xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000462000-0xb)='/dev/hwrng\x00', 0x20000102, 0x0) read$eventfd(r1, &(0x7f0000558000)=0x0, 0x8) [ 439.769863] binder: 25433:25462 BC_FREE_BUFFER u000000002000c000 no match [ 439.774891] binder_alloc: 25439: binder_alloc_buf, no vma [ 439.774915] binder: 25439:25458 transaction failed 29189/-3, size 0-4096 line 2890 [ 439.774975] binder: BINDER_SET_CONTEXT_MGR already set [ 439.774983] binder: 25439:25454 ioctl 40046207 0 returned -16 [ 439.780581] binder: release 25434:25441 transaction 2893 out, still active [ 439.780587] binder: release 25434:25441 transaction 2892 in, still active [ 439.780592] binder: undelivered TRANSACTION_COMPLETE [ 439.780608] binder: release 25434:25455 transaction 2892 out, still active [ 439.780611] binder: undelivered TRANSACTION_COMPLETE [ 439.780618] binder: send failed reply for transaction 2893, target dead [ 439.780624] binder: send failed reply for transaction 2892, target dead [ 439.785779] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.785918] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.786088] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.837812] binder: 25470 RLIMIT_NICE not set [ 439.843774] binder: 25471 RLIMIT_NICE not set [ 439.869105] binder: 25470 RLIMIT_NICE not set [ 439.880455] binder: 25471 RLIMIT_NICE not set [ 439.881356] binder: release 25466:25470 transaction 2899 out, still active [ 439.881363] binder: release 25466:25470 transaction 2898 in, still active [ 439.881368] binder: undelivered TRANSACTION_COMPLETE [ 439.881384] binder: release 25466:25482 transaction 2898 out, still active [ 439.881388] binder: undelivered TRANSACTION_COMPLETE [ 439.881396] binder: send failed reply for transaction 2899, target dead [ 439.881404] binder: send failed reply for transaction 2898, target dead [ 439.909835] binder: BINDER_SET_CONTEXT_MGR already set [ 439.909845] binder: 25469:25484 ioctl 40046207 0 returned -16 [ 439.913959] binder: 25471 RLIMIT_NICE not set [ 439.918291] binder_alloc: 25469: binder_alloc_buf, no vma [ 439.918314] binder: 25469:25484 transaction failed 29189/-3, size 0-0 line 2890 [ 439.923388] binder_alloc: 25469: binder_alloc_buf, no vma [ 439.923411] binder: 25469:25484 transaction failed 29189/-3, size 0-0 line 2890 [ 439.932848] binder: 25492 RLIMIT_NICE not set [ 439.959316] binder: 25492 RLIMIT_NICE not set [ 439.961836] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.961911] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.962043] binder: release 25469:25471 transaction 2900 in, still active [ 439.962051] binder: send failed reply for transaction 2900 to 25469:25484 [ 439.962067] binder: undelivered TRANSACTION_COMPLETE [ 439.962075] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.962095] binder: send failed reply for transaction 2901 to 25469:25471 [ 439.962273] binder: undelivered TRANSACTION_COMPLETE [ 439.962280] binder: undelivered TRANSACTION_ERROR: 29189 [ 439.981251] binder: release 25488:25492 transaction 2906 out, still active [ 439.981258] binder: release 25488:25492 transaction 2905 in, still active [ 439.981262] binder: undelivered TRANSACTION_COMPLETE [ 439.981277] binder: release 25488:25499 transaction 2905 out, still active [ 439.981280] binder: undelivered TRANSACTION_COMPLETE [ 439.981287] binder: send failed reply for transaction 2906, target dead [ 439.981295] binder: send failed reply for transaction 2905, target dead [ 440.302585] binder: 25439:25446 transaction failed 29201/-14, size 0-4096 line 2918 [ 440.310566] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000062f000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f0000b49000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000d95000)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) 2017/12/27 08:42:03 executing program 2: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c7e000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) poll(&(0x7f00004dd000)=[{r1, 0xc1a6, 0x0}], 0x1, 0xfffffffffffffffe) open$dir(&(0x7f0000fc7000-0x8)='./file0\x00', 0x200800, 0x80) connect$unix(r0, &(0x7f0000681000)=@abs={0x0, 0x0, 0x0}, 0x8) r2 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r2, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c2a000+0x59a)='/dev/rfkill\x00', 0x80800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000a8e000-0x5c)={0x5, 0x7, 0xfffffffffffffffe, {0x0, 0x0}, 0xd0bc, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f000007a000-0xb)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000033e000)=""/66) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00003fe000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000558000)=0x0, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000155000)=0x100, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00001a0000)={&(0x7f00005bb000/0x2000)=nil, 0x2000}) 2017/12/27 08:42:03 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000cbf000)={0x0, 0x2}, &(0x7f000040d000)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000828000-0x108)={0x0, @in6={{0xa, 0x1, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xffffffffffffff58, 0xd18, 0x20000000, 0x2fb0, 0x3, 0x1, 0x1f, 0x7, 0x7, 0x8, 0x3, 0x58, 0x3, 0x14, 0x10001]}, &(0x7f000094d000)=0x108) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000e1c000-0x20)={0x4, 0x5fd, 0x208, 0x1, 0x7ff, 0x3, 0x401, 0x800, 0x0}, &(0x7f00007a4000-0x4)=0x20) sendmsg$inet_sctp(r0, &(0x7f0000835000-0x1c)={&(0x7f00000ac000)=@in6={0xa, 0x3, 0x20, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffff}, 0x1c, &(0x7f0000a66000)=[{&(0x7f0000a15000)="1d22af12292fa5ee1a9d1b9a0542229356ce8d166c04d78dc2d117697843c852564cee79ed56e758570a19055fe2cb2ed0d71ed5a7ed6957b442565db91a2ff60c", 0x41}, {&(0x7f000053e000)="6cf78952af5f4bebe1a0ec882c50ad442bc00491dd8b74a3c37101ef649aba0262e3b4376f5e3ba336b5", 0x2a}, {&(0x7f0000dfd000-0x1000)="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", 0x1000}, {&(0x7f0000758000)="4aa73ce5131f605689d2da9f96b45c5432d6b65f23a4f7394e46b97972d8f90fae652efc1a62e3a2946ee84ac46f69e3db8a4d1e7d07c436fb13aa9a5137578615284bc448f907484ba480b37d177a07c247f49249d626396ed5cfa763dec522a23e00f23c09d87a72ad0e8bbb98e5c4c2c385049d27d8c09db76b07877c0dbb3d70294223cd92934348a51820ed8f464f90cf533be1cee4fb0f35cdf4e8d83934f0aae0ae06a6a72c376ffc56c2ea4254b94db3c3363425b72d89b497105c57173647be9cbfc66832d08d5a94df02b7f067cb15f9ee4d8b7d4a", 0xda}, {&(0x7f00005be000-0xb)="8227bff1f23d09e25d446f491f0ecc2ee2dfeb42f104d81f260c540f1d02de9fceb2152b21ac59e9e70eedaf4d2592e0", 0x30}, {&(0x7f0000fbb000)="4a2ac6f58ca6803f7fd9b12aaa105a9244ef591dea96a024ba2c4077e7983a9023e7f6bc61fedb8fa640a061c9fd40a4b056de76df17cffcece6d44fe8362dffe5da1104faa1a740d303f7b45a72dcfd8c1ab5416e", 0x55}, {&(0x7f00001c0000)="962a3248d40e3353ae38ca9b0aed7cb677336cccc93df71b2ac5a1773e9388ae129bb2df803f7cbca84cdf827bf3ffe36613c3d903c7d32b75e14dab86ae6048b9ae5683ff90fcd25183cc26b468f162ee653de50491c325423b39c88e8f355cef2b294482513cef695eaf96cbe4dc7b92a09e755cee852d0c91426df79cb5d9d08dbfc99a0f552c1b3d746439b693969d964b3c8e71689031af18bfa308283cd3274940b8ca68d0c00eb91ee1bf791adf83ae34c7e7cf833d2bbc6a74", 0xbd}], 0x7, &(0x7f00005d5000)=[@sndinfo={0x1c, 0x84, 0x2, {0x31, 0x800f, 0x9a4f, 0xb2, r1}}, @sndrcv={0x2c, 0x84, 0x1, {0xa2c3, 0x2, 0x8000, 0x80000000, 0x6, 0x0, 0x2, 0x3, r2}}, @init={0x14, 0x84, 0x0, {0x6c3, 0x829, 0xab, 0x51a}}, @sndrcv={0x2c, 0x84, 0x1, {0x800, 0x4, 0x4, 0x800, 0x100, 0x4, 0x3, 0xff, r3}}], 0xb0, 0x4000000}, 0x4004844) getsockopt$inet_int(r0, 0x0, 0x5, &(0x7f00001d7000)=0x0, &(0x7f0000849000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x10000, 0x3) r4 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000812000-0x9)='/dev/vcs\x00', 0x10000, 0x0) read(r4, &(0x7f000006b000)=""/24, 0x18) write$evdev(r4, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000b57000-0x18)={0x0, 0x2001, 0xaae0, 0xd4e8, 0xfffffffffffffffd}) 2017/12/27 08:42:03 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000a16000-0x4)=0xfffffffffffff000, &(0x7f0000e06000)=0x4) recvmmsg(r0, &(0x7f0000122000)=[{{&(0x7f0000c41000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000fc9000-0x40)=[{&(0x7f0000fc8000)=""/102, 0x66}, {&(0x7f0000fc9000-0x1000)=""/4096, 0x1000}, {&(0x7f000045d000-0x11)=""/17, 0x11}, {&(0x7f00002ea000)=""/218, 0xda}, {&(0x7f0000be5000)=""/99, 0x63}, {&(0x7f0000803000-0x25)=""/37, 0x25}, {&(0x7f0000fc8000)=""/154, 0x9a}, {&(0x7f0000fc9000-0x13)=""/19, 0x13}], 0x8, &(0x7f0000ea1000)=""/24, 0x18, 0x1}, 0xdd}], 0x1, 0x40002020, 0x0) syz_open_dev$vcsa(&(0x7f0000dce000)='/dev/vcsa#\x00', 0x8, 0x40ec02) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:03 executing program 5: pipe2(&(0x7f00008a2000)={0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001000-0x4)=0x0, 0x4) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x244) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xdcf}, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x200, 0xb8d, &(0x7f0000001000-0x6d)="9bc0af5b99166fbf5d157da2bb29325f9dae0bd1aa748425d22c265616a6515a69d73e7a308f3f8e8a78423cc5445ba1b422d232fd6706c8ac456841a79f688f80b6681ff05c2741bc8b8ba5740da09e4081edddfce20d3b4943620d2358818c6b0dc6aef2ec1496bc469d5390", &(0x7f000094f000)="ea89f4d1de6a9b427efd4f316af0dc", 0x6d, 0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f00003e3000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000b9b000)={0x0, 0x0, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d36000+0x225)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000003000-0x44)="7a777ddeb41f9d0da0b777eeb4c85d15329bfe9ea9eef110733ce0835bb1a646594b75426e8564c9d22cbf2dcf42e01c9b654ff19c579d8fcbbd750e71867cd2b9593afe", 0x44) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000001000)={0x0, 0x0}) fcntl$setpipe(r4, 0x407, 0xeb7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 2017/12/27 08:42:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00003fe000-0xb)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000562000)={0x0, 0x0, 0x0}, &(0x7f0000c17000-0x4)=0xc) fcntl$lock(r0, 0x0, &(0x7f0000724000)={0x2, 0x1, 0x8001, 0x400, r2}) read$eventfd(r1, &(0x7f0000558000)=0x0, 0x8) [ 440.316644] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.352381] binder: 25510:25516 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer 2017/12/27 08:42:03 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x10000, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000fca000-0x20)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001, 0x3, 0x1, 0x4, 0x6, 0x9, 0x7}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000ea7000)=0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f0000758000)={0x6, 0x7f7, 0xae, 0x3}) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00007b2000-0x8c)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000678000)=0x8c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000046000-0x10)={0x4, 0x20c, 0x400, 0x8, r3}, 0x10) [ 440.366575] binder: 25522 RLIMIT_NICE not set [ 440.408850] binder: 25522 RLIMIT_NICE not set [ 440.415224] binder: 25509:25529 got new transaction with bad transaction stack, transaction 2911 has target 25509:0 [ 440.415241] binder: 25509:25529 transaction failed 29201/-71, size 0-0 line 2802 [ 440.444437] binder: BINDER_SET_CONTEXT_MGR already set [ 440.444449] binder: 25510:25528 ioctl 40046207 0 returned -16 [ 440.457578] binder_alloc: 25510: binder_alloc_buf, no vma [ 440.457711] binder: 25510:25528 transaction failed 29189/-3, size 0-0 line 2890 [ 440.466318] binder: 25510:25516 BC_FREE_BUFFER u000000002000c000 no match [ 440.466586] binder_alloc: 25510: binder_alloc_buf, no vma [ 440.466613] binder: 25510:25528 transaction failed 29189/-3, size 0-0 line 2890 [ 440.491354] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.491439] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.491509] binder: release 25510:25516 transaction 2908 out, still active [ 440.491515] binder: undelivered TRANSACTION_COMPLETE [ 440.491538] binder: send failed reply for transaction 2908, target dead [ 440.491550] binder: send failed reply for transaction 2910 to 25510:25528 [ 440.491802] binder: undelivered TRANSACTION_COMPLETE [ 440.491811] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r0 = add_key(&(0x7f00009db000-0x8)='rxrpc_s\x00', &(0x7f0000011000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000bca000)="a2e854bfcda2b5df593f32c201485df8df423812cf3653d33dd17304fa9024f59a800dbede47166c5f76b1850cd9a6", 0x2f, 0xfffffffffffffff8) r1 = request_key(&(0x7f000041f000-0xa)='id_legacy\x00', &(0x7f00008ff000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000f0d000-0xe)='/selinux/load\x00', 0x0) keyctl$link(0x8, r0, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:04 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000be5000-0xf)='/dev/sequencer\x00', 0x90440a83d98e36fc, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000f3b000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000c87000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000ed0000-0x4)=0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000764000)=0x9) ioctl$TCSETAW(r1, 0x5402, &(0x7f0000335000)={0xa3d6, 0x400, 0xe3d7, 0x10000, 0x4, 0x5, 0x7, 0x2, 0x7fff, 0x3}) 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c7e000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) poll(&(0x7f00004dd000)=[{r1, 0xc1a6, 0x0}], 0x1, 0xfffffffffffffffe) open$dir(&(0x7f0000fc7000-0x8)='./file0\x00', 0x200800, 0x80) connect$unix(r0, &(0x7f0000681000)=@abs={0x0, 0x0, 0x0}, 0x8) r2 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r2, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c2a000+0x59a)='/dev/rfkill\x00', 0x80800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000a8e000-0x5c)={0x5, 0x7, 0xfffffffffffffffe, {0x0, 0x0}, 0xd0bc, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000683000-0x4)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f000098e000-0x9)='/dev/vcs\x00', 0x200, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000b83000)='/selinux/relabel\x00', 0x2, 0x0) io_cancel(r0, &(0x7f0000672000-0x40)={0x0, 0x0, 0x0, 0x0, 0x3ff, r1, &(0x7f0000ddc000)="3bef4bb2e4c6a5c8efd8f6136a4957fa2e41b6d8e1c77214604372cc948e4146afee21ff33cf23d35073e305f23400101d91bc8dbfcdbde0fbff59f82c4b55ea0d2c82047ac1e0d5574bf3d8574e5e0fb20e073e7cf81b8bb6ba76b464c2534b14dba5ab28089cf5eb230ede099b127e0ca7b0957d81d75fdd09eb", 0x7b, 0x1, 0x0, 0x1, r2}, &(0x7f000015c000)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00009b8000)={0x5, 0x400, 0x7fffffff, 0x470, 0x2}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000e80000)=0x10000, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00003fe000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f0000558000)=0x0, 0x8) ioctl$TIOCGSID(r4, 0x540f, &(0x7f000016f000)=0x0) pread64(r3, &(0x7f0000cd6000)=""/70, 0x46, 0x0) 2017/12/27 08:42:04 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fc8000)='net/icmp\x00') connect$bt_l2cap(r1, &(0x7f0000686000)={0x1f, 0xe8b, {0x6, 0xffffffff, 0x1, 0x3, 0x8, 0x7f}, 0x3ff, 0x4}, 0xe) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000fc9000-0x8)='keyring\x00', &(0x7f0000006000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r3, 0xf89) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000114000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x40800) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000f45000)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r4, &(0x7f0000fca000-0x28)={0x28, 0x1, 0x0, @random="4bc6d2d032a613cceb0a1e8a72952c91eaee60725b392f1d"}, 0x28) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc9000-0x1)='\x00') sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 440.606920] binder: release 25509:25522 transaction 2911 in, still active [ 440.613928] binder: send failed reply for transaction 2911 to 25509:25529 [ 440.620937] binder: undelivered TRANSACTION_COMPLETE [ 440.626061] binder: undelivered TRANSACTION_ERROR: 29201 [ 440.631537] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.669901] binder: 25548:25557 got transaction with invalid offsets ptr [ 440.674505] binder: 25563 RLIMIT_NICE not set [ 440.683795] binder: 25548:25557 transaction failed 29201/-14, size 0-4096 line 2918 [ 440.700331] binder: 25550:25566 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 440.723795] binder: 25563 RLIMIT_NICE not set 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f0000be8000)={0x4, 0x100000001, 0xfffffffffffffffd, 0x101, 0x7f, 0x20}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00003ba000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000cf3000)={0x3, 0x0, [{0x80000001, 0x80000000, 0x0, 0x2, 0x1, 0x0, 0x8, [0x0, 0x0, 0x0]}, {0x4, 0x894a, 0x2, 0x1000, 0x4, 0x75, 0x4, [0x0, 0x0, 0x0]}, {0x80000003, 0x400, 0x0, 0x2, 0x4, 0x400, 0x2d, [0x0, 0x0, 0x0]}]}) r3 = add_key(&(0x7f0000649000)='asymmetric\x00', &(0x7f0000579000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000751000-0xf)="e3d9c7989b17b112b3ddc31c4f8d62", 0xf, 0xfffffffffffffffd) syz_open_dev$mouse(&(0x7f0000500000-0x12)='/dev/input/mouse#\x00', 0x0, 0x2000) add_key$keyring(&(0x7f0000974000)='keyring\x00', &(0x7f00001c6000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, r3) 2017/12/27 08:42:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f0000999000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000430000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) r3 = getpid() sched_setparam(r3, &(0x7f00000a6000-0x4)=0xa9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000fc9000-0xb6)="b19fcb021b291d54f5232f16e2c49b9d31106acaf7e76861be9cdf1e9b125e4484b80845000e1673e0e6d01e8faa0a8ccf17aef948d8fdd9ce9c4de6bf4b0820e80221c6cc9f8f2eac32dea79c2648671d2f3e5427dea80ed2b689e3ab732e7a579bfbf84fe1b04c1b5abc0f3d8474763189eb5c13b38a7c2844909022bb4adfcb87f0bf61d2dd3047381607ef85b35864fc6e46e46b4409a8744183570f2ca6aa12a6b625901ddc704078f37040a4b94564fb9ce38a", 0xb6, 0x0, &(0x7f0000fc9000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 440.745247] binder: release 25551:25563 transaction 2922 out, still active [ 440.745255] binder: release 25551:25563 transaction 2921 in, still active [ 440.745260] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:04 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000-0x4)=0xffffffff, 0x4) flock(r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000a93000)={r1, &(0x7f00001d0000-0xf4)="8a456dbad682ab1b6365c293460c8fe0a0151511a3e85245de36042b0b06590a78d5b7dc6945870a47088f7afa0afc3f77269d2994251feb44b214a8fe0871e3830ae78ba69346698f4472e21d2b6b861478cf16490cfd767d9d2052767c82037e6957ba6da53507b96b367c40542f58fd94053cb736ded1ec344bbac05bc06bcb5b8be9fe1c140c764a30722abef9cf821c6ce760c6481c7aef5bfd7dfa1df0e8841db7b57224c1f1d97b52a6495177824118fd555914aab988229299ccbe5e7a16a5bbe43ed0dea5c06bdc591e080ecd978be1d1162e36f4bdc241d20a40df85e8266054ca108fb51c4beae0dc81beaca92416", &(0x7f0000001000-0x67)="820a4da55a75400ea465e013b193b9d83287db1faf5a226593e0d84f5fc912168cc252e837e3e887aaeb24677416876134ae860ddd3e728991b303709777ef3a88002babc5e63b396cf017ae55964d5716a0bfb1f4b7f105ebbd661edfa530693f3f1e04bd2426", 0x1}, 0x20) mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r2, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00003a4000)={0x0, 0x40}, &(0x7f0000fc9000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00008a0000)=@assoc_value={r3, 0x1}, &(0x7f0000fc9000-0x4)=0x8) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f0000c73000)='/dev/rfkill\x00', 0x100, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r4, &(0x7f0000fc8000)="b1475f8e6730335f842ad5e5c53b95136c6468a25f67e15f7a3d5832afcda8509e", 0x21, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 440.745276] binder: release 25551:25567 transaction 2921 out, still active [ 440.745280] binder: undelivered TRANSACTION_COMPLETE [ 440.745289] binder: send failed reply for transaction 2922, target dead [ 440.745298] binder: send failed reply for transaction 2921, target dead [ 440.756311] binder: BINDER_SET_CONTEXT_MGR already set [ 440.756323] binder: 25550:25573 ioctl 40046207 0 returned -16 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000fc9000-0xb6)="b19fcb021b291d54f5232f16e2c49b9d31106acaf7e76861be9cdf1e9b125e4484b80845000e1673e0e6d01e8faa0a8ccf17aef948d8fdd9ce9c4de6bf4b0820e80221c6cc9f8f2eac32dea79c2648671d2f3e5427dea80ed2b689e3ab732e7a579bfbf84fe1b04c1b5abc0f3d8474763189eb5c13b38a7c2844909022bb4adfcb87f0bf61d2dd3047381607ef85b35864fc6e46e46b4409a8744183570f2ca6aa12a6b625901ddc704078f37040a4b94564fb9ce38a", 0xb6, 0x0, &(0x7f0000fc9000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 440.759045] binder_alloc: 25550: binder_alloc_buf, no vma [ 440.759072] binder: 25550:25566 transaction failed 29189/-3, size 0-0 line 2890 [ 440.777506] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.777669] binder: release 25550:25566 transaction 2919 out, still active [ 440.777674] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) inotify_init1(0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000778000)={0x0, 0x0}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000384000)={@multicast2=0xe0000002, @multicast2=0xe0000002, 0x0, 0x3, [@multicast2=0xe0000002, @broadcast=0xffffffff, @multicast1=0xe0000001]}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000bc2000)='/dev/input/mouse#\x00', 0xfffffffffffffff9, 0xfffe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000aa1000)={0x0, r3, 0x2, 0x1, 0x0}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r4 = mmap$binder(&(0x7f0000613000/0x2000)=nil, 0x2000, 0x200000e, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000e6c000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000035000-0xc)={0x4, [0x200, 0x0, 0xffffffffffffffe0, 0x1]}, &(0x7f0000dd6000-0x4)=0xc) [ 440.777697] binder: send failed reply for transaction 2919, target dead [ 440.777709] binder: send failed reply for transaction 2920 to 25550:25566 [ 440.777886] binder: undelivered TRANSACTION_COMPLETE [ 440.777894] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.785008] binder: 25578 RLIMIT_NICE not set [ 440.812487] binder: 25578 RLIMIT_NICE not set [ 440.818976] binder: 25586 RLIMIT_NICE not set [ 440.831217] binder: release 25577:25578 transaction 2925 in, still active [ 440.831227] binder: send failed reply for transaction 2925 to 25577:25587 [ 440.831282] binder: undelivered TRANSACTION_COMPLETE [ 440.831289] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.851968] binder_alloc: 25581: binder_alloc_buf, no vma [ 440.851996] binder: 25581:25592 transaction failed 29189/-3, size 0-0 line 2890 [ 440.859354] binder: 25581:25592 ioctl 40046205 7 returned -22 [ 440.863991] binder_alloc: 25581: binder_alloc_buf, no vma [ 440.864058] binder: 25581:25592 transaction failed 29189/-3, size 0-0 line 2890 [ 440.865253] binder: BINDER_SET_CONTEXT_MGR already set [ 440.865263] binder: 25581:25592 ioctl 40046207 0 returned -16 [ 440.871420] binder: 25595 RLIMIT_NICE not set [ 440.899388] binder: BINDER_SET_CONTEXT_MGR already set [ 440.899400] binder: 25581:25599 ioctl 40046207 0 returned -16 [ 440.903502] binder_alloc: 25581: binder_alloc_buf, no vma [ 440.903526] binder: 25581:25599 transaction failed 29189/-3, size 0-0 line 2890 [ 440.905570] binder: 25592 RLIMIT_NICE not set [ 440.905760] binder: 25581:25602 BC_FREE_BUFFER u0000000020999000 no match [ 440.907041] binder: 25581:25599 ioctl 40046205 7 returned -22 [ 440.908688] binder_alloc: 25581: binder_alloc_buf, no vma [ 440.908713] binder: 25581:25602 transaction failed 29189/-3, size 0-0 line 2890 [ 440.908928] binder: 25595 RLIMIT_NICE not set [ 440.916448] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.916516] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.921513] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.921633] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.955121] binder: release 25593:25595 transaction 2932 in, still active [ 440.955132] binder: send failed reply for transaction 2932 to 25593:25601 [ 440.955152] binder: undelivered TRANSACTION_COMPLETE [ 440.955160] binder: undelivered TRANSACTION_ERROR: 29189 [ 440.959585] binder: 25605 RLIMIT_NICE not set [ 440.994649] binder_alloc: 25603: binder_alloc_buf, no vma [ 440.994680] binder: 25603:25608 transaction failed 29189/-3, size 0-0 line 2890 [ 441.009128] binder_alloc: 25603: binder_alloc_buf, no vma [ 441.009159] binder: 25603:25608 transaction failed 29189/-3, size 0-0 line 2890 [ 441.046056] binder: BINDER_SET_CONTEXT_MGR already set [ 441.046068] binder: 25603:25609 ioctl 40046207 0 returned -16 [ 441.064249] binder: 25609 RLIMIT_NICE not set [ 441.087708] binder_alloc: 25603: binder_alloc_buf, no vma [ 441.087727] binder: 25603:25610 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:04 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) ftruncate(r0, 0x80) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00007bd000-0x8c)={0x0, @in6={{0xa, 0x3, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00003aa000-0x4)=0x8c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000290000)={r3, 0x40}, 0x8) r4 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSETLED(r0, 0x4b32, 0x2) r1 = syz_open_pts(r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f000092c000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000e58000)={0x4, 0x81, [{0x5, 0x0, 0x205}, {0x9, 0x0, 0x6}, {0x0, 0x0, 0x100000001}, {0x2, 0x0, 0x3}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000dbb000-0x1)=0x0) 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000012c000-0xb)='/dev/vcsa#\x00', 0x6, 0x802) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000f5a000)="f599db2965b21d2755f8ca8cceaf549d43b09460bfbc59b7f7500783921d39902e6e82405ece8f6f1d193cec40d5bb5b4601155f6b31e25af42d5cb7520ab15df61a4e9303d0efd76fc313", 0x4b) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00003fe000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000558000)=0x0, 0x8) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000f8000-0xe)='/selinux/user\x00', 0x2, 0x0) 2017/12/27 08:42:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000b1e000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001000-0x8)={r1, r2/1000+10000}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000044d000)={0x0, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x1f, 0x5, 0x7, 0x100, 0x80000001, 0xea, 0x36e, 0x3, 0x3, 0x7fffffff, 0x4, 0x1, 0xffffffffffff8000, 0x3ff00000000, 0x2]}, &(0x7f0000940000-0x4)=0x108) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000845000)={r4, 0xe9, "6fd89b165362bdda521c3ee93081393ee1dd2f4bfe960ce2e3f8953fa1b7f09ecf615ebe773ea6f4ab315f4d2877ca544a8fa3a60882f22aeef91ed6350adc949f7ad13ad3be6f830d81f3171c5efc7126efa879aff296b4cdf31ff687e3596af6187e3d461a9f1baeb558bcfa143249ef8fe9f864a6ca4cf4eefb0e04456e17db534172974074d566abb44ddfa5fc5cfc2e635e12d5153d0cdd0dc988342f35125dee3567c6d4c6eb85d9d0d9506c423ab2747ad5f5f44c4b26e3e487d2b78eb7b6cbb1b401fd056d44882581dbf754e6e133cacc9e84e5868fcdeb704fae4fa80a09784aca8f610f"}, &(0x7f0000e48000-0x4)=0xf1) write(r3, &(0x7f0000668000-0x24)="240000002e001d06010000084a207700fbffffff0100000000000000fffffffe00025d10", 0x24) 2017/12/27 08:42:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = creat(&(0x7f00006f6000-0x8)='./file0\x00', 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000713000-0x90)={[0x81, 0x7, 0x6, 0x8, 0x9, 0x3, 0x8001, 0x800, 0x9, 0x3, 0x463, 0x6, 0x1b, 0x9, 0xc0, 0x0], 0xf000, 0x1001}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 441.088961] binder: 25603:25608 BC_FREE_BUFFER uffffffffffffffff no match [ 441.093738] binder_alloc: 25603: binder_alloc_buf, no vma [ 441.093755] binder: 25603:25610 transaction failed 29189/-3, size 0-0 line 2890 [ 441.117963] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.118058] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.118164] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.118266] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.267886] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000879000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00007d5000-0x1000)="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") ioctl$TCXONC(r0, 0x540a, 0x83) r1 = syz_open_dev$vcsn(&(0x7f0000374000-0xa)='/dev/vcs#\x00', 0x200, 0x408400) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000f61000)=0x6) 2017/12/27 08:42:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f000039e000)='/selinux/relabel\x00', 0x2, 0x0) setns(r0, 0x40000000) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00008bd000)={&(0x7f0000a38000/0x4000)=nil, 0x4000}) ioctl$int_out(r1, 0x2, &(0x7f0000006000)=0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000c9a000-0x4)=0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f000054a000)={0x1, 0x200000000, 0x7ff, 0x8, 0x4, r2, 0x7}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f63000)='/selinux/context\x00', 0x2, 0x0) [ 441.310949] binder: 25624 RLIMIT_NICE not set [ 441.312629] binder: 25617:25620 got transaction with invalid offsets ptr [ 441.312661] binder: 25617:25620 transaction failed 29201/-14, size 0-4096 line 2918 [ 441.317662] binder: 25622 RLIMIT_NICE not set [ 441.338654] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.353069] binder: 25622 RLIMIT_NICE not set 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000e49000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000000000/0xfed000)=nil, 0xfed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x1, 0x1, 0x5, 0xb, 0x0, 0x0, 0x0}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000abf000)={r3, &(0x7f0000fed000-0x1)=""}, 0x10) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000fc9000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r4, &(0x7f0000fc9000-0x7f)="e024bb7d39e4d29a9b9fb0fd440e2c8e13c5fdd01d560a495de0cd1e9d67e6d98d01a8f4103319989f09f9f2484063ba3ba3da3008c2f0869e8bf4dc7e7bf565b24f194363c4031ed3351d6725856a99f08945bdd7ba2c27f872ea4d956740e430a20f3131ed9b1d1cf92bc33f93a2641fa67ffc5fbfc240123a420bf2fd86", 0x7f, 0x4, &(0x7f0000fc9000-0x10)={0x3, {"5bf02b02b1cd5a"}, 0x2f8}, 0x10) 2017/12/27 08:42:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x4) clone(0x0, &(0x7f0000015000)="", &(0x7f0000006000)=0x0, &(0x7f0000016000-0x4)=0x0, &(0x7f000000f000)="") r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00002ba000-0x11)='/selinux/context\x00', 0x2, 0x0) bind$llc(r0, &(0x7f0000356000-0x10)={0x1a, 0xf6, 0xffffffff, 0x4, 0x8, 0x10000, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) uname(&(0x7f0000132000-0xf)=""/15) [ 441.354794] binder_alloc: 25617: binder_alloc_buf, no vma [ 441.354818] binder: 25617:25628 transaction failed 29189/-3, size 0-4096 line 2890 [ 441.361712] binder: 25621:25630 