39a1c4701acaa3258590ab6ac186edfb4dc862043d3b8d38c94f6b023ffd681749fa5fba76a6fa38e58519b0eb41cffc370802e75358e33057c4784b62ee0eb813f97fc44b701db02dd01d44a207cee8caf865019e8b3be86654f56f6874af46e27f981c0dbf724cc7d880d"}], 0x20c0, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f00009d9000-0x50)=[{&(0x7f0000baf000)="2c0df88c63e0c8d9a2d7f1c340513cb4503de780921f92cf400a1ca32cd0d245a02fe799820ea7907f138dde07905b3c7995756c5aa23e49c71e83adf1638b9ee733e7de5162cd5571aefb87ab4b267952d84ddb7beb38b8e9e72ac3400678a41f45f94f68c59208cb25c0438763f9c907c1985df0d36b47f52c41d2f835bf315dd221ee39e93b1995de235bce72920f39893372669a7fdae45c2f9e23cc7c6b05d78955521dc5eeccb0cfbeff37ac630142183efd026b202c50195b4784b2df48929b3566ec60a391e1cd8cc4d63c49dba0b011f2935508e20608636a16b6c05e8dd51a1fb3e3d572b2ceeaa6038647", 0xf0}, {&(0x7f0000319000)="8fbd84e32a3980cdbfeeea88e039289703f5ec3cf37a6494dd4d884868ca285678c53628328d8a97b55cab13dd6e9864a480f0f3bb82f9e654ef1019d9fb2fcd1a4a93abab835aba", 0x48}, {&(0x7f0000bf6000-0xad)="6015719c1129e2c1d498f97156456eb493498483d1d8ee4244874f85f4486960b1da7d0944201d3f5ba5af54d8023fe2121ac0fe25de8c8ece1341c94f3eab3b3fa42bb8822135e788b336496b4beb64621236fc960bc26912b5bc0192734b51a6eecf2d76efc967ba89cb6b43946613db1211476fd5abf7ff1b7ac6efc2079888a662f3a643666a49a04e77cc1143d52436b7fe83c97b60286309f1b23da4885662e5952e7150e3b2b396c370", 0xad}, {&(0x7f0000495000)="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", 0xfa}, {&(0x7f0000cd3000-0xbd)="fc656f12cd7f82d67f132e7598005ff861bfc15b1ac57585be6a9699bf10903bfcaedd5bb399e7dd2cd63b5fd121ccfc4288ff0556e83fecdfd4e33535bd10893e68e19b633bd055a51c5bf1eb55781c9d6bc7c6b910f84a3a3eb4e77d89d1aad4e1c0256e4eeb543b6d71222769c886da5f372270f1b27b7086a3aaeb1d8f986fef8284a63d6a9e3a35374d21f3ea44e77a00cc41ad33c9db6692b3532d564ab072fc3a50767427f260c02e75343618365894e40b14528eeb6e075608", 0xbd}], 0x5, 0x0, 0x0, 0x8000}, 0x7}, {{&(0x7f0000a78000-0x60)=@nfc_llcp={0x27, 0x400, 0x7, 0x4, 0x2, 0x9, "ceb23a31c4432131fcef7083f75b738b4159958e4677fa5ab6ffd982ba5479f969104c3d6ec6caeb7254387988094e42c2a895897413703fd1946d521ae1f0", 0x84d}, 0x60, &(0x7f0000274000-0x16)=[{&(0x7f00002dc000-0x39)="3554f9e87f35f65784fac6517a667f4c49dd921188be8c1ff51e6cda317f16ee661815ded2fb919972f02cd5bd7d3f96b57dd2bcac3abb8315", 0x39}, {&(0x7f0000c92000)="f710b152", 0x4}, {&(0x7f0000192000-0xbf)="efe14ed552d498fa4914ca1ab0a982c7a370284cb5f190ccd038ce93b8aa1fde71363b8142d9e5e3eb3695a5f8c3b4727a86f2b711a5d7f2f3af8ba6f0ce630ba0631bd50a32f2a78aa94df15abe4a08451493ba8c2051831dcc7b39b13525416dba03a4533e82ba105ce9e27977c182a28cd1a174f6369e21195696865cd95d8a8c32452f29187172357395d768d2faecfdacbdb9977377555d744e5ce56a8fa1d1d1d22b2ca5849992522582f5edb8ea148f0c8fd88ea16064dba4b13d27", 0xbf}, {&(0x7f0000ef8000)="eb033e0f43fe23cde4f953777712dffa18237622e5dd7ed960b94a1c5a8d7ea7b101ec6e7a478b76d35b89fa32b287ef83f2c45520146c7bbccaf67fc44560f7da97e123e6edb27e1985b90177e0532c3a1485da1df8ff506db90b050b51c3aff0", 0x61}, {&(0x7f00001f1000)="bf7f0e233c7bdcfd023a52d2301e2aeb7d2282945f475b4618265f912c2d6120aecd5a96eae5009a3d45fce46d17104cf7dd784ee27835961860ca8befbe5304c85ba41f6a29e8bbd0e601714c9576ee9c35a6cd0c3215890bf2eb6b5e9082d9840bbb92f293e3201751447ba65ce03dca9ee984993133daed08b7dcb3ba4a895993595915bbc0fad5715ec57fd403daa26b6f", 0x93}], 0x5, &(0x7f000064d000)=[{0x88, 0x11f, 0x1, "ca519c93b2135bf4ae2d76ec61b56c9c6f8bf52abb472784358eafc6f830ba4f2e3122dc15ebe6ccc9ccc71fda0964e30f034cb29ec473be2422b68926f414cc361dcf6ce8747109b4c7c95ab9ab865d626c2f80bedd8daf2a72e58242c5df29fe86ca66bb10a7952da8b2bb7f79e988aef0e697b7dd"}, {0x68, 0x102, 0x7, "a1de800e18678a1986cb33d6ec12def62d82e22bfca15f40f152a1814b0af1965b288ce6bc737b8391a06569fdaacce55d832b1ce760ea18489225cc9ab1cadd5f0d1c29c9526fc63356afb82b4943ec064fa9d29889e8"}, {0x98, 0x10f, 0x9, "3a8eb99ac6cfbf654d13f418d5dbbde553192df1129ecc880b610cf6782347c49e72b0d30cd52572e102dacab9ac3ee773fc840e48f25beb3084d42cc2f9e3d9510f26d7c8560761dbf39db454e28056a4d102a3d1e058d856f868aac448eaa8feefc685a47f8d6118742933230f35409c50e1c8e880c6a7c473dc21a84240ea09e07727"}, {0x58, 0x117, 0x2, "39169aa2c8df30a13e723d3ea8c35d625482d3866e0cab9861600c7a88cb338c31ec431bfeac8702262663d04a7ae27c695a6b46fda465313cccd70748bb4c66ca"}, {0x18, 0x117, 0xffffffff, "876ea8"}], 0x1f8, 0x800}, 0xeb}, {{&(0x7f00004f0000)=@rc={0x1f, {0xac, 0x5, 0x0, 0x9, 0x3, 0x101}, 0x6}, 0x9, &(0x7f0000bc0000-0x80)=[{&(0x7f0000525000-0xaf)="8a8f4b4e8540ae4cca5a1bf9e739232727d77bf6cd6b86fbfdcbd05904a267eff63dc4257e81279ae908855d801e407ccc49f3e76088e70d823c6dab693b938850ddd33ab81d8857bc23c11341139eb877c3aeae4e739bf35f007e74711078d130662372baa0fd75abc9f3b0abd67716f7b30879e0799134386aa65108fc5d38ba7ee9beee93e07ec522262c20e2636e8fff0baaa2564d42f575fb26c740f8a82595d28c752c429857371b01a3f5f7", 0xaf}, {&(0x7f0000a6f000-0xad)="83c63c7afaa059f60a95b8e326a7f71bf5d68e12220777722de4a72059e71d3804abf36e05601c709f10ac445f051d51e5d58bce4631813e7025e00addffdc1e5c33e64298420f50c91c0c818fe740c6f570863440725b6240c4291887391733e3c3d968b1ba061230cb48f4c18946d32d78a324c71e3f1f38f816a72186081184d0d06c81926d4f4acb056a32584c225b081d92bdcb2746300b52ee9df1c7528ef8463d0f3cef0553b16a4182", 0xad}, {&(0x7f000092f000)}, {&(0x7f00008d2000-0x7d)="e59e431168fe3d744c3b5c1fc577bef4c8d3012737dda6a272750e8a7acd28d152649995718672427660d56af429d0f1c3bc47e6f77455679e38eaf365c2ac6bc0850a3d09fbc0983c77d9f487fdca8b76be8a8c791dd055c6072783db1880a0154da8705aeca969981ca0545c1d1114f5c4d7c1975a5b77ac6e50d059", 0x7d}, {&(0x7f0000cc5000)="dcc06529cc6ea0be5b771ec5596ed1670c04263feea7aec8bf019d7b97c6c071b2ccb417ce3d2cd29a0a091360af6391bcd7b514366a3181a71baf4f72d4a486e7bbcc3ddeeda66d1ceb0899cc6ce903a549b5b9159c6c", 0x57}, {&(0x7f0000c34000-0x37)="bb4a10e3b863f2951ca88c1c729c7a4b0adf96e139eb760700dbc3a158092428287bd942bc78f3272bc394af885777d1ae6cdcdb0837e7", 0x37}, {&(0x7f0000c48000)="7c4695fe70941df50f98668daff5b27b35e308bc59a2426ccf2aa3fb9a3384977e353c6ea93a7ff69546e7f05bfe386967d6d2253cf1eb2dafc49bbd0ee841cca433d342a26e72930559966189ff72ced4e414ddd8cfcc912e488089e85e3ec6817c00758385c3e26c3ab0a8b9a2e44cf72123e99f33b2296935926b64c6d8d95d1b14bd3d36d7a8bbb1aa062b21a96918f8a7104fa9e719a9e7a9ed5c504fd9117c36f707cfbc78da0fbac02ad937e1c48c4f601e19038b040cb21269bcec9f9e2978beac77c702816711edfcde04b42ae23354c7cb9fcaf82ae706a3dccc8ece", 0xe1}, {&(0x7f0000327000)="1e1a511f5acad944745c5e1b54f371709acb024c209fcfe75bcdc877afcac514fd6210496c4f357ab7d74fcc906103dac7754132f36eaa41b27ea37c14140e4840333322b99c42d743c0868389eed8eabda5b23a0e7fd413fcab98af54b7c38003542bec38e8f96a07064462289b16a496a971acfc09d7988aed9bfdb5664271653d18a18bf6eabdc932ef516dc432ca6bbb56c1a14ee0a495490ea38ce36eaa70bc2529cecfe33dba5fd628a68b7cc7c351c58b07700d53a485819998bd5ef81a420553514209fca4abf723912cbbdf9154d33586672e7ba991c4b5835d7d76f6c4f12dd820b3271864bd6482e78f1384cb29c155b89b", 0xf7}], 0x8, &(0x7f0000f47000)=[{0xa8, 0x10f, 0x8001, "e15f6a73c5b4f5cf6655c4fc5bec900cae8e2997f7575698402a0e463c0446d661431cb4c8ba4617ca5e08bca79648418687db71e7932b67d74e9bfac6b44ef8ee87f3abef812caa3b229460e32f4ce5afab05c71ba73698d966d113839c5422695ec1939f883a3bab51471e3e4c844cd96098303399a641d739acff8913c0d1a4b90f0984de3568bc9d252a6e5547672cc017feb2c10002"}, {0xf0, 0xff, 0x4, "c9c9d45ad82081c1e7ddb725095e93aa6b49f9ee5bc9ab5cec91707f2178699577708c2b89498a86dc39a147c32627f89914b17fc1fe8e83de400912c7a0b2e79e229030a05ffa84993de68b01767fd121c01d67bc3f7dd3c881d9442db6fff9b6c9a4fc53275328fd5574814f8953cfd96739303e8f0489267f9d343db01c5b0fac429b835b624b5394ca33dba2704e1fef937bcb3cad29b75ae7c15bc12b74db4fa611b18b554fddf178c755834db3ffbbebc909d34b0406fcd8d4408e6839a21d7561e6aa82b87935b96f5164cbd23423d591019983a7fa86c1d5159b51dd"}, {0x18, 0x103, 0x500000000, "b73ce5b8c7574a"}, {0x18, 0x1ff, 0x20, "bc57"}, {0xb8, 0x101, 0x3, "ad74988c4ad8ae030dbaaae148bf2c4dc1bb4581ed9098cc75a866c329fa6cbc761efcbae2f168a2ea167cc6f76a7ab37895bccbdf1d3b18bf2fd1bfe49e5cd6443fcb0dcd01ecc589c8537d7aa1ebd89e265c9e88e1b882ca8443d5d47ecaaf5097b615c1bf3e587aa46a0752192c47ade5fc9546cb8411c58bf055fa47c501669fb88c23385f75883b6b06bce3989906f335af031747f4fe03e1531f85c7ad66a56ff08824"}, {0x78, 0x10f, 0x1, "ac1d7380a0bed939a1c90358c5654c3cf6633a15ccb87feaadc6bf71bdb627c50fefe9eb90d81963e2b0b72d571e5722d8b8ad4b062210b227d140aaa20100a6c3d863b6d976634e7ab5b9c42cb9148b76f6e2b4aaf2ef4ca1e1d10aac9de8100b362c2b"}], 0x2f8, 0x40}, 0x5}], 0x4, 0x20000000) ioctl$TIOCCONS(r1, 0x541d) 2018/02/14 06:15:07 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008f2000-0x10)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000e31000-0x5d)={'system_u:object_r:auditd_log_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20}, 0x53) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000735000-0x4)=0x0) waitid(0x2, r1, &(0x7f0000745000-0x10), 0x2, &(0x7f0000eb1000)) getrlimit(0xc, &(0x7f0000538000-0xe)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000b1a000-0xb)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f000097e000)={0x10000, 0x4000000000000, 0x208, 0x2, 0x26cb}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000d92000-0x18)={0x0, 0x2fe, 0x30, 0xb1, 0x9}, &(0x7f0000725000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000a6c000-0xc)={r3, 0x97ea, 0x30}, &(0x7f0000522000)=0xc) 2018/02/14 06:15:07 executing program 0: mmap(&(0x7f0000000000/0xe74000)=nil, 0xe74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e74000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000bc1000-0x6)='logon\x00', &(0x7f0000a54000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000e75000-0x16)='vmnet0\\]uservboxnet1&\x00', 0xfffffffffffffff8) keyctl$update(0x2, r0, &(0x7f0000ca6000-0x1000)="7b7f8f150dcdf1bda87062d88d43cc61ea5e3ed962338097a22b9693627b2494a920c39ea950b20f52b5ebb16f98a24174291dc78ada9031d82ab8b33075899028769044d00c68892d0413f57421dc442647045ec577f7f2d883adb22157b6685448a5b9408a0e2c73cfd3db2e369551956a12ff7080edcf5ce7eb55e3589aa947a9d7b300973beb0064c3a444b17a8ae95aafcd8c6299699b067a7345364d55b2a87a7ee876c2c35aa8a891792659b3d3d8358ca71dc8363e2bcf61e53450a7258f727fdee88bb8ec3b7931195dfb740b2a7ae539b54d049922819d9b9945e181c4626acde32dedcf82b9969cf2045f7a239535a8fbbc22f3e305c3805dc8cad5d62b6fd5d7f5eb53c1b02a499ac5b9bff835ed29e510734519f091e4605364ce0fa9620d1513e68c31ccaf72435ecd7e67ee08845d552e133b5fa01a34323bc398a4aafdc3530a03e1da6e4b31bc06833a95571f84ab69e4eafc2bc0d1fc4f476dcb54c7a68e098fdfe6a0921d7fea60a0d6ea7253b5ec1de6bdbf316ccbc8fd806368bea3fbbdfd3ecc93bf56dbc43022c2067ac9a01306a354a558d37db9cf018fb17359677320623eb71672a7f069ce8e2443f01b9c599beb2eb61fc15df3a6c401b6c9ab2d548229c558b9d0435687fdf91b9dd4036017fd43efe1a1c1c66126ef78f5aa5d4634e9173cddeee0385e1260ed7649ac0dcd1cb859b37fad904c5a5e4bf0b9ee75165f6b84472bace5e1103213b5840d8a1aac970871cdf902344822979255c05152c53222baa13d67c525bc95d5396c261efacbffc17517bf9221ed1a08e62aa8f7f940c5180fc5f42e15442940ea20cd2bb0c23016c33786124fa225114154d946c28a6e8c32e6ae85462e88473d30352673481bb7b1280a243e7f3a246207a108972c58d3ad40f11a48ee424ed4d4e8b5f2fd0949e6033bc1679313e353ce181a99c8c63518a400d35f54296a4c3ff6ce15600fcddafc390e87ceaf511d8f6c2c771a644b7156c706a63582a49907153fd70c1ef26217ed2d3bfe915688d56723bb42f46a6b8b1c752fb252125f4564c1a72f4e8a32a188b3dcfbd7af39a455b65f95dfb2665285c6d8027b1327f819447845a0d4ee513c5861ee1a9f6e7149034bc6f404e5d9247c1a81d7e596eee3d2f061cc679c2301c92ff29fc3c309efe0b596bd0321f03a55c8c9e8d62ada0daeba7a9e8de3e59c209eea1b1e2c3ee27d56fa5df6cf832fbb0079883684866ecad8a7eac2f001f657e854439b2dc96102d5e58c7a842f90f82cc2dd9052764301a8b2618a0e71d896c446b19558d7b5c3243d2ec54f6a3ed0188617bf4c37b814455999c2845f12cc2826fab774dc1edc6ea87d8eb73b9c10f9f922643d3a7529eba88630136ed72a6e64d87e629646e1d39763f9b7923ab034b5c8316a8f79bbc8141572233a8cab27a20cb9857fa8a379bea2f57b9b6f16d71fecf24c923f40e515b5a00f5af94ac78fcc27417b7a430ad0fe701845d93a517d8befa2cf8847473ba796c5ac3b4b6c93778143dd22cdea2d3eba48d48114291d69e96fd0d60b990e493cb0b23c95b313baa2c49ff16d193ec2c93ac8c6ac53b1a09f2bb7588e155f6b2af0d1b877dd970bddf7d5d933fdfa628cff58c61b147e2a7d0854e85bcdd4a7029143c2b2e547cac3bafb6d3d426dcb7050039feedaee869cb6250366855553f2fcd67d8d733e985913267e7b9fb4e5cca933e559fbb06e38e7a90291258a5f2fb7c160da90331d846cdf430d56437c347005891f18b0b2ad524a4c38dedce14afdf254a14347981b0082a913848f492e17240eec00500d58f87c4dbd03888c7df1b4aaf6e586710981b9bfb75b4a6126f7d7609f804a33652e56bb525029c3608705731438e2d313c509f244893ca61222e1226afdbea5d6c6a79fcafd38b8705bd0885e0f00cda38dc48736a179c1b08f367815972f27e19adee469b2b912b11b7620289a6e510f1075baa4540a635104144ed2f9b57da2cbdba8ca95c962feb00122f60eb341ed86f7349ef28ad8c8f2cc988a7bce1df59ec8a927b8e0fbae55ed243dd8f50cb3da98a35a60e24b22762c917d07fb751de081f056228976d6cd9f8bcdad3f4c9c0249abd877b204e35f48ba8d9d6dc470faafe0ecc0b7ce8ba5499b4e65c9460b85080d71750da231b43bc36c285b06e553b897ef6c1e51cd8d29f03612fb0781341759bc66811743b98ec5a4f007ebaf43f7e2ab5fe17a7594ce01cf0458