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 441.375510] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 441.387095] binder: release 25619:25622 transaction 2942 in, still active [ 441.387105] binder: send failed reply for transaction 2942 to 25619:25634 [ 441.387150] binder: undelivered TRANSACTION_COMPLETE [ 441.387159] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.401283] binder: BINDER_SET_CONTEXT_MGR already set [ 441.401296] binder: 25621:25642 ioctl 40046207 0 returned -16 [ 441.404511] binder: 25630 RLIMIT_NICE not set [ 441.408230] binder: 25640:25645 got transaction with invalid offsets ptr [ 441.408267] binder: 25640:25645 transaction failed 29201/-14, size 0-4096 line 2918 [ 441.423574] binder_alloc: 25621: binder_alloc_buf, no vma [ 441.423602] binder: 25621:25642 transaction failed 29189/-3, size 0-0 line 2890 [ 441.426789] binder: 25647 RLIMIT_NICE not set [ 441.451145] binder_alloc: 25644: binder_alloc_buf, no vma [ 441.451170] binder: 25644:25654 transaction failed 29189/-3, size 0-0 line 2890 [ 441.468151] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.478794] binder: BINDER_SET_CONTEXT_MGR already set [ 441.478804] binder: 25640:25645 ioctl 40046207 0 returned -16 [ 441.478872] binder_alloc: 25640: binder_alloc_buf, no vma [ 441.478896] binder: 25640:25651 transaction failed 29189/-3, size 0-4096 line 2890 [ 441.495667] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.495879] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.510369] binder: 25660 RLIMIT_NICE not set [ 441.533895] binder_alloc: 25658: binder_alloc_buf, no vma [ 441.533922] binder: 25658:25667 transaction failed 29189/-3, size 0-0 line 2890 [ 441.535740] binder_alloc: 25662: binder_alloc_buf, no vma [ 441.535761] binder: 25662:25664 transaction failed 29189/-3, size 0-4096 line 2890 [ 441.538943] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.541540] binder_alloc: 25662: binder_alloc_buf, no vma [ 441.541563] binder: 25662:25668 transaction failed 29189/-3, size 0-4096 line 2890 [ 441.561131] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.570000] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.688114] binder: 25624 RLIMIT_NICE not set [ 441.693310] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000052000-0x8)='net/tcp\x00') ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000a54000-0xc)={0x2, 0xfffffffffffffffc, 0x7, 0x2, 0x3, 0x1}) sendfile(r1, r1, &(0x7f0000502000)=0x0, 0xfffffffffffffb89) 2017/12/27 08:42:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:05 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) exit_group(0xaf3) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00009f8000)=0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000eca000)={0x0, 0x0}, 0x3) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) personality(0x800000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000bb5000)={r0, &(0x7f0000f4e000-0x25)="e2e84a4b6437c63f6dc141f0e766c26c6aab84fe25d025714931c4092855f3e1885fb10c03"}, 0x10) 2017/12/27 08:42:05 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000fc8000)="3319b04371d99a80d031b567fba347e91980f636caf1729229f2dc6c5d347b17e059e6f8d368b7efcb464a577a49058fd8c74a196b0346616ceda758d8f7296d0ff72bacd6fecba1bf801c74f81ea00c85b0c46b6361e95a4bb34b22882e0cb5897d97c8afde09c39cd10c409bf19945be5d918a7996b575df8a473fe91bac645e0899", 0x83, 0x0) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000fc9000)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000fc9000)={[{0x5, 0xd9f7, 0x5, 0xfffffffffffffffc, 0x400, 0x8001, 0x200, 0x40, 0x80000001, 0x5, 0x6, 0x100, 0x100000000}, {0x81, 0x10001, 0x6, 0xb5, 0x46, 0x1, 0x6a3, 0x5, 0x3, 0xd3, 0x1, 0x7f, 0x10001}, {0x2, 0x5, 0x7, 0x81, 0x8, 0x200, 0x765, 0x80008, 0x1, 0x4, 0xf4, 0x6, 0x80000001}], 0x101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000e3b000-0x10)={&(0x7f000008c000/0x2000)=nil, 0x2000}) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000486000-0xba)=""/186, 0xba) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) pipe2(&(0x7f0000666000)={0x0, 0x0}, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000d03000-0x48)={0x4, 0x3, [{0x32, 0x0, 0x7}, {0x8, 0x0, 0x3}, {0xa4, 0x0, 0x1}, {0x1, 0x0, 0x943a}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000edd000-0x9)='/dev/kvm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000155000)=""/34, 0x22, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x800000000000e2, 0x0, 0x0, 0x0, 0x0, 0x578, 0x0, 0x0, 0x80000040fe, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x662, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket(0x15, 0x80005, 0x0) clock_gettime(0x0, &(0x7f0000813000)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000ce2000)={r2, r3/1000+30000}, 0x8) getsockopt(r1, 0x200000000114, 0x2718, &(0x7f0000c36000-0x1)=""/1, &(0x7f0000000000)=0x1) 2017/12/27 08:42:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000864000-0x8)="48ecf602a6c502df") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c3000)=0x4) [ 441.693445] binder: release 25621:25624 transaction 2945 in, still active [ 441.693453] binder: send failed reply for transaction 2945 to 25621:25630 [ 441.693472] binder: undelivered TRANSACTION_COMPLETE [ 441.693480] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.693501] binder: send failed reply for transaction 2946 to 25621:25630 [ 441.693652] binder: undelivered TRANSACTION_COMPLETE [ 441.693660] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000533000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000be0000-0x4)=0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00001c3000)=0x9) 2017/12/27 08:42:05 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000dac000-0x8)={0x4}, &(0x7f0000152000)={0x0}, 0x8) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00002d6000)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000ec6000)='./control\x00', 0x0, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x1, 0x0) bind(r0, &(0x7f0000d93000-0x1c)=@in6={0xa, 0x0, 0x8001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000001}, 0x1c) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 441.788334] binder: 25683 RLIMIT_NICE not set [ 441.795983] binder: 25685 RLIMIT_NICE not set [ 441.815834] binder: 25681:25695 transaction failed 29189/-22, size 0-0 line 2775 2017/12/27 08:42:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:05 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) futimesat(r0, &(0x7f0000d9d000)='./file0\x00', &(0x7f0000fa1000)={{0x0, 0x2710}, {0x0, 0x2710}}) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000071a000)='/selinux/mls\x00', 0x0, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f000097f000)={0x3, 0x3, 0x7fff, 0x7fff, 0xe5, 0x3}) getpid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:05 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x7) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000176000)='/selinux/status\x00', 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x800}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000fc9000-0x4)=@assoc_id=0x0, &(0x7f0000060000)=0x4) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000fc9000-0x10)={r3, 0xec6, 0x3ff, 0x7}, &(0x7f0000fc8000)=0x10) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000455000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00001c3000)=0x9) [ 441.818558] binder: release 25676:25680 transaction 2960 out, still active [ 441.818563] binder: undelivered TRANSACTION_COMPLETE [ 441.818583] binder: send failed reply for transaction 2960, target dead [ 441.825695] binder_alloc: 25675: binder_alloc_buf, no vma 2017/12/27 08:42:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x20000001e, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x10) write(r0, &(0x7f0000689000)="1c0000001e000720270100081d002200010003000009f90006000000", 0x1c) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f00009dc000)={@common='eql\x00', @ifru_map={0x62138479, 0x3f, 0xa835, 0x81, 0x9, 0x0}}) 2017/12/27 08:42:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 441.825720] binder: 25675:25698 transaction failed 29189/-3, size 0-0 line 2890 [ 441.843987] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) fchmod(r0, 0x4) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f000030f000-0x18)={0x1, 0x0, [{0x2, 0x0, 0x1}]}) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 441.846544] binder: 25701:25703 got transaction with invalid offsets ptr 2017/12/27 08:42:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7ffffffe}, 0x8, 0x0) fgetxattr(r0, &(0x7f00005bb000-0x1e)=@random={'os2.\x00', 'cpusetnodevmime_typebdev\x00'}, &(0x7f0000214000-0xa)=""/10, 0xa) gettid() rt_sigprocmask(0x0, &(0x7f0000609000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = request_key(&(0x7f0000c5e000-0x8)='big_key\x00', &(0x7f0000c2a000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000e12000-0x7)='vmnet0\x00', 0xfffffffffffffff9) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00008f8000-0x11)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000b37000-0x20)={0x0, 0x10000, 0x100000000, 0x400, 0xd2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = add_key$keyring(&(0x7f0000e50000)='keyring\x00', &(0x7f0000c09000+0x11e)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r1) keyctl$reject(0x13, r1, 0x3, 0x1ff, r3) fstat(r2, &(0x7f000062d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000f83000-0xc)={0x0, 0x0, 0x0}, 0xc) syz_fuseblk_mount(&(0x7f0000b46000)='./file0\x00', &(0x7f00003b4000)='./file0\x00', 0x6000, r4, r6, 0xd51e, 0xffffffff, 0x1806) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4008641a, &(0x7f0000cb7000)={0x2, &(0x7f0000892000)=[0x8, 0x100]}) tkill(r5, 0x1d) recvfrom$unix(r2, &(0x7f00008d4000+0x6cb)=""/200, 0xc8, 0x12100, &(0x7f0000a73000-0x8)=@abs={0xebf17f048c137877, 0x0, 0x2}, 0x8) keyctl$assume_authority(0x10, r1) pipe(&(0x7f0000fcf000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000712000)=0x0, &(0x7f00004e4000)=0x4) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00009fe000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8000, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x100000000, 0x4}, &(0x7f0000007000-0x4)=0x20) splice(r0, 0x0, r8, 0x0, 0x7fff, 0x0) mkdirat(r7, &(0x7f00000f1000)='./file0\x00', 0x8) [ 441.846574] binder: 25701:25703 transaction failed 29201/-14, size 0-4096 line 2918 [ 441.848221] binder: 25681:25704 BC_FREE_BUFFER u000000002000c000 no match [ 441.857847] binder: 25681:25704 transaction failed 29189/-22, size 0-0 line 2775 [ 441.871687] binder: 25708:25710 got new transaction with bad transaction stack, transaction 2968 has target 25708:0 [ 441.871700] binder: 25708:25710 transaction failed 29201/-71, size 0-0 line 2802 [ 441.874038] binder: BINDER_SET_CONTEXT_MGR already set [ 441.874055] binder: 25701:25707 ioctl 40046207 0 returned -16 [ 441.892618] binder: release 25708:25710 transaction 2968 out, still active [ 441.892624] binder: undelivered TRANSACTION_COMPLETE [ 441.892632] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.892650] binder: send failed reply for transaction 2968, target dead [ 441.896669] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.925996] binder: 25681:25716 transaction failed 29189/-22, size 0-0 line 2775 [ 441.926768] binder: 25718:25720 got transaction with invalid offsets ptr [ 441.926802] binder: 25718:25720 transaction failed 29201/-14, size 0-4096 line 2918 [ 441.928851] binder: 25681:25704 BC_FREE_BUFFER u000000002000c000 no match [ 441.930775] binder: 25717:25721 got new transaction with bad transaction stack, transaction 2974 has target 25717:0 [ 441.930788] binder: 25717:25721 transaction failed 29201/-71, size 0-0 line 2802 [ 441.930911] binder: 25681:25716 transaction failed 29189/-22, size 0-0 line 2775 [ 441.945927] binder: release 25717:25721 transaction 2974 out, still active [ 441.945932] binder: undelivered TRANSACTION_COMPLETE [ 441.945940] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.945959] binder: send failed reply for transaction 2974, target dead [ 441.952356] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.957166] binder_alloc: 25718: binder_alloc_buf, no vma [ 441.957189] binder: 25718:25726 transaction failed 29189/-3, size 0-4096 line 2890 [ 441.972217] binder: undelivered TRANSACTION_ERROR: 29189 [ 441.992047] binder: 25729:25731 got new transaction with bad transaction stack, transaction 2980 has target 25729:0 [ 441.992059] binder: 25729:25731 transaction failed 29201/-71, size 0-0 line 2802 [ 442.014934] binder: release 25729:25731 transaction 2980 out, still active [ 442.014940] binder: undelivered TRANSACTION_COMPLETE [ 442.014949] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.014968] binder: send failed reply for transaction 2980, target dead [ 442.029131] binder_alloc: 25735: binder_alloc_buf, no vma [ 442.029153] binder: 25735:25737 transaction failed 29189/-3, size 0-4096 line 2890 [ 442.038179] binder_alloc: binder_alloc_mmap_handler: 25735 20000000-20002000 already mapped failed -16 [ 442.039349] binder: BINDER_SET_CONTEXT_MGR already set [ 442.039393] binder: 25735:25737 ioctl 40046207 0 returned -16 [ 442.039398] binder_alloc: 25735: binder_alloc_buf, no vma [ 442.039421] binder: 25735:25743 transaction failed 29189/-3, size 0-4096 line 2890 2017/12/27 08:42:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r1 = mmap$binder(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000004b000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x807c6406, &(0x7f00006d6000)=""/120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) dup2(r2, r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00003e3000)={0x0, @empty=0x0, @remote={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000281000)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f000038b000)={@multicast2=0xe0000002, @broadcast=0xffffffff, r3}, 0xc) 2017/12/27 08:42:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000d0e000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000715000)={0x5, "4c50a134f50f"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r1, 0x0) seccomp(0x0, 0x1, &(0x7f00001e7000)={0x0, &(0x7f00004f2000)=[]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000ca0000)=0x4) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000d40000)='/selinux/member\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000477000)=0x2a, 0x4) bind$bt_hci(r3, &(0x7f00000a0000)={0x1f, 0x7, 0x3}, 0x6) pipe2(&(0x7f00002b2000-0x8)={0x0, 0x0}, 0x800) 2017/12/27 08:42:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:05 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, r0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000fc8000)=0x0, &(0x7f0000fc9000-0x4)=0x4) r2 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r2, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00005b5000-0x30)={0x200, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(r2, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00009b4000)=[@in6={0xa, 0x1, 0x7f, @loopback={0x0, 0x1}, 0xff}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f00002ae000)={{0xffffffffffffffff, 0x0, 0x6, 0x0, 0x7}, 0x56, 0x9f04, 0x81, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sysfs$2(0x2, 0x3ff, &(0x7f0000fc8000)=""/8) 2017/12/27 08:42:05 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:05 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000007b000-0xc)='/dev/rfkill\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000c35000)={@common='gretap0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001000-0xc)={@loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, r1}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f0000622000-0xc)='net/rt_acct\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000002000)=0x0, &(0x7f0000f21000-0x4)=0x4) [ 442.055273] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.055473] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.357511] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.368273] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.380640] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.391193] binder: binder_mmap: 25757 20337000-20338000 bad vm_flags failed -1 [ 442.394423] binder: 25761 RLIMIT_NICE not set [ 442.394860] binder_alloc: 25753: binder_alloc_buf, no vma [ 442.394884] binder: 25753:25763 transaction failed 29189/-3, size 0-4096 line 2890 [ 442.396680] binder: 25757:25764 transaction failed 29189/-22, size 0-0 line 2775 [ 442.432694] binder: 25751:25771 transaction failed 29189/-22, size 0-0 line 2775 [ 442.432787] binder: BINDER_SET_CONTEXT_MGR already set [ 442.432798] binder: 25753:25768 ioctl 40046207 0 returned -16 [ 442.433771] binder_alloc: 25753: binder_alloc_buf, no vma [ 442.433796] binder: 25753:25774 transaction failed 29189/-3, size 0-4096 line 2890 [ 442.433857] binder: binder_mmap: 25757 20337000-20338000 bad vm_flags failed -1 [ 442.436356] binder: 25757:25777 transaction failed 29189/-22, size 0-0 line 2775 [ 442.526679] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.532203] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.537771] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.543519] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000f7f000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000481000)={0x4, 0x3f, 0x0, 'queue1\x00', 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc91, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00006b5000)="6e5bdf3c98dd8018b33a3a8868dab50d0341283dd4c1b6217f500ff624f8200da754b5212511e78e59ff8fe82de2bd22e2e02ed53cbf2bbded0b8a2dfeddbb142b2d02b34e8eb1e62da3d684fcbab28b8793770ad9c2e3b9f21c672c7407208848fb76078c78607ed83c5680a01ad94277506edfaf8b99fffe69", 0x7a) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00001c3000)=0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000fc1000)={0x57, 0x5, 0xfff, 'queue0\x00', 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000181000-0x4)=0x5, 0x4) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000edb000)={0x0, 0x0, 0x80000000, 'queue0\x00', 0x100000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:06 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000004000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000004000)={0x0, @in6={{0xa, 0x1, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002000)=0x8c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002000-0xa0)={r1, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8000, 0x7, 0x6, 0x7, 0x5}, &(0x7f0000003000)=0xa0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000003000)=@generic="0e111b2f8828ffd6dcd42d11b0f611a0") 2017/12/27 08:42:06 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000fc8000)='/dev/input/event#\x00', 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000afc000)='/dev/usbmon#\x00', 0x3, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000b21000)={0x8fc0, 0x6, 0x8}) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000fc9000)={@loopback={0x0, 0x1}, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1fc00, 0x5}, 0x20) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00007fe000-0x88)={0x5, {{0xa, 0x3, 0x3f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) sendto$inet6(r2, &(0x7f0000833000-0x1)='i', 0x1, 0x0, &(0x7f0000ee0000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, 0x1c) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000471000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000c14000-0x4)=0x8) 2017/12/27 08:42:06 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000d7d000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000b85000)=0x5) socketpair$inet6(0xa, 0x800, 0xe209, &(0x7f00009b2000-0x8)={0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000ad1000-0xe8)={{{@in=@empty=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bd6000-0x4)=0xe8) lstat(&(0x7f0000cc0000-0x8)='./file0\x00', &(0x7f0000466000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000d5c000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000892000)=0xe8) r7 = getgid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000bec000-0x4)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00004d0000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000874000-0x4)=0xe8) stat(&(0x7f0000a39000-0x8)='./file0\x00', &(0x7f00001cb000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000f02000-0x1c)={0x0, 0x0, &(0x7f0000811000)=[{&(0x7f0000bfd000-0x12eb)=[{0x84, 0x3, 0x200, 0x100000001, 0xf9e8, "68a9cfa5e494f21c100d3f2affa721820bf8a0e29722d3f16bde1bab8228a8029cef9b799651e01863391753a9db01312d9919ed123afa764deb6ce63b4cc586d21496d03e836608ba49308bc769735fe3c3fc55ef68c980c8d8f887cf2e8691712b59a5826e5c2efe336d09ff165d03aec5c6fd"}, {0x9b, 0x4, 0x400, 0xfffffffffffffff8, 0x2, "95934603ed11cdf84c95b6df34cd9601f48d3998b254684730a847a3b994dfdd8d5e614300c7c057ed1efbe0916efce32689822c5813055473ea2ffe9b4471a7c48ff22323f73ed6b907100e7fbe20c91abe0b58573605e0bc260777d7c7c8aa310f425c886d03e0ef3a4549990714cbfd9c42a471be6acec34a91ab5b2e907b4b4d44f8372fd36622ab9f"}, {0x1010, 0x401, 0x400, 0x6, 0x1ff, "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"}, {0xbb, 0x400, 0x100, 0x3, 0x3a2d4018, "3a7627cb37383f8b20eb72afa56849aa88cbe50d232c3f69a7d5ac5cabbf37206c2c2ee392df1e91abe7f7665288914010999cd757894dd09e9d6b486080ae00a81eed44d1175d4cf59c724b2fdc73badefa994c99480b9184299c941fbfb5c85482ec2b2e031f2be8a403dcf77c643145eb74d803f1bead54e956babcb500989a6a21b5c1bd19008ed83c119884bf5b9b93f4468ba0f610959a883db08800d15e1d272cb7d3ffd802a62c"}, {0x101, 0x5, 0x2, 0x80, 0x4, "28a87b38c8ce1b35db4dc2bbc1a5c0ae6cc18127a1ae5b7f8295e12386b7c9da49c1bf414c2b80d09d24cc72ddacb0b283e05dffa33a58a056ef99b271bac94a4d6303d57a8735b9e64ec15fded57b8f2b8634c611fef221d35a12c974a435aef310196b97a25c05425c4ba8e5e4307add83a7467f34d44c4b78bea48678a435a872e886d613faa0f665cf93a9de65802f33c155f7ec32424e3d583e4cbccd43801303191cb2bdb5090aa49a8f6d379218805fa5ffc4a1fc18e24f14525f663eed9e0f508b675d126c61926bfe6f1895b22e2797dcfda0561fa79880731f2cea66a3f00eda7220246c6cc45b499c725b90"}], 0x12eb}], 0x1, &(0x7f0000ba3000)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r1]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @cred={0x18, 0x1, 0x2, r8, r9, r10}], 0xec, 0x40080}, 0x4000) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r12, &(0x7f000006b000)=""/24, 0x18) sched_rr_get_interval(0x0, &(0x7f00007e6000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000694000)={0x0, 0x1000}, &(0x7f0000aad000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000119000-0x20)={0x3, 0x4, 0x202, 0x80000000, 0x800, 0x0, 0x80, 0x0, r14}, 0x20) write$evdev(r12, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{r13, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r11, 0xc0186415, &(0x7f0000d3d000-0x18)={&(0x7f0000000000/0x1000)=nil, 0xfff, 0x5, 0x4, &(0x7f0000e49000/0x4000)=nil, 0xfff}) mremap(&(0x7f0000fbc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = syz_open_dev$usbmon(&(0x7f0000903000-0xd)='/dev/usbmon#\x00', 0x400000057f04c7, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1d, &(0x7f00006a1000-0x6d)="5f8766300ad879058d5c6585999ae9b77abd91745e7031d064a564b8a2d76234e2a39e62f25b683ab68bc48d2fbcea260c10bc33cab285a908c5d44f538f576a13ac478472792313cf3498b2003fa28c3c2f94e64b90dd208a1787785c2a91f403631333176926250e025d8c82", 0x6d) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c65000-0x138)={{0x3, 0x2000, 0xb, 0x83, 0x1, 0x3130, 0x1f, 0x0, 0x6, 0x1ff, 0x100000000, 0x1ad2, 0x0}, {0x10f000, 0x100000, 0x0, 0x5, 0x7f, 0x100, 0x6, 0xde74, 0x0, 0x1ff, 0xfffffffffffffffa, 0x35e76f3, 0x0}, {0x1000, 0xd000, 0x14, 0x8, 0x4c, 0x80000001, 0x101, 0x9, 0x1, 0x200, 0x7, 0x300, 0x0}, {0x4000, 0x0, 0xf, 0xfffffffffffffff7, 0x1ff, 0xd5, 0x7, 0x1, 0x5, 0x2e21, 0x40, 0x7, 0x0}, {0x100000, 0x2, 0x10, 0x5, 0xc000000, 0x1, 0x80000000, 0x1, 0xfffffffffffff1af, 0x1, 0x200, 0x0, 0x0}, {0x15000, 0x0, 0x0, 0x1, 0x200, 0xcad6, 0x38000000000, 0x1, 0xa00000000000, 0x5, 0xd429, 0xdd, 0x0}, {0x100000, 0x0, 0xf, 0x10001, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xdddc, 0x2, 0x1f, 0x80000000, 0x0}, {0x107000, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7f, 0x1, 0x40, 0x32d35eb1, 0x10001, 0x0}, {0x1, 0x5ffd, [0x0, 0x0, 0x0]}, {0x7002, 0x0, [0x0, 0x0, 0x0]}, 0x1, 0x0, 0x100000, 0x40, 0x0, 0x8900, 0x100000, [0x2, 0x3, 0x2, 0x0]}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000754000-0x11)='/selinux/enforce\x00', 0x40, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00008f2000)={0x2, 0x2, 0x6, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 442.549102] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.554613] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:06 executing program 3: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x800008946, &(0x7f000044e000-0x28)={@common='lo\x00', @ifru_data=&(0x7f0000ff6000-0x20)="020000008d351b9f6d000073000000fffe22007663f5f942144b7fff000000e6"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000daf000-0x9)='/dev/rtc\x00', 0x301000, 0x0) 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f000068e000-0xa8)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f000039d000-0xd)=""/13) lstat(&(0x7f0000528000)='./file0\x00', &(0x7f0000510000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r3, 0xfffffffffffffe01) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000ed1000)=0x9, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f000022a000)="63fcf6ba6a565fadbbde1e9985be4d28fd8db8b6ccd9ac93198b3166aaff0afb1cc47fa2d708a94d23d6b8f6d06fcf670ce64ca3a63fa7fc9629c2b3c7f32b77ee76f7826c5efe855408bf9788af129ea17afb08d55952ff61c7afeea8ec5336e9a2ef96c16e0e2eca87b16cdfe878de39e8d03bf4adfad3a487d84f4a409825acdfee6c91735259bf102551") [ 442.608166] binder: 25793 RLIMIT_NICE not set [ 442.608367] binder: 25795 RLIMIT_NICE not set [ 442.608918] binder: 25779:25792 got transaction with invalid offsets ptr [ 442.608949] binder: 25779:25792 transaction failed 29201/-14, size 0-4096 line 2918 [ 442.624460] binder: BINDER_SET_CONTEXT_MGR already set [ 442.624469] binder: 25779:25797 ioctl 40046207 0 returned -16 [ 442.631171] binder_alloc: 25779: binder_alloc_buf, no vma [ 442.631194] binder: 25779:25797 transaction failed 29189/-3, size 0-4096 line 2890 [ 442.645538] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.645732] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.662573] binder: 25795 RLIMIT_NICE not set [ 442.672815] binder: BINDER_SET_CONTEXT_MGR already set [ 442.672829] binder: 25790:25801 ioctl 40046207 0 returned -16 [ 442.674956] binder: 25795 RLIMIT_NICE not set [ 442.687438] binder_alloc: 25790: binder_alloc_buf, no vma [ 442.687465] binder: 25790:25801 transaction failed 29189/-3, size 0-0 line 2890 [ 442.687509] binder: 25790:25808 BC_FREE_BUFFER u000000002000c000 no match [ 442.687701] binder: 25784:25810 transaction failed 29189/-22, size 0-0 line 2775 [ 442.691133] binder: 25784:25802 transaction failed 29189/-22, size 0-0 line 2775 [ 442.693393] binder_alloc: 25790: binder_alloc_buf, no vma [ 442.693413] binder: 25790:25808 transaction failed 29189/-3, size 0-0 line 2890 [ 442.710825] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.710890] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.710993] binder: release 25790:25795 transaction 2995 in, still active [ 442.711004] binder: send failed reply for transaction 2995 to 25790:25801 [ 442.711046] binder: undelivered TRANSACTION_COMPLETE [ 442.711053] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000a3f000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b3b, 0x2819ea11) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00001c3000)=0x9) 2017/12/27 08:42:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000115000-0x12)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x20000) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = syz_open_dev$mice(&(0x7f00009af000-0x10)='/dev/input/mice\x00', 0x0, 0x400) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000ede000-0xd5)=""/213) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000f58000-0x14)={0x81, 0xff, 0x81, 0x6, 0x7}) 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000635000)='/selinux/enforce\x00', 0x2000, 0x0) bind$llc(r0, &(0x7f0000356000-0x10)={0x1a, 0xf7, 0x400, 0x5, 0xca7, 0x8, @random="7ef981e9ba9a", [0x0, 0x0]}, 0x10) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00009ff000)={r3, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:06 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000cbe000)=@assoc_value={0x0, 0x9}, &(0x7f0000726000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000d72000)={r2, 0x8}, &(0x7f0000fc9000-0x4)=0x8) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000010d000)={0x0, 0x0}, 0x80000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f000021d000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000c5000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ae3000)=0xe8) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00005dc000-0xc)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000f57000)={r2, r3, r4}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f000070a000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4) socket$netlink(0x10, 0x3, 0x1f) [ 442.711072] binder: send failed reply for transaction 2996 to 25790:25795 [ 442.711236] binder: undelivered TRANSACTION_COMPLETE [ 442.711243] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.910066] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.915563] binder: undelivered TRANSACTION_ERROR: 29189 [ 442.963989] binder: 25826 RLIMIT_NICE not set [ 442.970299] binder: 25828 RLIMIT_NICE not set [ 442.974004] binder: 25815:25829 got transaction with invalid offsets ptr 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000e3f000-0x10)={0x13, 0x1f, 0x8}) 2017/12/27 08:42:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f00002be000-0x18)={0x5b22, 0x2, 0x7ff, 0x3f, 0xa, 0x1}) 2017/12/27 08:42:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) 2017/12/27 08:42:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0x0}, 0x10) [ 442.974117] binder: 25815:25829 transaction failed 29201/-14, size 0-4096 line 2918 [ 442.986730] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.996580] binder_alloc: 25815: binder_alloc_buf, no vma [ 442.996606] binder: 25815:25833 transaction failed 29189/-3, size 0-4096 line 2890 [ 443.013576] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.019352] binder: 25820:25838 transaction failed 29189/-22, size 0-0 line 2775 [ 443.028459] binder: 25818:25836 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 443.058680] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.061375] binder: BINDER_SET_CONTEXT_MGR already set [ 443.061385] binder: 25818:25840 ioctl 40046207 0 returned -16 [ 443.063208] binder: 25836 RLIMIT_NICE not set [ 443.066576] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.066601] binder: 25818:25840 transaction failed 29189/-3, size 0-0 line 2890 [ 443.067214] binder: 25843:25844 got transaction with invalid offsets ptr [ 443.067279] binder: 25843:25844 transaction failed 29201/-14, size 0-4096 line 2918 [ 443.079575] binder: 25818:25850 BC_FREE_BUFFER u000000002000c000 no match [ 443.083087] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.083110] binder: 25818:25840 transaction failed 29189/-3, size 0-0 line 2890 [ 443.087857] binder: undelivered TRANSACTION_ERROR: 29201 [ 443.090320] binder_alloc: 25843: binder_alloc_buf, no vma [ 443.090347] binder: 25843:25852 transaction failed 29189/-3, size 0-4096 line 2890 [ 443.095184] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.213707] binder: 25826 RLIMIT_NICE not set 2017/12/27 08:42:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000a2c000-0x8)={0x0, 0x0}, &(0x7f000021e000-0x4)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:06 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000fc9000-0x88)={0x8, {{0xa, 0x2, 0x3f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000fc9000)={0x0}, 0x8) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000fc8000)={0x0, 0x1000, "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"}, &(0x7f0000fc9000-0x4)=0x1008) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000fcb000-0x16)='/selinux/checkreqprot\x00', 0x4200, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r3, &(0x7f0000fcb000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000e6d000-0x4)=0xc) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0xd, 0x4, 0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000fc8000)={r2, 0xf4, 0xfffffffffffff801, 0x0, 0x40, 0x7a}, &(0x7f0000fc9000-0x4)=0x14) 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) mq_timedreceive(r1, &(0x7f0000d02000)=""/124, 0x7c, 0x80000001, 0x0) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000afd000)={0x0, {{0x2, 0x0, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) 2017/12/27 08:42:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000ca1000-0x1)=0x5, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000d7a000)=0x40000000000006) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000788000-0x2)={0x7, 0x0}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00004b0000)=0x7ff) 2017/12/27 08:42:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)={0x0, 0x0}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bf7000-0xb)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000427000-0x4)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fc2000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000a0b000/0x1000)=nil, 0x1000) 2017/12/27 08:42:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00007bb000-0xc)={0x2, r0, 0x1}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000de6000-0x18)={0x0, 0x8, 0x20, 0x400, 0x200}, &(0x7f0000b55000)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f000038e000-0x8)={r4, 0xffffffffffffff6d}, &(0x7f00006ff000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f000094c000-0x10)={&(0x7f0000506000/0x4000)=nil, 0x4000}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000173000-0x4)=0x0, &(0x7f0000dd8000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000df5000-0x10)={0x2, 0x10f000}) 2017/12/27 08:42:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x32, r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00009b2000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) flistxattr(r1, &(0x7f00005b1000)=""/187, 0xbb) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) [ 443.235130] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.240863] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.256227] binder: release 25818:25836 transaction 3008 out, still active [ 443.263333] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00007e4000-0x4)=0x100000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f000007d000-0x10)={0x6, 0x4, 0xfffffffffffffffb, 0x6, 0x0}, &(0x7f00007ec000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f000009e000)={r3, 0x2}, &(0x7f0000e27000)=0x8) 2017/12/27 08:42:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 443.280201] binder: BINDER_SET_CONTEXT_MGR already set [ 443.280210] binder: 25864:25869 ioctl 40046207 0 returned -16 [ 443.281212] binder: 25869 RLIMIT_NICE not set [ 443.284139] binder: 25865:25867 got transaction with invalid offsets ptr [ 443.284171] binder: 25865:25867 transaction failed 29201/-14, size 0-4096 line 2918 2017/12/27 08:42:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) [ 443.286905] binder: 25874 RLIMIT_NICE not set 2017/12/27 08:42:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000e80000-0x4)=0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000c7c000)=0x100) [ 443.292645] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/27 08:42:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f000044e000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000808000-0x10)='/selinux/create\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000e65000)={0x7fff, 0x5, 0x201, 0x982, 0x8001, 0x3, 0x101, 0x4c8, 0x0}, &(0x7f0000ed0000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000b63000)={0x0, 0x14, "dea92b515bb5b5544e48a74846890894dc19854c"}, &(0x7f0000232000)=0x1c) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000ab8000-0xb8)={r4, 0x3f, 0x2, 0x0, 0x1f, 0x4, 0x400, 0x0, {r5, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x80000001, 0x8, 0x40, 0x7}}, &(0x7f0000dbc000)=0xb8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 443.292654] binder: 25865:25875 ioctl 40046207 0 returned -16 [ 443.316817] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.316841] binder: 25864:25879 transaction failed 29189/-3, size 0-0 line 2890 [ 443.326054] binder: 25874 RLIMIT_NICE not set [ 443.340535] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.340560] binder: 25864:25879 transaction failed 29189/-3, size 0-0 line 2890 [ 443.348204] binder: BINDER_SET_CONTEXT_MGR already set [ 443.348212] binder: 25877:25883 ioctl 40046207 0 returned -16 [ 443.349604] binder_alloc: 25865: binder_alloc_buf, no vma [ 443.349627] binder: 25877:25883 transaction failed 29189/-3, size 0-4096 line 2890 [ 443.366830] binder: BINDER_SET_CONTEXT_MGR already set [ 443.366840] binder: 25886:25888 ioctl 40046207 0 returned -16 [ 443.367362] binder: 25888 RLIMIT_NICE not set [ 443.368693] binder: BINDER_SET_CONTEXT_MGR already set [ 443.368704] binder: 25864:25891 ioctl 40046207 0 returned -16 [ 443.369882] binder: 25879 RLIMIT_NICE not set [ 443.371687] binder: BINDER_SET_CONTEXT_MGR already set [ 443.371696] binder: 25877:25883 ioctl 40046207 0 returned -16 [ 443.374340] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.374362] binder: 25864:25891 transaction failed 29189/-3, size 0-0 line 2890 [ 443.391798] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.391826] binder: 25864:25895 transaction failed 29189/-3, size 0-0 line 2890 [ 443.410555] binder_alloc: 25860: binder_alloc_buf, no vma [ 443.410581] binder: 25886:25898 transaction failed 29189/-3, size 0-0 line 2890 [ 443.420465] binder: BINDER_SET_CONTEXT_MGR already set [ 443.420475] binder: 25897:25899 ioctl 40046207 0 returned -16 [ 443.421117] binder_alloc: 25865: binder_alloc_buf, no vma [ 443.421145] binder: 25897:25899 transaction failed 29189/-3, size 0-4096 line 2890 [ 443.449980] binder: BINDER_SET_CONTEXT_MGR already set [ 443.449991] binder: 25897:25904 ioctl 40046207 0 returned -16 [ 443.451200] binder_alloc: 25865: binder_alloc_buf, no vma [ 443.451225] binder: 25897:25899 transaction failed 29189/-3, size 0-4096 line 2890 [ 443.454426] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.454449] binder: 25902:25905 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:07 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x1000000000008c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000fc8000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f000078e000-0x28)={@generic="c82bf716aa58f9c9c3801a3ad56d0e32", @ifru_addrs=@ethernet={0x1, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000fc8000)=0x3ff, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000e99000)='./file0\x00', 0x404000, 0x108) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00008b1000-0xc)={{0x13ad, 0x9eb4, 0xffff, 0x7300000000000000, 0x7b9, 0x8}, 0xffffffff}) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000a4c000)={0xfffffffffffffffb, 0x10000, 0x8001, 'queue1\x00', 0xffffffffffffff5b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$int_out(r1, 0x2, &(0x7f0000006000)=0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) uselib(&(0x7f0000982000)='./file0\x00') close(r3) r4 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00007f5000)={0x7ff, 0xc3}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00004bf000-0x18)={0x2, [0x0, 0x4]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) pwritev(r1, &(0x7f0000b3a000)=[{&(0x7f000062f000-0x16)="8a5cb832629cf502392a79a6f9dcf4c65e3fa266f320", 0x16}, {&(0x7f0000787000)="802c041ffc2df25afd0590031439ef92f19923640832603b0c551f317704cc8d611622e3253ccad7a9b282e24d4cc202057079b8a0ee958a80e829d584278fe84e0f96e41207e1f73a5c47ec1bd9af7445c4849ec100bde9f5a3a4ce298889bad73651512cd7a634bc1eccbc650c170c1700050b18d9824ca393c5cb037a6b381b0612548547d518c555db19229819d716b911ad5abb240b68618d1da1343fbe8d793a8974be150a7f17a682bffbeed0f910b77aa78499044201356876f25e5e37e2b4d04f2cafd902214b574c6737", 0xcf}, {&(0x7f0000d85000-0xe3)="ca1420cf620d52b90cc0dde2111926e4cb68d0376a3239f35c5de82f5b3113d915015eabbd0655df71fc12f39202db6033383d78218f05685343b9e59ad2bea86df4e96cfe40fdb10d074d41c5a13e146cc4aaf17eedb7bc0c6f76e70869ca84e6b2206f86b366b0576d2063293535ee5d24871550a27e19ef7eb29c958b81a35c40d9dce7fd7ff8790cd3c1b3faf459b779f62119cac8b980ed72b48a12e232fbdd32b949004b5c526aa272187309512383fdd6651573fb1b70591feec4803db564cef6252908d91388da9c3377a650b4223277a040671e864e64215bbc7f00481a21", 0xe3}], 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) 2017/12/27 08:42:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) msync(&(0x7f0000dc2000/0x2000)=nil, 0x2000, 0x5) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000a1d000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f000088c000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000f42000)={0x9, 0x1000, "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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005000-0x14)=[], 0x44, 0x0, &(0x7f00009ab000)="bb55725a04f1f68bf776f65cdde9d33c54f372cdcc3470ff506cb51a30b5da0bebc5fa8439db75ba21f90f0dd77fcc8f766d22098e164d395c93c006793c3bbfd66af92c"}) 2017/12/27 08:42:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)={0x0, 0x0}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bf7000-0xb)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000427000-0x4)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fc2000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000a0b000/0x1000)=nil, 0x1000) 2017/12/27 08:42:07 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) clock_gettime(0x0, &(0x7f0000a66000-0x8)={0x0, 0x0}) select(0x40, &(0x7f00005ad000)={0x5508, 0x5, 0x7fffffff, 0x8, 0xfffffffffffffff8, 0x4, 0x7, 0x1f}, &(0x7f0000bdd000-0x40)={0x4, 0xffff, 0x6, 0x400, 0x100000001, 0xfff, 0x11, 0x9}, &(0x7f000037b000)={0x80000001, 0x0, 0x7f, 0x3, 0xa4, 0x80000001, 0x7f, 0x5}, &(0x7f000082f000)={r2, r3/1000+30000}) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000293000-0xc)={0x8001, 0x3f, 0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000cb7000-0x400)={""/1024}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) [ 443.524165] binder_alloc: 25818: binder_alloc_buf, no vma [ 443.524203] binder: 25902:25908 transaction failed 29189/-3, size 0-0 line 2890 [ 443.721066] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.721087] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.721173] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.721309] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.721409] binder: undelivered TRANSACTION_ERROR: 29201 [ 443.726632] binder: release 25818:25826 transaction 3006 in, still active 2017/12/27 08:42:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00005ba000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 443.726640] binder: send failed reply for transaction 3006 to 25818:25840 [ 443.726662] binder: undelivered TRANSACTION_COMPLETE [ 443.726672] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.726690] binder: send failed reply for transaction 3008, target dead [ 443.728745] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.728842] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f00009b8000)=[@transaction={0x40406300, {0x4, 0x0, 0x8, 0x0, 0x20001, 0x0, 0x0, 0x18, 0x8, &(0x7f00006e8000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f000075b000)=[0x78]}}], 0x1, 0x0, &(0x7f000034e000)="80"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f0000d33000-0xd)='/dev/urandom\x00', 0x0, 0x101000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x80000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f000073f000)={0x2, [0x0, 0x2]}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x9) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f00002c4000-0xc)={0x0, 0x0, 0x0}, 0xc) r4 = add_key(&(0x7f0000e46000)='ceph\x00', &(0x7f000009d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00002e6000-0x79)="7f55e19ee4820c7bb6a0dad1141a3f1efc932eff8b7a365d60c3b4204e33c999aa7ed04f9bd6e278019432699fc45ad75ffd8c18b5027738fb40be4c7ad3caadf5076ec5b4db6ccce298a9156ca8e3922ba93fb80e7ebf8eebf723aa58a72f84a89245965c09526d1623b3c2fd1f61b7156851710b281a450f", 0x79, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r3, r4) openat$autofs(0xffffffffffffff9c, &(0x7f0000c63000-0xc)='/dev/autofs\x00', 0x8001, 0x0) 2017/12/27 08:42:07 executing program 5: pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000622000-0x6)={0xda62, 0x0, 0x800}) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x200000, 0x0) [ 443.728884] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.728907] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.728943] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:07 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000fc8000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000fc9000-0x8)={0x9, 0x8, 0x1, 0x4}) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 443.728965] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.729112] binder: release 25860:25874 transaction 3020 out, still active 2017/12/27 08:42:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000ea5000-0x4)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000805000-0xc1)={0x0, 0xb9, "654b4accb0d7bd04a7e962987d9ed6cead94343e749b3c278250e983526e8f88168af1ba1cd1e1bc0281256684449ce498ed5866c3877c6a960ebd076ea16f840bd9b5bbc06d2e45780bd0a84d404ceb66941d8702dd4a207e31c6276b5827aebcec9b1208df2817e96652573b053f670153b56616e219d0fb8625ac5f93a90df7ed21d6af9db3b6cf4034c8c595d7178131fecda5d7bf4f8fc7be484929e1a8d8511d515e9da1c263c9770229699e74dd79ceca726c9f624a"}, &(0x7f00001f1000-0x4)=0xc1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000c3f000-0x10)={0x2, 0xc, 0x200, 0xffff, r4}, &(0x7f0000633000)=0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000061000-0x1c)=@req3={0x6, 0x8, 0x80, 0x2, 0x2, 0x7, 0x5b4}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000e3f000-0x10)={r4, 0x8, 0x0, 0x1ff}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 443.729118] binder: release 25860:25874 transaction 3019 in, still active [ 443.729122] binder: undelivered TRANSACTION_COMPLETE [ 443.729135] binder: release 25860:25881 transaction 3019 out, still active [ 443.729138] binder: undelivered TRANSACTION_COMPLETE [ 443.729146] binder: send failed reply for transaction 3020, target dead [ 443.729153] binder: send failed reply for transaction 3019, target dead [ 443.773531] binder: 25925 RLIMIT_NICE not set [ 443.773984] binder: 25928 RLIMIT_NICE not set [ 443.784851] binder: 25914:25927 transaction failed 29189/-22, size 0-4096 line 2775 [ 443.811516] binder: 25925 RLIMIT_NICE not set [ 443.815680] binder: 25928 RLIMIT_NICE not set [ 443.819433] binder: 25914:25931 transaction failed 29189/-22, size 0-4096 line 2775 [ 443.833871] binder: BINDER_SET_CONTEXT_MGR already set [ 443.833883] binder: 25917:25933 ioctl 40046207 0 returned -16 [ 443.835779] binder: 25928 RLIMIT_NICE not set [ 443.840800] binder_alloc: 25917: binder_alloc_buf, no vma [ 443.840823] binder: 25917:25933 transaction failed 29189/-3, size 0-0 line 2890 [ 443.875166] binder: 25941:25943 got transaction with invalid offsets ptr [ 443.875205] binder: 25941:25943 transaction failed 29201/-14, size 0-4096 line 2918 [ 443.881703] binder: BINDER_SET_CONTEXT_MGR already set [ 443.881712] binder: 25944:25950 ioctl 40046207 0 returned -16 [ 443.881775] binder: 25950 RLIMIT_NICE not set [ 443.883034] binder: BINDER_SET_CONTEXT_MGR already set [ 443.883041] binder: 25945:25947 ioctl 40046207 0 returned -16 [ 443.883096] binder: 25947 RLIMIT_NICE not set [ 443.894347] binder: BINDER_SET_CONTEXT_MGR already set [ 443.894356] binder: 25941:25953 ioctl 40046207 0 returned -16 [ 443.917651] binder: 25945:25957 got transaction to invalid handle [ 443.917660] binder: 25945:25957 transaction failed 29201/-22, size 24-8 line 2775 [ 443.917707] binder_alloc: 25916: binder_alloc_buf, no vma [ 443.917727] binder: 25944:25959 transaction failed 29189/-3, size 0-0 line 2890 [ 443.918948] binder_alloc: 25916: binder_alloc_buf, no vma [ 443.918970] binder: 25944:25959 transaction failed 29189/-3, size 0-0 line 2890 [ 443.921058] binder: 25945:25957 BC_FREE_BUFFER u000000002000c000 no match [ 443.922477] binder_alloc: 25917: binder_alloc_buf, no vma [ 443.922499] binder: 25945:25957 transaction failed 29189/-3, size 0-0 line 2890 [ 443.955476] binder: BINDER_SET_CONTEXT_MGR already set [ 443.955487] binder: 25945:25965 ioctl 40046207 0 returned -16 [ 443.965817] binder: 25957 RLIMIT_NICE not set [ 443.974133] binder: 25945:25965 got transaction to invalid handle [ 443.974146] binder: 25945:25965 transaction failed 29201/-22, size 24-8 line 2775 [ 443.976400] binder: BINDER_SET_CONTEXT_MGR already set [ 443.976407] binder: 25969:25971 ioctl 40046207 0 returned -16 [ 443.977386] binder: 25971 RLIMIT_NICE not set [ 443.978588] binder: 25945:25972 BC_FREE_BUFFER u000000002000c000 no match [ 443.979775] binder_alloc: 25917: binder_alloc_buf, no vma [ 443.979798] binder: 25945:25965 transaction failed 29189/-3, size 0-0 line 2890 [ 443.997229] binder_alloc: 25941: binder_alloc_buf, no vma [ 443.997252] binder: 25973:25975 transaction failed 29189/-3, size 0-4096 line 2890 [ 444.010500] binder_alloc: 25916: binder_alloc_buf, no vma [ 444.010522] binder: 25969:25976 transaction failed 29189/-3, size 0-0 line 2890 [ 444.016922] binder_alloc: 25916: binder_alloc_buf, no vma [ 444.016942] binder: 25969:25976 transaction failed 29189/-3, size 0-0 line 2890 [ 444.343871] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.349372] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.354897] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.360419] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.365893] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.371389] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.376892] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.382406] binder: undelivered TRANSACTION_ERROR: 29201 [ 444.387974] binder: release 25916:25925 transaction 3034 out, still active [ 444.395004] binder: release 25916:25925 transaction 3033 in, still active [ 444.401953] binder: undelivered TRANSACTION_COMPLETE [ 444.407072] binder: release 25916:25934 transaction 3033 out, still active [ 444.414075] binder: undelivered TRANSACTION_COMPLETE [ 444.419182] binder: send failed reply for transaction 3034, target dead [ 444.425935] binder: send failed reply for transaction 3033, target dead [ 444.432805] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000cb2000)=0x2) 2017/12/27 08:42:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000795000)='/dev/hwrng\x00', 0x3, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000eed000-0x28)={@common=""/16, @ifru_flags=0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000448000-0x4)=0x0, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00008e0000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f000074c000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 444.438335] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.444075] binder: release 25917:25928 transaction 3035 in, still active [ 444.451431] binder: send failed reply for transaction 3035 to 25917:25933 [ 444.458400] binder: undelivered TRANSACTION_COMPLETE [ 444.463515] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.469212] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000f75000)={0x0, 0xffffffffffffff9c, 0x0}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f000018b000)=0xd7, 0x4) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r1, 0x2, &(0x7f000003b000-0x4)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f000080a000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00006a1000-0x4)=0x14) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40186417, &(0x7f00006d3000-0x18)={0x1, 0x441, 0x84, 0x7, 0x4, 0xffffffffffffffff}) 2017/12/27 08:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)={0x0, 0x0}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bf7000-0xb)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000427000-0x4)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fc2000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000a0b000/0x1000)=nil, 0x1000) 2017/12/27 08:42:08 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00004be000-0x4)=0xfc00000000000000, 0x4) 2017/12/27 08:42:08 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000651000-0x28)=[{r0, 0x8000, 0x0}, {r1, 0x2000, 0x0}, {r0, 0x40, 0x0}, {r0, 0x0, 0x0}, {r1, 0x1, 0x0}], 0x5, &(0x7f0000fc8000)={0x0, 0x0}, &(0x7f000067d000-0x8)={0x3}, 0x8) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 444.520228] binder: 25989 RLIMIT_NICE not set 2017/12/27 08:42:08 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) clock_gettime(0x0, &(0x7f0000a66000-0x8)={0x0, 0x0}) select(0x40, &(0x7f00005ad000)={0x5508, 0x5, 0x7fffffff, 0x8, 0xfffffffffffffff8, 0x4, 0x7, 0x1f}, &(0x7f0000bdd000-0x40)={0x4, 0xffff, 0x6, 0x400, 0x100000001, 0xfff, 0x11, 0x9}, &(0x7f000037b000)={0x80000001, 0x0, 0x7f, 0x3, 0xa4, 0x80000001, 0x7f, 0x5}, &(0x7f000082f000)={r2, r3/1000+30000}) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000293000-0xc)={0x8001, 0x3f, 0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000cb7000-0x400)={""/1024}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 444.536138] binder: 25988 RLIMIT_NICE not set [ 444.558952] binder: release 25992:25995 transaction 3052 out, still active [ 444.566174] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 444.567459] binder: 25984:26004 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 444.567518] binder: 25989 RLIMIT_NICE not set [ 444.571327] binder: 25988 RLIMIT_NICE not set [ 444.585154] binder: BINDER_SET_CONTEXT_MGR already set [ 444.585166] binder: 25984:26004 ioctl 40046207 0 returned -16 [ 444.588321] binder_alloc: 25992: binder_alloc_buf, no vma [ 444.588347] binder: 25992:25995 transaction failed 29189/-3, size 0-0 line 2890 [ 444.610262] binder_alloc: 25984: binder_alloc_buf, no vma [ 444.610288] binder: 25984:26010 transaction failed 29189/-3, size 0-0 line 2890 [ 444.612428] binder: 25984:25988 BC_FREE_BUFFER u000000002000c000 no match [ 444.615369] binder_alloc: 25984: binder_alloc_buf, no vma [ 444.615395] binder: 25984:26010 transaction failed 29189/-3, size 0-0 line 2890 [ 444.637880] binder: BINDER_SET_CONTEXT_MGR already set [ 444.637889] binder: 26011:26012 ioctl 40046207 0 returned -16 [ 444.667703] binder_alloc: 25985: binder_alloc_buf, no vma [ 444.667729] binder: 26011:26014 transaction failed 29189/-3, size 0-0 line 2890 [ 444.840132] binder: send failed reply for transaction 3052, target dead [ 444.849309] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.854980] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.860497] binder: release 25985:26000 transaction 3054 out, still active [ 444.867522] binder: undelivered TRANSACTION_COMPLETE [ 444.872658] binder: release 25985:25989 transaction 3053 in, still active [ 444.879588] binder: send failed reply for transaction 3053 to 25985:26000 [ 444.886545] binder: undelivered TRANSACTION_COMPLETE [ 444.891653] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.897148] binder: send failed reply for transaction 3054, target dead [ 444.903997] binder: release 25984:25988 transaction 3056 out, still active [ 444.911061] binder: undelivered TRANSACTION_COMPLETE [ 444.916185] binder: release 25984:25988 transaction 3055 in, still active [ 444.923119] binder: send failed reply for transaction 3055 to 25984:26004 [ 444.930073] binder: undelivered TRANSACTION_COMPLETE [ 444.935200] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e88000-0x68)={0x7b, 0x0, [0x7b5, 0x40, 0x7a0c, 0x50], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00008a5000-0x11)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) 2017/12/27 08:42:08 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000bc5000-0x4)=0x0, &(0x7f00009e7000)=0x4) 2017/12/27 08:42:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00008de000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000983000-0x8)=@assoc_value={0x0, 0x3ff}, &(0x7f0000af1000)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000d27000-0x108)={r1, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xfffffffffffffff9, 0x9, 0x1000, 0x6, 0x4, 0x1f, 0x4, 0x8f7, 0x3f, 0x5, 0x1, 0x7f, 0x5, 0x62df, 0x5]}, &(0x7f000003d000-0x4)=0x108) r2 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000727000)={r3, 0x0, 0x0, 0x0}) r4 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00001b4000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000bfd000-0x1)={0x1ff}, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000e1f000-0xc8)={0xfffffffffffffffb, 0xff, 0x2, 0x4, 0x3, [{0x899, 0x1, 0x2, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0}, {0x6, 0xffffffffffff253f, 0x200, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x0}, {0xffffffffffffff69, 0x2, 0x2, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000882000)=0x0, &(0x7f00006b7000-0x4)=0x4) 2017/12/27 08:42:08 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:08 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) clock_gettime(0x0, &(0x7f0000a66000-0x8)={0x0, 0x0}) select(0x40, &(0x7f00005ad000)={0x5508, 0x5, 0x7fffffff, 0x8, 0xfffffffffffffff8, 0x4, 0x7, 0x1f}, &(0x7f0000bdd000-0x40)={0x4, 0xffff, 0x6, 0x400, 0x100000001, 0xfff, 0x11, 0x9}, &(0x7f000037b000)={0x80000001, 0x0, 0x7f, 0x3, 0xa4, 0x80000001, 0x7f, 0x5}, &(0x7f000082f000)={r2, r3/1000+30000}) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000293000-0xc)={0x8001, 0x3f, 0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000cb7000-0x400)={""/1024}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f000075c000-0xa)='/dev/cuse\x00', 0x200, 0x0) lgetxattr(&(0x7f0000e8b000-0x8)='./file0\x00', &(0x7f00004d9000-0xa)=@random={'trusted.