c895fc75388fe9b4227bf3c2b5a7ca01143ea33ec5bb589fafc94cae8d490d09782b566e4a1889a02d330ccae75f7efbf31936cd056c4b5619d10a898140a46356685d1421ef3ab1292af6f4b072a5265df3de99bc02e0fba029fd3f60ba657136c07feea993f7d384aad231154b13779cb0be5d02cdad3bc7897a2f614c9e3670e1958f35c3657aaa36771c9977ef7994386a3226b8b9cc0d3bf42ea46f1512d96cf3b9b5ed518416762e94ba9f4bd8bc54f0eaa579ad1eb4962722faa0d467317e6b68ed22598b281e8e4437753cec66fc31886f93c6c9009f0732c936abc0b41a0bd23336a452eafa017283ece68133ef2b37a97f47c5b1cf05196855d70d8c578e870539efdc16ea7a1ded1a80b7051be049ad176ccbfe206d4763f8ef631d14c04d52494aa1cdc6ed5b9b8e9a1a6271a7a42c4ea1151d1fe8b7c1cde6ef0575d2f58460b6ad7d11a86b29018ad8c985bf18667218fe12b1306a09e955793923fdd1de453e860dc30a20aa5d780b47fd671fb9a6cbb044df7b5b90254ce01b2a754593a4466eeb57c0f244f97bc6170ac079f9e87d782bc5ac974534e54088a5ad25d67ac31d1d115042019e2592b4a5479c834ab7b482c677518ac8528dc5434b2589970485e6a762c0ad766ef15ccf46158fa503553a7e0bb381106a499f4094d5e3cf7512ec76cb99afd03220dd949bfc2955c01b28b89a8c3f312b321d3638d70f21314ca91017bfa706c29b7d87076f73c6f1bd67bb34156b53e4c6c28a24eeba23240efcb35c30b48c53f54871cc583dbe679b6f5af0de91ae89a19c9788016192d0b858d7aead5bb1d4d29f486cb5a1e442312211dfa93a2d5a526ec6faf7a750263b790573e512d3eb69b8dd62c28c36e4ed4f5a72986ab767f1369d6cb2374246f9e451aa62ba0e2140fa51f77bb2dffb603ff6e04133e85dd22f741fe1683499a7a322ba5d0aeb5a4334673e6927b67564461b50b0fd670f5c523493f02f7b1e3b5e55f88d9c9d40ef3e84a04ef336d3cc0e61d6c40c4bacdfd3f25f7cd8f51fad8bb19aa52a708aff810973ba8d9c9c834de0a57009c4e30c8cd04e51ea7adad691574c542b8b09e8860e20dd50bc3fe6e3d033115f7b6df41ae9eff492cd5219dcf6ff6b8ba83f4ac3f413938180ed25ad03e52667604c080f5443008fe111519670cd73ca782fbd91c8ce3280a85881875df0170333bf612a2dd072ee90c0591c9d2fccc4bbe45f6e4f0fa80e131b245be64dd7de0136097d792ab40bd7d8b2b43cb60d2604d2c962de429900d8576419cc086c2fa1fd27b5cd477bdc698c7871e7610943bdc12657ee8c85538132ac58d38cc3475f65946631381caf653d8327513bfb0e75725659ba534c97fa2b631bdab088b3e97e5c19b3ca34f33aa4bf23cf531abd8711c3ea946b5964556d4a723849e0da10b113a42f2e4a3551b9b9949e22a60e2e5698b1d46cd29ca12f5c9d09a8d61d7d18cf2bd233aa745542268d4590e087ce6dcac461fe7f9995228c97e8a9817cf6f1de8b57c9f663f793d99b789c94f699802a9cab506d564ffd3a0931fc0da4f6ab4cf3c99fde53b2f501929f1d971dc5cf3de9319d4338e04e281450b29b1fa881a7ea923dc9cc332217d8b817026332f77e7a4ad167727373480ca41b47bbb0a66f61eadfa32bd191af3bc77a631e04749c702282e9601f9aae8a51919c379d1030ec51e534d579bcabb2ccb99e9633c81d71c9f4c55394538cde99e9a6b37566a9f4c66c8b8edef30fb4c53c6b96d52a78ad102f7d13ee9be4b5041187031a5a40370976d48dfefc116d2c9653cb3454e57ae3995601abb500d5e54f200d1d8aa9cc45c59b4dbbdd8db1959645745e6d5653cc2126e048215187640a9c2b34ad41bc23ddd775b942ae3e328ed4f206f573e8fe125793ff7ae1b941e9a659daa50dfbebfc3ae830268e9256862798aede325a14a7f09b9298d8d1c5b07c138bb9e926d8262f118bf92b1e14bc3e435ef3449bfe25bf4ab958cf1abdde7f62b03a07d3be4b604984c50ab8d918e6c0ea6d3737301c604b8452190d2cde7e96dd669eca409471792078b64bb91d56571bfd7e7ffbfaf448f19e1892ffa397a0cd3c46969c7d009c2c4607c994a610aa853fc988365f6d64e6420cdcbd326c0d94fcdf45f58c0be69f670ccc160d5444c441b12fc48ec956bfaa55e4f9f0ddb231c9bb16b20048bc3e2fdc5111e05d968074e46420915c96791ef867621e492ff2ba860a1d00146085074420db7ec7243df797d5287c422ce304b5e6871368e5a3199aa2174848a84db90f7fdce7f7d4b07257e268bd98dc178cc3973b2ca3a5b17d09048ebe1c45ddb9261e62a5384a81557d4b2558c0c433189113c8953834343d7e9c65f488b7dd92f448b752d518e3dad7b2232ba1b046becf3bb5e7bddc6b376101d60e6f124085e5b82ac4fb43661a4fd06783cd51c8498c07fe543dfed8c3e811bcc5c6276a0876d1a90207c9974cb6916704f0730f7452ace4dc61c051f4a0b368d98b3ef5957ed45721507081316c01c8deec2a814ef15d5eb244f255f42d0315f96443136a5d219d9886107a4e3b840a7854dc0fca0e753ab793d2fd2969aad0ac203a8989d3bea4cdb41e5a6a6897399a1303fb69bc48316282e27e7e2fa04bfd0a4129f471e27ddbde9d3a88947d3c6d49f35d4d8ef4cefcf5155f5a3f9ca7030b53b9a53e592e80a0021308d1d625b59f64672f418a28ffd16cf7c212a128fccd7a06e256c4a29d873f2aa7257dafbc878831be4c35315eacafbef0d5c2af5e13d1d6d55025c1dd7f6bba9d9276a8c7aa02ab1957aa69a7d786fd4f4128f79695594bf368a0c33c979cf21d5ee6367c0f7f80392334af2864b7039e1f75dcc84d7438192d2cc5ca9d4c2e892cd1d0c8250f910fa3aab2d5b82dd61ffcac963a580da23899ab7bb40a60f0d47429fd094155e22bfd5cc53538544cc1e4d7010a1480231794a21c4b621912c6b29f0a3e10067d966690f010da491a39af5d244581b36a0836d35686a7462330adf42f1553c9ec7ed86bd25a8d1066f59e467e84298722399e9fd52b92768943be602e039a8572b10ca17777b092bd9913eed63a15246bab4f1d09f0230f648f983b1e6b29b07ebcc9ded70a832a58c44a3dc5f765d441413e281d29325c2216d23e80483a2b5e996d8b51658331e9c4a22034c40d88bcd237b950a2f159dc7b9a6680b75bc971dc073136fc71ccda70bac4dbbf33ec117482db8684414792db5142a17d7893320754e21382a70984908a02df40db669476c7ce6fae191e4826ef6330648b20572e3f9800b9b3e323d9e531eec331ac5e59fca75fcdfed0a003524cdbf27e24f476c4787f7e0bb30eb2791a79957d069cfb6abdb241815c7a863b783c116f02015c6694869b79fd3b5133c2ed9459663449a07603596b085ea17aa9bfd261395231afd85769fe8f9ff2ee8f0c4e3e230e4670b16f2c960afc25314c89ea3d118e27f481808bd2", 0x1000) unshare(0x40600) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000057000)={0x40000000000}, 0xfffffffffffffda4, 0x0) signalfd4(r1, &(0x7f0000cec000-0x8), 0x8, 0x0) 2018/02/14 06:15:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000bb0000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00002e2000-0x45)={{0x0, 0x1}, {0xe}}) r1 = accept4(0xffffffffffffffff, &(0x7f0000af6000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000139000-0x4)=0x10, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f000080b000)=@assoc_value={0x0}, &(0x7f00004d3000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000a9b000)={r2, 0x9}, &(0x7f0000ed2000-0x4)=0x8) 2018/02/14 06:15:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000950000-0x18)=@generic={0x0, 0x0, 0x1}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000183000-0x5c)={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000344000)={{0xa, 0xffffffffffffffff, 0x40000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, {0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x5c) 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x200000000002) r0 = request_key(&(0x7f0000016000)='logon\x00', &(0x7f0000ce9000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00001b9000)="7f", 0x0) request_key(&(0x7f0000071000)='id_resolver\x00', &(0x7f0000e69000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f000055b000)="7f", r0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000b27000)='/selinux/status\x00', 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000be000), &(0x7f0000af1000)=0x4) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a39000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000b62000), &(0x7f0000299000)=0x4) 2018/02/14 06:15:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00004f9000-0x4)=0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000845000)='/dev/keychord\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00001ea000-0xe8)={{{@in6=@local, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00002e2000-0x4)=0xe8) stat(&(0x7f0000b7f000)='./file0\x00', &(0x7f000076e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = accept$netrom(r1, 0x0, &(0x7f000090f000-0x4)) r5 = eventfd2(0xfa7, 0x801) r6 = socket$inet(0x2, 0x80000, 0xfffffffffffffffb) sendmsg$netlink(r1, &(0x7f00003cd000)={&(0x7f00004c0000)=@proc={0x10, 0x0, 0x3}, 0xc, &(0x7f00004ef000)=[{&(0x7f000026f000-0x10)={0x10, 0x3d, 0xb00, 0x7, 0x1, "", []}, 0x10}, {&(0x7f0000e0a000)={0x14a4, 0x1d, 0xb00, 0x7, 0x1, "", [@nested={0x10a0, 0xa, [@generic="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", @generic="e46077be8aeae4593f1249ba00325fa8cf8ebb59ba1541a2bd63fdd3fa6d6da50e3e80d393d691f475aabc00a8f8dc3721b453e7db02f5123045d0a59ba2270fc8b8b4f444caa9662b68603820ee84d2bf3f8dbf825c3f94cac131f95d1f08fc73ea30a777582d62695dbe736ba7d2f48a06e7aec1ce04718c278c0e007235abd672510e6d1fd31c27ba8006987ad8e526f7f71f00f7bef5e52c"]}, @typed={0x8, 0x87}, @typed={0x2c, 0x44, @binary="a8e542c56c3b7f43c0795cd17031f85626f1fae187402f717b84990f1006d1584e14ab19"}, @nested={0x22c, 0x7, [@typed={0xc, 0x3d, @u32}, @typed={0xc, 0x89, @pid=r0}, @generic="48563f603b1d62521ca58701ddc3016feff190f90f3c35fd66ab01e0e7d566f11a72d9d7537df287b9c4651ab51c6bd4ce5265424c18b8dfbc1b4e25376c40aeb9e97903d6a0cd4508152420115d8f4db4985e3cd46df25e90247e50afaa3abb725eda7b6d649c71159690e90a20f40427d5197482827c65f31d90ef81a9f4fc98f994", @generic, @generic="c9668cf6e7c58054f61034c0c24fce3ae3a272bfe32cd57b7c364c5d86c94d30ab3b04bfa72839f0394e8a1817ae7631b97c2a1831b27e1df34ed5f9c50eb2c6bfc78fe2fd3676aee439d94f415872e7fe8ad29b9e1fc7504cc9dde17c332b46550f3a65990c45a6146adbc25874f12f5f8da1e945f3f8924d2121ba848cfa30af0214691bee30ae180445019f3544b7079119acfb0634131ad47186ff835e8fc509525286168a8bffa0400a49e42d6edd7900f32abbe2d292667c0aa36711b6180ab58044cdb8fabe195087ef58b390c6a47d4713672d12e4b744446e5252d54e", @generic="08e94d052d5e0cda16342b2c6f50a62aaddd5801fbcf87e12791bbe5c6b06780761f9fb899a28c3b6e6b6d65c8a4688108180a50f9", @generic="cf8b08822e276d1b260f9535b39c24d02f4608dbf02d98435471ea6be9976e93158a98a6d930d5577b9b0f3d915ef6a7ee50149a7581959353895d03bde5ab0ffb18cbc3f66caaa6b8c6d94857e544b5c6a32b22655607f85a7e39f2", @typed={0x18, 0x44, @ipv6=@dev={0xfe, 0x80, [], 0x0, 0x14}}]}, @generic="d0fed64d5457e7572f8829b0f1d97da2d210673c0d2e83138d8347648595590b96108a2fe7131dfe6ba1d7f712a23bfb327db4396290de4571a46a2a218e2cf467082f7b6ecc84f64ec7160f391e546dea41755917c7814049", @nested={0x12c, 0x79, [@generic="963e9bf903bfdf05b18acd9deef0928906c29582acaa663d1c9f9a074dd733ebe8d4c124d988319d782d09b473838a", @typed={0xc, 0x85, @u32=0xfff}, @generic="d61756e282f3102f0a896da05c9e6cd938b8385899bf845e19f0107a7db537c8b27e4c773309d2f096405f0031dd0001787d58d3dd5414f2a66e5ec952ae66692c8dd28d41557ea342ca7f14d4d75e6916ae21946e724102bd7b689ffb4a61f55219fb6752f895dfca356882c59515e339e58da6360ee9cb28bffa45f866c6", @generic="3255d3932e6376d63ec156df3f2279b60ab148eb62ee65946f23ac13c60479243969", @generic="4248b0816139de7e8335a0e47f762f137f1ff4a32ef97dea30747d477e9571f41464c605d8fb7d0728811d552685035f1f0ffb6ffb0ccc6a927d317e78553f11e347bf07acbe65e1e96c2ca2"]}, @typed={0xc, 0x23, @pid=r0}]}, 0x14a4}], 0x2, &(0x7f0000e5c000-0x40)=[@cred={0x20, 0x1, 0x2, r0, r2, r3}, @rights={0x20, 0x1, 0x1, [r4, r5, r6]}], 0x40, 0x44001}, 0x40000) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000e5d000-0x4)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000dc3000-0x8)='cmVline\x00') ioctl$VT_RELDISP(r8, 0xb701) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x880, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000b3d000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000acd000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001000-0x4)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000084f000)={{{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x6ce7, 0x0, 0x8, 0xa, 0x20, 0x0, 0x2b, r4, r2}, {0xfff, 0x9, 0x800, 0x7, 0x310d, 0x1, 0x3be000, 0x80000000}, {0xe37, 0xfe03, 0x4, 0x2}, 0x2, 0x7, 0x0, 0x0, 0x3, 0x6d12987893585eb6}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x1, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x0, 0x12}, 0x7, 0x2, 0x3, 0x5, 0x1, 0xca67, 0x101}}, 0xe8) fchown(r1, 0x0, r3) 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f000036a000-0x4)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000b67000-0x6f)="44d699f2b234620c9e9f3d662c6025bec73fcdaf13ec9fccb1c6081feeb3fce1f40c217279c2271f933023f0d6ff71336447acc11a5428230039201fd08e6a44c92640ef102ca91d777b022db1a6afe85af700b8960495e5495ab10e4bd99bd16f7d6e02755c31ac671c012b45debd", 0xffffffffffffff56, 0x20000004, &(0x7f0000a56000)={0xa, 0xffffffffffffffff, 0x3f, @empty}, 0xfffffffffffffe1c) [ 104.776726] binder: 21709:21719 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.776747] binder_alloc: binder_alloc_mmap_handler: 21711 20000000-20002000 already mapped failed -16 [ 104.808716] binder: 21709:21719 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001000)=[{r0, 0x80}, {r0, 0x98}], 0x2, &(0x7f0000002000-0x10)={0x77359400}, &(0x7f0000005000-0x8)={0x40}, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000005000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x40000000000001, &(0x7f0000013000-0x4), &(0x7f0000014000-0x4)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/14 06:15:08 executing program 7: prctl$intptr(0x4, 0x1f8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0xc8)=""/200, 0xc8) ioctl$TIOCCONS(r0, 0x541d) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 104.828327] binder: 21709:21719 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.839066] binder: 21709:21719 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 104.849314] binder: 21709:21719 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:08 