\x00', '\x00'}, &(0x7f0000d5b000)=""/225, 0xe1) connect$unix(r0, &(0x7f00002ee000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) close(r0) [ 444.940666] binder: send failed reply for transaction 3056, target dead [ 444.947499] binder: undelivered TRANSACTION_ERROR: 29189 [ 444.952983] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000)=0x9, &(0x7f0000001000)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x9, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 444.997420] binder: binder_mmap: 26024 2057b000-2057e000 bad vm_flags failed -1 [ 445.008968] binder: 26028 RLIMIT_NICE not set [ 445.016901] binder: 26019:26032 got transaction with invalid offsets ptr [ 445.024303] binder: 26019:26032 transaction failed 29201/-14, size 0-4096 line 2918 [ 445.026931] binder: 26023:26036 got new transaction with bad transaction stack, transaction 3066 has target 26023:0 2017/12/27 08:42:08 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000e4a000)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000-0x4)=0x8001, &(0x7f0000000000)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000003000-0x8)=0x0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dc000-0x4)=0x0, 0x4) bind$inet(r1, &(0x7f00008a6000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000469000)="a5", 0x1, 0x0, &(0x7f0000dfd000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) io_setup(0x0, &(0x7f0000415000-0x4)=0x0) sendto$inet(r1, &(0x7f0000fc3000-0x1000)="ba671368d1434e64c449605bdbbfca6d2b9f8be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdbd150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69613f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344984ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b", 0x480, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom(r1, &(0x7f0000f6d000-0xa5)=""/0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00003d0000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000074000)="", 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet6(r1, &(0x7f0000fc6000)=""/0, 0x0, 0x0, &(0x7f0000fbf000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000b95000-0x8)='net/raw\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000c000-0xc)={0x0, 0x0}) 2017/12/27 08:42:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e14000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00009dc000-0x8)='uid_map\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f000019e000-0xc)={0x0, 0xb4, &(0x7f00002ac000)=[@in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffa}, @in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x6, @loopback={0x0, 0x1}, 0x80000000}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000537000-0x4)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f000026d000)={r3, 0x1c8, 0x7, 0x7, 0x5, 0x2}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 445.026944] binder: 26023:26036 transaction failed 29201/-71, size 0-0 line 2802 [ 445.034175] binder: 26028 RLIMIT_NICE not set [ 445.059505] binder: release 26023:26036 transaction 3066 out, still active 2017/12/27 08:42:08 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00002e6000-0x9)='/dev/rtc\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000cb4000-0x4)=0x0, &(0x7f00003ba000)=0x4) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000fc8000)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 445.059511] binder: undelivered TRANSACTION_COMPLETE [ 445.059520] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.059540] binder: send failed reply for transaction 3066, target dead 2017/12/27 08:42:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 445.073946] binder: binder_mmap: 26024 2057b000-2057e000 bad vm_flags failed -1 [ 445.076397] binder: BINDER_SET_CONTEXT_MGR already set [ 445.076406] binder: 26024:26028 ioctl 40046207 0 returned -16 [ 445.077891] binder_alloc: 26024: binder_alloc_buf, no vma [ 445.077917] binder: 26024:26038 transaction failed 29189/-3, size 0-0 line 2890 [ 445.079110] binder: 26024:26028 BC_FREE_BUFFER u000000002000c000 no match [ 445.080085] binder: BINDER_SET_CONTEXT_MGR already set [ 445.080092] binder: 26019:26041 ioctl 40046207 0 returned -16 [ 445.080136] binder_alloc: 26019: binder_alloc_buf, no vma [ 445.080159] binder: 26019:26044 transaction failed 29189/-3, size 0-4096 line 2890 [ 445.081962] binder_alloc: 26024: binder_alloc_buf, no vma [ 445.081983] binder: 26024:26038 transaction failed 29189/-3, size 0-0 line 2890 [ 445.109513] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.109591] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.109657] binder: release 26024:26028 transaction 3068 in, still active [ 445.109664] binder: send failed reply for transaction 3068 to 26024:26038 [ 445.109680] binder: undelivered TRANSACTION_COMPLETE [ 445.109687] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.109705] binder: send failed reply for transaction 3069 to 26024:26028 [ 445.109853] binder: undelivered TRANSACTION_COMPLETE [ 445.109861] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.146108] binder: 26054 RLIMIT_NICE not set [ 445.155984] binder: 26045:26055 got new transaction with bad transaction stack, transaction 3075 has target 26045:0 [ 445.156004] binder: 26045:26055 transaction failed 29201/-71, size 0-0 line 2802 [ 445.171584] binder: release 26045:26055 transaction 3075 out, still active [ 445.171590] binder: undelivered TRANSACTION_COMPLETE [ 445.171598] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.171618] binder: send failed reply for transaction 3075, target dead [ 445.192719] binder: 26054 RLIMIT_NICE not set [ 445.226189] binder: BINDER_SET_CONTEXT_MGR already set [ 445.226201] binder: 26052:26062 ioctl 40046207 0 returned -16 [ 445.288707] binder_alloc: 26052: binder_alloc_buf, no vma [ 445.288733] binder: 26052:26070 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f00000a5000-0xd)='/dev/binder#\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f000064e000)={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000009b000+0xe1b)=0x10) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000f27000-0x4)=""/4) stat(&(0x7f000047c000)='./file0\x00', &(0x7f00001f7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) 2017/12/27 08:42:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e70000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000167000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00002bc000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000999000-0xc)={0x4c, 0xa368, 0x200, 0x9, 0x2, 0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) mq_unlink(&(0x7f00004a8000)='/selinux/commit_pending_bools\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$TIOCSCTTY(r2, 0x540e, 0xd9) 2017/12/27 08:42:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:08 executing program 7: pipe(&(0x7f00006e8000)={0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000e97000-0x78)="4f787d0b6a6c58329afd8d55bf88be30ffd8ff657e32ed5faa16691bcd8986bad3ed774f00527550e4245beba06b1adc72114cecb4be30a7681097176ecd355158cbb9d551c115be48097b68bbb94ed631c3a8ce96b9d2d05f71cc247a78957ba592a929c035513dcb318555e4693de3bdd5deae9db2f46e") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x36, &(0x7f0000001000-0x73)=""/115, &(0x7f0000000000)=0x73) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000615000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000fc9000-0x5c)={0x3, 0x0, {0x3, 0x1, 0x4, 0x1, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvfrom$inet6(r2, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40d, &(0x7f0000a45000-0x8)=0x107) bind$inet6(r2, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = socket$inet6(0xa, 0x0, 0x1000089) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000c70000)=0xffff, 0x4) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000fca000-0xc)={0x0, 0x64, &(0x7f0000fc9000)=[@in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x3f, @loopback={0x0, 0x1}, 0xbc3}, @in6={0xa, 0x2, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, @in6={0xa, 0x1, 0x2, @loopback={0x0, 0x1}, 0x6}]}, &(0x7f0000fc9000)=0xc) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000fca000-0x8)=@assoc_value={0x0, 0x6}, &(0x7f0000fc9000)=0x8) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000e5a000-0xc)=@sack_info={0x0, 0x7d8a, 0x3}, &(0x7f0000fc9000)=0xc) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000fca000-0xe3)={0x0, 0xdb, "a40dbbf568a3ffb02f39d6592f07dc2d5a8affedf3973982a85f81be3be7f16ec88ee1e7bb6aa6ce5acc9bb266bc8d73084669d0562c463fbbe12dd7f6e644cc480dcb1c6936bb0ba205c49c572cf792f210398b489b3c455b6026d9e32ef27d0ee01b3cb90e6b9c1a7778e98296a03e63add30cf218e62504d0a7b732ae1429c3bd4b95da2d98e98d4c7c720a02fc13e689781c3136aa1938091566968537ce2bc37528da5c30e40e95c16397a005c291bcdc47558e88ee442e64034610a6c37cc40043b67da1c8c2870c031758b742ef46212c3b840b69c4b992"}, &(0x7f0000fca000-0x4)=0xe3) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000fca000-0x8)={0x0, 0x1aa8}, &(0x7f0000fc9000)=0x8) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000a6c000)={0x0, @in6={{0xa, 0x2, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x7, 0xffffffff, 0xa8, 0x1}, &(0x7f0000fca000-0x4)=0xa0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000fca000-0x1c)={&(0x7f0000829000)=@in6={0xa, 0x2, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff}, 0x1c, &(0x7f0000fc9000)=[{&(0x7f0000094000)="de6a268a69c2b390e6715455a924334edb2cc3383d81bf707293c0ae438320ff536ba43341296e60c802c0d4f40ff0e6a792c01eef3cce2045da93578defbbbc435e3d7c87cca999ef9e0f47b6bdcb2ac5bcd8fbb65e39187746cbe2d4d453b431670e53c2b799d71313080d8ea6a106f8100052613288512d7a1e5b5a7c5a3234077e354ed0b996c9e19756bab54bc5dd7bf0943e970bf698a9e21e88347c38ff0260aa15a8810818b6544051fb1c34132da5ffb4d0a953ba1355d2e69883c653a5597fc1896973b1a83be04f0435d81691278cff", 0xd5}, {&(0x7f0000fc9000)="d2f0de8334751a817d7529e2459f72c6f96966dca30fda028c846e79c6d2e00d23cdc16175d7dc3b9b83cd161c869b1e515b75a6921ed4b76a8b099cb0133afddb6f2333aaed21c8a3123990f70f5496efab4eae9dfc7265b890e7ff5a15c8d999d742c145413f724c9570b1528d694e55fc12463e91ee06070b1340", 0x7c}, {&(0x7f0000fca000-0x61)="6a33c22f5247cf586601bcebaf77e3a9cc20c73e1137720746bcf075ab081e02d7ebc3b1991a94da11009a170f1f1c5810f86cbdc6f0ac3073100879b0255446bdeeb3f85ba266869371ad041574f6da83fe757b3b66012d0afdaea95eedaf8c3a", 0x61}, {&(0x7f0000fca000-0xfa)="8aebbd9bde96b01f708cbee1b7efd8b95a84e56c4f7b7aa4559b59a9073c3fef4dedf629d94194af4bc5878f0ab9692c244fa0794f82420005da4078d0fc6cbc8c7c811ae9a276bb3c7d70f8933453bb79eda429c92d9a42e7608187f8433132ba3cc483edb16ef430f6784c2aaf301a4e96b301933ee1eb0cd47ed3dc1db6e7f5ac6688677338222202b71edca24e0760b7d5f659c4b274516f0473d0011b1cfc149071cdc6d186eb4cb71457f57e2e749291a3837b5c220ba3580fa3e73e65a3163a88e65ed5740aded7ccfbb39840ac55f9013d683754faafaf9ee8287a094fe9adfaddb1129fc3638e74ab7f22215f3e824acfe71c8dbac1", 0xfa}, {&(0x7f0000fc9000)="6dce1080cdb447807200b899c8b94e03640a8b3d1ece66e8dd9a8fe7185e12220cc0d9b9333d08124385edf1145f52", 0x2f}], 0x5, &(0x7f0000550000-0x160)=[@init={0x14, 0x84, 0x0, {0x7, 0x9, 0x8, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x6, 0x0, 0x8002, 0x0, 0x0, 0x8001, 0x9, 0x9, r4}}, @init={0x14, 0x84, 0x0, {0x1f, 0x6, 0x7fffffff, 0x4}}, @sndinfo={0x1c, 0x84, 0x2, {0x1, 0x4, 0x6, 0xab7, r5}}, @sndinfo={0x1c, 0x84, 0x2, {0x7, 0x1, 0x40, 0x8, r6}}, @sndinfo={0x1c, 0x84, 0x2, {0x7ff, 0x208, 0x4, 0x4, r7}}, @sndrcv={0x2c, 0x84, 0x1, {0x4, 0xfff, 0x8, 0xe65c, 0x9d, 0x4, 0x893, 0x8000, r8}}, @sndrcv={0x2c, 0x84, 0x1, {0x101, 0x80000001, 0x8, 0x8, 0x8658, 0x200040000000000, 0x2, 0xdc, r9}}], 0x160, 0x4}, 0x24000000) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:08 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000957000-0xc)={0x0, @loopback=0x0, @empty=0x0}, &(0x7f0000b03000-0x4)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00008d8000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00007d7000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000528000-0xe8)={{{@in=@local={0xac, 0x14, 0x0, 0xaa}, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x6, 0x0, 0x5, 0x11, 0x20, 0x80, 0x8, r2, r3}, {0x101, 0xffffffffffffffe1, 0x5, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x4}, {0x6c, 0x80000001, 0x10000, 0x5}, 0xfffffffffffffffe, 0x0, 0xa00000000, 0x1, 0x20, 0x0}, {{@in=@loopback=0x7f000001, 0x200, 0x2}, 0xb, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6, 0x0, 0x0, 0x4, 0x0, 0x8, 0x100}}, 0xe8) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) [ 445.297876] binder: 26052:26054 BC_FREE_BUFFER u000000002000c000 no match [ 445.329882] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.330064] binder: release 26052:26054 transaction 3077 in, still active [ 445.330071] binder: send failed reply for transaction 3077 to 26052:26062 [ 445.330089] binder: undelivered TRANSACTION_COMPLETE [ 445.330097] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.453428] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.462208] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:09 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000bc5000-0x4)=0x0, &(0x7f00009e7000)=0x4) 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 445.504549] binder: 26072:26080 transaction failed 29189/-22, size 0-4096 line 2775 [ 445.507998] binder: 26084 RLIMIT_NICE not set [ 445.516571] binder: 26078:26085 transaction failed 29189/-22, size 0-0 line 2775 [ 445.522699] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000601000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000833000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000047e000-0x4)=0xe8) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00003ec000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, r4}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 445.547167] binder: 26084 RLIMIT_NICE not set [ 445.551894] binder: 26094:26100 transaction failed 29189/-22, size 0-0 line 2775 [ 445.562244] binder: BINDER_SET_CONTEXT_MGR already set [ 445.562251] binder: 26075:26092 ioctl 40046207 0 returned -16 [ 445.566666] binder: 26084 RLIMIT_NICE not set [ 445.569492] binder_alloc: 26075: binder_alloc_buf, no vma [ 445.569516] binder: 26075:26092 transaction failed 29189/-3, size 0-0 line 2890 [ 445.570917] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.572457] binder: 26075:26105 BC_FREE_BUFFER u000000002000c000 no match [ 445.576170] binder_alloc: 26075: binder_alloc_buf, no vma [ 445.576191] binder: 26075:26105 transaction failed 29189/-3, size 0-0 line 2890 [ 445.605179] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.605257] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.605365] binder: release 26075:26084 transaction 3082 in, still active [ 445.605373] binder: send failed reply for transaction 3082 to 26075:26092 [ 445.605393] binder: undelivered TRANSACTION_COMPLETE [ 445.605402] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.605423] binder: send failed reply for transaction 3084 to 26075:26084 [ 445.605587] binder: undelivered TRANSACTION_COMPLETE [ 445.605597] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.625500] binder: 26106:26108 transaction failed 29189/-22, size 0-0 line 2775 [ 445.639043] binder: 26112 RLIMIT_NICE not set [ 445.642687] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.666885] binder: 26112 RLIMIT_NICE not set [ 445.676842] binder: BINDER_SET_CONTEXT_MGR already set [ 445.676852] binder: 26111:26114 ioctl 40046207 0 returned -16 [ 445.678005] binder: 26112 RLIMIT_NICE not set [ 445.680411] binder_alloc: 26111: binder_alloc_buf, no vma [ 445.680434] binder: 26111:26114 transaction failed 29189/-3, size 0-0 line 2890 [ 445.701938] binder_alloc: 26111: binder_alloc_buf, no vma [ 445.701966] binder: 26111:26116 transaction failed 29189/-3, size 0-0 line 2890 [ 445.719930] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 445.720078] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.720148] binder: release 26111:26112 transaction 3089 in, still active [ 445.720156] binder: send failed reply for transaction 3089 to 26111:26114 [ 445.720174] binder: undelivered TRANSACTION_COMPLETE [ 445.720182] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.720202] binder: send failed reply for transaction 3090 to 26111:26112 [ 445.720394] binder: undelivered TRANSACTION_COMPLETE [ 445.720402] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000fc9000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000fc9000-0x1c)={0x0, 0x0, &(0x7f0000200000-0x8)={&(0x7f0000fc8000)={0x2, 0x15, 0x100, 0x3, 0x10, 0x0, 0x40, 0x100000001, [@sadb_ident={0x2, 0xb, 0x9, 0x0, 0xc5}, @sadb_address={0x5, 0x17, 0x6b25, 0x7, 0x0, @in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}, 0x7fffffff}}, @sadb_spirange={0x2, 0x10, 0x2, 0xffffffffffffff0c, 0x0}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x3, 0x14, 0x10}]}, 0x80}, 0x1, 0x0, 0x0, 0x0}, 0x840) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0xe, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000fc9000)=0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000532000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7ff, 0x3, 0x2, 0x1, 0x3ab1, 0x6, 0x7fff}, &(0x7f0000452000)=0x20) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) r2 = add_key$user(&(0x7f0000f46000-0x5)='user\x00', &(0x7f00001e6000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00002cb000)="cd096a282a4eb17fa711334f9310f227bb02", 0x12, 0xfffffffffffffff9) keyctl$setperm(0x5, r2, 0x80000) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000cf000-0x1)={0x0}, &(0x7f0000b73000-0x4)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f000046d000)={0x0, 0x3f}, &(0x7f0000fbb000)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000a27000)={r5, 0xc, 0x3, 0x8}, &(0x7f000015c000)=0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:09 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000bc5000-0x4)=0x0, &(0x7f00009e7000)=0x4) 2017/12/27 08:42:09 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) r0 = add_key$keyring(&(0x7f00002ad000)='keyring\x00', &(0x7f000066c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f00008c4000-0xa)='blacklist\x00', &(0x7f0000c3c000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000d9d000-0xe)='/selinux/load\x00', r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 445.892366] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.905373] binder: 26123 RLIMIT_NICE not set [ 445.922977] binder_alloc: 26127: binder_alloc_buf, no vma [ 445.923011] binder: 26127:26129 transaction failed 29189/-3, size 0-4096 line 2890 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000e55000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f00006d6000-0xd)='/dev/binder#\x00', 0x0, 0x802) close(r0) bind$nfc_llcp(r1, &(0x7f0000bcc000-0x58)={0x27, 0x5, 0x400, 0x7, 0x3, 0x10000, "41e2954d444f47d85d0d5ade0e67c742adf451cb87c79f108b738bdcce26c6fdd2935eb936243aec23a9e0c9f564229070ad7e18fdde4fb1d7e33cfae5b32b", 0x3}, 0x58) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000ee7000)='/selinux/context\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 445.946430] binder: 26135 RLIMIT_NICE not set [ 445.952655] binder: BINDER_SET_CONTEXT_MGR already set [ 445.952665] binder: 26127:26129 ioctl 40046207 0 returned -16 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000fc9000-0x4)='./file0\x00', 0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000fc9000-0x12)=""/18, 0x12) r1 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r1, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000fca000-0x18)={&(0x7f00000d5000/0x1000)=nil, 0x10000, 0x0, 0x8, &(0x7f0000bc1000/0x1000)=nil, 0x5}) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 445.956980] binder_alloc: 26127: binder_alloc_buf, no vma [ 445.957011] binder: 26127:26139 transaction failed 29189/-3, size 0-4096 line 2890 [ 445.963347] binder: 26121:26137 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 445.963349] QAT: Invalid ioctl 2017/12/27 08:42:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000200000-0x6)={0x400, 0xc0, 0x1}) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f00007e4000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000788000-0x30)={0x58, 0x0, &(0x7f0000254000)=[@request_death={0x400c630e, 0x2, 0x2}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f, 0x2, 0x0}, @register_looper={0x630b}, @acquire_done={0x40106309, r3, 0x1}, @decrefs={0x40046307, 0x6}], 0x2, 0x0, &(0x7f000094d000-0x2)="28ec"}) [ 445.979915] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.980330] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.992645] binder: 26135 RLIMIT_NICE not set [ 445.996158] binder: BINDER_SET_CONTEXT_MGR already set [ 445.996170] binder: 26121:26149 ioctl 40046207 0 returned -16 [ 445.997353] binder: 26137 RLIMIT_NICE not set [ 446.008583] binder: release 26131:26135 transaction 3100 in, still active [ 446.008593] binder: send failed reply for transaction 3100 to 26131:26144 [ 446.008617] binder: undelivered TRANSACTION_COMPLETE [ 446.008626] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.009227] binder_alloc: 26121: binder_alloc_buf, no vma [ 446.009256] binder: 26121:26152 transaction failed 29189/-3, size 0-0 line 2890 [ 446.011758] binder: 26121:26149 BC_FREE_BUFFER u000000002000c000 no match [ 446.014867] binder_alloc: 26121: binder_alloc_buf, no vma [ 446.014895] binder: 26121:26152 transaction failed 29189/-3, size 0-0 line 2890 [ 446.037340] QAT: Invalid ioctl [ 446.047404] binder_alloc: 26150: binder_alloc_buf, no vma [ 446.047433] binder: 26150:26153 transaction failed 29189/-3, size 0-4096 line 2890 [ 446.048400] binder: 26157 RLIMIT_NICE not set [ 446.058036] binder: 26150:26159 ioctl 2 20006000 returned -22 [ 446.069714] binder_alloc: binder_alloc_mmap_handler: 26150 20000000-20002000 already mapped failed -16 [ 446.070345] binder: BINDER_SET_CONTEXT_MGR already set [ 446.070355] binder: 26150:26161 ioctl 40046207 0 returned -16 [ 446.079158] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.085451] binder: 26157 RLIMIT_NICE not set [ 446.101795] binder: release 26154:26157 transaction 3106 in, still active [ 446.101805] binder: send failed reply for transaction 3106 to 26154:26163 [ 446.101826] binder: undelivered TRANSACTION_COMPLETE [ 446.101834] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.125939] binder: 26168:26170 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 446.125958] binder: 26168:26170 Release 1 refcount change on invalid ref 3 ret -22 [ 446.125968] binder: 26168:26170 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 446.125978] binder: 26168:26170 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 446.125986] binder: 26168:26170 ERROR: BC_REGISTER_LOOPER called without request [ 446.125999] binder: 26168:26170 BC_ACQUIRE_DONE uffffffffffffffff no match [ 446.126038] binder: 26168:26170 DecRefs 0 refcount change on invalid ref 6 ret -22 [ 446.126049] binder: 26170 RLIMIT_NICE not set [ 446.188876] binder: BINDER_SET_CONTEXT_MGR already set [ 446.188886] binder: 26168:26174 ioctl 40046207 0 returned -16 [ 446.192099] binder: 26168:26174 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 446.192114] binder: 26168:26174 Release 1 refcount change on invalid ref 3 ret -22 [ 446.192123] binder: 26168:26174 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 446.192131] binder: 26168:26174 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 446.192137] binder: 26168:26174 ERROR: BC_REGISTER_LOOPER called without request [ 446.192147] binder: 26168:26174 BC_ACQUIRE_DONE uffffffffffffffff no match [ 446.192156] binder: 26168:26174 DecRefs 0 refcount change on invalid ref 6 ret -22 [ 446.192164] binder: 26174 RLIMIT_NICE not set [ 446.422542] binder: 26123 RLIMIT_NICE not set [ 446.428417] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:09 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000da0000)="41decb7f71ac42e90851b503c97ceb52b06eab92f12a2800de9531cb9f2be100d88da9a5b302f1298aa73988c11e88e8c3db9d7be4df21366a0195c6b4b2c7b83b528c30ee11c07f85b40018f1fb95a1ec431c3fec286c7f0f0c2e99f3935e11452631e3b111e27f5222d41289e851d86fabc9036a44e4b888d8c08e79d091823d7c58c609f58a48ad9f2a59676ffd6d7baad52dfc34092fac81966c9d43ff8d0e2d795d0769295d99e9dfa8856cba6229e3c21e4e9f0a0137652106d7ddf9071b09403d70b3cfd9e1a81605870cc680d56ebc110af197d179f7660dacab117ed194113604bc1e3eb8536bf785") write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:09 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000fc9000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) r2 = syz_open_dev$sg(&(0x7f0000009000-0x9)='/dev/sg#\x00', 0x7, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x95d1) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fc9000)=0xefd1) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:09 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000bc5000-0x4)=0x0, &(0x7f00009e7000)=0x4) 2017/12/27 08:42:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000054c000/0x4000)=nil, 0x4000, 0x0, 0x100012, r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) socket$inet6_sctp(0xa, 0x5, 0x84) 2017/12/27 08:42:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) getpeername$packet(r1, &(0x7f0000e98000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000d38000-0x4)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f000028c000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8001, r4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000ab6000)={0x1ff, 0x6, 0x400, 'queue1\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000d3e000-0x8)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00002a5000-0x4)=0x1f, 0x4) [ 446.433965] binder: release 26121:26137 transaction 3099 out, still active [ 446.441029] binder: undelivered TRANSACTION_COMPLETE [ 446.446159] binder: release 26121:26123 transaction 3098 in, still active [ 446.453097] binder: send failed reply for transaction 3098 to 26121:26137 [ 446.460046] binder: undelivered TRANSACTION_COMPLETE [ 446.465161] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.470626] binder: send failed reply for transaction 3099, target dead [ 446.477466] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:10 executing program 2 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:10 executing program 2 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 446.520538] binder: 26189 RLIMIT_NICE not set [ 446.521778] binder: 26192 RLIMIT_NICE not set [ 446.529396] FAULT_INJECTION: forcing a failure. [ 446.529396] name failslab, interval 1, probability 0, space 0, times 0 [ 446.529428] CPU: 1 PID: 26195 Comm: syz-executor2 Not tainted 4.15.0-rc5+ #148 [ 446.529433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.529437] Call Trace: [ 446.529455] dump_stack+0x194/0x257 2017/12/27 08:42:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) munmap(&(0x7f000083b000/0x2000)=nil, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00002a6000)={0x0, 0x6, 0x2, &(0x7f0000819000)=0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 446.529472] ? arch_local_irq_restore+0x53/0x53 [ 446.529504] should_fail+0x8c0/0xa40 2017/12/27 08:42:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000fa3000-0x4)=0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00007fa000-0x10)='/selinux/member\x00', 0x2, 0x0) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f000020d000)={r3, 0x1e5, 0x1, "7320b7069d5a6184aebc55f21b8e394f94f46a0cc770a76cde1616abdd35c24dbedccb3c79283de9a94110bd73de192acaee90d85ff5c88228a6a3f266f1b1a7d1d3ff3baebb5d9ca0ae148be369343bdb38bccf4f747e6f560c9256b79111f9dce290122fc11bf52990d97f49609f7ef35eeef98ee22fdd16e6518848c333032495d28edb0a9a2097d540e09b4f7eb99ba01fd6fa487b49024f6c9ef5c40aaf0b967412c304c32cb4933f71afefd9aaa8375295103193bf6cfe0effc6c77dc3478dc223425587cfd016b46a1cdafdc7c1a71a69f8c57c"}) migrate_pages(r1, 0x81, &(0x7f00009e7000-0x8)=0x8, &(0x7f00009d9000-0x8)=0x5) 2017/12/27 08:42:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 446.529520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.529540] ? __lock_is_held+0xb6/0x140 [ 446.529569] ? find_held_lock+0x35/0x1d0 [ 446.529590] ? __lock_is_held+0xb6/0x140 [ 446.529626] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 446.529642] ? rcu_note_context_switch+0x710/0x710 [ 446.529651] ? check_noncircular+0x20/0x20 [ 446.529675] should_failslab+0xec/0x120 [ 446.529687] kmem_cache_alloc+0x47/0x760 [ 446.529717] ptlock_alloc+0x24/0x70 [ 446.529730] pte_alloc_one+0x59/0x100 [ 446.529743] do_huge_pmd_anonymous_page+0x554/0x1b00 [ 446.529767] ? __thp_get_unmapped_area+0x130/0x130 [ 446.529776] ? __lock_acquire+0x664/0x3e00 [ 446.529784] ? __lock_acquire+0x664/0x3e00 [ 446.529798] ? lock_page_memcg+0x2bd/0x3b0 [ 446.529805] ? perf_trace_lock_acquire+0xe3/0x980 [ 446.529832] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 446.529840] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 446.529847] ? __unlock_page_memcg+0x72/0x100 [ 446.529857] ? unlock_page_memcg+0x2c/0x40 [ 446.529874] ? page_add_new_anon_rmap+0x750/0x750 [ 446.529881] ? print_irqtrace_events+0x270/0x270 [ 446.529889] ? print_irqtrace_events+0x270/0x270 [ 446.529918] ? perf_trace_lock_acquire+0xe3/0x980 [ 446.529929] ? perf_trace_lock_acquire+0xe3/0x980 [ 446.529937] ? perf_trace_lock_acquire+0xe3/0x980 [ 446.529947] ? print_irqtrace_events+0x270/0x270 [ 446.529964] ? perf_trace_lock+0x900/0x900 [ 446.529975] ? check_noncircular+0x20/0x20 [ 446.529997] __handle_mm_fault+0x1a0c/0x3ce0 [ 446.530020] ? __pmd_alloc+0x4e0/0x4e0 [ 446.530045] ? find_held_lock+0x35/0x1d0 [ 446.530069] ? handle_mm_fault+0x248/0x8d0 [ 446.530080] ? lock_downgrade+0x980/0x980 [ 446.530134] handle_mm_fault+0x334/0x8d0 [ 446.530141] ? down_read_trylock+0xdb/0x170 [ 446.530150] ? __do_page_fault+0x32d/0xc90 [ 446.530162] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 446.530170] ? vmacache_find+0x5f/0x280 [ 446.530179] ? vmacache_update+0xfe/0x130 [ 446.530193] ? find_vma+0x30/0x150 [ 446.530219] __do_page_fault+0x5c9/0xc90 [ 446.530244] ? mm_fault_error+0x2c0/0x2c0 [ 446.530251] ? perf_trace_lock+0x900/0x900 [ 446.530263] ? check_noncircular+0x20/0x20 [ 446.530270] ? check_noncircular+0x20/0x20 [ 446.530278] ? print_irqtrace_events+0x270/0x270 [ 446.530290] ? check_noncircular+0x20/0x20 [ 446.530308] do_page_fault+0xee/0x720 [ 446.530323] ? __do_page_fault+0xc90/0xc90 [ 446.530341] ? find_held_lock+0x35/0x1d0 [ 446.530364] ? __might_fault+0x110/0x1d0 [ 446.530382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.530406] page_fault+0x2c/0x60 [ 446.530415] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 446.530419] RSP: 0018:ffff8801c4747900 EFLAGS: 00010202 [ 446.530426] RAX: ffffed003acb8400 RBX: 0000000000000004 RCX: 0000000000000004 [ 446.530431] RDX: 0000000000000004 RSI: ffff8801d65c21c8 RDI: 000000002070ef99 [ 446.530436] RBP: ffff8801c4747930 R08: ffffed003acb843a R09: ffffed003acb843a [ 446.530441] R10: 0000000000000001 R11: ffffed003acb8439 R12: 000000002070ef99 [ 446.530446] R13: ffff8801d65c21c8 R14: 00007ffffffff000 R15: 000000002070ef9d [ 446.530484] ? _copy_to_user+0x9b/0xc0 [ 446.530501] bits_to_user+0x6f/0xa0 [ 446.530516] evdev_do_ioctl+0x137b/0x1ee0 [ 446.530535] ? str_to_user+0x80/0x80 [ 446.530546] ? lock_release+0xa40/0xa40 [ 446.530561] ? __lock_is_held+0xb6/0x140 [ 446.530617] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 446.530632] ? rcu_note_context_switch+0x710/0x710 [ 446.530651] ? __might_sleep+0x95/0x190 [ 446.530665] ? _cond_resched+0x14/0x30 [ 446.530683] ? selinux_file_ioctl+0x444/0x690 [ 446.530693] ? __fget_light+0x297/0x380 [ 446.530705] ? selinux_capable+0x40/0x40 [ 446.530743] evdev_ioctl_handler+0x142/0x180 [ 446.530761] evdev_ioctl_compat+0x29/0x30 [ 446.530775] compat_SyS_ioctl+0x151/0x2a30 [ 446.530785] ? do_fast_syscall_32+0x156/0xf9d [ 446.530793] ? evdev_ioctl_handler+0x180/0x180 [ 446.530804] ? do_ioctl+0x60/0x60 [ 446.530815] do_fast_syscall_32+0x3ee/0xf9d [ 446.530838] ? do_int80_syscall_32+0x9d0/0x9d0 [ 446.530863] ? syscall_return_slowpath+0x2ad/0x550 [ 446.530874] ? prepare_exit_to_usermode+0x340/0x340 [ 446.530886] ? sysret32_from_system_call+0x5/0x3b [ 446.530905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.530928] entry_SYSENTER_compat+0x54/0x63 [ 446.530934] RIP: 0023:0xf7f62c79 [ 446.530938] RSP: 002b:00000000f775e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 446.530946] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000080404525 [ 446.530951] RDX: 000000002070ef99 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.530955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.530960] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 446.530964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.552763] binder: 26190:26193 got transaction with invalid offsets ptr [ 446.552794] binder: 26190:26193 transaction failed 29201/-14, size 0-4096 line 2918 [ 446.568470] binder: 26192 RLIMIT_NICE not set [ 446.568492] binder: 26187:26200 BC_FREE_BUFFER u000000002054c000 matched unreturned buffer [ 446.577496] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.579231] binder: release 26178:26192 transaction 3113 in, still active [ 446.579239] binder: send failed reply for transaction 3113 to 26178:26199 [ 446.579256] binder: undelivered TRANSACTION_COMPLETE [ 446.579263] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.583577] binder_alloc: 26190: binder_alloc_buf, no vma [ 446.583599] binder: 26190:26193 transaction failed 29189/-3, size 0-4096 line 2890 [ 446.602378] binder: BINDER_SET_CONTEXT_MGR already set [ 446.602388] binder: 26187:26207 ioctl 40046207 0 returned -16 [ 446.603221] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.603597] binder: 26200 RLIMIT_NICE not set [ 446.607290] binder_alloc: 26187: binder_alloc_buf, no vma [ 446.607319] binder: 26187:26207 transaction failed 29189/-3, size 0-0 line 2890 [ 446.618838] binder: 26187:26209 