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000055c000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001000-0x4), &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000002e000)={&(0x7f0000023000)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f000000a000)=@setneightbl={0x48, 0x43, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@NDTA_THRESH3={0x0, 0x4, 0x80000001}]}, 0xffffffc5}, 0x1}, 0x0) 2018/02/14 06:15:08 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001000-0x88)={0x4, {{0xa, 0x3, 0x100, @mcast2={0xff, 0x2, [], 0x1}, 0x40}}}, 0x88) setsockopt$sock_void(r0, 0x29, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000099d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() setpriority(0x0, r1, 0x3) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f000035d000)) 2018/02/14 06:15:08 executing program 6: r0 = eventfd2(0x80, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001000-0x9b)="cac5e670918d3906a239202ed560349e9076bb675597df62aa01830fce5f299de8fa97f56cca7914768e78e5763f6a3b7b5de39ae6800de6486ddcffd693b3d699a67b72d4c37ea63d3c2278acb7d5e21186bdfa0788142dcc8f71bceed7830f70680f430c184aeb2e037dcd53dd6d77bd6617f5d88f32a693fd7a4446a7ef7acf0817bb48d904dc1c25d0be892a91f225408f3ab06faed1c5ba3b", 0x9b) mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000017000-0x4), 0x4) write(r2, &(0x7f0000021000), 0x0) recvmsg(r1, &(0x7f000001a000-0x38)={0x0, 0xfffffffffffffefb, &(0x7f0000029000-0x20)=[], 0x0, &(0x7f000001b000)}, 0x0) 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f000095b000), &(0x7f0000407000)) pipe(&(0x7f00001b2000-0x8)={0x0, 0x0}) eventfd(0x80000001) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000555000)={0x1f, {{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xb}}}}, 0x90) write$tun(r2, &(0x7f0000a00000)=@hdr={0x1, 0x0, 0x7fffffff, 0x8, 0x6, 0xfff, @eth={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x10}, [{[{0x9100, 0x5, 0x10001, 0x401}], {0x8100, 0x4caa, 0x6, 0x4}}], {@ipx={0x8137, {0xffff, 0x77, 0x7fffffff, 0x5, {@broadcast=0xffffffff, @current, 0x569}, {@broadcast=0xffffffff, @random="0f56c5ce71c2", 0x5}, "9d88e315cba8c47a87f8f07f910741cd2ded6e333b52fef87af3b2e8e542a0d7c43ac8447dcebfca624f6188dcf0b9ac40292bcc610cd4354160c23a66d6e279374ba76caa16eb3cb3b4f825122a7add3628f1cfdd4769682c"}}}}}, 0x97) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00002fb000)=0x10, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000661000-0x92)=""/146) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000054000-0x28)={@common='erspan0\x00', 0x2}) write$selinux_context(r2, &(0x7f0000443000-0x25)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25) 2018/02/14 06:15:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@common='ifb0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00008f9000)={0x2, 0x8, 0x2, 0xffffffffffffffc0, 0x0}, &(0x7f00009ad000-0x4)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000003b000-0x12)={r2, 0xffffffffffffff81, 0x5, [0x1ff, 0xffffffffffffffc0, 0xeb5, 0x8, 0x1]}, &(0x7f000014d000)=0x12) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f000028b000), &(0x7f0000ec9000-0x4)=0x4) write$tun(r1, &(0x7f00008af000-0xb0)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) 2018/02/14 06:15:08 executing program 0: r0 = socket(0x0, 0xe, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000b5a000)="a61d936a6e577b7633d2b2941f113b9b07e24890fb6ad2af7a31cc2fe93b9231a666ab3cadff0f43797cb4d3528450e6d4cb23b98210555292f9ce1d55bbba74", 0x40, 0x41, &(0x7f0000002000-0x1c)={0xa, 0x2, 0xa5bc066, @empty, 0x39}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000804000), 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc08c5114, &(0x7f00006aa000-0x50)={{0x8000000000000}, {0x7f}, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}) 2018/02/14 06:15:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000809000)='/dev/usbmon#\x00', 0x3f, 0x2000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000a13000)={0x0, @remote, @broadcast}, &(0x7f0000700000)=0xc) recvfrom$packet(r1, &(0x7f0000966000-0x82)=""/130, 0x82, 0x12000, &(0x7f000003c000-0x14)={0x11, 0x19, r2, 0x1, 0xdc62, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xf}}, 0x14) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000328000-0x98)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/14 06:15:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000ae2000-0x5)="4408050313", 0x5) 2018/02/14 06:15:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000a3b000)={0x0, 0x80000, 0xffffffffffffff9c}) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000f24000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000351000-0x68)=[@in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xb}}, @in={0x2, 0x2, @multicast1=0xe0000001}, @in6={0xa, 0x1, 0xfffffffffffffffe, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffff8}, @in6={0xa, 0x2, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x2}], 0x68) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00006da000)=0x10001, 0x4) writev(r0, &(0x7f000063a000-0x60)=[{&(0x7f0000228000)="6a07ac6e4401008ee31b07", 0xb}, {&(0x7f00006da000)="08e3912426edbe2c1e98a59b1a417923356f5c48d8eed5e9a276cd3dd8afc836272c3265dfbbf4b88959b6f6f00fa9fc165c01a948794c845e0b8f2175f3402b9fda9a72a850d90463c7b403a7d7bfad895f54f5d59a68433bc0d1ababda48cfa2932f4f730a4d77736169248c35b91e4ff0e3392e95d76206d30d4de99da314934c00acebda351f5ad324fd2de1116c265b9e3dafe4c2b9cb84b523a0a64d84b77d9e2db59945e81477d4edcce6b9b75a1e3c9028cf614c3fbee6990339ed29746f58fffe580f2a621ccebb3d98514d4042254cf53c68a3b6e5c14f42122c594a696d9fc847c9ac36462054f2049b73edc470704b680b5e1c1933304f1d37fd7131e776907757d322117e7d235ebc2d6f47050adb319f061880860a2f89652636fb73d56d11580ca1eeb915ee59110115a6b06705c43a6ae79cd8d5ea943da379018c75268ff7e2f65220f4e77acb3ba8a6031c8ffd765f08c3e6c4fe16d3cc79f3f1d2275312bd824da3196ab2860635847d9b7b15846c0e15e48e8c12f2fe5877f813035cd43f1360c788215c3ea77f6fb7b58cec7e1dceacf02e1eeb7ade37166ea32346751b4e5b90f5642271adc81d1de756538575b4bfd600f378b31fb1dd87c011be3385242687340ffca139ab4a43dd529cc0d21f54c0422c4d2041114539d1b7164868fbbf9456224913722ec59fba6d7d526f908dd2a70d7881b8ae0470e7fdb953b55310ae0e5527e340ed44a26df87984f5fe9b8497ba9dc7a0e9a58e1fde0f7443c6aa4730978d8a6d9e83aac037c74f084c2aab562d9db0c18e4b0c8bcc2ed26ad3ef2dfbc7ef9fa8aa266fd177271edbfdfda040efbe09d31e3acb29094e2a94f7ae5e00057839083bd53cc9c0fc3cb4344f8a7bc933e8ae3268ea5c5770ce0dc5c40bd59d350e095a5a20408d50e1324ba3813d7c6287de8119e15f0565f1e1e483af9806de99043d8c0c433d8c89b1db20063cd0acf21440f86c90f1a3cbf9d71ee36235ac96030f9417b655e8213959327370d2b3113586abf72eb788bb1ba64452ed243eba469cb083e9b679cf13edb1e335fd6fcdcaefccf35554b26566e6657b9f8ec62fdcd6eb9498b75e06937339aab148435058af4644a1c607a3e611cc56c12f0cea08e30ef2835b47b32a2887f98942c4e6d5d60b2273080073864f6d7e9d5ac8109d86ffbc57f3d78cee8306207c18feed11da929c0049cefb40ec7c7bc39eabec791b2444a65ba85543157eb88e8a6a9e7004afaba9db1908dda3ee6479d4da34fe54e3cff02091dbb5aa9e9af669dad9880be7d047cf8532d7856c9869b8479d30848435705d7cc4faa4cb47aeaed9aa12f72f5e33964f4a0bfe7f3971ee56b22899be94e8a6760fd90ebbac6f7428aaef7b07a71a122928359a21ba95cc105b90a43d61831b35a68ac8977370d99f1df25d0b53a72f2c951e6e7ea647576e1c95e80db449a9da271a26bc656e1742e5e0ba5daca657ebe42bbafa6ebaadea7cfba2f223963d87dac33bd10f820f4f4dfc4e1ce0a999a4b0aeeabdde1bd25636159b76c68ff05a6f041421148b16dc81bfa2f6e7ba10478cdfff311575a4fc3fdb567c009479cdc3f9db71133660664cd51ea94323b6cfec1bed5caf501b15d83cf3ae6fe2702b2255084e449216859bc34a606e9c1ef3fcaea4d79962e5088384ae7bb8476eee6030d425ac8728c11bbc6a50ae3fbe8810bca803cb4d27e8e2e5e834f91f30d3047f5a89fa03a4d705e590831aeb587483d59e1a904aa5833204499c48356af35c73d81b5e36f754eedca9869d66e80d178a0e772f794e72a35b7e694e9033b9dd713e75ba77f34a835d8d559da5ec74d3ff38091e9b1aad46f575d114018e78243d5d2e6b406dbe1f03a79a21db1ff9a280078dbf33c1c996eaacd105972369b79d5fcdf2db8aa02126e28ecb1a4256c156698fc0a25245b857ab378e9f1817da0019a9e35eb8f454ef219a1ec69b1db3d5c6323342424b6f2fe4112d9f6b69fa14a2e6e6f11502eaae48162277e3e4b271c287ec9f5a272221c306b76274abe180b4c554b261d31a5d164b7b0116692e4dac50e94a33143b37e0aff609e713cc263b609156b7c559e69593ddd53838b1a86dbf02cfddd8d55ac960733b7d33292d733910f9247e0b3deb19e318ba9dcbe2e07085167e95847361def7fbe2ad07bb555526de53f8859b8add9ce5e07ec4dcf078e6a9cea5731d1b223e441cfc4ee2bae57993c4c59cc1fc1ceb262bb6adbe5f18c33750c84ec441081d3c11c5846a187bfe98d2debbf3f5007835c3b888261c06154a4aa636093396d774f46a70e812cffed7e5372673b557dde68afd4295fb8763904835f0f6e145315c4e76e0efa7d5b542929047bd4cc4bac7431b17e5d28102b9474b1785250ea612d253e9c692d713027bdbe6c517aac0c8a9018be1b2ca3af8aea0af70da16dff5cfda630abec0864ab180ea59e024d3acd9d32fb982eab1ac6b8f024c9504754e005b8eb9f7b2511955799c20ba37fd922e79e1ce050d9bf602a802bab8a46151061acea0078cf8add89a51eec30f1db584f36aafbf21a24ec736de6dcf84fcccb9e5fe1f66eb7b8b81d38b03a1360d96b89fd2ecfc4b2f1e16f6cae65d4551561a882a85dabe4fbb8b3fa5f84adf6f0649285092e247f54d0a75393a5c4491aceea129c69bd67d0895ce04c45fd13cc4e8c869a9f2316a19852b2c9b44c9596c5eaf3ba0c366c7d14f6838989003205055f0f7e87c6608760c287af48e525bdd31fbb976b3c45c8c596871fa14f129e86994a95256537a6548343392fca64ad9e08402a48a9529f3ed028fd00af9dd7b1383b0293df103c99520b0ce6a0ec43e15d4e8d1a068dbc6af563e4a63b77c5933b2cc5141e351ac40789a5f26729a723d10fa969459bffcca1c05190534a678bb35677bf0f1d72cc213d1329eb91905c95019a51050785a13201c7301ad5935056a8e6bde69bb5864572d546415718acae2cd46260d45549d2233b600405d0cf4e66a0bf660d5ce5010b306d641da52b450e4a6e7092649468f11c417f92a722bb37e193e82804bae08eb1fe69d1558c037aa248f6bc42ede22ec29b830f084230b6e9ab8879e18999e2c7aa1ae3f3216d95b0f637afedb54c81b70f507881f96b922d57cc80fa6339072a590eb661e53da7cbc22542b5f9d6fa7e9e9da8cd5d6221afe2bee267229def971163b552bf1f47257fef2349559ddddfc9325d508592cb9ba52a2212312c7dc645909ca4fac1c795f2854e5cc88273db20ae73a4474c8f2ad61cf516d9c798de02fe42a75521e40263b773b88acad6db2577166f3d9f90a9c90c1fde4ea166db17877fc5a909423851e308210d10077e88c61a7a004acb1d253c10448fca0dcec5a61926326c2867297ef0eae68a2ff7616f4f75e451e00a3c88a57ed7f24fde04814c5e35729d2e404ba0d011f3a0b8c55f334cef89224a770be8adb25a909496e0a870b0c4e91495808422a573f96775911b4895a666b3e5759c709508e0378b586b476c0bf80bdacf9d0a4753754d276cdaf4ee6bd846eed8d6db18aca0bebb24346ea8411c3dd64f3bf75da62768a74368cab1ce9dceebd076841bed3d26c4fee03060412a36d7faf2f7b8b84c1f05582f233e3556fd0b2a3ba2e00bbb93a5854c01ac9766c7c428bc23e6f2c4a97d90c603df803477d183f40d0a95c7bd8c01baf7cc7c2cbaa046c88ac3a2861d169f4d02f0d5ce565686fdcc2886c5f9d5a27d3e4b1fe43452c13bece6502b9e22001d94d998e3d77636f1bd0c239d49d3030f9c1af5fc410f340e46b0e9b98fe8ea249cb4de695b14dbf1272584d8e70a1c77effb1c6d84ab5b51227fd595f098acb167bf1775988a92dd6923a0b466cb8346369da3f0c53487da20e9961521b71dff8df2a3ed9be402c457fac60563a6f8c25708691e113dab2bc4cd477f3c31ba3c76af6f2ac7b65030b591307dc1838b468a28477f84069bbe2bd0ada44c774d70e99c026e71f358e56620bfe2951dcbba1460e60129124de02579da7a4a315e529973de374986a69fdec1c699d60d32e3852316b5a466f4dd599ad86590ffe952409a8817c1d4d268f9a73168cbada33447c4b87bb0db94e3c64e9c61f6a85956b48aca3aba5147d815b48f2e2e9c74b772c6bd9b479ee9ef7c77e2feb2b0e9723d3bab9fb55d2f124ce827b4d10758afdd95f716bb3e1cfd0e472cf351ad1496782ac63982c0cb9fe0fc8da45ba6b1c2f3d3d78e9f177b7db3e3439815c61b093a987dae2d4dda06a213296429b2f37c25008fc23dd784e2e64b9b8edac2ea45a1d03aa3852d1648ee1f5ddc162cea2aed4b8883c0484a72e6398aa7e3529ed3dc309f0b64f9931c5334b0e52f94d284ecf5940e493190633cb9a5fd0a01e8c0a870392cfff1e928f8d21a89357e65bd0aea800c1d98b2aded74e93f3119660d9543b0e59174ed88e936d80f3a8fe019c281b4beefccd7ca11b1e3407e23dcd6728d2ba576eb1747c3d20a30078bf45b035be1920ee30d7bcf187928abcf527896f30b256ccb82e6fa023fa08ab47be13ea95856300c15a9d5ef7e34cb60545b90a3645d6d323bd925851d26d9041a52d1981efa8c43fca88631181bc66bb4569c8cb7bef4c6092889d7809d7b28d5a7142084cebd615c20b78bccb94d03e780210369dae709d8bc086b247288f73aca40ce3dbf4ee07e48c8c3a55e64b2de51da04b1210e5325a3a686ede16376a8d5618021644fecc3b3f5e959e29c3d84608780e32ff24c05f85e02cf19a402c44fc9018e5a5a9b2dade6304156caefaaec6c6a1547c26dd9683f2df2aac2cc5ff035ecb344ec3d33095996db14767800c9b5c4e036b238b23dfad1a4886e39dde137688e44b7b4cb3cc1ae5c446155de9dcee1933b18b572dc3d95a24f25eeb2d7abadb8af9c6198dc71c277d0906416bc7bb6c12a3b02651f51075849d27ea49c20491f153902260227b1e703cf226adeddabc2c94bd42c025d055f46b83b13271d5a280f4deeb585a06cd6434e649b02d2cfb04a1bdc739908ef40adc0a5b3b526281a1518f406d703256e762fad8db2e506f7c0800a705f35466800f51685d225b183503889c0e996ea2ef3b77e7fd36def2e5eb219e375d72f4d73958fb9b971075310f7873eec43e99199dc9e58762ff3a5137770e40bcd441c5773a51a9827e4fdd5900ce0bf91c9c5e60d51903c30c4f8284e8f59963e1a7c0aa9590cedbf49d32978529bfee790deae8a56fa766170858e46a0ddc40eec2781c2c712d9785eeda0d3cb53605116c4d3589bec582b5c934a2479ea821359c1b250708de93e3075a0e702dc86d13457c66dbf5527294bee86004059f9e421e1fe8fb38d6e2acf3dd1bc495feb1ad62e0b061ab3ba2a288f84dac0c5af87d00d5107ca45c9bc3b15f0463186598887140c1e14f144588a75875754dd2c6c205c478a4a005f4b040184148cb2f6905d623e7cb96d226eed60882631a25ac117779a2c8d2593f3f2bdebc00e3aaaf1a3d89a877d1fdabcdae23a2ad0333757686c1a81175899346db2e3f3f5b9accf7292811a5206f49ce9060c38b5b087467fab395ca62701bc6229380512434f7f97fd08383dc9847e9269c5757e4af9f1b6ba72a14e96b377ffdae019645ec3f45032f2717da38f439da6b01ead23829e43c1979fb89c1234dea18f8767833428fe6e483a613a33ae2e6737e9a940c75875bcc6003ba09c8fa790a64acb7d1b98306653546", 