BC_FREE_BUFFER u000000002054c000 no match [ 446.623337] binder_alloc: 26187: binder_alloc_buf, no vma [ 446.623365] binder: 26187:26207 transaction failed 29189/-3, size 0-0 line 2890 [ 446.634842] binder: 26210:26211 got transaction with invalid offsets ptr [ 446.634878] binder: 26210:26211 transaction failed 29201/-14, size 0-4096 line 2918 [ 446.667138] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.682254] binder: 26210:26216 got transaction with invalid offsets ptr 2017/12/27 08:42:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000d6000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) fcntl$setsig(r2, 0xa, 0x20) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f000068a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:10 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:10 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000b77000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002872, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f000053c000)={0x5, 0x100000000, 0x62, 0x3, 0x0, 0x20, 0x5, 0xfffffffffffffffe, 0x1a, 0x6, 0x0}, 0xb) mprotect(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x2) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00000cd000/0x2000)=nil) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f000053c000)=0x101, &(0x7f0000000000)=0x4) 2017/12/27 08:42:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00003c9000)='attr/keycreate\x00') pread64(r1, &(0x7f0000b8f000)=""/4096, 0x1000, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d9c000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) 2017/12/27 08:42:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) fchmod(r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) openat$kvm(0xffffffffffffff9c, &(0x7f00004af000-0x9)='/dev/kvm\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:10 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x7, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000dcc000)={0x0, 0x3f, 0xcbe, &(0x7f00004a7000-0x8)=0x0}) mbind(&(0x7f0000117000/0x4000)=nil, 0x4000, 0x8000, &(0x7f000050a000+0x2f1)=0xfffffffffffffffc, 0x0, 0x2) 2017/12/27 08:42:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 446.682288] binder: 26210:26216 transaction failed 29201/-14, size 0-4096 line 2918 [ 446.700171] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.273103] binder: 26189 RLIMIT_NICE not set [ 447.277311] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.277387] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000359000-0xa)='/dev/ptmx\x00', 0x8080100, 0x0) r0 = socket(0xb, 0x4, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x2a0040, 0x0) write$sndseq(r1, &(0x7f0000001000-0x1c)=[{0x8, 0x9, 0x243, 0x1, @time={0x77359400, 0x0}, {0x8, 0x401}, {0x40000000000, 0x6}, @raw8={"9ed0c244536cdded2c95493b"}}], 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000c5a000-0x10)={0x5, 0x8, 0xc2c, 0x7, 0x0}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x2, 0x1, 0x80, 0x3, r2}, &(0x7f0000a0c000-0x4)=0x10) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001000-0xc)={0x5, 0x8e, &(0x7f0000001000-0x8e)="df0756b333aa718cedba53b2e65007471b4805fa10e6bb8fd62013ee9ed142443318f9cb3c3bcd0b8fcf7d99ed00d9190de3760a78f5a5e6c51f9253ff501f509848ff3da81fe249eb6a742e4e0bc2c54d0bd3320710c84e29aebfcfebbc1c22b480534bfa20209a306ce46e48dbe1cf5f343eaddebc26f8054f05d8b74cd217ee5b3e3345b9ee028f8ffb67e74c"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x317e44b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00002e8000-0x9)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00007bd000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f0000e33000)='user\x00', &(0x7f0000466000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000104000-0x1)="01", 0x1, r6) r8 = add_key$user(&(0x7f00009a9000-0x5)='user\x00', &(0x7f0000753000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00002c4000)="b33a000087ebe00000007fd653e520c19ad7d97fe21769c4db44c249b544230aa287fb8bd6ed266ccf59ef70995beee8e0d31bf32853747eda22d2818d08ca2718d81620e365a0e6b9485f2d925493f60c01e35f5f8c7eba67840800c97f5b07e5849d2e875bb76cd640b336616fe0f3c306007fb4627ee7597689525e8e7426508f6eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864c324f6a88f6672f98f7e149be31bd78b506e8b951173e1", 0xc0, r6) keyctl$dh_compute(0x17, &(0x7f0000656000-0xc)={r7, r8, r7}, &(0x7f0000322000-0x75)=""/117, 0x75, &(0x7f000080f000-0x2c)={&(0x7f0000a91000)={'sha3-512'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_create1(0x80000) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x0, 0x14000, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000d77000-0x10)={0x7000, 0x10000, 0x0}) ioctl$KVM_SMI(r9, 0xaeb7) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2017/12/27 08:42:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@clear_death={0x400c630f, 0x1, 0x1}], 0x2, 0x0, &(0x7f00006af000-0x2)="ff7f"}) 2017/12/27 08:42:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 447.277519] binder: release 26187:26189 transaction 3112 in, still active [ 447.277526] binder: send failed reply for transaction 3112 to 26187:26200 [ 447.277541] binder: undelivered TRANSACTION_COMPLETE [ 447.277547] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.277564] binder: send failed reply for transaction 3114 to 26187:26200 [ 447.277720] binder: undelivered TRANSACTION_COMPLETE [ 447.277730] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.304117] binder: 26228 RLIMIT_NICE not set [ 447.306777] binder: 26221:26235 got transaction with invalid offsets ptr [ 447.306813] binder: 26221:26235 transaction failed 29201/-14, size 0-4096 line 2918 [ 447.313426] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.319504] binder_alloc: 26221: binder_alloc_buf, no vma [ 447.319532] binder: 26221:26238 transaction failed 29189/-3, size 0-4096 line 2890 [ 447.334799] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.340946] binder: 26228 RLIMIT_NICE not set [ 447.353739] binder: BINDER_SET_CONTEXT_MGR already set [ 447.353748] binder: 26224:26228 ioctl 40046207 0 returned -16 [ 447.356779] binder_alloc: 26224: binder_alloc_buf, no vma [ 447.356805] binder: 26224:26243 transaction failed 29189/-3, size 0-0 line 2890 [ 447.359656] binder: 26245:26247 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 447.362777] binder: 26224:26228 BC_FREE_BUFFER u000000002000c000 no match [ 447.363190] binder_alloc: 26224: binder_alloc_buf, no vma [ 447.363212] binder: 26224:26228 transaction failed 29189/-3, size 0-0 line 2890 [ 447.431823] binder: BINDER_SET_CONTEXT_MGR already set [ 447.431835] binder: 26245:26254 ioctl 40046207 0 returned -16 [ 447.431877] binder: 26245:26256 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 447.557921] binder: release 26224:26228 transaction 3129 out, still active [ 447.565060] binder: undelivered TRANSACTION_COMPLETE [ 447.574837] binder: release 26224:26228 transaction 3128 in, still active [ 447.581890] binder: send failed reply for transaction 3128 to 26224:26243 [ 447.588863] binder: undelivered TRANSACTION_COMPLETE [ 447.594203] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.600602] binder: send failed reply for transaction 3129, target dead [ 447.607639] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.613309] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00009b2000)="9440ed72cc2570ee9ef5df1de8f7e425135747a196c4e61eafd0d8fd8107f55dbc06b28e4bc422fa52fb872e33dcaa1ae93dd428a61ad614ae9256a7229cadc908ec5a0aa4afdb2e8e2f820421766b4bb1404fd2006895eb82059420a0ce0b341fe2f65565c08bc5f5e6aacbd5") 2017/12/27 08:42:11 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)=0x0, 0x80000) fchdir(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) pipe2(&(0x7f0000536000)={0x0, 0x0}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bind$llc(r4, &(0x7f000046c000-0x10)={0x1a, 0x1a, 0xfffffffffffffffe, 0x1000, 0x83, 0x7f, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00005f5000-0x4)=0x0, &(0x7f0000a42000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) r2 = gettid() get_robust_list(r2, &(0x7f00002db000)=&(0x7f000018d000-0xc)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000251000-0x4)=0xc) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) write$eventfd(r0, &(0x7f0000722000-0x8)=0xc82, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000ed0000-0x28)={0x5, 0x8001, 0x9, 0x1f, 0x2}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00008e6000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000262000)=@generic=""/16, 0x10) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r2, 0x5, &(0x7f0000c30000+0x3a7)=0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000ff7000)={0x0, 0x4c, &(0x7f00001a7000-0x4c)=[@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x3, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000a78000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000dd8000)={r4, 0x1}, &(0x7f00007c3000-0x4)=0x6) r5 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) rt_sigprocmask(0x1, &(0x7f0000a42000-0x8)={0x7}, &(0x7f000034d000)={0x0}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x100) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt(r1, 0x7ff, 0x7, &(0x7f00008aa000)=""/21, &(0x7f0000ca4000)=0x15) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000037f000-0xd)='/selinux/mls\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00007be000-0x24)={0xffffffff, 0xbf, 0x3, 0x80000001, 0x81, 0x4, 0xffffffff, 0x8001, 0x0, 0x0, 0x5, 0x0}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0xffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000fd5000-0x4)=0x48c1, 0x4) open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) socket$packet(0x11, 0x3, 0x300) link(&(0x7f0000db6000)='./file0\x00', &(0x7f0000dc4000-0xa)='./control\x00') stat(&(0x7f0000cd3000-0x8)='./file0\x00', &(0x7f00005a1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f000043e000-0xa)='./control\x00') setresgid(r1, r1, r1) 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000755000)=0x8, 0x3f) lseek(r0, 0x0, 0x0) [ 447.668680] binder_alloc: 26265: binder_alloc_buf, no vma [ 447.686645] binder: 26265:26267 transaction failed 29189/-3, size 0-0 line 2890 [ 447.702298] binder: 26274 RLIMIT_NICE not set 2017/12/27 08:42:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2001) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) dup3(r0, r0, 0x80000) syz_open_dev$sg(&(0x7f0000b3b000-0x9)='/dev/sg#\x00', 0x3, 0x10000) 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 447.729383] binder: 26265:26283 ioctl 5 20c303a7 returned -22 [ 447.744346] binder_alloc: binder_alloc_mmap_handler: 26265 20000000-20002000 already mapped failed -16 2017/12/27 08:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000fc9000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000e45000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000622000-0x1)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000018000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000156000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 2017/12/27 08:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x20, 0x0, &(0x7f0000a95000)=[@free_buffer={0x40086303, r2}, @register_looper={0x630b}, @clear_death={0x400c630f, 0x3, 0x1}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00003e4000-0xc)={0x2, r1, 0x1}) connect$bt_sco(r3, &(0x7f0000173000)={0x1f, {0xb8, 0x100000000, 0x100000001, 0x5, 0x7, 0x100000000}}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = request_key(&(0x7f0000ade000-0x8)='trusted\x00', &(0x7f000085f000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00002dc000-0x6)='wlan1\x00', 0xfffffffffffffffb) ioctl$TCSETS(r3, 0x5402, &(0x7f00000e8000-0x24)={0x3, 0x100000001, 0xe99, 0x3, 0x1, 0x4d04, 0x9, 0x7, 0x6, 0xffffffff, 0x10000, 0x8001}) r5 = request_key(&(0x7f0000192000)='ceph\x00', &(0x7f00000d1000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000923000-0x22)='eth1\\H&security^{nodevnodevmd5sum\x00', 0xfffffffffffffffc) keyctl$link(0x8, r4, r5) [ 447.751733] binder: 26274 RLIMIT_NICE not set [ 447.762818] binder: BINDER_SET_CONTEXT_MGR already set [ 447.762831] binder: 26269:26286 ioctl 40046207 0 returned -16 [ 447.772803] binder_alloc: 26269: binder_alloc_buf, no vma [ 447.772830] binder: 26269:26286 transaction failed 29189/-3, size 0-0 line 2890 [ 447.776113] binder_alloc: 26269: binder_alloc_buf, no vma [ 447.776135] binder: 26269:26286 transaction failed 29189/-3, size 0-0 line 2890 [ 447.776181] binder: 26269:26274 BC_FREE_BUFFER u000000002000c000 no match [ 447.779181] binder: BINDER_SET_CONTEXT_MGR already set [ 447.779192] binder: 26265:26283 ioctl 40046207 0 returned -16 [ 447.798236] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.798373] binder: release 26269:26274 transaction 3136 in, still active [ 447.798380] binder: send failed reply for transaction 3136 to 26269:26286 [ 447.798397] binder: undelivered TRANSACTION_COMPLETE [ 447.798404] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.798450] binder: send failed reply for transaction 3137 to 26269:26274 [ 447.798749] binder: undelivered TRANSACTION_COMPLETE [ 447.798759] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.798810] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.827219] binder: 26307 RLIMIT_NICE not set [ 447.841974] binder: 26299:26310 got new transaction with bad transaction stack, transaction 3142 has target 26299:0 [ 447.841990] binder: 26299:26310 transaction failed 29201/-71, size 0-0 line 2802 [ 447.866533] binder: 26305:26311 BC_FREE_BUFFER u000000002000c000 no match [ 447.866544] binder: 26305:26311 ERROR: BC_REGISTER_LOOPER called without request [ 447.866558] binder: 26305:26311 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 447.870294] binder: 26305:26311 BC_FREE_BUFFER u000000002000c000 no match [ 447.874905] binder: 26307 RLIMIT_NICE not set [ 447.875345] binder: release 26299:26310 transaction 3142 out, still active [ 447.875351] binder: undelivered TRANSACTION_COMPLETE [ 447.875359] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.875378] binder: send failed reply for transaction 3142, target dead [ 447.886348] binder: BINDER_SET_CONTEXT_MGR already set [ 447.886356] binder: 26305:26311 ioctl 40046207 0 returned -16 [ 447.892492] binder: 26307 RLIMIT_NICE not set [ 447.895144] binder: 26305:26311 BC_FREE_BUFFER u000000002000c000 no match [ 447.895150] binder: 26305:26311 ERROR: BC_REGISTER_LOOPER called without request [ 447.895161] binder: 26305:26311 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 447.895921] binder: 26305:26311 BC_FREE_BUFFER u000000002000c000 no match [ 447.898250] binder_alloc: 26305: binder_alloc_buf, no vma [ 447.898271] binder: 26305:26311 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:11 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) fsync(r0) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:11 executing program 3: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000d32000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002000-0xc)={@empty=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000001000)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0x3) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x2000, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000fc5000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000fc9000-0xca)=""/202, 0xca) 2017/12/27 08:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) signalfd4(r1, &(0x7f00001a0000-0x8)={0x9}, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000016000)='./file0\x00', 0x143, 0x102) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00007f4000)={0x5, 0x4, [{0x100000001, 0x0, 0x1}, {0x1, 0x0, 0xefb9}, {0x5, 0x0, 0x6}, {0x100000001, 0x0, 0x3b}, {0x3, 0x0, 0x5e1d}]}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000d15000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x2000000, 0x800000000000012, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000431000-0x8)={0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f00007a7000)='/dev/vcs#\x00', 0x9, 0x101000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00004e3000)={0x0, 0xa2, "dc27db2cdd46602b9defbc51739dcd447a92f4e3bab460418bb382b5ae8db7864fe22fa6f0adafdf8a756a82d3662f514d0e2963610c005ec4f17d6e26875bc8d9f45406e07b5a8419a71bf9a9e6a039e834beb439378361a95ea6070cc7419736a9792783bd21aa48206e9e833a038a457bad9c2ca15dc7daeca41f3cfa3cdd4ea42d79b1179798d202b759e6a2b7992ac020659b41657b67b8b0b23017431befc4"}, &(0x7f0000a12000)=0xaa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000264000)={0x0, 0x3c, &(0x7f0000d67000)=[@in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x5, @loopback={0x0, 0x1}, 0x5}]}, &(0x7f000023a000-0x4)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000381000)={0x0, 0xdb, "a1424f7d5792794f45a2a6ad9ebe2fe73e3eef87d746c3ca0cab22b96b7c4cac4c6522a788d7e2abcfb4f741bdcac0822a35cd33edd079a1a65fd0ec965739a5e625af33482fa982f0d4961f826a99ac1feeda7a6290d3a38c77a741d540d4b16c4673217cec85dc66df4d17e56c063bfbcb5972062968a057d77a5d680a94a2756c11c01ee76842076c9115cdc3c7815fd3f0f6f7a85f20812f2d2663e59a2b60c7b7961bca0e67a0888e48efe649e0f2b2cca384fb1fca489345376f47c5e216f7fcff020b625a2efd632d8c1b36665ca1b8669e2075ec6ee47a"}, &(0x7f00000a1000-0x4)=0xe3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000583000-0x8)={0x1, [0x0]}, &(0x7f0000237000)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f000014b000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f000092f000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00006a0000-0x3e)={0x0, 0x36, "ea335874533a6313232f568d620b398fb427aa9a4f9375916fe34df4041cbb30e5804795a80cfcfc360d6f801ea8ad6596c938b9ba92"}, &(0x7f0000ed6000-0x4)=0x3e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000ad0000-0x98)={0x0, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x3}, &(0x7f0000615000)=0x98) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000802000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000368000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00004f4000)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xff, 0x7, 0x6, 0x3, 0x2}, &(0x7f000026f000)=0xa0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000da5000)={0x0, 0x9bc}, &(0x7f0000903000)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000010c000)={0x0, 0x9}, &(0x7f0000d99000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00008b0000+0x2f)=@assoc_value={0x0, 0x7}, &(0x7f000021e000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000ab1000+0x33a)=@assoc_value={0x0, 0x7}, &(0x7f0000148000)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000a89000-0x8)=@assoc_value={0x0, 0x6}, &(0x7f000010f000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000879000)={0x0, @in={{0x2, 0x1, @rand_addr=0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x6a6}, &(0x7f0000e42000-0x4)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000d9a000)=@assoc_value={0x0, 0x26cd}, &(0x7f000021d000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00006d1000)={0x0, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x6, 0x6, 0x8, 0x3, 0x4, 0x8, 0x200, 0x5, 0x8, 0x2, 0xef, 0x8000, 0xffff, 0x5, 0x0]}, &(0x7f00000ed000-0x4)=0x108) sendmmsg$inet_sctp(r1, &(0x7f00000fd000-0x118)=[{&(0x7f0000352000)=@in6={0xa, 0x2, 0x400000000000, @loopback={0x0, 0x1}, 0x100000000}, 0x1c, &(0x7f0000b6d000-0x10)=[{&(0x7f0000fbb000)="91a74d9795848755c9bbb60ae5f614122738f338821581007ddc50d10e300a1d866cad51a7be43d5632497d38e2e602291247763043144c94ba3067ba07c10a014980a7d1a3a0c9ed8e1155e956996761761e4234f6ab5dcdd0c390b130b346da4a13069a6d05201144deb23217bed1c0a62b687dc39ff6f35058ec26f4bd542c1761b8b5a4587c216a674051121a0ec7c695025d07ec31da6d3a16c3a17c48a6fb01587e34262e1cfb193f28437091b56fd3f5b201051bac5a2d90a8381204d28c84b1027df82e38afe7e462b48344bba9fd4b8953107e5069a63ddc4bab3d4d805da10", 0xe4}, {&(0x7f0000559000-0x1e)="1d48b11d9c178af52fa3e2a49279029c1dfbb9502cf642f641f51385ef8b", 0x1e}], 0x2, &(0x7f0000ad8000)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x208, 0x5, 0x0, r2}}, @init={0x14, 0x84, 0x0, {0x556, 0x8001, 0x9, 0x1ff}}, @init={0x14, 0x84, 0x0, {0x100000000, 0x1, 0x1f, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x2, 0xfffffffffffffff7, 0x200, 0x8, 0x6, 0x0, 0x2, 0xffffffff, r3}}, @sndinfo={0x1c, 0x84, 0x2, {0x7fffffff, 0x200, 0x8eb, 0x81, r4}}, @sndinfo={0x1c, 0x84, 0x2, {0xa0, 0x0, 0x27, 0x3ff, r5}}, @sndinfo={0x1c, 0x84, 0x2, {0x52e, 0x0, 0x7, 0x7, r6}}, @sndrcv={0x2c, 0x84, 0x1, {0x63, 0x0, 0x8000, 0x7, 0x3, 0x80, 0x80, 0x4c, r7}}], 0x160, 0x4000000}, {&(0x7f00003ac000+0x1f)=@in6={0xa, 0x1, 0xadae, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, 0x1c, &(0x7f0000b7f000-0x8)=[{&(0x7f0000b8e000)="ae6ce990879cfe1fded562b9646189c4123dc97664ce6057a967a566bd74380f53c8b4909d42db760eb7a5a0cce9661ea0514738397bfcb065498dd4dd619129598872193b5564a20595655477d328a6c6616c6b6f140d00c82a38b039fa42fd8c61dca132a1dc89aeada321fd73fb2e50ff88ccbd184f1a99fa271ef6a1b21adaf6469a606215d3afa5b8a58a", 0x8d}], 0x1, 0x0, 0x0, 0x40015}, {&(0x7f000027d000-0x10)=@in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000e73000)=[{&(0x7f000055f000)="84fa1c5b12e236987a1cdc1246bff2e34dcf20d5fa12df5d77cd3d64ef3215431de09a73f5d5cca6f6c9f13ca67f26e105a0a0134611b6b812341c2280335f97e8299faf6090ba994e3474bc5f1320b276750edf9250376c8ec69e808748417e9a33e598420f5ffc995d1c0747176926f5765688d9bf294a54c457ff09882795ea9b9bf4eef3155855d8f6401c1e46295a325504e9313aeb051f80ac8414d668239801711f6b8910375566ad67ef9452db01b5", 0xb3}, {&(0x7f0000936000)="277aac203e16a794b46da5f4", 0xc}, {&(0x7f000088f000)="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", 0xfe}, {&(0x7f00007f3000)="c6a4d31cccc3c16da9bfef4fbd75fd0cfcb1c7", 0x13}, {&(0x7f0000aa4000)="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", 0x1000}], 0x5, &(0x7f0000bb7000)=[@init={0x14, 0x84, 0x0, {0x9, 0x1, 0xfffffffffffffff8, 0xff}}, @init={0x14, 0x84, 0x0, {0x100000001, 0x2, 0x20, 0x7fffffff}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0x8000, 0x8000, 0x3ff, 0x5, 0x4, 0x10000, 0x9, r8}}, @init={0x14, 0x84, 0x0, {0x9c, 0x6, 0x101, 0x7}}, @init={0x14, 0x84, 0x0, {0x1, 0x9, 0xfffffffffffffff7, 0x480000000000}}, @sndinfo={0x1c, 0x84, 0x2, {0x1f, 0x200, 0x9, 0x2, r9}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x5, 0x820f, 0x7d, 0x3ff800000000000, 0xc4fd, 0x4, 0x0, r10}}], 0x134, 0x10}, {&(0x7f0000293000)=@in6={0xa, 0x0, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xed}, 0x1c, &(0x7f0000df4000)=[{&(0x7f0000cef000-0x2d)="5e49c1c26908d91e7ce4c725b554ce9030584ed84d5858d5d4425abdc357335d85c2498a2d411a7a13e3377f6c", 0x2d}, {&(0x7f00001a3000-0xa4)="6cb81272a470d25d3fc8a9bfefbee63e0cfa81011a2d9630a598ef4a33f414e0f05b047e64d5e80b3e23d01d5a16cc60638e947d5cdf98df7cf38b99679c3aee5f37d500d7698051427f1452ae74d23e9fda7b645f66422efff2c068d088059b90d08751f769832bb0e295a031999c216f252354a0c58027f8f46c5c8c3a29369ff8bf799e75767148b250ed749db73f8a64967fb038838a4b399e28b4edcdc0bf40ab06", 0xa4}, {&(0x7f0000173000)="e835c82afb9dde8cead8623a2524fec070841654352fa89007562079f9d20c55e01915bd83c235b38d80c1d6c1190328f950a8bc1d50dd7a8283a1ba1eeb457650fb8c17f28eba788f04c369e41348e1ff760f35fb2adf0d09947df0bab4c781763d8d641f92b4e6d4b21cd2b548d3df9204d34ddc8f986943d8c47f9a0bd8440aa4daba7412bd6c279fc6f6e66610bdd4477d647520e23be1299df2b5c449c2b2e0fbd409debb289f06607c71bb794845e4b9fe5714e748be3366", 0xbb}], 0x3, 0x0, 0x0, 0x10}, {&(0x7f000028d000)=@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000c29000)=[{&(0x7f00005e2000)="d1816bcc304035268d299e50598264af6edc0211221b7ff1e08819c0d9072ffb30ac5fc4533cb9981296970530716385703c7f357dc9d4410accc4cec40f47732161ff92564ca9d5ffe0f75746b652f39aca0bd5e574deb31d168ebad91a9b6c1aa80df9bedabe47df5c5a8f77291c64bef3e3d46c5d45014208c19609c5c9016286", 0x82}, {&(0x7f00006bd000)="6333778909c07b5346283513ef427a374f71f80411f97430926b6baab4fc003eab6ddde5d3c4b46c8dd80bc0631c0f9ef8a1426255a947c0c02c129ad533094c6016c4fd740951a32a67f131cd40adff4e24565b3c8129353191461faeb1787696ce9b437733d9b083230734a39f3c640e69", 0x72}, {&(0x7f0000bb5000-0x3e)="c1d692b84569b32d8603af0ba2c2a827473352efdc819991a3c4bb0b857ee838fe573a07439e4b117ab6c6e06083402a49af0f825ad39791dc931376f6fd475f715645d80c073b1959a5c95cc4", 0x4d}, {&(0x7f0000f47000-0x92)="982f77bbcef85480bcd86eae465ff65746fe1c13d77296b503304a634dbc071daab0fd6422de5e0c921302755602e6a7d0a22d1c86ac4907047c78de85e9974f0ba210c8fe4e0cd9c42fe47a13b6ac4b67247222c856c7187d0acc81867284816737be36f139ee9fbc94deb8958729b47c816dec197b25e41c73948c3611279fb2c7c2c4c4ef1b8867591c998529dd0067c8", 0x92}], 0x4, &(0x7f0000ce7000)=[@sndrcv={0x2c, 0x84, 0x1, {0x1ff, 0x3000000, 0x4, 0x1, 0x6, 0x7, 0x8f, 0x0, r11}}, @init={0x14, 0x84, 0x0, {0x4, 0x39, 0x4, 0x100000000}}, @init={0x14, 0x84, 0x0, {0x6, 0x3ff, 0x3, 0x3}}, @sndinfo={0x1c, 0x84, 0x2, {0x100000000, 0xa, 0x135, 0x9, r12}}, @init={0x14, 0x84, 0x0, {0xa18a, 0x2, 0x7, 0x6}}, @sndrcv={0x2c, 0x84, 0x1, {0x1f, 0x8, 0x8200, 0xdc, 0x100000000, 0x8a, 0x9, 0x4, r13}}, @sndinfo={0x1c, 0x84, 0x2, {0x40, 0xc, 0x8001, 0xffff, r14}}], 0x134, 0x240088c0}, {&(0x7f00006ee000)=@in6={0xa, 0x1, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x1c, &(0x7f000033a000)=[{&(0x7f0000c34000-0x8)="993501212aa168dd", 0x8}], 0x1, 0x0, 0x0, 0x20044000}, {&(0x7f0000e8f000)=@in6={0xa, 0x2, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x863}, 0x1c, &(0x7f0000061000-0x48)=[{&(0x7f000044f000-0x2a)="8724e674f28578c5087d96c48187f528557c2959557e158d113d9458256601538adc35d4d3bf0f98b955", 0x2a}, {&(0x7f0000fce000-0x64)="02c3fdaaedaf72ab9d75cdccbe9f8a573ff31c3783169e6abad3edf5c279825a1d131ade1d5e033c8e29c8370b3509814defda98d794e9b23bfbf3f5a44b2a2e3ea618e4745b2690185a07455d303ba04df64d1b7928413865bfc280870dfe7121643874", 0x64}, {&(0x7f0000856000)="bf1a6e06a4f1b504c811c51dd8d59942ae3ae0a3b9ba8ebafe2988d90ce95a832e90af4e520c657d38a39bf5d00a4d2cf1da7ab62dd389ceed151c3f901cf983d1637df5a130187b026053094e1860921f85e1daae98f8bd7b2c1bf7b0", 0x5d}, {&(0x7f0000d4f000)="ee75aa180a6b5e0c237d83a3e188de3ccb2bad00f0721611c3c51e20d440819f5eeec8ece2c95bcf3efef6493a93fe9f73287ea97d57808ba1149b03935ce7034a52ae1a107ae84ff1cac38a319f54368736f9283a04daffeea0f7d4cc2c659869513c5bbfbc5d1275c2374279ab47eb9913af6aff5be33a252e23f412818eed1171bc1198d41dd159d8982b089f409ac77956d517", 0x95}, {&(0x7f000024f000-0xc)="f356fc51c0a869b2b356bd072d16ba6935b9d604729dddf03881f5da44a7f6470e707bd1dfdcba5ee4fbb094d04cbd06f0f29a9dfab7fbad6f2cd3d4ac59e157e3b247e31bafcd48c8c90daec7298f418873c95c448ca04a388330d37a07bb1ed60f3f28ee41d764aa32a5e758b67c6f737b09f9e9cf6b796d3b3732e16fc0ba35235eabdaf6b7d7f2b72a1673ce3a87a1", 0x91}, {&(0x7f0000064000-0x9c)="b7e1eb6291d15f2998b118a505c93ddd0ec83ef1bf25e58851a81223812be22e43aaca5c577b99a325648c33ede3ab60814c2078cd856666ff5163f1e61f5f7991d7e816b2918a4f49800d046c529a673947352fb7fa35c6dc4921d7a44200d5bed4967e0a81cc8435a0d56cff3951d096c933f3a0b62afbae2ae9478221eb0cd16ad7e54a75bea5c4e39f3b7ed2e6718570d0731c3ce0fa4a6b6ec7", 0x9c}, {&(0x7f000031c000)="c87945a7e397084da2e257e7374dbd2221ef2582238f49720963a3bcccbae92e4523cc3fcd95b5d08977b392453ced87f8e4402594f37051ed62cfe4911e39eda310e1908958cefe388a981ebe86d2b86fd67d6491c58350508554ade5aa7c86182b900ecaa39a8b3e715c6d7af6b433e44bb59b1f77892bd09e87e078d5d5cb446b0cb6d55678b5dca811f6d6fa39ae08d77fd4fe3d85ad43c8ff1891ac50f46332", 0xa2}, {&(0x7f0000fbb000)="3fd3024fd5e84b5c5b33b854b188d38adc7ead7794d044e591c7c0d0cb96385a39312421f7f01ae539bde670d44457b5d5f50bf43533790b9aa332", 0x3b}, {&(0x7f00006d5000-0x1000)="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", 0x1000}], 0x9, &(0x7f0000298000-0x160)=[@init={0x14, 0x84, 0x0, {0x63, 0x5, 0x8, 0x91}}, @init={0x14, 0x84, 0x0, {0x61, 0x1ff, 0x2, 0xc2b5}}, @init={0x14, 0x84, 0x0, {0x2, 0x3, 0x7, 0xcf1d}}, @sndrcv={0x2c, 0x84, 0x1, {0x80000001, 0x9, 0x2, 0xfffffffffffffffd, 0xfff, 0x1, 0x200, 0x3f, r15}}, @init={0x14, 0x84, 0x0, {0x7fffffff, 0x79d, 0x20, 0x5}}, @sndinfo={0x1c, 0x84, 0x2, {0x401, 0x200, 0x0, 0x9, r16}}, @init={0x14, 0x84, 0x0, {0x400, 0x4, 0x101, 0x0}}, @sndrcv={0x2c, 0x84, 0x1, {0xfffffffffffffffa, 0x4, 0x1, 0x401, 0x0, 0x1fae, 0x1, 0x3, r17}}], 0x160, 0x4001}, {&(0x7f00005ec000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000091000)=[], 0x0, &(0x7f0000f15000-0x84)=[@init={0x14, 0x84, 0x0, {0x3, 0xfff, 0x7, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0xff, 0x8008, 0x0, 0x6, 0x7ff, 0x623356e5, 0x7, r18}}, @init={0x14, 0x84, 0x0, {0x5, 0x0, 0x3, 0x5}}], 0x84, 0x0}, {&(0x7f0000943000-0x1c)=@in6={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, 0x1c, &(0x7f0000ece000-0x50)=[{&(0x7f00004d9000-0x8b)="788cc090158b22c80b711d0f82f8348fc0561b6c0ba8b45ce929dbf6ead6b8ac71ecff2e41ddef050bdac774d4442e83cdab0944f7970770590269aca1e6b05e29516429d1c91e8d5c452fdb7488a6060dcad6648503974d8c07450c7f71dc50c4185cfdc0656359f01f063656432ba7d994ce7f6da618db4212d0675d78df7bcb36e69ef1902251a8454c", 0x8b}, {&(0x7f0000568000-0x73)="e1f6fad395f0abc9182c7891d87aba8b8cf00b97c44a2c363aa7cddbb38d1728126722a3fba944f8a1e1361d32cd63913cb92bafe2cf9fad628948b17f782e47c40fb1504d35f763d7815f12f0b33958dc300b6b8d6d558d33c03d1c09caa24a82e2fb09436a57a673ce30baa0fd8851c25a35", 0x73}, {&(0x7f000031c000)="fa7acab2d9f5da54574043bd3e027f6543086b5ddb8a3876227d456b2207fc789d80943b4137640df7858e6d5f103d6a7540b632db66ed59531c68565b81adf4153e31412576e6e6ffd856", 0x4b}, {&(0x7f0000478000)="0c15af608fbdac20f5b65f040a91f2aec77bc3f60dbaf295c131b414ab0bff477f08c69ce64fe079c6838093790480d163633b50", 0x34}, {&(0x7f000054c000)="82cb81893cb227f7fa6655c503632a52d4486ce8311f22c52ad5cdb0b4a85de8336abfdc5bc5e834b4bd2112f0f3efd471a637a934018799f075061c98faed78fac408dbb5888ec0f4b155d6063a505da4eaaf0dcbc50bfaac3631439911f48fb8dc7e3198eb7ce26928b6910ed64a961119", 0x72}, {&(0x7f000024f000)="87c500bd5b6bb1ceef97b65a59c1567c90fcf1bdc13d99d9ef59014792d666cb0b03326a4c7cbdca1fe18ade89898e41ce98704771eabda84d42e37428bc9a2763a1ec2cd78b38a481d461c36709c485a8f4e868cc9d03a676156478f2ceec1b438e0de3ef4f13c88d015e1360f4bbcda4b2517ba27e", 0x76}, {&(0x7f000087e000)="a41ab6e6c7bb544cf520b4fbeabebe", 0xf}, {&(0x7f00000b6000)="e97d044aecafc0", 0x7}, {&(0x7f00002c5000-0x4c)="e90ee681e1036c820c5bd2cd3a8fd8d7dfba7438652f449bb21e74cc055ba998cd18cd7acb1e8af8e8c8ec85c16e4217bf13eb46d2eff6685582e7cfe18b6a8be75984fad5a0256bd7cb4ae8", 0x4c}, {&(0x7f000050a000-0x1000)="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", 0x1000}], 0xa, 0x0, 0x0, 0x4}, {&(0x7f000089c000-0x1c)=@in6={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x1f}, 