0x1000}, {&(0x7f0000008000-0xdf)="a46873f258d80bd1543e9b8f25f57e2c81bf663ad47720fb09dc51e76c1807d555102bb40d760e0c0f68ab2b1219d77afae998d56f4de53341b69e528de0b1ddd5d58408f1ffbff941a799fe08a7c86fcae66dbb742b7975ac60eb7900853a43cc9b833a7438a324199303b323602d6f00b2e21b7466cb5de9bc81eca4da03c2e32fe7454fee3277387a790243cb620494e8609af4771657362b7dc8994f0eab0db51f8881a7ebd1b9297e1e73a9bc1a3614cb46a8ed38340971109b4c6b71d034250fd601c0810b7a6979c05db64416336cd0f6cc54c5429dee93fe4cce73", 0xdf}, {&(0x7f0000868000)="14e94f917a1475ee97d7157ef8a759838682724371d0aa2020d0525d757288f8bf7cfc2392a7747c9ab4d6ede01da9f76a455907defd6011dbbeb3cfc95d0f5b09143c2110e42f7a4f2061e4c63df32220bb8b72ea5dfd9ea7d8c0dafeee3773b16c041b3dee753439d38ef89a6a82ba9e629faaa253d4a1ab2fc0bc77f3c7b4f22b4f8528044814c3379a4730b4e8d3fcaae4e5fbe318f9ac0886e575ffb4e1366b8fd68e5c87e1541a1b042bfb17ae54c5565e04114b2831a16a86f703854605ef90fafffed607d87aec670e99c9389be4757a30fa7cca4058dfbc", 0xdc}, {&(0x7f0000487000)="74fadd1ae6992f9246a0107481aaa2f9e9a91c208ae90a2c47a4d9bfc7d8", 0x1e}, {&(0x7f00006ff000)="6851031a12f00750c0242207d594bad31456acbcd8bd746cd5dd56f89ef22a9d585b3be29f1d7f54f3ba5fc83ec2ab243a6cdf68b5741fd8d7b355d2dca75ed30367bf845fc5d6ab45419151eaf0f8bfc724876a5d3694df7e5a4a69a97c88eb76a566c69820e22587b6bff0f7b8d13a6222033a301977f66b8cc35bc670b7de463278c91fd7b18022b1c73ed5ed352cd71070611b998caa72e5c15ee109b94d9127f531d027026f7d4b6f02c669ad4674e0ea679231eff08834ec176e4e07fef7021af2f0a06c50f3b277b0c07b9cf0e678fe5c421c4788", 0xd8}], 0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000aa2000)='/dev/autofs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000051c000)={0x20000000}) pipe(&(0x7f0000edc000)={0x0, 0x0}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00005e9000-0x1c)={0x0, 0x8, 0x2, {0x5, 0x1f}, {0xff, 0x5}, @ramp={0x5, 0x2, {0x9, 0x4, 0x1, 0xb94}}}) r4 = memfd_create(&(0x7f000026e000)="000b4f42e8eb374a0ef90832d3fbd0cc4152e492436b61f8378be63cab7fbab4a6", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000c4a000)={0x1f, {0x40000bffffffe}}, &(0x7f0000947000), 0x8, &(0x7f000084c000-0x8)) syz_open_dev$loop(&(0x7f0000879000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000dab000)) 2018/02/14 06:15:08 executing program 0: r0 = socket(0x0, 0xe, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000b5a000)="a61d936a6e577b7633d2b2941f113b9b07e24890fb6ad2af7a31cc2fe93b9231a666ab3cadff0f43797cb4d3528450e6d4cb23b98210555292f9ce1d55bbba74", 0x40, 0x41, &(0x7f0000002000-0x1c)={0xa, 0x2, 0xa5bc066, @empty, 0x39}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000804000), 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc08c5114, &(0x7f00006aa000-0x50)={{0x8000000000000}, {0x7f}, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000c54000)='./file0\x00', 0x101040, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f000024b000)={0x4, 0x3, {0x3, 0x3, 0xe5, 0x3, 0x8001}}) pipe2(&(0x7f00008b2000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r1, &(0x7f0000779000), 0x0) 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000966000-0x38)={&(0x7f00006d9000-0x1c)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) r1 = dup(r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00002fa000-0x4)=0xfff, 0x4) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000e89000)=""/4096) sendto$inet6(r0, &(0x7f0000b0d000-0x92), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000407000-0xfd)="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", 0xfd, 0x20000010, &(0x7f0000f34000-0x1c)={0xa, 0x3, 0x6d1, @ipv4={[], [0xff, 0xff], @empty}, 0x1000}, 0x1c) r2 = openat(r1, &(0x7f000020d000-0x8)='./file0\x00', 0x10000, 0x0) accept4$llc(r2, &(0x7f00007c1000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000425000)=0x5, 0x1000007fffe) write$selinux_create(r2, &(0x7f0000108000)=@access={'system_u:object_r:hald_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x39, 0x39}, 0x34) [ 104.971851] binder: 21758:21768 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 104.984411] device eql entered promiscuous mode [ 104.996316] binder: 21758:21768 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.027969] binder: 21758:21768 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 105.041581] binder: 21758:21768 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.050483] binder: 21758:21768 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:08 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000001000-0x1d)=@alg, &(0x7f00009d5000)=0x58) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000001000-0x1)='\x00', 0x800, 0x4, &(0x7f0000001000-0x40)={0x1, 0x0, 0xfffffffffffff801, 0x50000000000000, 0x0, 0xfff, 0xae, 0x1}) r2 = eventfd2(0x4, 0x80001) r3 = syz_fuse_mount(&(0x7f0000725000-0x8)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x40000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000acd000-0x4)=0x1c, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f00003a4000)=0x60) r7 = syz_open_dev$evdev(&(0x7f0000625000)='/dev/input/event#\x00', 0x3e5afcdf, 0x4000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r9 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) r12 = open$dir(&(0x7f00004e6000)='./file0\x00', 0x40000, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r13 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) r14 = socket$key(0xf, 0x3, 0x2) r15 = userfaultfd(0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timers\x00') r17 = openat$pfkey(0xffffffffffffff9c, &(0x7f00005d1000-0x6)='/proc/self/net/pfkey\x00', 0x400400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000284000)=[{&(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000000)=[{&(0x7f00009c1000)="e96b6d1d074eee5bd542afe280929864ed476027b3bf22cde2ebbdede629f1a4b047d1ec17ac16594a374a26a02b94b3cefc0c79effe8690b93c862ef5bde3e28e26078662abf56d659748057155b8f6540a6d6765861ae97d1228f64dda0602ef2e8c3b1d843f505944d4dd3d6f49295c3347d91ef09ececef2d272d3b393cf1a0ac69c9986dee109fea52e53ff5e818675f797bfa49710f299bc28979e203388d4fd537407cb7f39c2b0b43e75dc669024774bed", 0xb5}, {&(0x7f0000f04000-0x1000)="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", 0x1000}, {&(0x7f0000001000-0x2d)="69e11ae2b045cf0bece14bb8ae56b0a2938a1798964bca0bb83e6204532fb51bbbf2c8bb5e75bc7fd336c9d13e8ff6b3a14f49b850dd077324f939739fbbe91f5151a617a7d2b8ef", 0x48}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f0000ebb000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000a6b000-0x70)=[{&(0x7f0000001000-0x14)="28b3ce01ee0ec49f1bbac39748b66731942e10ce", 0x14}, {&(0x7f0000dc1000-0x1000)="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", 0x1000}, {&(0x7f0000001000-0x1a)="cbefa4b10e730b60df266309e62ea8b39275d0f273705434e79a", 0x1a}, {&(0x7f00007a9000-0x6b)="ae61b7cab8ce48b0463c4623d5b4d7476d779dff2e73b8d8223143f799c129781f985891b077286ce9953a996f923c61f0fa5d47679dd04c7e60d46db70495abbb464c5840f93638a5e5c59d951574c1be8006bdc1b8094bc548031ed025a8adb8a11d21a8b712ebeaf7bb", 0x6b}, {&(0x7f0000000000)="55e8fa3ffdfeadf4058426e85e", 0xd}, {&(0x7f0000000000)="b266d0f7d16b6f76b055064763e6d00d27c032fcee12c91a0273a4a000f4d681b4cba4b4b3eeccce48d02fcdb283b14293273e9944cdf3acad05ff821ef5008997f1b83f1cbf4aa015a3aee19e8d1bd830ded9f530f355121ab48342feb89c874a833fe705ab93257dddefcd55afd7ad45da4d81dbd6bb1abe6186ef32e1b3886cd707bbadfa338da9d772347124a06a280a", 0x92}, {&(0x7f0000000000)="2075d50c5591f36004e7eccd76dc83c15ea5cbb44a5eb7b5e0f9e96f72a89a756b3d47462c19f8feed675c010cf0d4c44d84182fb4eaf4450872765adc55509ff55e43c99f26ad8e0f7ee8efe37d1fe48a371f8ad7c15a3cfc2b1191bb90ba72b296a3d52ece3e08f06430db4118f8b12cbdffcfe48d06f0a3139f310dce2a677ac8973c09696162559ab8024dce59bee3ac303021cdd99c2042d4dfd87a504d04635a277bb3779e608eff76ab0dc936fa41f181b4424848477b0133cc94750ddc3f00ec0f4bf47c062f5e7e2a02cdc8c15216de2efc19", 0xd7}], 0x7, 0x0, 0x0, 0x4004000}, {&(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000001000-0x50)=[{&(0x7f0000000000)="41e0c4c79c1948eb05b541b66f9e95fdc933f7d4f1346353e2f7977b016d9acf70c0f4d379754d1808e45f3143428e5c61948b867ba752cfdbd180cf9e9a7ee5b3fa5491a1502d5ac1ac9063384f747c4409abe88727023555a2a7c03d2f28250596dc3c82187e766d1b06ac7d17639b564216cd2eb94b01397ad454bcc208e3fca407ed2f13686a302f034eac977811657612012ab7d47a38c137f06be02b4407cf4c3f662c527e2b1fe25c577aba561a1e06e7cb0156ca7b923d3e637c97eb663a45bf1f743b259584f349883e73aabbbe", 0xd2}, {&(0x7f0000001000-0xda)="dffb6ecddbf9e1d22b9d00e5838c9407337331c58a2ef0917b191497e2c3c5ba7f2ef0f0b3db741b4785f1c4558092fe2bbcb9eaf6ff6366eaa69f358c71cd9b9c67e1053fd8a728ddb1bc14d30d779f1601e1fecfc859db63cac2c6d30f87fcb74bd1a56ba9b5822a9407f4b908636a74a77fb37ec6a9eb1c5abc6f1513f3273f603c7534fd3a400a2277779755bff95b7459f50dcfcacc1ad6fd260cb248d7a972d77203f27af4f4e75cb4e8e181781703b61973bec42e6aa25968e14f335c2c60681d976050b9874dd5b3fa2a30dfa1c8bf4034ae4a48357b", 0xda}, {&(0x7f0000318000)="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", 0x1000}, {&(0x7f0000863000)="29fc8e7995177c61cd5df69c8d2206c795bc354568e4b5a9465611e85b2304b26a6c7ce5a5fb82c208d76d43d1a01347171ad01c5b46889ad988ba536bd4e95bf81645a26bfa398fdb57717a7d4d43b3146b51144994e89009b1cf31c220bdbcde7ef2cdbdde66b12d6c0480d76550cb6d920b943edf26e629f99f7c68fea62b4187a836778c0b8bf2e1415983707ee736c10d9f1ed1dd108cbf6c8c163b4fcfa3dd8381491f1a81fcaeca3100e9d90fd1984b4830cbc24b0a9b1e179997fc4af14b088e7414b10d3ae78d9c50a8b10d7bd001d7a5eab9bad4cd4fbfe33bde08c5174c300f21444584ba6afca2ae6c4a", 0xf0}, {&(0x7f0000000000)="91b3f8fcb72483daa2382fad85fe8ecaa9ffac855ccc8faf9f8b25da31b84d40451afb4e6f6bb121c1cfa44ddcdc39146bf88b6a054a02ad0c334bf0c272b14a4d9a1f488385c0880e1fd6917b0db0176955848687654207e0db950c275927954e8c0e02e21981b5acdb4ba94959ff9415f2090514ef19d5cc7745c5db4377a06d643fe651f778b753fa30068fdfda4e5f44e6dc08235381e750d572e45fef611832cab3789df75f220a3d60433d49c9c68da655a2b55cd2e7a8f7bb", 0xbc}], 0x5, &(0x7f0000000000)=[@rights={0x30, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7]}, @rights={0x18, 0x1, 0x1, [r8]}, @rights={0x20, 0x1, 0x1, [r9, r10, r11, r12]}, @rights={0x28, 0x1, 0x1, [r13, r14, r15, r16, r17]}], 0x90, 0x4000000}], 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r18 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f72000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read(r18, &(0x7f000049d000-0x57)=""/87, 0x57) 2018/02/14 06:15:08 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000002000)='encrypted\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000002000-0x3c)="257667256574307d637075736574707070305d255c6d696d655f74797065707070305c26e62840747275746575826d726f7580766d6e257431290031", 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f000068b000)=""/50, 0x32) 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000747000-0x2)=0x101) r1 = syz_open_procfs(0x0, &(0x7f000001e000-0x9)='net/unix\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00009db000-0xc)={0x0, 0x100, 0x20}, &(0x7f0000b7b000-0x4)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000174000-0x8c)={r2, @in6={{0xa, 0x1, 0x7, @empty, 0x1ff}}}, &(0x7f0000021000)=0x8c) sendfile(r1, r1, &(0x7f00004db000), 0x1000000000ff) 2018/02/14 06:15:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000-0x1c)=""/28, &(0x7f0000000000)=0x1c) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$TIOCEXCL(r0, 0x540c) set_robust_list(&(0x7f00002a2000)={&(0x7f0000782000/0x4000)=nil, 0x0, &(0x7f0000352000/0x3000)=nil}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000366000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000028a000-0x6)='hybla\x00', 0x6) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000a3c000)={0x7, &(0x7f0000656000)=[{}, {}, {}, {}, {}, {}, {}]}) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r1, 0x1) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0xf8e000)=nil, 0xf8e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000f8d000-0x98)=@ipv6_newroute={0x30, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) mmap(&(0x7f0000f8e000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1099, &(0x7f0000f8f000-0x1099)={@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x16}, @random="0ba24177132d", [{[], {0x8100, 0x7fff, 0x600000, 0x3ff}}], {@mpls_mc={0x8848, {[{0x800, 0xc9a, 0xffff, 0x1}], @ipv6={0xe2, 0x6, "f628a5", 0x105b, 0x6, 0xaa74, @dev={0xfe, 0x80, [], 