0x1c, &(0x7f00009ce000)=[{&(0x7f0000988000-0x1000)="acae2b2d2e460ba855a1f89a297514246efbd0cca7289cb77751f62fd68ee4ca39658a445e733571c56a37ec819c218bca3d92d7a52521407ac054c75da49ded235207d8ce5de82723a0cb8aa66fa55022a56301e706fcdad503f6c8573695ad64e781e67394b1e543b9b8184d557aeb758e1f9bd95562c983f679984915fcbb56a78da059932b46ced4d44787556030e7da26e93d20d11e987aca2ace852e34f1e00b00df6b33ae623c43f930e892ba20bcee4d739b963ccdea150c8244d3c048b36b104e10d948feacf368c362739b670592cce8c07dd3f39b085d8845684c64b8af76a77a2a134d27e93abe07d3bc02acbe68de4a5ff9351aeb3f85e0db4e471851d613aa98044b503356c6de8b2d3bf8c46da5df3655e846fd1a89dbc2c41a478880b2557987ea22e5f0e695e57153145ba2eedcabab65ce244adb4302ef93a1ca64e0390c346bc519be6f45566e5d4e388aac4dc7f22e9ff61bdeee3288cecc510d9a2ac7e99a834db7befa1e57bab56da2de752abc6615e5d09b5b7ac2c632aa137225681fe5baa523f62801a30756acc1bcfc24676cae40a45a06f06084545ef34317ef0be0095f0a0609cba547de020b52fed771c436ce9a6485f899e5c699da037605542404584e55c001b6094c1b968df454a0bdf2f4e0d0d131ef08cb68e2249fbc7936777d5dfbeae0e5742258633593835bba9e5d6bfbe2cb4a4e29def8cd7e7c792f548af5baf336246d91d274a3f1e29ee0b413a6e29effa80d81bcb95bf1a97752aa894d417fd0e7c6455716ff33c8903e80b2b2da32c955f46f0ceb2a35aa85125e06bc3f91eca145be61b5ab0c40e732d256163d6660031c897c66d0b8f61c93263a2090f312a1849f99f83536e13f3b90b22446a2c558bd45facc1513e6f0269e01666cbce744ff59094f399365e2e03a8102c7931624f60f2f7a1ea52348073839e71400561206e85545fa40f1c40ed7d2b7419cb6308cc9c5769f03e41a2a7d4f1cefdf716d280462732f6540894a9e9ca264517c575e96ed742ab83b2275923a7b36310219ca2eb5a603f5bd54f301a24ce32a1ed1c67f2338cf6841e598fe978d538e9deb063d76519463bb496445600c3a8eb37ed8d8a121857c3ae14bd41cd609553a67ad9f4ea479d8c49d135a081193a9cc349f76bcfe902a4716b827ba70b9adeecb02b3d7ea35892fdfa0fe9d8c9d1ae033ba9795746043108b3765291cf4c9949bfce1f72145070dde639141c3fc52b72ce80d1f4b4eafbecc61208199b92b14186c18e7e9a8c1be4cbe4be8ddaa6fac7ae6cabdea8845c8d1a8faf8f0481e0173732e9adcc7e69752e7fe5317d5478825df57f5ef70c12a8c475b8f91b260f471e6f96ba3eccabf4b2f0f4dea776aa237a0d218d49897842543efc192cb65f584ad0a57a9714e1fa8d1b63794822791866d2822f9bef2019e5e530ca955aecf66afc98a7537a6d9051c6798fc134c2783b1a01779c899b7e04ebd93b5cc3b44bccbf46f2f16da1df7d43fb5eda83a454333168272433552fa1491b704fb738f4056f8daf292138502b41593b65384f83df4e1aba569b2035f342af3587fd33f4dc58c0c386642e2f13f4b0c0bbbf371a11db89a5212ef7f5f89ecdf8243cc3a7e723f231f7f173ffc4c13d35bcb838109887903111e5346d1abc508286e9610f238477f68f6c92cfaa4fe103557a8221efdef956a94be022b79211fe30be8e80dc479502b265201651dfa80d53477b9b1b6e0c580b6d3bae6e93175baa75eafa290a9215168fe7a655fc5f28926e189eb93dd85764f959627e00a9e4c94d93a976ec36e1c3aafb60f75310a4d460cde5b3075402a791bc003836b8388db84ba4f87131347de0822027eea5ff7074992a253b86999e851fc938a0ebbeb1eaa541072e9bd8568018a45fcb6dd9a2f1a4456c07930a95bd3f91d004ba3e744f06ffe7a6b33400825fc67a495362de63352172667ad91b5a0232dc55c211561f55b1f416b5d142bd78c92ba92fd722c1000d9f52f3eb349c72df82407848c09ba4e84bc5f63399b4d33e7cf4951a5434fc9ca89cebcdfac07546460cd1b04feeb441efff511db72a29d66bdbae51b36c315d01ae4c49edae51e62869e943a01489025ca9eca6e41751f7831d20e1f2954d9966c4e94aa9630cf235f57b63aa72755fd1a2db94d5de6e77e26342274931dfe1aef64b3dfde643cfe6b04c2bcae3b7dc5559b182cf43867f013d156fbf37dbc5a21a0e8abdf632e66f2407d2a5dfdcd40adab62dae807f9cd49c1a33e13af30c23994e27b7769a0e89908603348fe81f41f4bef685035d915859948b7336c73219e92e5fbdac0054a24374b03692bf01d0b9596c46bd398f76d7a49c950a6398e36c3dea1497dd2a0247196f9e5bb5057d2cf21d0c7cec9e20eb8bdd71101f743666804cceb9fac6712c2a1d179829c8f57950622228ff894af6cd8d7f8708d62d79a4724caf10227529c3d29e7704187103d0344b51ae26a7659fa5fbd8351189ecdafe8c18846cb3e3afa7db63a4612deebb68a74c32b73226f8d0de3c94652ecaf984d0b5f12619f45182d5c7b2ac3933f8fda31dfca59f9ebdaf73467ed34a51b1ccfffaf1f5022898bfe5aa21f4d0443f251a95ac88d2be4c9a30ce7e8611e3221b16f7f2fdad8e70d38174d479f86a7b11d2b2d781619a355a63f275ab1695f76688311395c810821233cedbcfb34b2d9c304fcc28435842f524cfcce43d5752f7e166866220629666773a4b6ab78f34846a2d3c2ce57020cc614291211d002797da3c1ecca2eb19f02c7800072af99a80df1e80651fc48f08804cb9ac3f60427bcc345bcbef0d1813acc5390cecd34ae73fb5684bcb9500e6939e84a36b64ef14c0be3120771fae6041a0c070e7702074b36f46f161490df3ecd8005d0e09acb6392c8288c403e738cf928e84547fd8a0af0a8c5cf1c85614ef0714c45a857dd6abf4f4251f88d25db3fc48db7d2708a5d441e27502330a9b55233388b9b98ee8881787d28e5e11e71ca61e4038ed77f7e9857fd560efa5ba0551667360439869082672ce41adc6004e1bdecb04c828b6aa0eb014c2ed70414a1f948de9b1d5db9273263b5c4b2af8c50193c7bee374f17861036afe3a9677917a467ef405a6fbfb043bc5cd6b83555c4951d325cbf6ac9b27dd671637669d26e3ba19f04949583cef7332b89484c59b4f5e8a6588cc9938f5b3d2a39399ad1e005e2c691abd5f8f0cdf7a82e504af3258a3f1c06d81fb81bd4c520bf2fd2f706114f6d767ccff3eae35c81d9b66158c1690f5c66e7bdedf28b5dd8f819156cfc868abfdf8f2155fbf3cf186c59ae49bf32f95d82ab9b9384a2bab9aaf2ede35e91dc2c8582594be58bea668a1dae5fef994516775223624cadeca09773ef023b10b4d0b227258adeabb89d9c2627b81c80d9fa769413b8704cc026cff5d3946bcef192cc68518b19bf3c23d5b9d55eb7c1464c218d6e0713f0c08e998d55bb73387a5aad10e9bf96b6ea0e97f1e17ec75e44ed97f1789aed2959d5002c5e757c1f468791d227eedaebda587a849aa6c02b36d651de58997f917b68afb89b99558239bd1b880bdffbf67e43539fa00e7697b15abad9f278cbb39c4faa3a165e1d379b101f7f55c379079ff4d25e319a780784fe071f8ac0dbf13559cac93e66235b2c05618ea38033af494da97a53e2c08c5457f48e031dab80af89697ac3e7310a68b0ac74f8a77696a92cb391f707ef66a0532e8ccd8f4055a2fef66a5c7bdff46a26b142b5b52b75392cde0bffe82a2356fbce3d321532a47bd522fd75182969c5825253fed307b29db8b3f5d11259f985c40256c696aa41105f547e6f2892ef4de2e40f16f0809118a670b8fe201c573c09322c8f8217940cf909f39137942e9549261e82fa021a0d74b16030403269d093091d3dc8dadc37082f7e993c9f0809d2f3af977fcce3463f1a5e45ebb392fd27f56ba091ef32a662edbb19b8b2dd87f1b52a99a2bb880f7207e08fdbf33a69f8cf8a4908405079026a3c31a0d51aa688939ca259b80e1cbea11723f35b0c0285922a2133dc70d98287444c34e7a253e503ca86f3eba328ded9b36ee87170276f88cb2c137c3cb7685b8689fd193ed416d0fd7fb8739dd77bb457c31de5ee50d00d6e30a740884e3246f378fb6fb4e3368bf0922e0802bce72ed046354a22c6482deee78275c26b48aba0d830a435250b465ba2ac2294a89b7d02dd5fc1d706c5340872639d6c31b01960ba3931d028ee3157b76e2dcf31a81f31abaeb86e290bdd3ad6f247c240dc6984f59c0e24fc9cfc5aa9578816ff0dc105dc50fde6552a6061b7ab6f8c72dfcc6f19b9232eedaa38df2a3647d9413d53ce39e016f7cb1fe22dc486cc155e0f9e66550cfa3ac2fbcaf77923f31aa8f38705e2f1cb0bf0f867eb3522ea3376cc773cb0797594ca1e0e9d091d295ab32d222852c2cc99fd0ebff64352a687f3d319f0118b200d8047efde8ea61b1b3189c78d2001049d3ddb365bbe5aa9a8f6a144f3bee77812f4b25fb1ef63568ad6f7ad99d53888c30cd7c48e0d3eaeb88b2561f1b87840b3d273bc26955e191eee1fdaa2a8c7964589539713ebe302c4929e06d97ebc542bfeb707eabd9dd9d7990fbb1849e45c87ccf62c636dea12a8a554a69549d4187df07c5fdb0edea4e57bf3d23a974e9594e8fff2c2f053999975538b312d6e404bc93a3a7751373c8832e298cb8f36105f371fd7c76141cb54d34a30e506ce0fac40f23e6528c7a0d9890f70cfa68876cbcdcb1908c053ff2b22d871214182fad4dee3a8ff6a01053172902abc28630b72bcc089ae2ff84fd0bda0e83be005a0538ab2385899ffdab6f9fbb3a9cb05c68a0550d238e6cef7951d9cc6f82df51bab26d177d9b47669c56798b968e61af37b9886dc80e5cbd3300d5d3cf9cdbddadca910a14b82f9e2d69765d9cfda2ae967225b3ee939119bd1874aa563a0c1066a5c5a5016cc5f80d93f47f6c9f663aba5fc0c263891fe25270adf033414b8993fbe58e7bf9176eccf8fd324edca94f7dec61e6a465e83a0102e2694aa6b3c84ba9f2e5b946e13e74135f2566990ef464610fe42addaefa46d384c435204c106394e69778e358e11fcfdf27bdc93be3c38b71d2d14576f89e0b6f294656bb4ac7367c925c25f4969ff38e4de4e713f694fff3f455faada8e77113f0044764c91f81df59fb4e577d2900d106f211cf7fc6c736de0fddf651438c5986108b5c63f8885d0484b5bdae9a088a5a1a9eaf8010ba48ebcadfb9ea9df91ded569e15caebd99a624e59e0e26875d2f868ebc9956d8ea6806e49d2980d5a9b055ea5bfa3769af113acd90552dcc5b4ed7c564a45f444692b50f717508777b843ab5b06f769f575cbd159be889fc1fb779d86c9d7ca51783e7f5fe3f2f77f5f1c5dd650a47ca52834400a578a28f2f08c93d7202810d0d3742477770d779e03bcbd526e41b44fe18e8004ab4c63d7df4648c376148d3307bcde4784837b651a488c5b1ab3b2db516f93bf3fc5405d4882d2cb401499572598b1615f8e3de53c4150cbcb28a32893ab69697e663c15aa90a907b86abc918f4bc01f6b0cba5db3ef575f02ba33c5eb1d208c47f3f9d48356707902c910c539fd8099f5b050b79fac6e22be5cddfef4c8d27af01cf1c70bc9bfdccecce6b7d225453deeddee328456b66945cede18b23c1a0e378df7ad05c5921ef21843dba814a219b87ea4a68214605bb80508615bd", 0x1000}, {&(0x7f0000f56000-0x1000)="1034ec21cfa4ea0e2633dca2e16e1896595bb14796477925b6b8ce69eee016c6dccec19f074e726a26906d7e12404929d9d56b69fe786cdd675e4d0fa7f84a16c1d605c239d189185025507afe6fdbd11d80287845d1a1062b173b5e5a6417c78a76915359a88a024b205d57be940c822b6933986938bbe9c4ceeefa29fc3a18d1aa2da5fb03f89a31cce791853b539b0d9efc0f5182c0fa328f83f29008adc898561a89332d635a598bc629784e60f590dd9bd3bc3d9ff9d679613753085a3ef0574838219534cd1f34ac37023d79e15b710111495de5ec601dd639cab17eecf49867875d90c8604e6b20a005f8b1a41231650fe72fa90a0d03cca6fb852873f009ca31fdbc8cf414d26a67082fbacd4fe59dce7d7d6283b44a197ab108f676c6e0ea6de1ec1f648ebc9d6c926fb6c07732b91c9a3fb8217b605dfdd33f0ca477b19bd00e5ebdb3701c6dbf84af6fc59bfb8bb531af71e0740e3aeb63876bfa8997589516c176b889130c399e89dc0cb85053f75ea073dc85902002cf61233c8bf4a6a59aea46c9200715666b01761a539d7f538a1748f7b319cc31454c79d090712a33709a55f076ff73fc3bc7bffe6c211ccb346f5a197152c6b925cd53357dbd0950d505d312526290773036e7ae03056305eaacc8be07d5cb431d65ffd48a66027c98f526fee11d1ecce99657592be90d58b201cc27112074e5204595f9da7a39f63c793cfca9e50d6c010191a16eb7ecf616cb9c7b40a1f91a69d84b2a8aeae36abb4ce9e0a6089ef86890ec1ebc32467ecacfceaa874f5d81e471e9871cd153a83e1f7d73a2c581f985be8a74c5beb656505ee4d370dc86f399c01f7ff9881d5a5a1bbd971451b11c5a7b1ec5563adfefdc8fe62c71587cfb1ab550b9db7af05b46d00a996df30e3342188afd12f75ea51e07c8ae286d16bc5eb51837f0585fb825132f991c0394caa1201e9751b9ea6f0412a18107b15ece61528e4974fe747574bf72a639cfaa854e32507f9eb156738991ee97e0415cb9746a4eb95830ab5f09e347f98aef66517e71000c72867553fe59f0598d6410aed5965ff0b046724185165c26b2d84aed34813a25d7764ef533db7212750b1d60745c4081f8b7ef0e8b4b98bbb0ecd9fb57e2b9a79c8bfc2cc7a03849fd7c4169aae67de0b624b9a40f932f1c16a8f062799516fcb982e13ad8e7298a766f6c7d7ead327a7e90efb413dd52f9a5db448e22548e6e6597569bd8bc9f72e22dcc622550f2e5a640a7c0dcfbf474e90fc40f6ad175c7eb94978a9bfff286facaf1e2724fbd02afadc76c03dcbb39cb962c9a6cce7ab3337c0e906896f4a4a757eef7520d1ba72ea94e00317bcb2b9414ebfd583d5f479ac8f6d216e89cf8375ad279e6716fdb744556f15dd05b0e9ef5a8c8bbea84a256d784367651dafa135620ac9ef842917e9dbae6ee5449665801604b769495cb11cc12a7b1e030ce79799170ba87b6b8e3e1c723fb07eec57406824e965c0a43865bbddaba5309a0917c30f66057b6430d9e089522ee9f19671c492bff0140a8c9c47c6ca6dbba413d8a8e10a70e8ff176f2781db414e4d37083db6d7e0f4ea0326a86067fb058939b9ef5ad666d7f1859480111e7c29c457a802634f3116fae17edbf728faaa67cc44690a981535892983e3dd5aa1872954c7cc476a0fdc482c0650418cae8af2c165189c65b8c4e743b51d768ac262d08f55874497370d371e20e982a9017a83c83111005b2a8f63ac18a233ca3218209eb458d1592716f81d3d2ea75f9267e837cb4b2077dd32275fbb590a94aa5eaf7fda821c2cdbc8f934a690dbff88fd55118b7d0c19d05dd09ca864286672486699d23fedfa30a0655693a5450b4e99ece07d1c0f6b8e515627332bbc6be014d948ff8cdaf68616329ca83f206ee12482c7e77ca1ec15ef2f0ee3c06018302026d198777c291e2346768c4e8acf926265ade8de450cabe91475722791251186b0980749a4d8f20151ba45675c9b2200c9ac2bbe9d01b70f125d2d191ce05bfc6bc24b4a9093e984f1214797915bcd3a2e905b8f94324d3784213b01a18f51de254075ae0ab1ae9fbb30c91ecaf254b981036c1bb9999655579b28ace7526858c924b47207ad72770e2ce5815be3c95a87cd4dc2700644f731e2f9a3eee51b5604919a94f1ed5f88656f10946f8403e49924eec9f73cfe964be3d986a3e3bc3ba6a6603b428fffd4c78d1c058586f031cbdc3709de55112e67b9ac02cb2210ff83dc3af997be13d876b3af868311798fc60eab0a46ba7abf2e2c6856ae05b3879a12edfc241b2572a03bd00e4b7e1b3d07ce6abf8324a489a18482fe8e3b3e7ec9b6061db7aadd50218a314fc34665ab8fd85b06bfba4466423b9aceb97b8513973b60be6e9d15c19bbea4e3d38aabf010347b3c55118ce89c6058c972d29a0a6136de12678537373aaad99b699c84eb17df3fd074719990254fb0da3d372c19112905cf6afaa09146d6672fc5e1fcc0150d9dcf0a2ce2fb908200c2dbfd7af2bf5f99953c8fd28d2348434b309d700e1769ba270abaa236cc2a7c872f31e6e473feac23513e4a35a46ccd6c2fb55e4003e7b760966d0f6380e02f5fdfc7af10c080351853056c194b94d853626d99f9374f275b6164e04b28221caa2b2d7018ff9080c727228373e3d4bd344637030899258fea060469060f48aff874bdc681d6ea0e58b9b3d509d04529c809dcd52b5f36d20579460c238764a5edaba36b3ee48f55260d35c086f2ea7acb3daaa007eb8ea812aa847c44d08f8f050c13aac2c1b8bbf7557344d36f28bed39915450fa85a05232f037e4bbcbcc26ac07b2345731f18d4b96672eb5a7ab70d755f47e5b53ce7a2c121f9c2ee63ef840011ee589260582e62f3a1e42ce829921ea927a9930aef2dc789b756be5e49e4ca927b955e9d07c4d8b95a5d779549478983eb67e7d00a65bcf793a1c0dd09b4be980e2764c869cf1e08e40d8066717b43a91226ee1e52b51ea80cae0c3548c7387db39e9ac1e41948b0fd55aa48c67c3e2f12193dee6a880425b8cf57cd5b51280272a9af0960c26a05d930832b5e258f74ef826e1de3dcaddae24cc38c57f4ea1acc58f79a3069b39d2e82e726eb38ff2533214d9f899be077e4fea35b3118c0f1223a1ac97acc2dd0072c80a08dda832750b2812c783f1bf9fce657e2173d1ec7841ec5ae67cccdfc639fc5ee0c85b12626b31dde25c88f0dccb516f5497088fa72ef1125eb563fe6e385819357c30ebc11fe9d1d9cbd4fefec4e5475a1ac74b8a398d0612d46b2fec0f1f197f9b3814f7d83748e7d7c3672598fad386f767ea59cfc90ed9f75506d88da7837fccf96ab681334f28763ec0104849f81295d78be9bd18687a39f44f1353fe64f808954b88bcb0854f8eed3eaf7b97026dff5ae25038607ea01bbc64e5b6d3c25298b1686427691666a073f79695a10b27b3ded2e95b012a32646e219e42de19bdfba52741403a81ef591dea3e846b503d116666f3e32b1de66b0ce73ebd8c3609f874fc3f9cb6f9ab380c086e6166520a9028849a927ac8f8521f2f103dd3b71ba2109e3f2e34597b3e112da2feaf47bcbb8391c651b326304230e5f94bfaf81b0871b28f25e6db93895eabc2bb405109853d6b97ed3b74904f22084b34b6703494ab1c9b85bf2e5844c5a214a7dbec402ca2ea484f0929d6326e2b95da3fa6435e4d5c69b5239789060975a30774e67bc0ce17503fa739d20ea679df5216cc92347f6a0582eec65b56b190c47e38e30344b1bc05dda580019d1982e486f5ec96e6979999ceb56125fceb359f02c3a45d9e81314ada74efb2588002386e9c0823dced70f5573de655844eefec7f0632a5318280612aec58c383e52cbf9829f7b701f3578787c111c666ad6774343a61ec1b789b27da8c4c06d1d86a9b77931c356288777dc1735906c32fcd53dc7698366944bd64cea7d8601677e315d0701efa4cadd6c3db2babc0ee4aaf34e381ae0aa81784d631d27d8855675e1d8ac6492eb1b7b377c00002f8820fc2d7b0b3d8e40580245d88e0a5aa25238bdc1005bbb59b3f0555792cec855f234bf7e749933d4cedf48a5ac8824ded0478aefc21a962acab8f3739118004a60da53dc49971e6597f0aa39289009bc6869d9fe498b87e3b58a8953c268c58c5043e1adf597be4fed1f16962dd8f587a03c4c247854371570837b27d2a9c66f118914a8166af9dfa67d72e0ec0b71f49d36142eae3fe3a3b7c0b3d11af3ce7b1c295a8579b97f712e3448fe806622d82cb931d47f78cfa9d84dcc391f1f3ec7ac96e003d82bbd0133571d37eeba5bd75e4ce0f31f63393dc9185fd9f5096317d01b5688021ae2f60b3a1baeff81116ccd6896cc1198ba67ea557208c2b7db6955ed5bf84ddd0da56365245f189f85418b21f00aa68ce7af5a4bf5292e15be3bc53c6898b58c277382c0556089f5c2eb6441c97f1df659caefe7d1970355b0bab98c733ef4d2a2fa017437d72aea2cf26af58daf335ce0591751b9062c1e24460699b457bd0d8e42126a1f79e65fcbfc6f099185a859dda315a3aa78cfa669562f0a7cc372d01033f6f597759b6fcab0c6af7e4604ef9e31d646d591cd41b0ed1d997e07bcee742ebf881e9e392b1d90033a61c9d43327d8eac7c1345492b5f19b76a96e0ec552b7bceceb73780a34c6d7c01dd9c46a597bd842bc91065412a0c64d14d16649c65165df3b0eaf8141917aac04e9278d8af23b83b297b00bf77c4334abea62205a71e1acd31add9314f8efffa4c53a1123362ceb314b94a90bb84e505fc76439f38beb2098efa6a42725b9f6897faa9520f250fefe182b45f4b7865790018a0ea0db332d5aeebeebeb1720ab652f9397bdce7538f047d74a724dfe986098dcc19d486b6d2a370086b0768ec45ac4a37857323267c1a248beb5ce312e88062eec2eac726e5946f0e475499da9ea3ede190adaecfa79288dabba2b8b2a8bc7ed1345263270700e21c6fe1956e797c78344c239b948dbe106fea76dd3f4e86761928304e8016dff0d4a1a662dd7ab21b235dac34b3814ce1d4e69564ffc783444be39fff94b23989c8848bfd6da7bc31149ed8e1229a056026dfc5dcac5318ea2970eb926748232fde2e4143575092b5331da32bfbde5e22a0c6ac18fdff37cf0f712568d4a232005f0806a053f537f3aad77bca43b0a8df919bbf731108e9b8a8d9b3c2c6c9dfd993ca2c2101d23a1aa44668b20a5362d969a4530f48c93b2fca13d2133a99808e76c9bfd7fee931725b460e7845086485ccec285b2e76d1040daebe9f297d85ba80b9a2a000a9da60c88a71e9454055caca1af3ed610d8df0181131c5f24c19412baae251118c9cf14cd7c6c87eb76ac1c461d04a30b4f54d50186d493c8c2c230d2fb1677758a80c14f3598b8927a2d9576a039609a9b1df1c279c1c8d2ada03dd80f2005ce327d13d2f00036ceece0ea4d75564954e228a18568ad0630b7d971100e0f882c8f05c1ca6fe970f7b8e6c5b3d47f9aeed317e0a5e9871fab316dec6ec34291ada9c7d74a62faa949db2974189146b72a00b9b8f0fedd9bdf49aa0f3abb36a345f9a629058fc6bfdf045df990b8e5f6bbf785d204b65837f3c003c0bb833520a951ddc41fd76a0c64e52cb1e324ea5dcfb6074119405c081d403cfc73f47c8c3c5707b561cd4cd8f0aff391acc32071900c27a4ad53da4bef32c44887c8dfda3b307c66bf4f88454f6ca8ee94f89cbd81b19680a20", 0x1000}, {&(0x7f00002ec000)="2dccc9bd90dcff2cd2c43c93c557b0b70f6912c44ff8ba96cffebb80701e97b120ab04de34ac979270cad66cc320b3b5be8039a4a81961f9068f92280b6dd0eb7d866cc4de11c656d63bf11f5e211bed8287de1f47093e0a844df57fadee6c620e01a02573600955dbb7934bf24694ebc45c51", 0x73}, {&(0x7f0000514000)="6114a6c45ccd267b1ccc8682122ed21f3a67f11073c254c17fb8875fbd4d4ac3d27cea64b4211f240eda4ee6b0fe75ac7ac3776162dd5fa102b8d1305242642c4d67664a42f94eb2d425d3a19b14ee0a4b8d5e49712ab3946b87b358d0ad7d19540adf9a976ee4920446ed34d9541a66c0b38848f720cd95e8db8bd5c7dee2d2da3d07331ed5844158a82788b5098d75af1999a385ffa7f55f5527f73361e10cdb916466104b113171b109126d2959832040e700c0c6e862cc149865ebc29dafa3a18fc8b8dd61de60a0d24b31450aaed1cc5811e0762e954c4ed19d79d35e176f43852eab8a45", 0xe7}, {&(0x7f00009ec000-0x55)="77f01552feded97fa750c7c3cd1297aace2540267d78d32076cd49726cb75cae1718705b17621713b22bdbcb5272311bd035b8eb76c538541bf15a65c160b10a28aea9666ad114fadf428d7a6156d3fcd3e27c800b", 0x55}, {&(0x7f00000d6000)="268e37e1eb0aeec0d8d37d11fae8f590903be8904542a6af7e1a39661c3d0bcaa63f1ef1e8b86a0f0e715076dd8bdd4e7d9e92a659f452b13bb226370884f85dd94d1c2e966be4bb24cf50dece8271a0a374a64e0384157e9e09b4da1b7788cf6f34a61debbda4dc3729af5ff3710f842cfda4b923132fa4a3585ee4a6f4ec0a71de59113c18f38908a39c26e4bf836b4a2eea6baa664aad15cf2e49f33309e95b62160b617a780031dbacd74b855b42549130f83e4e3286e451ba5e", 0xbc}, {&(0x7f0000b71000-0xe8)="6fd1f0cc5665b8b0f053e497402a8307f3a55c05c7791276ebaa8b238083175951bf37102d978c8e2768e4977537dfdced9f7ff91367b82eb46050c2e84ba59c7c017b475cdd3857379e5e27b7a9648082e06bd18a29d621ed79416ec80e71ac5dc16ba27314c6eae60b49dade91cc4a5fc67eae35022ee18b5cb52afeab015d58ec78575769ff2bfe298799e6e4995f911e4c80d8cf10088b359b20c8d02374c84748e9187320c92c67fd4b452b1c3af6e8ffee983bbe3042094af66255a28873ebd892772e966457e1a6dcc7c281f34c692fd81bfbc66346abcf44b943c4c4f3557220b4f3c05c", 0xe8}], 0x7, 0x0, 0x0, 0x20000000}], 0xa, 0x0) syz_open_dev$evdev(&(0x7f0000817000-0x12)='/dev/input/event#\x00', 0x10002, 0x0) 2017/12/27 08:42:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1d, &(0x7f0000f1e000-0x4)=0x0, &(0x7f00007b7000)=0x4) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000ec5000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000fa1000)={{{{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x81}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x3, 0xfffffffffffffffa, 0x8, "fcc17d0780ec832278a922a4df4ee566759fed758f5d450be9e8fdf6077aac7188189815ca0eb710d90ed33c37e55312d462f664613e9812182786063e98c10237c68ac8af452277c37b7746dc6cacba"}, 0x160) [ 447.907950] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.908005] binder: release 26305:26307 transaction 3144 in, still active [ 447.908030] binder: send failed reply for transaction 3144 to 26305:26311 [ 447.911513] binder: undelivered TRANSACTION_COMPLETE [ 447.911521] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.115379] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000551000)='cifs.idmap\x00', &(0x7f0000121000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000c45000-0xe9)="", 0x0, 0xfffffffffffffffb) close(r0) r2 = getegid() setgid(r2) add_key(&(0x7f0000bb6000-0xa)='encrypted\x00', &(0x7f0000d76000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000231000)="a8", 0x1, r1) 2017/12/27 08:42:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) socketpair(0x9, 0x4, 0x0, &(0x7f00008f0000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000b02000-0x6)={0x0, 0x1}, &(0x7f0000c9d000-0x4)=0x6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00002e2000)=@assoc_value={r2, 0x1}, 0x8) ioctl$TIOCTTYGSTRUCT(r0, 0x541a, &(0x7f0000f39000-0xda)=""/218) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f000062c000)=""/246, &(0x7f00009c2000)=0xf6) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00003d6000-0x67)=""/103) [ 448.149086] binder: 26319:26321 got transaction with invalid offsets ptr [ 448.158648] binder: 26319:26321 transaction failed 29201/-14, size 0-4096 line 2918 2017/12/27 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) name_to_handle_at(r0, &(0x7f0000eca000)='./control\x00', &(0x7f0000f0e000)={0xf7, 0x49f8, "1016f7b9d9b93072d190711f89f946b1ee0aef7b24c627da057b26f349cf1ee97140a227c98a3e32e4eeb91c2b948df4836db4ca879618d01279987f29ee0d35801a406313bb4a529557404aa289615a279cedc5a61c1a7e2fcc6b78ac0a3bc6b3066d06e90587421872b9bb9a16df2a0e9b7faa646698ecccc1360933f02ff407af3433833d9531dbb98f353b8fd27c3906ca7896dd188188cec6cd5e203da8da76d547ee32b12805d31e734407d26590308683b11a5510cde2479324f3e3fe907d19c5934d3adf098909a897df9e70631f7f66cebb18fc5d88a82ce8f32700c77ba5a4c2c3bfbee20383c0bfb4c0"}, &(0x7f000018e000-0x4)=0x0, 0x1000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 448.163523] binder: 26325 RLIMIT_NICE not set 2017/12/27 08:42:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x0, &(0x7f0000564000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x1, 0x0, &(0x7f0000351000)={0x0, 0x1c9c380}, &(0x7f0000140000-0x4)=0x0, 0x0) mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 448.190277] binder: 26320:26337 got new transaction with bad transaction stack, transaction 3150 has target 26320:0 2017/12/27 08:42:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00005ae000-0x10)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000469000)='ns/net\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f0000f9a000)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000cd000-0x30)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x1, 0x0, &(0x7f000062d000-0x1)="e2"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00007dc000-0xa)='/dev/ptmx\x00', 0x185801, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000c94000-0x4)=0x0, &(0x7f0000ddf000)=0x4) [ 448.190294] binder: 26320:26337 transaction failed 29201/-71, size 0-0 line 2802 [ 448.196534] binder_alloc: 26315: binder_alloc_buf, no vma [ 448.196562] binder: 26315:26338 transaction failed 29189/-3, size 0-0 line 2890 [ 448.205691] binder_alloc: 26315: binder_alloc_buf, no vma [ 448.205730] binder: 26315:26338 transaction failed 29189/-3, size 0-0 line 2890 [ 448.209312] binder: release 26320:26337 transaction 3150 out, still active [ 448.209318] binder: undelivered TRANSACTION_COMPLETE [ 448.209325] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.209342] binder: send failed reply for transaction 3150, target dead [ 448.229959] encrypted_key: insufficient parameters specified [ 448.242320] binder: BINDER_SET_CONTEXT_MGR already set [ 448.242333] binder: 26315:26338 ioctl 40046207 0 returned -16 [ 448.249508] binder_alloc: 26315: binder_alloc_buf, no vma [ 448.249535] binder: 26315:26338 transaction failed 29189/-3, size 0-0 line 2890 [ 448.249832] binder: 26315:26350 BC_FREE_BUFFER u000000002000c000 no match [ 448.252609] binder: BINDER_SET_CONTEXT_MGR already set [ 448.252619] binder: 26319:26335 ioctl 40046207 0 returned -16 [ 448.255578] binder_alloc: 26319: binder_alloc_buf, no vma [ 448.255604] binder: 26319:26344 transaction failed 29189/-3, size 0-4096 line 2890 [ 448.265373] encrypted_key: insufficient parameters specified [ 448.279987] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.280153] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.280275] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.289451] binder: 26348:26363 got new transaction with bad transaction stack, transaction 3157 has target 26348:0 [ 448.289466] binder: 26348:26363 transaction failed 29201/-71, size 0-0 line 2802 [ 448.293523] binder: 26364 RLIMIT_NICE not set [ 448.312725] binder: release 26348:26363 transaction 3157 out, still active [ 448.312731] binder: undelivered TRANSACTION_COMPLETE [ 448.312739] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.312758] binder: send failed reply for transaction 3157, target dead [ 448.327476] binder: 26364 RLIMIT_NICE not set [ 448.348924] binder: BINDER_SET_CONTEXT_MGR already set [ 448.348934] binder: 26362:26367 ioctl 40046207 0 returned -16 [ 448.352121] binder_alloc: 26362: binder_alloc_buf, no vma [ 448.352143] binder: 26362:26367 transaction failed 29189/-3, size 0-0 line 2890 [ 448.354422] binder_alloc: 26362: binder_alloc_buf, no vma [ 448.354442] binder: 26362:26367 transaction failed 29189/-3, size 0-0 line 2890 [ 448.383821] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.384068] binder: release 26362:26364 transaction 3160 in, still active [ 448.384075] binder: send failed reply for transaction 3160 to 26362:26367 [ 448.384092] binder: undelivered TRANSACTION_COMPLETE [ 448.384098] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000978000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000c59000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00001b3000)=@int=0x0, &(0x7f0000000000+0x7e8)=0x4) r1 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) bind$inet6(r1, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x20) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000002000)={0x400000000000000, 0x2001, 0x1, 0x0, 0x1c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(r2, 0x4b70, &(0x7f0000001000-0x30)={0x7, 0xffffffffffffff01, 0xffff, 0x0, 0xf9, 0xb3}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000458000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) close(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f000029b000)={0x0, @in6={{0xa, 0x1, 0x7, @loopback={0x0, 0x1}, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x5, 0x800, 0x8001, 0xe8a0, 0x61b, 0x6, 0x87fc, 0xfffffffffffffffe, 0xfff, 0x5, 0x80000000, 0x8, 0xfffffffffffffffc, 0x6]}, &(0x7f000037e000)=0x108) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000f70000)=0x1, 0x2) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000a4e000-0x14)={0x1, 0x0, 0xfff, 0xfff, 0x1ff, 0x7, 0x3, 0x9, 0x4, 0x9}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000eb4000-0x10)={0x6b13, 0x1, 0x5, 0x2, r3}, &(0x7f0000a86000)=0x10) connect$inet6(r1, &(0x7f00003f6000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f0000945000-0x24)={0x6, 0x4, 0x4, 0xffffffff, 0x80000000, 0x0, 0x4, 0x6, 0x5, 0x2, 0x762e, 0x2}) 2017/12/27 08:42:12 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000-0x10)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000649000-0x20)={"b40b15b387fe3fd6c46afd65129e218c", {0x4, 0x0, 0xfffffffffffffffe, "5f743b8fae64", 0x8, 0x0}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4599b6cf) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$fiemap(r2, 0xc020660b, &(0x7f00009f5000-0xc8)={0x7f, 0x8, 0x2, 0x0, 0x3, [{0x1, 0x4, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x8d4, 0x4, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0}, {0x100000000, 0x3f, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}]}) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f000096f000)=0x2dc, 0x4) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000bb000)=0x0, &(0x7f0000a6d000)=0x4) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000d000-0x70)=[], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000654000-0x5)='user\x00', &(0x7f0000bed000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00007ea000)="2d2a0ae40d150c1df903613fe01228a2652e744629722b21a99d5b524577228c070244948044ba955ec70cf8928705be21c8fb019e57b2d7464c6d62cc235a3222d69705b98789d48c37e3e480d50e2b2d94719c36e45468721228cf106e842cee5cfbd869cedfabcb50454222daceb081b22b716a56fbbf310e53ca7573fc411befbd0e06a2d0d5b8d51896d99aa33776305236842c71a2efade6a6718c0f43e857e7604a967c4264c8bc1d1fe5a4e08d4034254b98551560e35b29ca73cdbc0587f34832adbf7fcabb918eb47818158d6f6e84eadf1733442c89e802d5e39688797c70", 0xe4, 0x0) keyctl$invalidate(0x15, r0) r1 = syz_open_dev$evdev(&(0x7f0000d15000-0x12)='/dev/input/event#\x00', 0x1, 0x400080800a2880) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f000096a000-0xc)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000022000-0x28)={@common='sit0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000cee000-0x10)={r3, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000599000-0x67)=""/103) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f000003c000-0x4)=0x9) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000064000)=[0x8, 0x100000000]) 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000993000-0xd)='/dev/binder#\x00', 0x0, 0x8000) accept4$ax25(r2, &(0x7f0000174000)={0x0, {""/7}, 0x0}, &(0x7f0000781000-0x4)=0x10, 0x80000) close(r2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000870000-0x4)=0x1) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:12 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc8000)='/dev/sequencer2\x00', 0x18040, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000119000-0x4)=0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000fca000)={0x71a5447f, 0x8000, 0x8, 0x1, 0x0}, &(0x7f000025e000)=0x10) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000fca000)={r3, 0x9, 0x1, 0x11a151a4}, &(0x7f0000216000)=0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000fc9000)=@req={0x28, &(0x7f0000fc9000)={@generic="b2c77250a8d0a0e5e72e8ed1efdb4ba5", @ifru_settings={0x2, 0x279, @te1=&(0x7f0000fca000-0x10)={0x1, 0x8950, 0x5, 0x200}}}}) socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000fcb000-0x20)=[@in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x20) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000030000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000e71000-0x10)={0x5007, 0x20a008, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x65, 0x0, &(0x7f00002ca000-0x65)="112ab9da711c5879c90e09bd005aead1535ea3fbe87c36f1bfa5fd579755498d2715f40210a9102eb6129bca7f9dd4044ea216e4b642e305236bcbff201887677e03b4b8565ba9e092709462a8ba1cc5cddb7c6ca01d339740c44343ee427e2b1369f6f670"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000c3d000-0x30)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, r2, 0x0}], 0x0, 0x0, &(0x7f0000b01000)=""}) [ 448.384117] binder: send failed reply for transaction 3161 to 26362:26364 [ 448.389411] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.611452] binder: undelivered TRANSACTION_ERROR: 29189 [ 448.617794] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.642882] binder: 26376 RLIMIT_NICE not set [ 448.648606] binder: 26372:26378 got transaction with invalid offsets ptr [ 448.648640] binder: 26372:26378 transaction failed 29201/-14, size 0-4096 line 2918 [ 448.653888] audit: type=1400 audit(1514364132.143:255): avc: denied { net_bind_service } for pid=26373 comm="syz-executor3" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000fae000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0xf8, 