0x0, 0xd}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, {[@dstopts={0x2e, 0x8, [], [@calipso={0x7, 0x20, {0x4, 0x6, 0x100000001, 0x9, [0x4, 0x8, 0x6]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}]}], @dccp={{0x0, 0x1, 0x4, 0x1, 0x1, 0x0, 0x0, 0xb, 0x80000, "35b742", 0xfffffffffffffffa, "3c0e51"}, "e490b27b8370e1b468596a5e66b9098ffd16bcfce699a6d89bd1f0da5fdf534439a3693cdc259f7ff2aea4308bdf23f30c9046a48c16dbced079f89e207558ad969edaaa48ec13e7f57e4278c53881f519ac9aa440c633ca8f211f5ac02dd09aa36b555671a1f4940003a516e0111d3313fe3e57b3ada28d8a5fc3b9b346afde6b0d7c8503645b84fc3db942aa9502d9a3fb1c33c9a4dfa01f7e0e56f93195e1ceec1ff00ec0a1b96912f6a7b4a74308fbfbd32615a8313726513fd0447e462f63029ad197a7b94a145af4027a55f5d3194f961d5b17bc655e3690c28d9d2f65fe791c171112312a3e5927cf1266927e41f17cfe22e550b671b6950776df27b3263dcefeafcd89a6b352f4dbc538e3bf402420ec2bf31eb2792395f8bfd25f2985f8f87cae507fa24bd54d02f534d42ef2c9262a5fb6313a429f5166695f2ce49a08cd81136832623d1c673e900685382385cea20de2105b7d2f374ba10e92c18c7198583a3dae5c2a1d7e1e350b388b54ae3809945cf6cb0502d5b7917468dfdc1489b46acd3d7b98718398429cb9330f2578e0192e223c76274e5e5ce667a21ae43b779c77efb26a3e858f468a96dd618aaa21e1c9cc44fbe12523fff4017942cab2cce9a617a726e5c91657871f8dc4787472f41501bce2282f2ad1b5687a34e4c4a41e998c3aefa561622fd08321eef91b123fb706b4a800988ea8e0e5306dcc20a42273c334194124809acea982d28500b23853a4a7793d2192fbb640ac986378af956386c5d180c25ba41560713659fdf363ed60d54b4d94d527fcb96093fb137c496f94eb5405d0899da1b6619bdd6fc005deff5f865b5875905d216ac8d5005212ee9679b5e78d9e05ab9e8fd7486e7ef2e115492d1af7defe894f722fbdea152e34dce87aa9336197b467757022b915cb459b0df4900fa30d9b4a4fd1e9cfc0cc2c1517bbb99f1397dddb814eb5897b3ed0417fd38a9845bc17243a48b6e11cc3d65dcd47a1f805351c2815778121657a8b34a106ea9e7d5d07658b9b41fd77d64f9afdfa9b6bdabfd48e0c7651188d49fd39acb9fefc5a94c5b2510e0dea2ad3e1706fc69fa84d36ece8e02b40f3364c54aae985581168fee0fe0d856d579859f19db8016e3f9ce8f18a59fc2f81d3c651c8e5fb61434ff8d37b5eeb53710e0695179f2f731ca63cb97afa5110fa3562992606a1ea0d4669c555dc9e6adb1e8d8f85b2b27a361eae731d618fe8c22c4630a10f9d4bdf4d7164d52387d0c51cce7184611e7a1dec13d2b7423b56e749cc606f1e88cc109cc0c499027d3da4cc7efda8d9295ccf9faa93d36dd5a08cdda2dd889347f3044121299e67f2e60ec3b8ec2c6b9c52a8cd51f4a378e881bf7578b9a263d01d59897a9dfc042a01358c33b706cd138a82e119163b75b1142117a5f98c102548fac7c02776a9f1b1c8b50439b0a3ea3e8d42e42aa213dcb92eccf39f256c51ecc3a74238652babde0ddcdd63fcd1ce4f6f69ef1e6ec385f9df4bae5bae7fe131981151506bbf3ec0d49f6c538cb88a5cc4721f7bf569580665b1c50c49bf9fc701c58621e9e8c672b41da825ce3f48c66aa715124828629f1c14723137fef0d30d32d5ef20b6c407975790cdf5728f5fa68462d1d50c7c84c329092f47d0afb35044e8cc324b3d4ed330b9614bc4245855ae3d762535dfecfea9ab7e5c2f3482d25ffdcbfd9b43d5f39ecc38573d7bd59109edbfb876b0606500a5ce355a869330a656a166d236d397eeaa54a11c0d037ff03de2126c27e31700d2cfc5fb5e222d8f7c63660d5f81d4ed43bb1048c9c55c91a59ca9c55f7a2c068546b8842d82844a5a0964ebc9bdd5f2a2516d6d0e49f1f8c46a4edcaccc448767120502bb6dcdcc7055aa0a048370b69b4859a81b4c0c58e5e05ce110564e1d9da60045b686b75938d1cc047642303892367c105f481538b16f021528baa90171530e54975a2e6988131fcd96b93876060fea396c2f6ff52360481ce546db5ea958b2f1d4d2ae9e57dd2fc15fee93cabe20ce7643cc598cfe63c6845c388435cadf67edae319fbe739353c49fbb0b8c3930310fa96ba180d31a2c8c8406023acf6d48f4885b22026ec2e24046757d3471293054d5a48043790ee3a2281e1d634e19732ae91d9f3fb4d6e490aacbb096fe7ba9ef572dc2d8224fd13badeb5e77cbcc4e583bce067dba43049cac6d3ee4f3b2b254d6d650d53ffd824d6c89334eab45b43d8a67d26c96c16f78dee259783f6edf188d3d4ee6e2abca5b1e259a15af27597ef11514cd805c8a4e93d90b53564d4aea8444c99c84dbe4a8bda50e24d8b8a2cdfc22f05771179aaef4369686656e24dda407c31e87f6d7a4c77605e7d2b48fcc6a0440c1468f1f86ddb9e548b236103c4d9945ce194c4787c7c49f58d608e06e3e4591e0aee84b8df710552c5a991eafb318d8b4d1bbbbb564bccf7dbe702f21e2b79d776ff3d0f1931c5d9207c4e0d8532fdf85d344ce5fc5099f8663b9f9df0725e86910ac5a20f1fc4fd6c499dd97823ecbddb6da0bc47ca9755b145aaadd72298cbfa31feb1511a1892baf2209c92dccd8f43d73bab4fd116de3b3290d39e8067da776a5cfb8200477dda34d62c2400958104ea82d975bf5e22b4705693d3bbacdca4a48b829dcf313ded1c07023444da6b9692921e9c8bfe091990ed1786d098e23a6e9c7ae659297b0754625b016ee1bb5c2bff4477a38bdfe986b70e04a71d334733100db28372da02f2b5daa19775c26a1a37130dd2bd782eeb27bc7c305f37ea0e650becaf8fd318e53183fb7537d434fb1fd7447a012c77f69edb609e18161c8f089526f9d33d58ca9a99b5152acc1d7b810b6376f7b07ebb9b5b5ab02cd366303052d4d58d35da7322f3dab61b2e6ccd631b75975311ab52b868bc821fd3f70099fab7f8735af8c456a534914aa5fdad0ab701b13dc5898f816922550cf47b620b4002a7a46df0de37ee2dd694af7b65948f8d63d67c6f716774bdfdf490de63338d8620c8be1a6f0f5c16afd92ef1a1c8466143b6adeaa1f18abf14bcb61fc6dc5cd5606a4d4444c63a74fbedecd202836333798e043f52a83b018e95ab1763137d229d4b1fd6c7884fd1e9958b6e03d8c1f00c24ddcc889a94fc02d44dc822bf10409e97f2ed0399d000b8ca17759858e0e63d81dd6e931211462a7abee5bea5ff1aade267735a44691becd0008579f9550c87584058a1b7514a09214f250f73fed701db72d3dfbf6034ff0d1e783aa8bcdf2ecb0aa6587a06e823d4161ce186328c8aea28bb3d4db3aa4a1d6cefa2cbf03674e05f31fbb674d0be68b1a53aac23f8c78a6e31d79d06ac104d5a38b857f790ac901a99806c38608c6d25aa4107a3af425142b5fd4aefa89abbdffe7f2f7b581d8689f3c50ce68eaf7bd360f063195089e661a00b3e94578ca3f08d5b722c2dfc4ea57fd51854caecc655573f0e05638af76839057ecc3ba70f9a959a4c993c70c00f902d6b5bfb8eb64a3ff9967691214a01e9d38acee9c67e6ae06a414b9c4ea7b183da1b10b099ab048602034f4a1fb89921c0ee238037d5c6dad4f31da2a67dcbfe2a68491039102733a587bbd88f516b430e7c68e8cfdb8b595c2271d19489fa6e0b8c2ba09426f71cdd36855c6f01e3ffe7ec757c2ff819113cc8cabc9da7621f4a18be51c25029fbe837e2fa09b23929cc957b89fb7a863d26361faae077f919dd32f7b6c8f3b38a791b3cdd1de26a8dbc8446ee7bbad9f30d5c8d3b0263fca57e660761b86ea2d09879d763db787f4e5a6a4177c95569706bb764da8e5f7ff1217460e954811f52889b74c3c25a3f73b7b3363b5f8c31baebce9b7949f756d9a07a2cca3037ee0dc927c2ba053eda6e9f89720bd4bdb7ebf83007ca47df24a3eb5e49e3967c8e31ccb716bc068bebf65a14900c9e867d17096546c8d813e7fbca0bffb215d2ed29fe5225aafdc65493766a4a22a5b48e3b1c7777c80d6d2df3dda3786bbd1d93be187c6300798766fdf7db9ce47abb9c9f65ce2cc2ee3c607711f9229ff6deedc7b73be3789f051acc53b3349b31c2e5a3f54d446a425a0adad12def74ab3aaf85a1251d1176635bc8d94d67e6c3d76bee3335fa5ba82888c307c36c6ac291d7cb894fe908252b2f39f33200518f254e55ac88b05c442aaa7b04cf3b0fe08afaa42c9fb02c64fc81478e28208126beb9d7ba802c1153dcf3cfefe013c298852682c29f6dedca9cbd54248012c77600366d2d347fe0408f329f7b86082177b82eb85f118091a0a97f3fe27fb5d6878709d9a3e8e512faac0bb10eaedf7cd2e3ddbc250ed8c1b0305cfd6a963796c1b0688766879ea66afd56720ed265d8e8efe477d18308a9021f56f17e9c8d3eea27fe0dff6408a1b82b1b3119088c268f7f319ea2b5183c8b775e316545795a75bda9c2cad4ee99e66af34534acc36dbb58f69b2ba125c3cbbd9d19574a06af4036940ba812f6b1ab70c15754f4edfc0dbaf44924c882595d8c2870af7d4f8c62dbb30484440c76af973a6942a183d2b1b921369d8f82ba0e8d4477007059367a66c820da3c3aa0a46e166e7a75eee974ea4932e2e75d39f3ce6ab04426de9f8d628833df4fda6041c7323bca3bf1db3628e0ded704985b58bfdd9cf9cd0dd176e1288a6fb3fc1ee1209a90b453691a5796e9826518aca76d3a2fc37444da3ef914aeb97ab07822c9170a0d77975077deafbe21bf394193d5456bf60b70de3a86a0dbeca7e94d408826b3325fc88013bb6859bab506101f3d94116545a9152abd0c963b03f97de0507363283d64f79f3d62e7a824e07fdc504b0e79bf7edf691239940302a3692320e9a16abccfb5c3bce3e4ac781b236049026eb932f1e958a79a4a6a17418b6085ce034a69d21d366b40a37a4077bcab8bca539e2c774cb595975d1683d1f9d51419682594efe4f46129fc6955f75da103f036efabe26ca2c0e0c87c68dd3305628c916283b0819131552e0183c8480f9b70f1256dda8d7100747e8d678750ec75f32ad25c34ccee5c7185551a2fe0510b727828c8d4d49fd9117e9412912a008460fa0fa3981772c42f977158e8ae42bf767b3e8d8a6ec688150ceb663f19821307d4d77c03a255e2b5593b0e287afdf9f766a5b2159f07aab541fd939a290acb395520142525e80e8ab8bb49dccb2e10bd60ddbe74fbc94fa5fa4e2fb386eac9b6cd0d5c1547c85906a165960b5c6b3277db20074a0e9febbae1d41080cceb9b543387b1cf2868d7e938fd1f2f7e16d7e40f788fe33c92f405136e4f2f01a3068f1f884aefd5081e8c2288b7a995b582a122cf6fab9f352b0525a48c4ca8f911c5578be499ee6a6dc539ed34fb3690818afd40efc34ce47ce469b255804ef796d5da33d6f1ad3f3a21bb0c1cea416f79ca7a3b52b56b475514a26f9154c094bf11e0e2aea7ce597a1244517b7fdb2ddeff114e26823794d54c5376c12358f019f1b2356a8f6594ff68e3d3effe8a6241f094dea479d519371b3fc8eefa476c1e94982af92b3fe6ae8447b71640418634eb0cc974fe541efcbd44336bb20f84452abad8751efcda690dd7a97761576c3025acc87e2a5fde6934f3594ed35bd491f5ba3ae8876dc9f84565a6da209ffa7fbcc98930d6e9d5756e143ce68d0fce8a4b0c3cdd877269f5dbbd385ecefb61ee04f8cf071a58f731b29f252c20dcc69f241bdf9f257f5c191fb19dbfbfbce20b807e8a8dcdf29604b82f412ec05bbc6e84d567130d09a835106eaa2a122bc"}}}}}}}, &(0x7f000082f000-0xc)={0x0, 0x1, [0xd30]}) 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000b98000)='/dev/input/event#\x00', 0x80800000000, 0xffffffffffffffff) write$evdev(r0, &(0x7f0000058000-0x60)=[], 0x0) writev(r0, &(0x7f0000c60000)=[{&(0x7f0000ca3000)="62901ce8c874678c7d4879a3186f6842a1cc78d8db30dc7e", 0x18}], 0x1) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000d9000)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000e08000-0x28)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000524000)=0x28) 2018/02/14 06:15:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f00009bb000)=@newlink={0x4c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@nested={0x10, 0x6, [@generic="633852d0534e55d1ae"]}]}]}]}, 0x4c}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000442000)={0x607c, 0x800, 0x5}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00008bb000-0x10)={0x6, [0x0, 0x1, 0x3f, 0x80000001, 0x9, 0xbc65]}, 0x10) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000f70000)={0x0, 0x0}) prctl$setptracer(0x59616d61, r0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c3a000)='/selinux/policy\x00', 0x0, 0x0) mount(&(0x7f000000a000)='.', &(0x7f00008a7000-0x8)='./file0\x00', &(0x7f0000a60000)='msdos\x00', 0x0, &(0x7f000010c000-0x1c)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00004f4000-0x5c)={0x7fff, 0x2, {0x2, 0x3, 0x80000000000, 0x2, 0xbf4c}}) [ 105.148000] binder: 21801:21802 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 105.177701] binder: 21801:21802 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.185456] binder: 21801:21802 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$setsig(r0, 0xa, 0x15) r1 = socket(0x100000000000010, 0x2, 0x0) write(r1, &(0x7f000003e000)="260000005e0009fff10000f83a0000ffffff080001009f00030000000100085b1ee9fb4b35ea", 0x26) recvmmsg(r1, &(0x7f00006c7000)=[{{&(0x7f0000114000)=@alg, 0x58, &(0x7f00009ac000)=[], 0x0, &(0x7f0000de3000)=""/188, 0xbc}}], 0x1, 0x40000022, 0x0) pipe(&(0x7f000060c000)={0x0}) mmap(&(0x7f0000000000/0xf42000)=nil, 0xf42000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000806000)=0xbffffffffffffffa, 0x8) writev(r3, &(0x7f0000012000-0x10)=[{&(0x7f000000e000-0xa3)="f8408e907d003cb2", 0x8}], 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f000083a000)={0x0, 0x7fff, 0x9, [0x6, 0xfffffffffffff801, 0x20, 0x8e1, 0x200, 0x40, 0xfffffffffffffff7, 0x1, 0xffffffffffffffaf]}, &(0x7f0000a63000-0x4)=0x1a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00005c8000-0x98)={r4, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}}, 0xf0000000000, 0x7}, 0x98) r5 = epoll_create(0x5) dup2(r5, r3) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r7, &(0x7f0000013000-0x8d), 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r9, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r8, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r8, 0x8, r6) fcntl$setsig(r8, 0xa, 0x12) dup2(r8, r9) tkill(r6, 0x16) ioctl$TCSETSF(r2, 0x5404, &(0x7f000052c000-0x24)={0x4, 0x5, 0x400000, 0x7, 0x90, 0xfffffffffffffe01, 0x6, 0xfff, 0x2, 0x707e796, 0x404, 0x2400000}) 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101010, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000cf7000)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f000020e000)=0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00004d2000-0x14)={0x0, 0xffff, 0x1, 0x4, 0x7, 0x2}, &(0x7f00008d7000)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00003ce000)={r2, 0x4, 0x7}, 0x8) bind$inet(r0, &(0x7f0000b43000)={0x2, 0x0, @empty}, 0x6e) poll(&(0x7f000034a000-0x20)=[{r0, 0xa468}], 0x1, 0xb68) sendto$inet(r0, &(0x7f0000d39000-0x6b), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) clock_adjtime(0x7, &(0x7f0000ce7000-0xd0)={0x1, 0x4f7d671d, 0xac, 0x44a0000, 0x8001, 0x5, 0x2, 0xffff, 0x6, 0x20, 0x0, 0x800, 0xb2, 0x0, 0x1ff, 0x56, 0x3, 0x2, 0xa2, 0x3ff, 0x978c, 0x1, 0x0, 0x7, 0x6, 0x1}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000a29000-0x8)={0x0}) accept$inet(r3, &(0x7f000091f000)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f000081c000-0x4)=0x10) sendto$inet(r0, &(0x7f000013d000-0x1000)="5ee9cf59e7cb1b2e4d512e7722028dc321f30d3361e5d0c820903880b9dce41e32c2eaffa159d651a50a6e2e25cd3f5d1f94e82950180332c46de394770ad573dc50c7cc6a4b", 0x46, 0x0, 0x0, 0x0) 2018/02/14 06:15:08 executing program 4: mmap(&(0x7f0000000000/0xf8a000)=nil, 0xf8a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000ba2000)="e300", 0x0) mmap(&(0x7f0000f8a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000f8b000)='/dev/keychord\x00', 0x200000, 0x0) mmap(&(0x7f0000f8b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000f8c000-0x5d)=""/93, &(0x7f0000cd0000-0x4)=0x5d) mmap(&(0x7f0000f8b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000f8c000-0x12)='/dev/loop-control\x00', 0x0, 0x0) mmap(&(0x7f0000f8b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000ca2000-0x30)=[{&(0x7f0000642000)="6a9835ae0dc00a5f1c74d15321f7353677dd326bbca4cd19f9ccaa96f7a5e8b1dd7804a79665964625f898b2c7abcdf80d6e44650fb30db28f83d25eb22c34c3bf49bdecd51dd33488a1a670f5aa3b1434b4d7e51f9ebcd40a6e09bbadd4e70e24c0619f37f724e7d60872c9c9b5d9c582858274b782171d4fff0205f6b7529b0091ba780cec4df46edd3c633f677ab9ee3e102e1e95dac0e61ce52c0f599af622326dcf075d5509ff7be42b6df31feb061bb913f42c782da26b0e3df753b9ca50c9c3d97430", 0xc6}, {&(0x7f000062f000)="48f00b366f409ecfef06c6241e5d228a364a2efb93c43ecb70c153643f64b1651f8f5041f6711f0f876b8ab018d3397d691ca5f02326a7d4d792935bf0d561063ca6161ec1adb0f22c4744a818fc3d0b318a15cc0b1c3d2f38fd7822bb7aa50e63172d05b00836d1d4b74ab93b4ed044e0759b95f307da15fdb420dfac275756ccca5c918adc914877442ce3ea58817ab145c2eae174a4345b41e89abc61f6cb240e7e7b56edfc378f0a8625ed7888db49854dc42b16f40a5cc8f52807f4715b3befc0f857ac0c0319efd8efbf02cde208d449dd393a796149ed90", 0xdb}, {&(0x7f0000f8b000)="f7ac7561fceedc6ceca7108977c6a323b07177ce6350343531e9bb41fb492b8a633cd41f8608c4bb0a635bf34129dcae3cc1430f067461d09c83bde72008a65646e5e2416719f6c6fd913a4c3e76f06ef5296855028150e15d1a24fb2372c97087de6915bd1907bd4d9c5299285a29fc12fde6c8d59991bf939efb3f792ddb60a7244a556a7910a03c46c40cc061356c9cd2cbfb304e85cb2499064b", 0x9c}], 0x3, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000f8d000-0x8)=@assoc_value={0x0}, &(0x7f000059a000-0x4)=0x8) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000f8c000)={0x4, 0x8001, 0x4, 0x7fffffff, 0x0}, &(0x7f0000ba2000-0x4)=0x10) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000f8c000)={0x0, 0xfff, 0x5, 0xf4, 0x0, 0xffff}, &(0x7f0000f8d000-0x4)=0x14) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000f8d000-0x8)={0x0, 0x128}, &(0x7f0000f8d000-0x4)=0x8) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000f8d000-0xc)=@sack_info={0x0, 0x5, 0xffffffffffffff81}, &(0x7f0000f8d000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00001ae000)={0x2, [0x0, 0x0]}, &(0x7f0000361000)=0xc) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000b1a000)={0x0, 0x9, 0x0, 0x80, 0x200}, &(0x7f0000f8d000-0x4)=0x18) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000f8d000-0x18)={0x0, 0x80000001, 0x30, 0x4e24778b, 0x8}, &(0x7f0000b81000)=0x18) mmap(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000229000-0xa8)=[{&(0x7f0000b49000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000f8c000)=[{&(0x7f000087d000-0x6c)="ec664b3c51e8d2a8ecb300d890fa4c31811b8f6f1f17c23dc8f7b14f621e663feea33bfdfe44848fef325d7dce3ceed266a080d8639986c6cd5be6444cba5b1cdce849545c1e3b63d58992529e8e800667db97346686dde1327d4ab58d6f3672ec1e335508746981c65ac31a", 0x6c}, {&(0x7f000099f000-0xd6)="20de19a945806190aa047072c654fbec13c26d4f5d0c36ae491e1f1f588895d8680824092146c2673653bd3e2b74e50cc7b7d1ac163e8799df66883e6a5b5fb07585159fefde0d6922ca7b3a976fa5f0cfa6378fa0c65a18afdc1a1b29f1b03e8b474dadaf580e3aef82cf0ee0929a6afaae6049e9e13e041bad65f8db5a829a9df1d1b6226da0688266c55ccfaa71c847e97281f3df872a09ba6fe85c82f23a2a765345f32e70e2dc07cc025687204214e61b2b1adc2ca0e670512f016e133781743777a6cd7d7f8cf3fb75d9e57edc017cc6400673", 0xd6}, {&(0x7f0000f4d000-0xef)="de0b8d53b7aca490536c4c90ca8d9bc919e4423bfa1e3c2b42e7458d718cde6a1d7233302e39c96a4405048441e32242f3fef78c1787f7106f42129cdde87a61e1bb7d64421644be31ba265baa6d90e890e067ffee26212cc76ee215005faee63a3d71cbd49d51626ca9dd83d85994649e127fa906e0ff25402b25d176e32bb0a6334170ecfff4bc5bc45f606394b739935d6a953ded94bcdd82347221cca7064ed63c918df6d173893f198d901c0d8fcd7602fd93ffb078c5126dae6a17efd1e9927467f8a0b86424c1d428f7549f8023ff774680fd10ada00d3e468a939193d263f043c6cc878625f313efad5dd1", 0xef}, {&(0x7f0000524000-0x95)="936249d626b427e4f1f681d824b21260873916bcaa583ad544df435bcb71d990089576383f204d685b88e7fa9b00d2ab1935ff680adef6dcd3ab44a90c166f2d2c7e4ef9333861010f201115599e78657a217dd73d9df8e029a3d57ebda4c7b89e347f210643b9ad48fb11eef8bbff3355adff0df9ec2dcb8ecee459275ca521dd11bae33303a09d75f54b7549e8a0871f8944a6a1", 0x95}, {&(0x7f0000f8c000)="05a22055325a4f52c99173a97f83b410c22936d29e61f7b503a0e96bc5df0ad27b34e203485fa3e7b211d8f9f4195a78ea2c267883a89f9f57d37c9078e55186408e82430e2f30592a7fda8404116fc972d43e038dcdaabf06af482dc859a272266dcdeaf12715706764f72f9d1256ac54ef72bd14674984b7778f378daa4ec52c49edf9fcd3092df544d462f4452c3bc64e059c4fe34e89a5a922fc55355dde6f1bdd14b8c74550db94abc5672e03acb3bd4497e365a4241b76b2c554fd85faf79336a0f42cba27f1451b8257eb1981e10c105b745c2f88ec6e970e47491215f63134b51d7080efe652865db9aaf8ec56", 0xf1}, {&(0x7f0000c4c000-0x1000)="eb4755c0e7b74484c0b8e84a6dd500277f30f987b93e99b8504837ad8306636b7718800cf0ed1d16106b45f0292825f9c08dbe23e6b5e9ca74c6450fec00b7a09ac210908f94b152887ef98b6ad62c5882cedfcb7ca4f273a496f8ba81ff6f4202ec8b1d8ae03d19bb4b0327dc697bf0218a88423a216af96f60f04862fe5be0c29b9faf81f1884baaa1242357ed06bdc4e00f972525f94e7c7b3757a0b1e59ab5372eefca6ccbb694c6503b3e94869a6091ee97e3f0ac90e7c830425f5ea3e0404d6a43ef83582338297084d3e0d92b46af7a4bd09d96b74b7e5d1ea9a697282e4277d14a7ff1c6362f754c53e5a16409d368c80dbb006acf310db0f604dfce536fe9fac549633164efa1f86dfc85b65e394189f849b954a5d2ce42e9e53b7a49fd073725b21ec35b26c7f4514abe02a0f7398650a99b6512215a3dab285c7aa7bf9bb80f14817798581f6c6b922195b254a6439430322748d4f342740a5e4ce1c77581874c7ad9c9969c9bdbd732c99155b61d90335fc1cdcb0d2c5daf07dde8d78e292ba5e7490342db242a6647bb84aa4db0887ae5a2a6238c504acf70ae5d6437e214b59edfa003bbc6dae4bf15cb0e62adc94e70dd265e3824794121544520979ddf10b8053259ef9d0f4a50cbf6b1b5cf3b1e216b79e57d5ff791f44174cb66f2da082b400511aba70ba3a26a315b38bba6ac7436f372f6c352f03584b2937811ea091135c8aea1288d0bbca713a34b7da58bb0923411a25f3c05dfeb5a8255b73cbe9eb6d99fc9617889da673571ee4c53a8090adddd07d305adbe1b3128e3a81e5ff0e47827188c726045ccfb96a6ee3e6dcd2b7085afacc4f6710ddd08158efbd8b4f3e0311e60187432dd7dda4f2ebf2104ca2201431fa13e42a9e11261a70aae4a6f2d13bc365582a8c86aa7fa75df156f5b0f4852c824e106e17d953bdd453acd6d209faef6277727f37d3c2fb4860629427598bd3dc54a26c202562bec8d07672c292985148ef53243dfce62d1bf4909286623a1519c6b2b1366966136c0c46acc0d9d08d44dfd4fb92184638c17d356a8bc3c694b58f03e57a15f4a0327716208fc44ad3457d88b9516a02b5b02969af8fef8f0018631ebfdf47ee73a01feaee8bba495763f1630269ad5ce2655d275ea3537be730810b208aaac4338cc446e403952295bb8a611c8ef99f0f1641ec9c01685d80e90522f993ce4916c37a29e321a127e1ca84aaccf461e910ed7b42d59c5ae73074653ef7cda851175e1dee560f0e9f595696040e3a01b98b251a6145c918750675fb2fd5087065f0a89608d08b32eb5be5a4676b93623d9cf0d7861154214e1220185c308bbf3beb70001dff3d911339814f713b817b874bc20ecc835f83656e2c496d21a1a6df78e77a6920d6a4148cbb7e326afbdb346e9b1a56711ef99ee52a4bdacac1e59667741b6b2f7ab7702433018060966040d1352984f896635682775792cd0b5ad3e0a6cbb9ccc52ed96004bd7fce2aeaa4d2359226927ce38048d073457a5f201c7a82f80137afbe0dec916ab7ae364e368e9e5417a62b32f157b4ced2bc35c67abdafb7554926fb7ad66194df9423d876236f7e734d243bc71ba21883606529cd5cdcc766b07f98e10ec9120bb24edc9d1641deae8c23df8bcfa42287c720b84c4b712418a8c84a914c2c8a57ff9e62df49d78578bfd8d62db7ab4cc5353c14bb1d4a8c26b41466075fa97336241e30a227dd905cb02f41c31d5d757a0f5ca795f7f6a6a5cf548b46dac656d5e3cc115e3d6a3e601a156bd096dadbec5a445f8918c247e1388b09e9015c9cbb02ae94e0ded7d6af9289068b5c78e56db086092f09a1ab9c478b2eb4af71ca7bd0b9e187ffd5476e303f0f33f336c76ea62780fe00de8c4ef77c5d60d518b57ee7929558dde7c8528cfb6642c37ba54031c43afe6905b474977a661646d53d783416487c3ad71956e528b5fb83498054aeec124c26334a5d0f077d932b0d152afd0db21c32ba04161a03eb70118fc432966d130029ea98b2b2214665474a154f06b0cfc7528d5db02a0115cb8a414f83ebbdd78992b401689a60f0b7f83c5609c9a71525a8989d51c30f0ba68bb4e86b03dc6f57f035bbe65bcebe9b29b36183b4111632cb0257ec6ed7d991ccd5e62bde54320206c3631efb4d00c7b64b32477fbc71ec79f048593569c92c1919a8dd46c1da7060eee5d5dd23ac401cabfa10ff2c1d44e1087e3efbdaf09ce0e8eeec2d87995a6f6a3e7834e4438bff6179326a716bff992b34fd5de10b329b10f37030cd290cccf952f7dd347b9a85c4fc05e692050c33828aad1b0ac0f88dae780a738efa3922f690e62c0402260040b94e7f8980e481c869ecc9e287b663ae529f7a1d2a3caf2abb4bb5c811c8118c377278d49391ae7df23eedf522ae2a062cc184cd2b7d7709d296e7158bfc3d2f20e3b7b4340ae901374e9cd6280c6a10cfb67ef3747202600f4dc15be00a6fadc09ab9d07985a9cee4481a2b5a7e4f4c3b28a46c5d51a3ef2b00b4b96915ce572dd5ca41337be98c4c22e7c17ab862f310778384779f26f616fc7dab7128c58c5fdceb7763f24df13ba5f51ee6b99d8226097da6c2154b97be3d838711db5337bec2b83ee5c6b4adda589d90c4ea56db5dc376ba0a84b1d10c7d7867da0c8f27cc062ed5ae07d4a3a8e570d3cfd8136b32bc9befb10eadef2ed23839cf606a581a48b46506fa1e6a54c1152b47f55cc7bf6f76008791c30e07616927536ccf191d3a320f660824678d48372c1ad543b6dc6936a3c2fca752f299b9440b6983677e50e7dd4966548050c7cf9d111f35bd83cfcfca005a4e335e46461a7953198f3bbcb4310fa72c06861951acdc018a23d056f7cce0936032819669509091c8549b41d96433bfdf01af5511ca74f3671ddb1983a1cac63feaf4e683d88972f4b8fcda2ea8ba1027c457da0b7941fcddbdf753b95adf643809e78764a3ba106cff05da1a93e99d1793841d055d18eea139638d26fa40ec9a27bcc5a5ae587b259912cd7ff8a684750a3a41e73183e316380512c7f9460ee6ca7976092d13dc740d8c31d8a934a2171c1e1aad28c6b059594447c04dbf76645ce299b568a74756c5fa19e0e1f010bd07fb65526469ee7dc2995e075b1c22f1776f5a8cb2c6a09a4fccb30b3ba0068f22000da47a3c9907fb61f1efe2066c6ce5767cdbc1b3115fff0bf35940be8222b8202838ddc0dcf17c1eb5c9ee6dbed1e7424be16374ed8dc1a6492b9b6e8f0162716f9b9c0ecaa7f516100f04e1aab9b198867a9dc6b21287f192ddc7aca3d7773991bcabe4f383b46f7bcd931abc8027122935eb83a19aae48a13422d079331c51f1b2cf21f95ca827ba4677e59d7c429438c67e72d735df1f2dce6a662a78d64a94971056cb6e46009651f787cd8a8c06b7ed586a597f7614f09a2bfb940012706e94ffe6b16e9a0709e8aabe7039c549a191bef429e8081c0c86a61474143ea5803a7a42fe12a48970d3eb66a1e1b98563cd2c70f91649c8b823a562f0c69a5ce03e4c8ada1bdcfc68a2bc4a5de5adf4384773eaa6e122342656f6dc14d6b1b69ba813b71fe90f6e81f3d0d271902a19895f9c3a9ff61ea650c52fe682165f2f89680c48c8946a3adcfcfe9805e2040c2ab3970582221655fded586b463b1a8958238bbd0c6f9657b15cde21eae735cd8fac260f0e82cf6123acdd4a46c3164063d601fd0dd57af5407e14c640bbb4b2cb525350fa4df7e9f11e7a27c49f1ba7a6034b61d9f510e892cf9930a6157dbcce7d20934b746b102f3f1c07af81d26602313f55380766c9ce4b698033ade7a9e5125f0043b06464219dc237d603cde25f0eba9da5635b9542f6c792aeabc1044b2e92f57897357209697a6fdbbc1c0b6ca5511f97212b6c80b169b449bb4010660d52190ed7a80ed511d75e6179f3b8a1611e2433f0357a0464166d3061b95b7bf44f5b0de5e3294f63f3e18f898b8f6bfdb97ab8529f6cadbbd152d7f985b9ac3c2ebce308611d3618ad051737e201a0a4f0201d8d941835eff3b4c82ba1975519d6ad0cfb7b99a1020b6044a3175df65d6d03007aa1752b020a8c1c3e155231d75aef8adf7bc420ebdca3d7b32d244e57511e08ef6417f8f60014e18637a21243c9fd8461e6a3c66a6c4d081d4f0f797a5224270fe3d6edc259d897d6a40b9bfdb4d0ffe65007fdf12be2b34fffd95ca444486cfbd82eba99836fb428a7f6b8cd7191d374728963ad6cf20b74e6559b5b755e53be97cbd3f0e147fa67c2d3e8b50fba8f0d461bf6acbd0db46c3baeb555e4038798eea1e77fc0479836c3955a5065381c4c1c31f0aa888a717f074985f6474d7db27f540d3ada95d3490eff4c886ea291021b5790531ec219725665e7f8c708c8b004c9cfe262faeab53c2a49148fa7013fb1ba6f3cbc088b89e24d3f68d0f6861c69fd9d81d48d006ebc90ad82980d091f10f23a5af89ca27b6d9eca3e101383e50a58b12f73e295dbbf57d7d55ce3401f356205416146400c1f9fc59df0c66d1ac9a7f0a48c57243ddaceab9f7950a6e6611783cb0ca09bae2707d1adfac2b66adba07612b76c9e77f2bb3ba0053e9654d5c94d24c147fecfc05df9f43f5b86e46d1548fcde03078931a4c2bbfec0d2cedec70af00890d9cccdc505180a47c1f5c70467503ce0abac0610c1046637c3ec0d104fb9b7a65b5619129414fe0a9b67d16f28c83d27263273426828ebcfd4a33478cd87aaa651ff446ba4ada7f5d3bc6e9c090a17688d5982bc734a11c5e070bed9db9740d474ee7ddd9b5738c39746b9b62e7599fc7a44e56e318ec3eedc6945a961817364068bfe188e670d506f988bceae1badd086283509daf8eaf32be50230715e248b2a77ed6ffcd8056a60d4277b41f8f63971f19364b9ac3b0dc1d8b47aaa0c04d0fa4b9bd12c18a289db486b9c298e4728dea10058df2c8d7592322f0c8c52c68f1fbb9c41128cbe0e2dfa7ccecf4d39b2de3671e2a1b3f1b3cd7d98237fb539e6205688ab2f24e015c0c6a5bc8964c8a0777dc869c2b9f90a2e120dc4f58342e0209b8552c5055cd3239c1ab7b9c3196bdf035cc1e015a6d18f0de1450c85ba48ac1c980eaded874f7e7c7f1879aecf951e14c33d20b45836f319d85548c607dbc4b9083812675d996ecf229659abeee90b4873d83df09f550fb378aa60a7001b6b718e7b5478cc41914bcd42d43c2756bd158b4aa0fd09ae527ae02c21bcddc742ec9e2d02a1f1b3a320bec222d4590f3056a236748c7f16aa228e96a7fe0181c3643ec2dd8a92c12a2bd641fc8e99154fb6dc4963c415aba8ec3aa5e7121af9a43c4fca86ff40015a9c9ae02bf0455c5adf1374266f700e2d535c7210309389beedc64780928a6ece871598c80c1c6e13fb15244aa88586fc31de29779605644e9e85aa07bd7cbf6509c283d7acffd1682356b102ca43e338096557ec7b1b183baf5146c61f612db5fc133a31ea98c1c1ddc16acaacae5a0e4d438a18724fa961dbe9d8553afc1a2cca1e3fb575a6a387cad9d94c889f11857bef625011524a4f245b17ed2c0b3abce112a162adde365deec3e6943048a0e4d5c48ada8ee2894601712fe848e2dd5ac116f92649156b20c5a901671467d224620a8a6973a8ddedbe243d8dbd50165d63d8bd0c41fa7bd6a8c27051a1697f3a6fd537d37fe2af913dcf6aa07114753424bae8b194e2a121e9462ab371f26bf66cdd0c3e408b6fd4383f005c2bd9e0d254de9e7b166", 