0x0, &(0x7f0000043000-0xf8)="30aa095980e62f396a3438ffe24d46d9b1966a9e53e3d11142aead36927d13d4e516287141dd21c8785623c7356028fc513240ff525b6dea9d3424ae1add1e2f37ad493680a44d2540c063e13f3b7d42990b0f5e76082f61ebdf9bc186618c87ceabf52a9653be6757cdd1800674cd86f134603d87dc01fe4f2d1be138b11d179e6a405738092e2e370a1cfc890cd8dd83b02c981f7d9db2030000000000000059e655ebe9b68d482ad519d189671a8795e1bfcc4527fc5bd85be395477b00bedc9f57c166ce9e251afd0da767c30c8631a84d319261304896900370529baf3de0cddefea481767bdf467fa5d0319b5a433bddc43db02df0"}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000dff000-0x4)=0x5be4, 0x4) 2017/12/27 08:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000d000-0x70)=[], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00005f3000)='/dev/input/mice\x00', 0x0, 0x2) getpeername$llc(r0, &(0x7f0000eeb000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00009da000)=0x10) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000bdc000-0x1000)=""/4096) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000121000)=0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000570000-0x4)=0x81, 0x4) r2 = syz_open_dev$sg(&(0x7f000084e000)='/dev/sg#\x00', 0x5, 0x46800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000eec000)=0x0, &(0x7f0000f5a000)=0x4) r3 = gettid() fcntl$lock(r1, 0x7, &(0x7f0000c7c000)={0x2, 0x4, 0x7, 0xff, r3}) getsockname$packet(r2, &(0x7f000006a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000011000-0x4)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000eba000)={@loopback={0x0, 0x1}, r4}, 0x14) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000b16000-0xd7)=""/215, &(0x7f0000390000-0x4)=0xd7) 2017/12/27 08:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) socketpair(0x0, 0x7, 0x8, &(0x7f0000658000)={0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000bc7000)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000a5e000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f000051f000)={0x2, r0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c99000-0xc)='/dev/rfkill\x00', 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00003de000)={0x0, 0xa, &(0x7f0000314000)=[@generic={0x9, 0x353, 0xa2, 0xffffffffffffffff}, @generic={0x80, 0x3ff, 0x4, 0xffffffff}, @map={0x4b, 0x32e, 0x10000, r1}, @generic={0x1ff8, 0x200000000000000, 0x9, 0x2}, @generic={0x1, 0x4, 0x1, 0xf6}, @generic={0x100000001, 0x0, 0x9, 0x9}, @map={0x3, 0x10000, 0xfce, r2}, @map={0x0, 0x3, 0xffff, r3}, @map={0x5, 0x1, 0x7, r4}, @map={0x5, 0x10000, 0x8, r5}], &(0x7f00002ce000-0x7)='vmnet0\x00', 0x4, 0x1000, &(0x7f0000730000-0x1000)=""/4096, 0x2140, 0x1}, 0x30) r6 = epoll_create(0x73a1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f000067f000-0xc)={0x0, 0x0}) ioctl$TIOCTTYGSTRUCT(r6, 0x541a, &(0x7f0000ac3000)=""/0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000951000-0x8)={0x0, 0x0}) [ 448.679235] binder_alloc: binder_alloc_mmap_handler: 26372 20000000-20002000 already mapped failed -16 [ 448.681438] binder: BINDER_SET_CONTEXT_MGR already set [ 448.681448] binder: 26372:26378 ioctl 40046207 0 returned -16 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f000025e000)={0x8, 0x0, [{0x80000001, 0x4, 0x9f14, 0x5, 0x2, 0x0}, {0x80000019, 0x2, 0x6, 0x6, 0x6, 0x0}, {0x0, 0xd1da, 0x100000000, 0x3, 0x1, 0x0}, {0x80000001, 0x0, 0x8001, 0x1, 0x1, 0x0}, {0xc0000003, 0x2, 0x9, 0x8, 0x8, 0x0}, {0x8000000f, 0x0, 0x1f, 0xdd8d, 0xffff, 0x0}, {0xb, 0x316c, 0x0, 0x80000001, 0x401, 0x0}, {0x8000000f, 0x0, 0x3ff, 0x1168, 0x0, 0x0}]}) 2017/12/27 08:42:12 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000fc9000-0x8)={0x0, 0x0}) prctl$setptracer(0x59616d61, r1) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000b65000)=0x0, &(0x7f0000fc8000)=0x4) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000aac000-0x5c)={{0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, {0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffc00}, 0x9, [0x3, 0x6, 0x2, 0x1, 0x0, 0x401, 0x8000, 0x6]}, 0x5c) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000d20000-0xca)=""/202) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000fc9000)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000fc9000)='/dev/usbmon#\x00', 0x5, 0x42) linkat(r3, &(0x7f0000c3f000-0x8)='./file0\x00', r4, &(0x7f00003f6000-0x8)='./file0\x00', 0x400) [ 448.681558] binder_alloc: 26372: binder_alloc_buf, no vma [ 448.681583] binder: 26372:26387 transaction failed 29189/-3, size 0-4096 line 2890 [ 448.695312] binder: 26374:26389 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 448.700060] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000d000-0x70)=[], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 448.700228] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.720527] binder: 26374:26389 got transaction to invalid handle [ 448.720550] binder: 26374:26389 transaction failed 29201/-22, size 0-0 line 2775 [ 448.726743] binder: 26375:26391 got new transaction with bad transaction stack, transaction 3171 has target 26375:0 [ 448.726785] binder: 26375:26391 transaction failed 29201/-71, size 0-0 line 2802 [ 448.733268] binder: 26393:26394 got transaction with invalid offsets ptr [ 448.733302] binder: 26393:26394 transaction failed 29201/-14, size 0-4096 line 2918 [ 448.746685] binder: release 26375:26391 transaction 3171 out, still active [ 448.746691] binder: undelivered TRANSACTION_COMPLETE [ 448.746699] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.746716] binder: send failed reply for transaction 3171, target dead [ 448.759862] binder: BINDER_SET_CONTEXT_MGR already set [ 448.759871] binder: 26374:26395 ioctl 40046207 0 returned -16 [ 448.761063] binder: 26389 RLIMIT_NICE not set [ 448.774935] binder_alloc: 26393: binder_alloc_buf, no vma [ 448.774960] binder: 26393:26397 transaction failed 29189/-3, size 0-4096 line 2890 [ 448.778202] binder_alloc: 26374: binder_alloc_buf, no vma [ 448.778225] binder: 26374:26395 transaction failed 29189/-3, size 0-0 line 2890 [ 448.782909] binder: 26374:26400 BC_FREE_BUFFER u000000002000c000 no match [ 448.814263] binder: 26396:26410 got new transaction with bad transaction stack, transaction 3179 has target 26396:0 [ 448.814280] binder: 26396:26410 transaction failed 29201/-71, size 0-0 line 2802 [ 448.823144] binder: 26408:26411 got transaction with invalid offsets ptr [ 448.823193] binder: 26408:26411 transaction failed 29201/-14, size 0-4096 line 2918 [ 448.843693] binder: release 26396:26410 transaction 3179 out, still active [ 448.843700] binder: undelivered TRANSACTION_COMPLETE [ 448.843710] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.843731] binder: send failed reply for transaction 3179, target dead [ 448.845509] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.853456] binder: 26408:26415 got transaction with invalid offsets ptr [ 448.853496] binder: 26408:26415 transaction failed 29201/-14, size 0-4096 line 2918 [ 448.867230] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.922635] binder: 26417:26422 got new transaction with bad transaction stack, transaction 3186 has target 26417:0 [ 448.922649] binder: 26417:26422 transaction failed 29201/-71, size 0-0 line 2802 [ 448.945617] binder: release 26417:26422 transaction 3186 out, still active [ 448.945623] binder: undelivered TRANSACTION_COMPLETE [ 448.945631] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.945648] binder: send failed reply for transaction 3186, target dead [ 449.133269] binder: 26376 RLIMIT_NICE not set 2017/12/27 08:42:12 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) ioctl$KDSETLED(r0, 0x4b32, 0xffff) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x5463, &(0x7f00006c6000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f000063b000-0x3)=0x1, 0x4) msync(&(0x7f0000ba9000/0x1000)=nil, 0x1000, 0xffffffffffffffff) 2017/12/27 08:42:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x7, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a81000)='/dev/sequencer2\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000af9000-0xc)={0x0, 0x94, &(0x7f0000218000)=[@in6={0xa, 0x3, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, @in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x8}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7fff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4b8}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00008d3000)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000c56000)=@assoc_value={r2, 0x10000}, 0x8) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) syz_open_dev$usbmon(&(0x7f00006b9000-0xd)='/dev/usbmon#\x00', 0x8, 0x40000) 2017/12/27 08:42:12 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000fc9000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000b16000)={0x3, 0xaf}) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000fc9000)={0x2, 0x0, &(0x7f000049a000/0x1000)=nil}) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x1, {{0xa, 0x3, 0x7, @loopback={0x0, 0x1}, 0x101}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00001c4000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_bt(r3, 0x8906, &(0x7f000040c000)="b5acee383fb941454b38607e336251b1d992b037322ec2bbac99e422cb0db34091a555760157fe4be7fd553a7d863f543e45720fe7aebc16a931bbdb3f540615d74fb28f8eb2a3db1af13fb743b1c8aa48a0c9a7a5153cdb96088b6b") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80042407, &(0x7f0000949000)=0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 449.142225] binder: release 26374:26376 transaction 3169 in, still active [ 449.149242] binder: send failed reply for transaction 3169 to 26374:26389 [ 449.156345] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.161813] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffefffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000072000-0xa)='/dev/cuse\x00', 0x381000, 0x0) sendmsg$kcm(r3, &(0x7f0000c1b000-0x1c)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x46, @loopback={0x0, 0x1}, 0xbd2}, 0x1c, &(0x7f0000d95000)=[{&(0x7f000093d000)="fa45f4113a12f37513c1efef60530a7db5b9eacf1cfad1e6", 0x18}, {&(0x7f0000db7000)="4f52df59be5f67b03c5f0911ea8bcc0d5831d5405aa1191309c64096a1baa0c9a14fe2ea3773d35d3ee58ba1b0f7f304d73326c3e7391cd9100a4e74e76b15ed0fe461be18248d126d", 0x49}, {&(0x7f0000287000)="e76658c8e4fc0e8dab26d0adf5b22d76a531a9ee5fca025a7cdf24e72266b0c442aa72c77d53d54d8f09a7ebb9e581b06fc73c2c6266f6265e43a779941a1dca20a142d34f2c4d71f99254c1c8c3116fa1bf50f0d782d7bcc7a979d68db699a9a93d947f4fae1fccbddcfa4359355764eae6dbcf775b04de456f3471037d02e277702fa8ef8cd7a885230e94e2bbcf5174adae67ea221d55743b29c10a0b73aaad8c44215a7187c131b113c905583c1440cbb9159c7d04b0ba2c950651e5b3a7d38307ae4d45bb6cee45af51646a56417e343601f63bbe61f9f7a08ed76144eaa0be4abefc7dc044e10470ec4b", 0xed}, {&(0x7f0000e2a000+0xb10)="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", 0x1000}, {&(0x7f0000871000-0x4a)="424ecf6d4f2cf24c94ef21d4ecbde9daa323897d0c9a1d7c225a0f771c4279d2a3660cd2ce0e57a7bc4ae827426bf666c0ad0d2abc7690920437e2359c1bf17d314e72f9b15191ba0b5c", 0x4a}, {&(0x7f0000e6c000-0xe0)="a6eab31f2d79b883bd52de16dae0b65036d55f9082a6a33c4eae137887875fd78ab14fda01c154395bff32d179053520ae9656be14d7975a9c8207a77fd728aa48644b621bad7cc9bdcc8bc7ff3e7df456d6388b49c3d0d7fb430e368ab1cb83fbf4bb28ea2d5cf043dc620cfb7b1178ca76f56c06ac8bd5ce3ea27ff61c2959cf81165039c4ef78e9b227a16d1fd9ae8d918d61639e0d5c41851115a90a6ba32d5bdea83305fd02082e534f40a43923c3a1cdddb786f43da5a218ce0d4d06af5b8e1fb3c659660756d430c44f25dbae3ab7fbd7125c876a495f4fa62c840dad", 0xe0}, {&(0x7f00009a3000)="8246fe95e49a656977b902d81dd81b8df4643e298c5f7437faa6c7bdf9bef31cade2f96bfe13fd5f2a3d02583d407e0344923e1236be547eab347ab2dc7ba95fb9582088906d704945e5660186be703dba5c3dc832357161e33da7ef169b45be06db7df09c30642fa904d4ba7270dc94a570d49c37dd07700417be2728a8135b8a63a3c161ae87d1ba7d4eff9aac85a56b1148328c848a50bb3be221c6e3c2f1867f17d5abcfed8037ff6ac4b0ec6557e6bc8dd16f1477ae19559371d29e01d36b4139a0e92ccd9b430a10cd41", 0xcd}, {&(0x7f00000e7000-0x48)="cb21e36047ffa6aa9b79dce9ceca8425c9807b63f3e8ba3801a8b33965d5a692a2742a224ebb4185a71516b4db05fbef3349dcae0036632fa551f690d5b94b7a4c0d69760d791791", 0x48}], 0x8, &(0x7f0000679000-0x220)=[{0x58, 0x3a, 0x101, "eae66842d11b40ead1e73acd608cd649da9c8066ed4e895201cd514e9b8685ab89010776a308b0d2d866af0692732c423500d0be9420fdce5062df158c19e8c8ecd7791137cbbc6ce2"}, {0xcc, 0x11f, 0x9, "c03bec1db8aa4fb797d911b63ae935e6a8452f9eda9b6dd9dec7117a030689c0716ad139e0dbba594b22021f7d2aa6152a7f63b527cb9ae121a48818996e52f4a26f2bccfc1c62d1aa668447d673de981f3fffcbf52beef054a4242d2ddedc5877702191e5e3965a9f53646c00727f1c428aba17f9edfe544e9044ca159742286acf1734777a53e8613d75445f86b96bd9918b83fa2a96d2bb54a89f5caa1a469cda3221d67b0e939523b21c81f03d76c5ddcb144af1a251eebf1602df90"}, {0x14, 0x0, 0xf1, "c9c63cf5b6d7"}, {0x18, 0x10a, 0x6, "47060c87a3153b501fb1df"}, {0x2c, 0xff, 0x8, "8072064b08a7d285d7dce59ab9737d35debacc0df012a82bc859a32e285775f8"}, {0xa4, 0x107, 0x5, "620a0910b762a124ab327bcb0f46b55d4ad928361c9043b074686dfd185ae8d4269ac035c9139e4fe1595019fe3ad62604603f52f540c0f5a1df570b609754751077ec344d28e6f65d4498166d3e99787bd05a019cd7b1b2b72e98935a92e874a8d51cd9b729103cedf2b71cac4e6a045f44e411db61b3df8d465b7dfe40e9d3784dbe2a9add5e712d22fc76ea5ecc458d8df71b87758b00"}], 0x220, 0x24040010}, 0x0) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000576000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x40000000000006, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}, @sadb_address={0x3, 0x20000000000005, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 449.199495] binder: 26435 RLIMIT_NICE not set [ 449.207376] binder: 26436 RLIMIT_NICE not set [ 449.217833] binder: release 26428:26439 transaction 3190 out, still active [ 449.217840] binder: undelivered TRANSACTION_COMPLETE [ 449.217865] binder: send failed reply for transaction 3190, target dead [ 449.226487] binder_alloc: 26428: binder_alloc_buf, no vma 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00007a7000-0x12)={0x7, [0x2, 0xfb4f, 0x1, 0x80, 0x0, 0x101, 0x1]}, &(0x7f00006a5000)=0x12) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, &(0x7f0000d6b000-0x42)="5af40510db12ec33d74bbf1815ce357af12bc0f15f9e40255d8972832bc357d80853c358341cb355e7105aa8e9294f38497bbac05b731615f881ac213d4d45b69fc1", 0x42, 0x10, &(0x7f0000240000)={0x1a, 0x1b, 0x6, 0xffffffff, 0x0, 0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) socketpair(0x13, 0x0, 0x2, &(0x7f00002e2000)={0x0, 0x0}) getsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000eb9000)=0x0, &(0x7f00000d0000-0x4)=0x4) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 449.226518] binder: 26428:26442 transaction failed 29189/-3, size 0-0 line 2890 [ 449.246683] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:12 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = syz_open_dev$loop(&(0x7f00003c5000)='/dev/loop#\x00', 0xfff, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000fc8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000110000+0xaca)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 449.264873] binder_alloc: 26429: binder_alloc_buf, no vma [ 449.264901] binder: 26429:26451 transaction failed 29189/-3, size 0-0 line 2890 [ 449.274680] binder: 26450:26452 got transaction with invalid offsets ptr 2017/12/27 08:42:12 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x1, &(0x7f0000000000)="", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$TCSETA(r0, 0x5402, &(0x7f0000001000-0x14)={0x3, 0x8, 0x100, 0x0, 0x2, 0xf2, 0x3, 0x8, 0x81, 0x6}) [ 449.274719] binder: 26450:26452 transaction failed 29201/-14, size 0-4096 line 2918 [ 449.285572] binder_alloc: 26429: binder_alloc_buf, no vma [ 449.285602] binder: 26429:26448 transaction failed 29189/-3, size 0-0 line 2890 [ 449.299752] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.331529] binder: 26451 RLIMIT_NICE not set [ 449.331532] binder: BINDER_SET_CONTEXT_MGR already set [ 449.331541] binder: 26429:26448 ioctl 40046207 0 returned -16 [ 449.359235] binder_alloc: binder_alloc_mmap_handler: 26429 2000c000-2000e000 already mapped failed -16 [ 449.370051] binder_alloc: 26429: binder_alloc_buf, no vma [ 449.370082] binder: 26429:26470 transaction failed 29189/-3, size 0-0 line 2890 [ 449.389412] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.389589] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.389692] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.390620] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 449.393110] binder: release 26467:26468 transaction 3203 out, still active [ 449.393115] binder: undelivered TRANSACTION_COMPLETE [ 449.393136] binder: send failed reply for transaction 3203, target dead [ 449.445079] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 449.496938] binder: 26435 RLIMIT_NICE not set [ 449.500725] binder: release 26431:26435 transaction 3194 in, still active [ 449.500733] binder: send failed reply for transaction 3194 to 26431:26444 [ 449.500751] binder: undelivered TRANSACTION_COMPLETE [ 449.500757] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.500779] binder: send failed reply for transaction 3195 to 26431:26444 [ 449.501639] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f000080c000-0x8)={0x1, &(0x7f0000ad6000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}]}) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) getpeername(r0, &(0x7f0000dfc000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000144000)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00001b3000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4, r2}) 2017/12/27 08:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b18000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000c3000-0x4)=0x0) 2017/12/27 08:42:13 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000fc8000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000fc9000-0x14)={0x2, 0x3ff, 0x0, 0x6, 0x6}) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000895000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00008fa000-0x4)=0x18) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r1, &(0x7f0000fc9000)={0x1f, 0x7fff, {0x6, 0xff, 0xffffffff00000000, 0x3, 0x0, 0x3}, 0x7, 0xfffffffffffffffa}, 0xe) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000040e000-0xbd)={r2, 0xb5, "2fcb67b9d22129c0bbcf1eb5a4cabdaddac31b9a6cd618fc781b8a8d0ace757aa57ae639144bfd9963e0883c8b2d4fe1acbefaa5502c73190fcf1b9026a9eeca5cf4faad1c9c4ed9d95b123ed55185017cdd91bc9b7a0b29aa256e9dd10bd2b0e57f7fe30863c0cbc5293ea0582120ac8ac82fdde2ccff1b286210146c8e94634d8580dccf284a3ade0471a61d4206e37686d606883f8b989f51ae6fe103d2327d3218d1121afb1b342e7860dd512d14359709fbf0"}, &(0x7f00005be000-0x4)=0xbd) fgetxattr(r0, &(0x7f0000fc8000)=@known='system.posix_acl_default\x00', &(0x7f00008b2000)=""/64, 0x40) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) ioctl$int_in(r0, 0x0, &(0x7f0000293000-0x8)=0xc419) r4 = add_key$keyring(&(0x7f000027e000-0x8)='keyring\x00', &(0x7f0000b71000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x5) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00003d8000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000fc8000)=0x8) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000a51000-0xe)='/selinux/user\x00', 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00005f8000-0x4)=0x8f5e, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000416000/0x3000)=nil, 0x3000, 0x8, 0x10010, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000d97000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:13 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a99000)='/dev/rtc\x00', 0x8000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000e4000+0x2c4)=0x0) getpriority(0x1, r1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000dd000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x7}) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 449.501649] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:13 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x3, 0x6, 0xfffffffffffffc61, &(0x7f0000e41000-0x8)={0x0, 0x0}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000da7000)=""/17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000b12000)=""/4096, &(0x7f0000000000)=0x1000) seccomp(0x0, 0x0, &(0x7f0000542000-0x8)={0x2, &(0x7f0000b9b000-0x10)=[{0xfffffffffffff001, 0x2, 0x800, 0x5}, {0x7fffffff, 0x1000, 0x5e, 0x2}]}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000b92000-0xb8)={0x0, 0xffffffff80000000, 0x2, 0x4, 0xf6, 0x2, 0x80, 0x4, {0x0, @in6={{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x8, 0x3228, 0x6, 0x1}}, &(0x7f00009c4000-0x4)=0xb8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000cd4000)={r2, @in6={{0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000000, 0x3f}, 0x98) 2017/12/27 08:42:13 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 449.592048] binder: 26485:26487 got transaction with invalid offsets ptr [ 449.595952] binder: 26491 RLIMIT_NICE not set [ 449.602601] binder: 26488 RLIMIT_NICE not set [ 449.611743] binder: 26485:26487 transaction failed 29201/-14, size 0-4096 line 2918 2017/12/27 08:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 449.630549] binder: 26491 RLIMIT_NICE not set 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = creat(&(0x7f000016c000)='./file0\x00', 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000cdc000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9, 0x1, 0x3, 0x0, 0x1, 0x5, 0xe515}, &(0x7f0000e8c000)=0x20) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000296000-0x4)=0x5, 0x4) bind$nfc_llcp(r2, &(0x7f00002cb000)={0x27, 0xff, 0x9, 0x2, 0x1, 0x7fffffff, "fd1e8a71bdb9bb049aa2c80e4882137fa19fe47cca18cf02fb2720795b69e1c22ce14b5e5c09746d8c2aca7cf558394f2ed86e66e3510784113b90c8d8d918", 0xfffffffffffffffb}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f000031c000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) [ 449.630647] binder: 26488 RLIMIT_NICE not set [ 449.643955] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 449.643966] binder: 26482:26500 ioctl 40046207 0 returned -16 [ 449.644078] binder: release 26486:26488 transaction 3210 in, still active [ 449.644086] binder: send failed reply for transaction 3210 to 26486:26502 [ 449.644106] binder: undelivered TRANSACTION_COMPLETE [ 449.644114] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.644134] binder: send failed reply for transaction 3211 to 26486:26488 [ 449.644283] binder: undelivered TRANSACTION_COMPLETE [ 449.644290] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.653951] binder: 26491 RLIMIT_NICE not set [ 449.656777] binder_alloc: 26482: binder_alloc_buf, no vma [ 449.656804] binder: 26482:26500 transaction failed 29189/-3, size 0-0 line 2890 [ 449.661391] binder_alloc: 26482: binder_alloc_buf, no vma [ 449.661417] binder: 26482:26500 transaction failed 29189/-3, size 0-0 line 2890 [ 449.677507] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.677585] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.677640] binder: release 26482:26491 transaction 3209 in, still active [ 449.677648] binder: send failed reply for transaction 3209 to 26482:26500 [ 449.677665] binder: undelivered TRANSACTION_COMPLETE [ 449.677673] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.677690] binder: send failed reply for transaction 3212 to 26482:26491 [ 449.677826] binder: undelivered TRANSACTION_COMPLETE [ 449.677833] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.688709] binder: 26510 RLIMIT_NICE not set [ 449.698657] binder: BINDER_SET_CONTEXT_MGR already set [ 449.698668] binder: 26485:26504 ioctl 40046207 0 returned -16 [ 449.700658] binder_alloc: 26485: binder_alloc_buf, no vma [ 449.700684] binder: 26485:26513 transaction failed 29189/-3, size 0-4096 line 2890 [ 449.725300] binder: 26510 RLIMIT_NICE not set [ 449.725386] binder: 26519 RLIMIT_NICE not set [ 449.734244] binder: release 26509:26510 transaction 3217 in, still active [ 449.734252] binder: send failed reply for transaction 3217 to 26509:26522 [ 449.734270] binder: undelivered TRANSACTION_COMPLETE [ 449.734278] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.734297] binder: send failed reply for transaction 3219 to 26509:26510 [ 449.734442] binder: undelivered TRANSACTION_COMPLETE [ 449.734449] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.756560] binder: 26516:26526 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 449.757123] binder: 26519 RLIMIT_NICE not set [ 449.771916] binder: BINDER_SET_CONTEXT_MGR already set [ 449.771926] binder: 26516:26526 ioctl 40046207 0 returned -16 [ 449.773093] binder: 26519 RLIMIT_NICE not set [ 449.776104] binder_alloc: 26516: binder_alloc_buf, no vma [ 449.776125] binder: 26516:26526 transaction failed 29189/-3, size 0-0 line 2890 [ 449.779382] binder: 26516:26527 BC_FREE_BUFFER u000000002000c000 no match [ 449.800224] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.800310] binder: release 26516:26519 transaction 3220 in, still active [ 449.800318] binder: send failed reply for transaction 3220 to 26516:26526 [ 449.800333] binder: undelivered TRANSACTION_COMPLETE [ 449.800340] binder: undelivered TRANSACTION_ERROR: 29189 [ 449.800358] binder: send failed reply for transaction 3221 to 26516:26519 [ 449.803829] binder: undelivered TRANSACTION_COMPLETE [ 449.803836] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.052899] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000aef000)={0x4, r0, 0x0}) accept4$inet6(r3, &(0x7f000078f000-0x1c)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000ebb000-0x4)=0x1c, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f00003e0000-0x4)=0x0) 2017/12/27 08:42:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x20000000}], 0x39, 0x0, &(0x7f000003f000)="e7bc6184ca5819cb60fb4f555b47d3964b4d8627559d0f5862596d3f8f9633ee750bd5dd05f6247f9017212fb59e93e13dbb0151958068dcaf"}) 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0xa, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000b25000-0x10)={0x3, 0x100000001, 0x4, 0x7f}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000378000-0x4)=0x85) read(r1, &(0x7f000006b000)=""/24, 0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000bea000)={0x0, 0xcc, "3535ef5abffc633d4fb9b1f24afa6911af7812f5938d91dfcd8b3d325399227f7a98daabad31d0bdb1a814dfaf6e411a5f349bf6a64a0a90f38d3020c5654f69f30f06ac07b65eddc2c6a012471af2be5e2eddd8b82c4ddec39290563e84b553071e4e1cc3b0abf64408a4c220d1f2368087be7a9495afbacdfb2af52e2a64ab658a7f9440bdf7a64de607e050286d4183f5fc355ab5575da0610245b5448bceb1c18fbe7170a1022a6e9ed35f5a9256162b05e4aed492444a1566e6dd3e94deb3c2a71bab8bdb28483c12bc"}, &(0x7f00008d3000)=0xd4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f000082a000-0x14)={r2, 0x3, 0x1, 0x7fff, 0x401, 0x8}, 0x14) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f00005c5000-0x8)=0x0, 0x3f, 0x4) 2017/12/27 08:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = syz_open_dev$tun(&(0x7f000054d000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r2 = socket$inet(0x2, 0x8000000000000003, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f000083e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00000cd000-0x4)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000f39000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, r3}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000264000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x1, [@empty=0x0]}, 0x14) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000689000-0x4)=0x0, &(0x7f00006bc000-0x4)=0x4) rt_sigreturn() 2017/12/27 08:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:13 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000fc8000)='./file0\x00', &(0x7f0000fc9000-0x8)={0x400, 0x67a1}) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 450.062185] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00004a5000)='/dev/input/event#\x00', 0x1, 0x10800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00009af000)=""/84) r2 = syz_open_dev$mice(&(0x7f0000236000)='/dev/input/mice\x00', 0x0, 0x105002) ioctl$TCSETS(r2, 0x5402, &(0x7f000065b000-0x24)={0x8000, 0x4, 0x1, 0x1, 0x8, 0x5, 0x73df, 0x3, 0x6, 0x3, 0x5, 0x200}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000b1a000-0x71)=""/113) 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 450.085977] binder: 26529:26531 got transaction with invalid offsets ptr [ 450.099657] binder: 26539 RLIMIT_NICE not set [ 450.108053] binder: 26544 RLIMIT_NICE not set [ 450.121908] binder: 26529:26531 transaction failed 29201/-14, size 0-4096 line 2918 2017/12/27 08:42:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000e8b000-0x1c)={0x5, 0x6, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x0}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00008e3000-0x8)={0x0, 0x8}, &(0x7f00000ed000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000f6c000)={0x400, 0x6, 0x1, 0x101, r2}, &(0x7f0000dfe000-0x4)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00009af000-0x20)={r0, &(0x7f00004f4000)="", &(0x7f0000660000)="", 0x0}, 0x20) 2017/12/27 08:42:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 450.137521] binder: 26539 RLIMIT_NICE not set [ 450.149567] binder: BINDER_SET_CONTEXT_MGR already set [ 450.149577] binder: 26530:26550 ioctl 40046207 0 returned -16 [ 450.149664] binder: 26544 RLIMIT_NICE not set 2017/12/27 08:42:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b12000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc010643a, &(0x7f0000078000)={0x3e, 0x9, 0x19}) 2017/12/27 08:42:13 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = syz_open_dev$mice(&(0x7f00003f6000-0xa)='/dev/input/mice\x00', 0x0, 0x800) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000fc9000-0x8)='./file0\x00', 0x6100, 0x200, &(0x7f0000fc8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r2, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 450.155174] binder: 26539 RLIMIT_NICE not set [ 450.163691] binder_alloc: 26530: binder_alloc_buf, no vma [ 450.163717] binder: 26530:26550 transaction failed 29189/-3, size 0-0 line 2890 [ 450.163814] binder: BINDER_SET_CONTEXT_MGR already set [ 450.163823] binder: 26529:26548 ioctl 40046207 0 returned -16 [ 450.163883] binder_alloc: 26529: binder_alloc_buf, no vma [ 450.163904] binder: 26529:26555 transaction failed 29189/-3, size 0-4096 line 2890 [ 450.165057] binder: release 26535:26544 transaction 3228 in, still active [ 450.165066] binder: send failed reply for transaction 3228 to 26535:26552 [ 450.165084] binder: undelivered TRANSACTION_COMPLETE [ 450.165091] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.165110] binder: send failed reply for transaction 3230 to 26535:26544 [ 450.165261] binder: undelivered