0x1000}, {&(0x7f0000f8c000)="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", 0xff}], 0x7, &(0x7f0000f8c000)=[@init={0x18, 0x84, 0x0, {0x9, 0x0, 0x7f, 0x100000000}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x1ff, 0xf, 0x3f, 0x480000000000, 0x401, 0x5, 0x7, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xc, 0xffffffff, 0x7, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x8000, 0xa8, 0x1, 0x10001, 0xd27, 0x2, r4}}], 0xc0, 0x800}, {&(0x7f0000f8c000)=@in6={0xa, 0x3, 0x5, @dev={0xfe, 0x80, [], 0x0, 0xf}, 0x4}, 0x1c, &(0x7f0000f8d000-0x40)=[{&(0x7f0000f50000)="54d79eab3fc60ecd18fe7ec2df7c886f87ec63c2a66c16405b72a3d55986e20dd836a9cf0a9b119d7dcf007e2cf4a0c73ea5c667fdcf046729cfa8888b282da8bcecf1da0d4c6b2aea14a93d881fedf3e2b2f2994e8ce35c16e14a7707bc48c1283a4807ecbb0ab8601167ef6854031d85ab04d019ac29d1e0f3e3a5d8504fcd266d27f0f0bf121845a28a4578d364249c0665291ed7", 0x96}, {&(0x7f0000f8c000)="5fec7d3ea790712d0f4f072d0f196421e3ddce7d3306aa002247", 0x1a}, {&(0x7f0000436000-0xa8)="6c73f1925d44b3d20a9e28cf0d39fda83c37629feb1f2b9d037cebcb7078bd3907d771baeadddac85a122432fc3d6f8ec3bdebdbc274c571215efd830a139307e9d5e66cca54aa51ea608e23a221b0b48a1000b75d0d04d7baf003cf229734cab55f625720425ece5d3ea431384a47eb0bedce6d99324d092bfe30d5853d080c7f140f4886e9632019a62bf4c8215ec0f4229886949d29642452dc14d9ff936a202362a750e970ca7e", 0xa9}, {&(0x7f0000221000-0x1000)="bd995beb9b6a8d009adc0741e5966d30b3434105808b4f8bfd9cb55a1692ad98ba27caca0ff83c1175b19e7c9b02759944f8cccb5e62f10d56b652762aabf831de89d9dc3bddf3d3491a47e15a48fa2951f9fa0c12d348607844f9e730f9c3e9575a5e9e8be0937c67812e6135013a6a6bb863e4f33ab8a6f1a8b1755c94f59ec45df256e8c95f48a01ea61a23964fd4d19e56e356ac2239a0783a5010be5e073f03a4c2276f75a0cb8533641f84e4dc96a5880fe637c15ed3873cb3b71428d97cd670ca446e121b72f82aa55537c5f30415a2f30172181d90c43c6a2eb4ac8df0eb82a3369133d386bd01c61297fe3b681b1fbe2bf20002cf92a322a71892e8e203de2fbf705c2d40fbb1b1385122a66e17203ef874a036cfa57819df62656eaedf37e1ccbe3116f3fa6bbac140625520464ff773cbe42eec82fd09a685171ed7cd18babf4115e4a7a44336d3408c43a8e646219d63173bdb35d65299ba5a6219ba4efd2a987f4c3091f122b910eda78e30aaad6bb14ebb6d5740417a7ba4c4b0e38cc7088f411ed00f80f352316410fdb1da30fe793a8d57ef26d3293dfa71b8ae6dd3165c57235be7b85a71b92bd2f9d261e875fa7a13c99a936c61c7c01b3f3691a83b833a3e4a9ef7b471f01bff4a36c14ea50cc8253fa4f56814e4fa83dee0d716b97294771a13cf50fd359e82745db5d74e877c9462aa5f2277c6220e3b1f792cc202acf1059fb43b5671cef14b3a23218e8dcd9bd27233fcf8245d0f75dbb0528b029f9f66a42bb522ece27a7df7662145edd8d741e7c38d19823584eea6dbed20d7ef370a005cfd9c11a63b807e1d012a89bf6929419c38e5d6d94add04d1e18b2b64b118e277bbe907eb0da55bbfce897a247ce9e6ec08b566a8a7ce58fab9a5a7c2c36c0bd4dc43ef15e8bc7dafea2afa9c97d52286aa9f4a634399d68d150df14c84a79fd0801c24674c6ab2bb80a75fbccf6855cee85435a3822c5770ecc90877e194f7fcc86e9b322bd4a21b84e2f42a2be6fb135348678fdf5d3d8daa1704556944e6be19ff64b9cc2134c32ec3dcab35ef5564df0e5c3ddd86191fdd46c3284719950e7ea65ba3b9b4c42f5f648461807941526c4f7f4a4ac8bc05678fa0a83f93fd178934be17612517ceb1c5a31f2f63a30f596ace79d265ff9b9cb279c05f9442aed52417bd9d9f0d6506df21d9bfc9ae2203162ffa893e5faedc7287b70064dbf2d48a077d4761fd42ca562c61345791fc561d4f759aeddc3d8c8cba90177755a1ae4817bcc8ee1e4f6d858ad6ae466a157b615b0eecb5d5386e2b3fde443c195859eb2b8d0c29e0f72b79252d28b97df16a3b77868106b8b0e61826abed61597788f841dd32b3d604dc9e17c4e439d4397644125fe30f606a23132412fa3b67ef6585ad778d90376d8c235292ad586abae756fad5717b8f08da8a1bff071ca8b0d599392e37b0e80194d7c0d7f2e2ac016f466777e2ef456c6ae39ec3ac1e70f6c35c6a7f9481890aab7458c6e8e389652c6d2e41f642fd2e87245a1a394333f30c8f0851ee2f1bd6e9242f0d2309f365259b4726f9bc183a28098c12df5e7ee97874e42045c461813c6a3f228a7298d7ebf9e717f222114fceccf6cbc8d982471e42ffc9f29153fe82796592d1fe3ae2ba317d9caa6fc90b704575c1e1aea267b28d08968f6ad3d762f8eba90885d8523e2fc4766a10fbc28356ded7460a3139da7126842bdcc68739603ca395d34e612deea1e9ac8aae90aa8461db31f00eb07d6559fb1c60be4b951eb0bbe81dc1118eafe9f111631e4d7b7e70d6394d29ebd60bbe464023370faf3947eb675ceb90050b3cbc5a8e20d4ca9d4fa16beade756f0b79934b850ac94f5e0ecaa9a831c43f2aeb4adcd10f3322afc9c20acea1a2649027fb632b062bf264cf8f0a8fa7130269cde6d7074ef91dac4c7626b818720b803e00dabeeb789eac6b0c8b21b1ea39f8bf2ee902cac911dd137fb6878a220ba910493d0af1c31471eb262f6be8dbb1ecbcd22ff22cf0b0fb3ac42614ac1007d1ee1b3bb8d5cfea911e348b8fd1a67ee18792d4ee18af49eaafeb0ee378addc46ac0bd76752c518b0b7122ed70788572ae6c07108195214f4f0531bea74fcaa45ab6ad7cada1c15345a10219b058912d87445b0f1982c77d4fcf4f701751afcba3df51bf15b49c7a1ab9890b73e94264d913f4df9d31d27d6e5344dc1d4738946e86e6f3193fd73e26133da402354b9826a5ca2acf02edc737109051197974aeca279db143f9b567442771b758889f95f659876f233e0b60e63d7abb23f7dac3b970496bf09e3d1dd833f59d2ba87b973f721ef1f2a565c3d6f172afc177547a47753b0720d753d6aa3fb623fecb6903aeb078b3b3878e76e8c2569625ff56bb93dab024bc81514e0085dcd1a79d1ac4ef7e8d754f2fdd876a3fd930a794a1a6201cd57366f5419880c3a5ea6ba64a6c45e9f2de8b721920e7b80ebb01e25cb56f3d952c5069ccc7986c15255cd2e2d27e155d9a0d54b618bf53bbfc403b7171b6f03b083c9fb24627e057ad053b449c030a70516b4dfa0a578f1a3c1f019064cd2bd1c13800d7d647a7a079b2201622a3094f91dc23d81d4bd9224e8f1a0ba137d87bc60f7854c8c2e5a26c622264734ddb3dcf962bb19c74b7bc444605f95b7a6a5bcad01e31afdf9cb3496434488e9f8f292b794d380207fef2937482a93320643a6fae87ab46b0819bf5cc156a033ee5325bfa62f25072cadca04e25146b7354e3292672bdcb7fe97b41076615e38a015b35144e5c261572f16e58d8552eb4ed1a7c3cd91aa43822e1e45f4b242d991eacf21ff81322d07c3c1e8c9c60db70d9ba91eaccc937d34abebd48ccf11882922cb7eb5b798063dadd6ff66d4001c431d0dae70c0dc7fc081cb906a81989eae44f1c93312e5d44d8ce8f27d2ffaf6cc070f58dccc8f57b8a7c9aa4a4743ed0d44c5366694026eb895657c98cc470d94085fd439d772dbe4df2e297204792e592e79558d6f594980265b9ce11fe08429f9a53843295dc55fdb3303d986ac27f7f39f8fcb29baff31478c080acc8b7058682426b408b6e25459304c8c01acfd8ea8ef9628c5ed26740d2b57f30c4342acca67655afda4677e4723538ddbb1ac4fac4166731d39408fa94af48d229df63d36d5bc3415c346a0b001d16d46f84a0c3ef1d1192acf1a5bad2b36ba3c56b92d415ddc973debd5296a02ae9f5900f9be99d7e297933b1fa39e0d4bc9f8894f332c6d9494ca97a0640bc84fd01223f7051a7200ac49367f7d538b44da85e49a6c057b611e4d9bf20eab33a25624f35896f9f0c7796edb0bd7a457e7cf159e37c65f09cbd2320d89300beb32aac6f428626da9341f9a636817a4a432e1891fe93109b14251b2d1d74efaf6af502bdf112c2f0f5918e3cfd6b6029d241cdfd37fe414071f9d498e357a39e3af0a6cf6bc055285e66435dc7374784221ed46142a854b09e71b75511c809bd44d7d3b4021f689c3ca2174c4efe3438c83b3239357520b59424a8d1b320cc3408e39150c96e9d0ed6a90b5364236c9e749fc0078ff8db338d94bce95d7341a0aec8d5a6f450d5301030cbc441783f36fe400e6103647f12b3e0d744b39b758ae84ac28312965e77db27a572beed07bf055d523fe72c9acdd3f92568db9ae9c9980f71c5f75853b277be2507aa3b5d094fc6864dc01f440189d930dec10b6c378e4b7e19dc85a91debf826b394b36060a5207aae23746701c19f5fc1a23e9e2340fb47a28ce2d23d2e55537861f6437ed74df4a21ac193c88ec26a73b887d80ade86b60cce0c3aa4a6eb49fb746cae0b57b7c517a8ac46427bfbed611c153a3a1b52567756e58fea1965675bfd243dc37b56c5ebf6a1a9bc207f47f3923cb164665095f4a8b4bf19b256c058d4d7a99cb4a5ac58665fe0df6a17246978a9c6616744ba9fe07a77d4a619e39f40ae55f71fdf9d09c1c0f74b95c00b024c35ea647fcc0b1925fe289589f5c46b5dae3024c3ba64a1e6e603ba3b2c83d9dcb9ed14c5e9cce6d0ab0ba7ef66a6271e867dad253bc4ed68db6e318beb8cd25a30db87e3355695d9b9bcb22b031ce2c8faec40e42dc4031d1f4c72572891a0b9e56ff56da652ba2e852b870c9622c7c977774270e95981494d3a985f132f02995ca97d94499d3a3b8a50a03025a02b3132cd4677cfd0a989240cc761da0c228e851b6136041717adcf86e98475a213e2965f7d6833f4551a6780a41f249284d0ecd398b88e04c6feb992af5daebc355f026693b6344dcdf2e9f5211396efa3a08865d48d6b751828bb784f45ad74fb90c02df8704ba60d38452b16465d7f05675a5b9acef3839f293a5d33fdbd0c5a00707ea29fa205308e56b3ccca32c7879c19d23908651b3e0083e4da53367fe80d395861b495f14cdfbbee994cac50039a50371c760ae2b93e3e1b8e7247bfde5a9977d9d7e1a65a0a58cc60a30247c08e4e75d48bb6a0d6a97b8727aa0c9b508db1947542cfe639d6b9430f80320efe52a3410f51e2bf40d9ad0fb246841ad93df655f9342a975d497f8bea7960f461269d6a5b91e5e9bd2f2241e8cf988da0d5fee5b081a0a24a9c04d15878d437544280b9a068afd68137fca4aef9629cf47b145bbae6ad202f8892822161c82264bd270d352a7c411bda2d9eac1c6d9254105e83cd9c52731dc46efdf43b331e8110db0a494ad6c30ce2b82f347bbdb97c39951dd6e194df8a30d2f67da335a0ae86c1e4d50335a6adf54d7076138a8bac5f45a696eeb4cd718df1635ef1879ff891c3aacfa67f25e1b7478084b3203b90a1f04756fc0314b47a3589a14e8d59fc1444fde7a5d2fadc5822ee5656677da57ebe73499ef06897bcad25b2442dd6781a6ad66a5f0fa6c6e4e261327626591d84d050763b16d0182c47de8badc366750a198e393e8ac07106f621a6fd9653cd6c12de5e7955f8f6dc7ba4a9016139478635e45366d45ad0cfc79bedeeababf0dbc9d32a99c2312fce7284f3b2286536512481f00473d75ba9e942b24711e353978a7d8504fb15ca4fd6e4f086288010d93bbfb9c1a36a20ed5b488269ed4701177048628d4f3bdd64635c3e591e328a690d2dc654e66bde43d372442c5f7affa0fd659b0941039997ea6e840d033e2c24c51a33f253cce62d0630a8fc667330b8bfcc2b0b5c8c5e26e25dd6d22235a2eb0d8b164a8f923deed769776e4ad75a7c82e79d99ab1389231bffa8992def19bf50e77bbeaa2e691ba18778f8c415d3a162dc9af0505c7672c37baddec629f36dbbfcc6712dd00e4637c640c35da1b10e81e3562ad4e4cad9d366c4a93556d21bd1e75a052a2ca27253934ea5acb1b7092aab37135d1e319a12c71c1fedaa0ea41cc9251d49030accde34cb77dcf1a33ca71dc62a9bc120cb25d3cc233b7309f101d60f7aeeb844ec91cfb48913c9561fcefc416a73fe0625beb3c166a1319981d110b10253c073ca191255a0f612adaeb4c814738505e470c5f4e40c4ec43816be2280174a6cddb726968af19f674e8ab882a696756191552b0a7bdc1af7940bc30916f1ce597f065616d9849bae6f37f8d47cbb2a09d300d5551cad0ee95e2c6157eac3304918c69392133314ca4e5f65e7c6307c2bbc5a8ef0790098ccb7a75c22731a163213cdf3483ede1a56dbe3b512e8c985d25a43cfe904ce2d59b5f60c79893925a14cfdc829cd3c26ead5808f2b764a6dc1e94f9815e77c8c14cc21ef950a36ba13f313fb453d3", 0x1000}], 0x4, &(0x7f0000f8c000)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x3, 0x3ff, 0x5, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8008, 0x1f, 0x5, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x7, 0x5, 0x8, 0x255, 0x3c7, 0xb006, r7}}], 0x90, 0x80}, {&(0x7f000031b000-0x10)=@in={0x2, 0x3, @multicast1=0xe0000001}, 0x10, &(0x7f0000f8c000)=[{&(0x7f0000f8c000)="29b27fcdf83c9757763773ddf967468f62bca2a6103bd41d96ecb5d786bc3b121ad47475fa577c638ed9a03345caed458ed70b2eb1b309a2677faea2078d6ed8ac7111eab925fc63efe8a955a933086b69f9923f36c6c68eacbcb04221bfbb76728fc2d20309f509db0110b2135b5e69b8db17606b95914b104296579721667e853cfe06dc779648a473b35a", 0x8c}], 0x1, &(0x7f0000f8d000-0x90)=[@init={0x18, 0x84, 0x0, {0x7d, 0x71, 0x8452}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x101, 0x9, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x5, 0xcae6, r9}}], 0x90, 0x4000}], 0x3, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000f8b000-0x8)={0x0}) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f0000a1e000)={0x1f, {{0x2, 0x2, @multicast2=0xe0000002}}}, 0x90) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000300000-0x58)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_type={0x1, 0x14}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x58}, 0x1}, 0x0) 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 105.196565] binder: 21801:21802 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.207754] binder: 21801:21802 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 105.250828] IPVS: Creating netns size=2536 id=17 [ 105.250891] binder: 21839:21842 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 105.250902] binder: 21839:21842 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.250911] binder: 21839:21842 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fee000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000d43000-0x4), 0x4) uname(&(0x7f0000e31000-0x9d)=""/157) [ 105.250918] binder: 21839:21842 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.250927] binder: 21839:21842 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.306387] binder: 21849:21852 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 105.306400] binder: 21849:21852 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.306409] binder: 21849:21852 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 2018/02/14 06:15:08 executing program 3: mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000032000-0x50)=[{&(0x7f0000014000)="b4801abc8a58f1396db922989ef301ac1334945e35f37dc586930198756980ef0dc606cfa17586c8f23706a5b8b3097c4e6596a9e3ddf731afb46b5e063041f4faaf54fca3e92afc755c5263c6", 0x4d}, {&(0x7f0000010000-0x8)="e65249ffc025ab6e", 0x8}, {&(0x7f0000031000)="9fdc856eae6b85dbff4e3deebfd15280102e2426608f9d9960351a259600860a7e901ee7def814b67700f3fd4b351f1b87ab36", 0x33}, {&(0x7f000001a000-0x35)="590dfec9d7aaa0687360c24ee418a32ddbd52a3eaa19a9586f266fa524f30b360d4278ef9c141dd738a12b8d5887c3a4765b80a5d4", 0x35}, {&(0x7f0000031000)="7045df1c1a76a9abf13ca6a8c821ee7f6802b1ec9cd0ba5cab483ea944f4d56962b925323e4fe4e9d341b5815eb9ea6ec18f61e55809faf5dd6cb31e051722276579acec7024042031c090fe160ce9", 0x4f}], 0x5) 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) getpeername(r0, &(0x7f0000231000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f000023f000)=0x32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000027c000)={0x0, 0x401, 0x6, [0xd15, 0x2, 0xffff, 0x2a, 0x1d, 0x800]}, &(0x7f0000111000)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000104000-0x8)={r2, 0x8001}, 0x8) syz_emit_ethernet(0x437, &(0x7f00008bd000-0x1046)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x401, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "24a589", 0x0, '~9\f'}, "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"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) recvmsg(r0, &(0x7f00003ce000-0x38)={&(0x7f000037e000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, 0x32, &(0x7f0000562000)=[{&(0x7f0000ed5000)=""/4096, 0x1000}], 0x1, &(0x7f0000ebc000)=""/8, 0x8}, 0x10040) 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001000)={0x2, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) [ 105.306417] binder: 21849:21852 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.306427] binder: 21849:21852 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.377935] binder: 21860:21861 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 105.377946] binder: 21860:21861 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.377955] binder: 21860:21861 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 105.377968] binder: 21860:21861 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.377977] binder: 21860:21861 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.388433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22666 sclass=netlink_route_socket pig=21863 comm=syz-executor3 [ 105.445591] pktgen: kernel_thread() failed for cpu 0 [ 105.451087] pktgen: Cannot create thread for cpu 0 (-4) [ 105.456626] pktgen: kernel_thread() failed for cpu 1 [ 105.462163] pktgen: Cannot create thread for cpu 1 (-4) [ 105.468598] pktgen: Initialization failed for all threads 2018/02/14 06:15:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="010001a000000000b1", 0x9) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000c96000-0x3), 0x0, 0x8000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000e77000-0x1000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9518f00637fc7cf6757fd3157", 0x5b5, 0x0, &(0x7f0000bc9000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000957000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00001eb000)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x8}, 0x101, 0x100}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000400000)={0x0, 0xfffffffffffffff7, 0x8, 0xc3b, 0x2, 0x776, 0xffe, 0x0, 0xd4, 0x81, 0x0, 0x5e5}) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = memfd_create(&(0x7f0000001000-0x33)="776c616e302a6d696d655f747970652d747275737465647d26776c616e30766dcb0c00002e747275737465647b5c7b47504c00", 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000004000-0x20)="2adf25f7f5b61d887b937817665af702aff8cba8384e55fd4bb5eee82d0b37dd", 0x20, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r1, 0x0) creat(&(0x7f0000001000-0xa)='./control\x00', 0x0) rename(&(0x7f0000006000-0xa)='./control\x00', &(0x7f0000004000)='./control\x00') rename(&(0x7f0000004000)='./control\x00', &(0x7f0000001000-0xa)='./control\x00') 2018/02/14 06:15:08 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001000-0x4)=0x8, 0x4) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000002e000)={&(0x7f0000023000)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f000000a000)=@setneightbl={0x14, 0x43, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/14 06:15:08 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003f5000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001000-0x1a)=""/26, &(0x7f000000f000-0x4)=0x1a) r1 = syz_open_dev$binder(&(0x7f0000001000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001000)={0x0, 0xffffffffffff0bdb, 0x5}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004000-0xad)=""/173) fallocate(r0, 0x0, 0x8000, 0x4) r2 = dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000005000)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x3c, 0x0, &(0x7f0000007000-0x3c)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/14 06:15:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000aa2000-0x8)={0x0, 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000528000)={0x0, @empty, @loopback}, &(0x7f00008e2000)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00003f1000)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0xea8, 0x2, 0xf8a, 0x400, 0x735, 0x0, r1}) r2 = socket$inet(0x10, 0x807, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8931, &(0x7f0000028000)={@syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/14 06:15:08 executing program 5: mmap(&(0x7f0000000000/0x940000)=nil, 0x940000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000940000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000940000)='/dev/ppp\x00', 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00001b3000)={@generic="57b0d7a136d7a5b92bb01682462339ed", @ifru_names=@generic="6cb509f3655e9e8606f7de51a5675381"}) mmap(&(0x7f0000941000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x69, &(0x7f00004c7000-0x4), &(0x7f000093e000)=0xffffffad) 2018/02/14 06:15:08 executing program 7: socketpair$inet(0x2, 0x0, 0xffffffffffff25c8, &(0x7f0000001000-0x8)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000001000-0x9)=@rc, &(0x7f0000fae000-0x4)=0x9) 2018/02/14 06:15:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000048a000-0xf)='/dev/sequencer\x00', 0x100, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00005e6000)=""/160) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f0000d0b000-0x41f)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) poll(&(0x7f000068a000+0xbaa)=[{r0}], 0x1, 0x0) 2018/02/14 06:15:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000d11000-0x4)=0xfffffffffffffffb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000a00000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f000059d000)={@dev={0xfe, 0x80, [], 0x0, 0xa}, r1}, 0x14) r2 = dup(r0) bind$inet6(r2, &(0x7f0000876000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x39) [ 105.589958] binder: 21877:21879 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 105.606986] binder: 21877:21879 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.614597] binder: 21877:21879 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 105.614773] device gre0 entered promiscuous mode [ 105.627525] kasan: CONFIG_KASAN_INLINE enabled [ 105.632148] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 105.633666] binder: 21877:21879 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 105.633678] binder: 21877:21879 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.654556] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 105.660768] Dumping ftrace buffer: [ 105.664276] (ftrace buffer empty) [ 105.667958] Modules linked in: [ 105.671241] CPU: 1 PID: 21887 Comm: syz-executor4 Not tainted 4.9.81-g1a93831 #33 [ 105.678827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.688150] task: ffff8801d8236000 task.stack: ffff8801b97e0000 [ 105.694173] RIP: 0010:[] [] __xfrm_policy_check+0xbf8/0x1a30 [ 105.703275] RSP: 0018:ffff8801db3075a0 EFLAGS: 00010202 [ 105.708692] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffffffff833c82d7 [ 105.715935] RDX: 0000000000000002 RSI: ffff8801db3076e8 RDI: 0000000000000032 [ 105.723175] RBP: ffff8801db3077e8 R08: 0000000000000003 R09: 0000000000000001 [ 105.730416] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 105.737656] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 105.744899] FS: 00007f9442d4d700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 105.753096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.758948] CR2: 0000000000a2ed68 CR3: 00000001bf126000 CR4: 0000000000160670 [ 105.766189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.773428] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.780667] Stack: [ 105.782786] ffffffff833c784d ffff8801db3076d8 ffff8801db307640 00000001d82368a8 [ 105.790751] ffff8801db307680 ffff8801cb698928 ffff8801db307650 ffff8801c2730000 [ 105.798722] 0000000200026000 1ffff1003b660ec4 ffff8801db3076e8 ffff8801db307740 [ 105.806692] Call Trace: [ 105.809246] [ 105.811282] [] ? __xfrm_policy_check+0x13d/0x1a30 [ 105.817761] [] ? __xfrm_route_forward+0x400/0x400 [ 105.824223] [] ? nfnetlink_has_listeners+0x3f/0x50 [ 105.830775] [] ? __lock_acquire+0x629/0x3640 [ 105.836805] [] ? ctnetlink_expect_event+0x710/0x710 [ 105.843444] [] ? check_preemption_disabled+0x3b/0x200 [ 105.850254] [] udp_queue_rcv_skb+0x537/0x1760 [ 105.856370] [] __udp4_lib_rcv+0x1694/0x2b70 [ 105.862308] [] udp_rcv+0x21/0x30 [ 105.867297] [] ip_local_deliver_finish+0x285/0xa80 [ 105.873843] [] ? ip_local_deliver_finish+0x129/0xa80 [ 105.880566] [] ip_local_deliver+0x30a/0x4d0 [ 105.886507] [] ? ip_local_deliver+0x1ab/0x4d0 [ 105.892617] [] ? ip_call_ra_chain+0x540/0x540 [ 105.898729] [] ? ip_rcv_finish+0x1900/0x1900 [ 105.904753] [] ? check_preemption_disabled+0x3b/0x200 [ 105.911559] [] ip_rcv_finish+0x71b/0x1900 [ 105.917327] [] ip_rcv+0xbc2/0x1620 [ 105.922485] [] ? ip_rcv+0xa4a/0x1620 [ 105.927817] [] ? ip_local_deliver+0x4d0/0x4d0 [ 105.933933] [] ? inet_del_offload+0x40/0x40 [ 105.939873] [] ? ip_local_deliver+0x4d0/0x4d0 [ 105.945988] [] __netif_receive_skb_core+0xa33/0x29e0 [ 105.952708] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 105.959687] [] ? netif_wake_subqueue+0x210/0x210 [ 105.966159] [] ? check_preemption_disabled+0x3b/0x200 [ 105.972970] [] ? process_backlog+0x17c/0x690 [ 105.978997] [] __netif_receive_skb+0x5b/0x1c0 [ 105.985108] [] process_backlog+0x1d4/0x690 [ 105.990961] [] ? process_backlog+0x17c/0x690 [ 105.996989] [] net_rx_action+0x396/0xe00 [ 106.002670] [] ? kvm_clock_read+0x23/0x40 [ 106.008435] [] ? lapic_next_event+0x5a/0x90 [ 106.014372] [] ? sk_busy_loop+0xcc0/0xcc0 [ 106.020139] [] ? clockevents_program_event+0x131/0x350 [ 106.027031] [] ? check_preemption_disabled+0x3b/0x200 [ 106.033840] [] ? check_preemption_disabled+0x3b/0x200 [ 106.040651] [] __do_softirq+0x206/0x951 [ 106.046242] [] do_softirq_own_stack+0x1c/0x30 [ 106.052359] [ 106.054392] [] do_softirq.part.16+0x99/0xb0 [ 106.060361] [] do_softirq+0x19/0x20 [ 106.065608] [] netif_rx_ni+0x140/0x320 [ 106.071117] [] tun_get_user+0xac6/0x2110 [ 106.076795] [] ? tun_chr_ioctl+0x40/0x40 [ 106.082473] [] ? get_futex_key+0x1050/0x1050 [ 106.088500] [] ? check_preemption_disabled+0x3b/0x200 [ 106.095307] [] ? __tun_get+0x12a/0x230 [ 106.100811] [] tun_chr_write_iter+0xd5/0x190 [ 106.106838] [] __vfs_write+0x4bf/0x680 [ 106.112345] [] ? do_iter_readv_writev+0x400/0x400 [ 106.118806] [] ? avc_policy_seqno+0x9/0x20 [ 106.124659] [] ? selinux_file_permission+0x82/0x460 [ 106.131291] [] ? rw_verify_area+0xe5/0x2b0 [ 106.137145] [] vfs_write+0x189/0x530 [ 106.142477] [] SyS_write+0xd9/0x1b0 [ 106.147724] [] ? SyS_read+0x1b0/0x1b0 [ 106.153143] [] ? do_syscall_64+0x48/0x490 [ 106.158916] [] ? SyS_read+0x1b0/0x1b0 [ 106.164336] [] do_syscall_64+0x1a5/0x490 [ 106.170015] [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 2018/02/14 06:15:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000082d000-0x16)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000c13000)={0x2a3, {{0x2, 0x1, @multicast2=0xe0000002}}, {{0x2, 0x2, @empty}}}, 0x118) timerfd_settime(r0, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) r2 = creat(&(0x7f0000289000)='./file0\x00', 0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00005da000-0x4)) timerfd_settime(r0, 0x0, &(0x7f0000ac3000), &(0x7f00005a2000)) [ 106.176905] Code: ff 48 c1 e8 03 42 80 3c 30 00 0f 85 f9 0b 00 00 48 8b 85 08 fe ff ff 48 8b 18 48 8d 7b 32 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 30 38 d0 7f 08 84 c0 0f 85 c3 0b 00 00 0f b6 43 32 [ 106.205351] RIP [] __xfrm_policy_check+0xbf8/0x1a30 [ 106.212104] RSP [ 106.215745] ---[ end trace 5a00ce724cc7155b ]--- [ 106.220497] Kernel panic - not syncing: Fatal exception in interrupt [ 106.227424] Dumping ftrace buffer: [ 106.230939] (ftrace buffer empty) [ 106.234619] Kernel Offset: disabled [ 106.238216] Rebooting in 86400 seconds..