TRANSACTION_COMPLETE [ 450.165269] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.175418] binder_alloc: 26530: binder_alloc_buf, no vma [ 450.175466] binder: 26530:26550 transaction failed 29189/-3, size 0-0 line 2890 [ 450.201812] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.201892] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.201948] binder: release 26530:26539 transaction 3227 in, still active [ 450.201956] binder: send failed reply for transaction 3227 to 26530:26550 [ 450.201974] binder: undelivered TRANSACTION_COMPLETE [ 450.201982] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.202004] binder: send failed reply for transaction 3229 to 26530:26539 [ 450.202173] binder: undelivered TRANSACTION_COMPLETE [ 450.202181] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.202300] binder: 26564 RLIMIT_NICE not set [ 450.239219] binder: 26564 RLIMIT_NICE not set [ 450.245368] binder: release 26560:26564 transaction 3235 in, still active [ 450.245376] binder: send failed reply for transaction 3235 to 26560:26573 [ 450.245393] binder: undelivered TRANSACTION_COMPLETE [ 450.245400] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.245418] binder: send failed reply for transaction 3236 to 26560:26564 [ 450.246342] binder: undelivered TRANSACTION_COMPLETE [ 450.246350] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.258634] binder: 26571 RLIMIT_NICE not set [ 450.281718] binder: 26571 RLIMIT_NICE not set [ 450.297915] binder: BINDER_SET_CONTEXT_MGR already set [ 450.297929] binder: 26568:26575 ioctl 40046207 0 returned -16 [ 450.299145] binder: 26571 RLIMIT_NICE not set [ 450.302217] binder_alloc: 26568: binder_alloc_buf, no vma [ 450.302240] binder: 26568:26575 transaction failed 29189/-3, size 0-0 line 2890 [ 450.309628] binder: 26568:26576 BC_FREE_BUFFER u000000002000c000 no match [ 450.310945] binder_alloc: 26568: binder_alloc_buf, no vma [ 450.310967] binder: 26568:26575 transaction failed 29189/-3, size 0-0 line 2890 [ 450.331107] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.331183] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.331237] binder: release 26568:26571 transaction 3238 in, still active [ 450.331259] binder: send failed reply for transaction 3238 to 26568:26575 [ 450.331275] binder: undelivered TRANSACTION_COMPLETE [ 450.331282] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.331298] binder: send failed reply for transaction 3239 to 26568:26571 [ 450.334328] binder: undelivered TRANSACTION_COMPLETE [ 450.334336] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.541844] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000c23000)='id_legacy\x00', &(0x7f0000a3e000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000456000)="df955a7b32fa245332657d0f359dc15d476b2577aa91b7a163c1e6f4e24262024fff2109d2108d692304af387174d7045104868ac68aca0ba2f18519988b3b46a16e4f5a79c6c60b4090fe6c01e76b5475dc98c04fd088e10aa623c3faf6125fb8cd7ecffc97be66b0d5f269a1a966d12ac3aa3a620644679ca5ff25148e6c466ad59e0eafe897c392b3715775493d6918100dc3b7de6320263b1dadabb706f51955296d", 0xa4, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000293000)='user\x00', &(0x7f0000f4f000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000081e000)="ef38339c9b8f5c84abe181a775d5980f2d54679021fc186391648f3eb388a503503744fe32880c68d898b993f7a6ffb32902b4514cbdf83ff67d6dc177f06bb5750f22de3e4f9fb058d4d88f14d6010be4a4d9f0558144216657f7d11fbfb2e9", 0x60, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000452000-0x30)=[{&(0x7f000075a000-0x46)="d8f84add647f5f6a0bba33bec6c0d9bc6f6403258d1b9a0afd7c3e8c6597a577e853b348afac5c88bad061d25b1537a7b3e8bbeb5e04e165c4beda1c7f312a9dae61d3eac165", 0x46}, {&(0x7f0000f5c000)="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", 0xff}, {&(0x7f0000d25000-0xa7)="9aa615ac6afc23c912f37433befd68eaea5f2ac7674dd0289332552987dd8082cefa7a92c84f6b07dcd9151dccf6f0fc0b51a15d1b219ac56be9a441786773d116cf9e916924f578d1ba576ce8c875005cd649e5765e37360710308e79f467af078e9aee3cb486ba2f865a9c34cbd210a102cb97452299485b2db3d090058aa3d1e2248d24b4146e7c08dfffc56e39196bc3c6653bdfe982b446963de2b9d877c63c45eccabc86", 0xa7}, {&(0x7f0000e26000-0xed)="3c28561dc1ff0c5685ea8fbcf88858913ec8e72839592aacc000141372bff4974c43412a8b21add1cd422bc959f29eaba95f1612608f17afbce7b20c075e2ecd46474310344013cbfa7c23b053060b475f7c5e28a805a2fd18640f9c31af2296a61534a0e5847a2bca672e8445b13af497b9d74eed84b8e20158cea4d1bfbbc02c5468d68243293e25d725d83eab7032049da4e5c73dff61fc875f8346062373a3042132eab960f74e8e341783b9d83c915c123651417e847fbdfcc3da8cc71d0703cb0e95977f8202623b9fde2cd62e3c821cf43d967c735c8e79599f52c854185d3eb677570c03ef326e853f", 0xed}, {&(0x7f0000599000)="85893a189c3e489ad00a198b9ada1d877d5afec8786197d9c31b41c5013b80e3b6908f7714e73eb482a695aba1d20d5b0c94553b2d8dd3e5ef63febcbad9b2b503093d3a0d8976e6d1812112ebe829fbedafd0d2d6b6aec451db88996fb80f936784ca762dd3d46b", 0x68}, {&(0x7f0000021000)="1c28fdead485c80b53c526f99e5f5abb71ff7693a37befb6132c237b23cc460b9e63af92c78f92b7fd4bcd79614790b9c7d37098dc8986c7feb504f1c6d85f358b372c545e575724f536e6fd809ccaf2cf4a9ec84896235d1a18a0288bb778d5a47b47716119a8cc55a7512f180414a49d89d2c689275fceed0a3e14b4fbf9cc1f388e6e969ab19e0e21f962fde0cb2fc7e9730e5509c031f9680328dcac8e65c0135c3ecf6fb077d4754fab0199927f0189251618493b7dff1cc6601db77590d44c22e58227d59aad2f99e1357625b12c76de3d31227aef42fb4fedcf", 0xdd}], 0x6, r2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000eb5000)={r0, 0x18, &(0x7f00009b4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 2017/12/27 08:42:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0, 0x0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000)="", &(0x7f0000b88000)="13", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000eef000)={r1, &(0x7f0000642000)="", &(0x7f0000ad4000)=""/209}, 0x18) r2 = open(&(0x7f00005c8000)='./file0\x00', 0x8000, 0x80) futimesat(r2, &(0x7f000085c000-0x8)='./file0\x00', &(0x7f0000c61000-0x10)={{0x0, 0x7530}, {0x0, 0x0}}) r3 = open(&(0x7f000026c000-0x8)='./file0\x00', 0x153001, 0x44) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f000017b000)=0x0) 2017/12/27 08:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x44, 0x0, &(0x7f00008ce000-0x44)=[@transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x48, 0x20, &(0x7f0000024000-0x48)=[@fda={0x66646185, 0x2, 0x2, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000663000-0x1)=0x0, 0x1, 0x3, 0x20}], &(0x7f0000db5000)=[0x38, 0x0, 0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000705000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) getdents(r0, &(0x7f0000d71000-0xa2)=""/162, 0xa2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) fcntl$getownex(r0, 0x10, &(0x7f00001b8000)={0x0, 0x0}) sched_setparam(r1, &(0x7f000082a000-0x4)=0x0) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:14 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = creat(&(0x7f0000468000)='./file0\x00', 0x80) pipe(&(0x7f0000f0e000)={0x0, 0x0}) r3 = fcntl$dupfd(r0, 0x406, r0) pipe(&(0x7f00004d0000-0x8)={0x0, 0x0}) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000072000-0x5b)="e5b29b4483d07d678cfac2fdac3fa34648474a624db25ebf7b5b102cb4e27b974ef01eb86ed0cbcbdba83a5b0b30ea6ebe513bc105e49519b51c207769785f4db80095954f84135b1a3b3fd5d250eb5f2f470f1d1ca3bf811db020", 0x5b) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00007b5000-0x11)='/selinux/enforce\x00', 0x20200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fc9000-0x30)={0x0, 0x9, &(0x7f0000d1f000-0x48)=[@generic={0x80, 0x10000, 0x5, 0xffffffffffffff7f}, @generic={0xffffffff, 0x9, 0x4000000000000000, 0x9}, @map={0x1f, 0x4, 0x7, r1}, @map={0x4f90, 0x0, 0x3, r2}, @map={0x4c9d, 0x80, 0xb9a5, r3}, @generic={0xfffffffffffffffb, 0x7, 0x63e, 0xcd7}, @map={0x9224161, 0xfff, 0x0, r4}, @generic={0x2, 0x0, 0xbcc, 0x1}, @generic={0x1, 0x16cdf2a7, 0x2e546b87, 0x20}], &(0x7f0000fc8000)="62646576d270707031656d3063707573657473656c696e7578656d305e00", 0x200, 0x4, &(0x7f0000fc8000)=""/4, 0x4, 0x1}, 0x30) r5 = socket$inet6(0xa, 0x802, 0xdf0) sendmsg$inet_sctp(r5, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r5, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000aaf000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000986000)=0xe8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f000099e000)={&(0x7f00002cd000/0x2000)=nil, 0x8, 0x1, 0xa1, &(0x7f0000dc1000/0x1000)=nil, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 450.550269] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:14 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x1f, &(0x7f0000002000)={0xffffffffffffffff, {0x2}, 0x88000001, 0x6}, &(0x7f0000000000)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000000000)={0x0}) r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000000)="", 0x0, 0x2000c001, &(0x7f0000002000-0xa)=@file={0x0, './file0\x00'}, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000d6d000-0x7)='ns/uts\x00') setns(r1, 0x4000000) 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000ca1000)='/selinux/create\x00', 0x2, 0x0) prctl$setendian(0x14, 0x2) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000234000-0x4)=0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000260000-0x67)=""/103) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000908000)={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xc, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='ipddp0\x00'}) [ 450.597993] binder: 26582:26593 got transaction to invalid handle [ 450.599619] binder: 26587 RLIMIT_NICE not set [ 450.608999] binder: 26582:26593 transaction failed 29201/-22, size 72-32 line 2775 [ 450.620964] binder: 26588:26592 got transaction with invalid offsets ptr [ 450.620997] binder: 26588:26592 transaction failed 29201/-14, size 0-4096 line 2918 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) [ 450.632445] binder: 26587 RLIMIT_NICE not set [ 450.643046] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.646919] binder: release 26584:26587 transaction 3247 in, still active 2017/12/27 08:42:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000136000)='/dev/input/event#\x00', 0x40000000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000137000-0x11)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000c64000)={0x8000, 0xffff, 0x400, 0x6, 0x1}, 0x14) 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 450.646928] binder: send failed reply for transaction 3247 to 26584:26597 [ 450.646947] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:14 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fc8000)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f000045b000-0x8)={0x0, 0x1}, &(0x7f00000bc000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000fca000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000fc9000-0xc)={r3, 0xa0, &(0x7f00003ca000)=[@in6={0xa, 0x1, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}, @in6={0xa, 0x2, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffff}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x1, @loopback={0x0, 0x1}, 0x800}]}, &(0x7f0000fc9000-0x4)=0xc) [ 450.646955] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.646975] binder: send failed reply for transaction 3248 to 26584:26587 [ 450.647172] binder: undelivered TRANSACTION_COMPLETE [ 450.647180] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.665064] binder: 26588:26600 got transaction with invalid offsets ptr [ 450.665100] binder: 26588:26600 transaction failed 29201/-14, size 0-4096 line 2918 [ 450.676782] binder: 26608 RLIMIT_NICE not set [ 450.682399] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.704403] binder: 26606:26617 transaction failed 29189/-22, size 0-0 line 2775 [ 450.706156] binder: 26582:26610 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 450.729749] binder: BINDER_SET_CONTEXT_MGR already set [ 450.729760] binder: 26582:26615 ioctl 40046207 0 returned -16 [ 450.729922] binder: 26582:26610 got transaction to invalid handle [ 450.729931] binder: 26582:26610 transaction failed 29201/-22, size 72-32 line 2775 [ 450.733117] binder_alloc: 26582: binder_alloc_buf, no vma [ 450.733143] binder: 26582:26610 transaction failed 29189/-3, size 0-0 line 2890 [ 450.733736] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.759143] binder_alloc: 26613: binder_alloc_buf, no vma [ 450.759171] binder: 26613:26619 transaction failed 29189/-3, size 0-4096 line 2890 [ 450.780183] binder_alloc: binder_alloc_mmap_handler: 26613 20000000-20002000 already mapped failed -16 [ 450.781379] binder: BINDER_SET_CONTEXT_MGR already set [ 450.781388] binder: 26613:26619 ioctl 40046207 0 returned -16 [ 450.781424] binder_alloc: 26613: binder_alloc_buf, no vma [ 450.781450] binder: 26613:26621 transaction failed 29189/-3, size 0-4096 line 2890 [ 450.787892] binder: 26626 RLIMIT_NICE not set [ 450.799472] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.801530] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.824601] binder: 26622:26632 transaction failed 29189/-22, size 0-0 line 2775 [ 450.842341] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.987961] binder: undelivered TRANSACTION_ERROR: 29189 [ 450.993510] binder: release 26582:26610 transaction 3253 out, still active 2017/12/27 08:42:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000357000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d419649, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000272000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x806, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x80000000000001, @random="349dad69adda", @rand_addr=0xfffffffffffffffe, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={0xac, 0x14, 0x0, 0xaa}}}}}, 0x0) 2017/12/27 08:42:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f000040b000)={{0xffffffffffffffff, 0x3, 0x7, 0x1, 0x7}, 0x3ff, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0x80, 0x80000000, 0x3d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000aa2000)='./file0\x00', 0x10) r1 = getpgid(0xffffffffffffffff) getresuid(&(0x7f00002d9000-0x4)=0x0, &(0x7f00003bb000)=0x0, &(0x7f0000aa6000)=0x0) getresgid(&(0x7f00003d9000-0x4)=0x0, &(0x7f00001aa000-0x4)=0x0, &(0x7f0000d3b000-0x4)=0x0) sendmsg$netlink(r0, &(0x7f00003a4000)={&(0x7f0000786000)={0x10, 0x0, 0xfffffffffffff103, 0x7ff}, 0xc, &(0x7f00009b7000-0x8)=[{&(0x7f00002d9000)=[{0x65, 0x9, 0x12, 0x3, 0x3, "af284c7942ae3ce7b0d4345b210ca834affd7278065ea46f7e978eff3b78d51ae8c4bfb221d24a733e0f91c488d2faf4f29ead6a7e8d8c14699f3dde9179643aaa04a855205bb93497177cad02baf0e50c6a25dc33"}, {0x9a, 0x4, 0x100, 0x1, 0x6, "8d9b0943abc727194ad786ff512e4c6c5423569321e20d65b9471e5070a085c006eaa15ed7f92e9ca953228a8619002d932881798260556f1fd226d85d3b21d26ee9879a47176359e02db13cdeced8725a680d61f59371791418ed96647e97d77efe796148e5ba795238d4ad1aae1feb0cfc743f4207076f6fbaabde289e5ba041c4772c7fa2b90955e3"}, {0x92, 0x48, 0x8, 0x7, 0x4, "dbd24897dc13e9d9f9904c368ce714b78b2ccb543f38e718338daa18110c48b7056fad5d5899814bdf4bf971141066318029123dffe84e317002d771ab4cc6773c7f558e97f90e782d3412be86a102fc7974e00ea3946d717d017243f5b82417c80ea41b27a456fe26b6d9d763c34631d2e9691909653e3ac6c4d13e6e23a9ee25f2"}, {0x7d, 0x9, 0x600, 0x80000000, 0x1, "f5dcc216f862f3a86c6e617c44df403861642f4e52adba122340944034351a950b938eb066db75a78471f62800c80e8c5fae5850d39223586449ea6e3fd8de4780eba279c20de219795efa7729cbd4802d71921f3b3a71954b32cc9d3c1fdf61ae716ce6c092516b908134bb9c"}, {0xc8, 0x7, 0x300, 0x4, 0x54, "9d998702711e0ef16bb26156501d7498604c060a6948e02c524006110eccc13a3e222c50248804b12c892ca4a20c2f2625f7d5d5ac7f24e93b4c3c2309617dc94b5d686eaeee7b3f28b0c7be77c9c8928aa9a6f3f32a9c1d26b31499bf32553a9f8bf3c02782f853a433dc5818f702c298bfc6300dd0146db37ea2cff9c18a2f4dabccb5d1d2f032f188b7c2e285a40c27e6c1ce811e3e27bb9028342ea9d32c4b7b8b8fa55deb149cb0db9d84dffd42ae556b15b0b80ac1"}, {0x28, 0x7, 0x0, 0x1, 0x6, "6b348bcd16d20ce42a3fc4034926e2460c867cf0ab2c29f0"}, {0x39, 0x1f, 0x500, 0x0, 0x5, "deeae9411c92e7464aeb9098df25eeffa002821775ebb78832efd25bb08ccc2ddd77afd69592257b08"}], 0x337}], 0x1, &(0x7f0000164000-0x18)=[@cred={0x18, 0x1, 0x2, r1, r2, r3}], 0x18, 0x4040000}, 0x40) r4 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f000070f000-0x67)=""/103) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00003f2000-0x11)='/dev/vga_arbiter\x00', 0x2c100, 0x0) 2017/12/27 08:42:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r2) socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000066000)=0x0, &(0x7f0000f65000-0x4)=0x4) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:14 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fc8000)='/dev/rfkill\x00', 0x90180, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000ea6000)=@req={0x1, 0x8, 0x1, 0x0}, 0x10) 2017/12/27 08:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000413000)='/selinux/user\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00003d2000-0x10)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00003db000-0x8)={r3, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000ef0000-0x30)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x2, 0x0, &(0x7f0000f23000-0x2)="6cc2"}) [ 451.000541] binder: undelivered TRANSACTION_COMPLETE [ 451.005665] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.011141] binder: release 26582:26615 transaction 3251 out, still active [ 451.018158] binder: undelivered TRANSACTION_COMPLETE [ 451.023287] binder: send failed reply for transaction 3251, target dead [ 451.030079] binder: send failed reply for transaction 3253, target dead 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000493000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001000)=0x1, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000002000)={{0x0, 0x1c9c380}, {0x0, 0x0}}, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000)=@known='system.posix_acl_default\x00') [ 451.073879] binder: 26639:26647 got transaction with invalid offsets ptr [ 451.082717] binder: 26649 RLIMIT_NICE not set [ 451.089716] binder: 26639:26647 transaction failed 29201/-14, size 0-4096 line 2918 [ 451.098382] binder: 26651 RLIMIT_NICE not set [ 451.113336] binder: 26641:26655 transaction failed 29189/-22, size 0-0 line 2775 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000b77000-0x4)=0x0) sched_setaffinity(r1, 0x8, &(0x7f000054a000-0x8)=0x8a1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCMBIS(r2, 0x5417, &(0x7f0000150000)=0x5) 2017/12/27 08:42:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000e9a000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00007be000)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00006e8000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r2}, 0x14) r3 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:14 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="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", 0x1000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00009df000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$notify(r1, 0x402, 0x40000000020) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r2, 0x0) sendto$inet6(r2, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00002d7000-0x8)={0x400000000009, 0x0}, 0x8) ioctl$TCSBRK(r1, 0x5409, 0x80000001) close(r2) 2017/12/27 08:42:14 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000fc8000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f000003d000)='/dev/hwrng\x00', 0x101080, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000924000)='/selinux/context\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000be1000)={{0x2, 0x2}, {0x100000000, 0x11}, 0x9, 0x3, 0x9, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000045d000)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f00009e6000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x14, 0x0, 0x0, 0x48, 0x30, &(0x7f0000d47000)=[@fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000ed3000)=0x0, 0x1, 0x1, 0x6}], &(0x7f0000921000-0x30)=[0x78, 0x48, 0x38, 0x28, 0x40, 0x60]}, 0xffffffff}}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f000074b000)=0x0, &(0x7f0000e9d000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 451.113680] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.124721] binder_alloc: 26639: binder_alloc_buf, no vma [ 451.124745] binder: 26639:26656 transaction failed 29189/-3, size 0-4096 line 2890 2017/12/27 08:42:14 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/net/pfkey\x00', 0x10a00, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00001e5000-0x2)=0x107fffffff, &(0x7f0000b06000)=0x2) r2 = syz_open_dev$evdev(&(0x7f000082e000-0x12)='/dev/input/event#\x00', 0x0, 0x4000000400000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$KVM_S390_INTERRUPT(r0, 0x4010ae94, &(0x7f00005ef000)={0x9b, 0x2, 0x2}) [ 451.132007] binder: 26651 RLIMIT_NICE not set [ 451.140764] binder: 26641:26664 transaction failed 29189/-22, size 0-0 line 2775 [ 451.148069] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.170720] binder: BINDER_SET_CONTEXT_MGR already set [ 451.170731] binder: 26642:26651 ioctl 40046207 0 returned -16 [ 451.173735] binder_alloc: 26642: binder_alloc_buf, no vma [ 451.173761] binder: 26642:26662 transaction failed 29189/-3, size 0-0 line 2890 [ 451.176562] binder: 26642:26651 BC_FREE_BUFFER u000000002000c000 no match [ 451.176636] binder_alloc: 26642: binder_alloc_buf, no vma [ 451.176662] binder: 26642:26662 transaction failed 29189/-3, size 0-0 line 2890 [ 451.196897] binder: 26666:26668 got transaction with invalid offsets ptr [ 451.196932] binder: 26666:26668 transaction failed 29201/-14, size 0-4096 line 2918 [ 451.197345] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.197432] binder: release 26642:26651 transaction 3266 in, still active [ 451.197439] binder: send failed reply for transaction 3266 to 26642:26662 [ 451.197510] binder: undelivered TRANSACTION_COMPLETE [ 451.197518] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.197536] binder: send failed reply for transaction 3268 to 26642:26651 [ 451.201587] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.211184] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.220392] binder: 26666:26674 transaction failed 29189/-22, size 0-4096 line 2775 [ 451.228369] binder_alloc: 26676: binder_alloc_buf size 4294967416 failed, no address space [ 451.228376] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 451.228397] binder: 26676:26678 transaction failed 29201/-28, size 72-48 line 2890 [ 451.239623] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.274152] binder: BINDER_SET_CONTEXT_MGR already set [ 451.274165] binder: 26676:26678 ioctl 40046207 0 returned -16 [ 451.285066] binder_alloc: 26676: binder_alloc_buf, no vma [ 451.285093] binder: 26676:26685 transaction failed 29189/-3, size 72-48 line 2890 [ 451.287280] binder: 26676:26678 BC_FREE_BUFFER u000000002000c000 no match 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000855000)=@assoc_id=0x0, &(0x7f000075b000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00001c6000)={r2, 0x7fffffff, 0x4, 0x7fffffff, 0x3, 0x7}, &(0x7f000006b000)=0x14) r3 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000b6f000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f000007c000-0x4)=0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000055f000-0xbc)={0x0, 0x1, 'client1\x00', 0x0, "5e35a5824b0b670d", "444405274bfb8bce92b9fd539c8e6b9e9f2470ee0e73737aacd3dc2e5f1820bb", 0x5, 0xfffffffffffffff8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000935000)={0x0, 0x0}) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ac4000-0x16)='/selinux/checkreqprot\x00', 0x149000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) stat(&(0x7f0000d2f000)='./file0\x00', &(0x7f0000a99000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/27 08:42:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={0xffffffffffffff9c}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001000-0x4)=0x6, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000002000-0xa)='/dev/vcs#\x00', 0x8, 0x101000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00009eb000)=0x10, 0x4) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000124000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f000027c000-0x3)='lp\x00', 0x3) read(r4, &(0x7f000006b000)=""/24, 0x18) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000ad7000-0x4)=0x0, &(0x7f0000f61000-0x4)=0x4) write$evdev(r4, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000ff0000)='/dev/input/event#\x00', 0xf4e2, 0x10000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00004da000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000de6000)=0x5) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000624000-0x12)={@generic="ab5c180d6452470373c9be8444ec6fc1", 0x3}) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mprotect(&(0x7f0000ce2000/0x12000)=nil, 0x12000, 0x1000000) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) exit_group(0x80000000) 2017/12/27 08:42:15 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x40002000, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000219000)=""/70) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 451.295517] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.295641] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.295660] binder: send failed reply for transaction 3277 to 26676:26678 [ 451.297276] binder: undelivered TRANSACTION_COMPLETE [ 451.297282] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.490833] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.496336] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.542128] binder: 26698 RLIMIT_NICE not set 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = syz_open_dev$mice(&(0x7f00004f6000)='/dev/input/mice\x00', 0x0, 0x101043) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f000091d000)=""/37, &(0x7f000045d000)=0x25) fremovexattr(r0, &(0x7f0000fba000)=@random={'btrfs.\x00', '/dev/input/event#\x00'}) 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000006000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ad0000)='/dev/ptmx\x00', 0x140, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f000000b000-0x41)=""}) 2017/12/27 08:42:15 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000fc9000-0x15)='/proc/self/net/pfkey\x00', 0x402000, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000fc9000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000fc8000)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000fc8000)={0x0, 0xe8}, &(0x7f0000b14000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000f2b000-0x14)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00006b0000-0x4)=0x14) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00005ef000)=@assoc_value={0x0, 0x3ff}, &(0x7f0000fc9000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000fc8000)={0x0, 0x2c, &(0x7f0000fc9000-0x2c)=[@in6={0xa, 0x2, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfffffffffffffffd}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000f1b000-0x4)=0xc) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000075e000-0xa0)={0x0, @in6={{0xa, 0x0, 0xffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x6, 0x5, 0x7, 0x20}, &(0x7f0000fc8000)=0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000455000-0x98)={0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x1}, &(0x7f00008b8000+0x700)=0x98) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000fc9000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f000016c000)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000fc9000-0x8)={0x0, 0x9}, &(0x7f0000fc8000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x9, 0x6, 0x6, 0x5, 0x2, 0x400, 0x7f, {0x0, @in6={{0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x1, 0x0, 0x8000, 0x35}}, &(0x7f0000a60000)=0xb8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000a4a000)={0x0, 0x985a}, &(0x7f00004d8000)=0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f000018d000)={0x0, 0xfffffffffffffff8}, &(0x7f0000a03000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000fc8000)={0x0, 0xa1}, &(0x7f00000db000-0x4)=0x8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000da9000)={0x0, 0x5fa48c6d, 0x9, 0x4, 0x3b11, 0x7, 0x2, 0x7f, {0x0, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x20, 0x7, 0x9, 0x3f}}, &(0x7f0000907000-0x4)=0xb8) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000fc8000)={0x0, 0x20}, &(0x7f0000bdc000)=0x6) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000fc9000-0x108)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x1, 0x4, 0x81, 0x8, 0x1, 0x8000, 0x5, 0x0, 0x1ff, 0xd58, 0x10000, 0x8001]}, &(0x7f0000128000)=0x108) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000fc9000-0xc4)=[{&(0x7f0000fc9000-0x1c)=@in6={0xa, 0x1, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}, 0x1c, &(0x7f0000fc8000)=[{&(0x7f0000ab0000-0x1000)="3ed3dbea1a6e3df33f0ac48b8d31928d9cb68560b3eb141ff1d8575ef9f1cec306b95d69142e0fdcc3d1082967e6c3f2c178abbda11d0d752be32eac5de1d9dc7b5240ecbc66e7e409981dfa67cb838d252799750486b8d713e635005e9617af27ad587877bd7d6e1df635d0eb96a874596c8ea6c2bf2f0ae19d5f9f5db00823afe79fd7dc769c5c7e77e24a48c7de7fb45c874b2372ca847575187a6ab756fa5c8835e2dd5126adada7a697e92803caed0534b4ed2f9a334109913bbfcc31d175f38e67837481f1c431e448041bf038238b563e740a122f90385734ad5c5c009ff8b01ab0d8ee70ce0d3a67d0ac29b5b5267610e730d2abeb1ae8a2801108a199e1a49e891598fac4e45b491ae2b528aff641abb5e54ae62e9b16f476fcefe3c95ebb6af5cca0313f6842cfbe46aace589c08e17c70494b1b98a45914c6150a01de944e7d223bbd96c9a26f9ef4d6dbb9a5728466f6caca810d785c01e3e5d48612e17bf7cc300598de9189f7ee1794f50cfbd09a992b58f58449262ad3abab999a93717a9d225b7fdcefe315afb0a903253dd4595693274c8c5eafb10a77ac13f9c679ebd1c4015529512e80f107ca6745221cc62f406ceb3c0ef4c06b0d1b77d0b21750320b7f9a591cae16a44ef10ece253ded2cd9a7e32a9df099b5e3e9ca4ac33dc33d7c204f438c87e7ed551884e5833f3ebe09815a10c764f05ce4dab719f10beba89fe9158068907a5c079631a06e2661c37461cd3a91b734b7b2dd0559a5c25fe0d6e14a5b7acb6e391286c6ae8083e2226185895bf69313c0608cc19805d1272d9966867e756f186e159461ed09ea6c1cd6f365fe69edd6d68514ae94908cf2a3e90ad44599068d9371828b0c7395660ceb22deef3d8a7bc5b21d4e52760fffa975ee2afeadb10cedc66d234558348f87134d3fae894cc5ee8b2cfb4411fa3a403a9cc06a86c57a34979dd4ad6fcb00a4a9d8e78b2ab0c498a12e77c0bd9ad9449d5e63210cfa8b69df6788067675d7803ded1df9f97a5f1ec8fdd9ada602b48a88581ec574e6b7783597465196e6b08dc1f19567bef63e3de7b1a1bac76091646bb72900a7b18df427d1e0eccddf3b86dce0f2a6bc285cab2e7d8ac008f19be3b53892b28296d225f0d5685c9719cd720f661aa1902727cb39b27e76c9315bd0922f93c4c2c7403d7615b337a9ed01fad984816f20f580210faf75058b92ff05179ad7c14783d08bfe350bf03f45723d8918a5eb3a0f027d773ae047766962073d2a8b20befbd026930ab95633f28048f49187ce57c17822f8c84cb794d656cb45aa17e21d28419bca44d26dc877f0040abca939c687a860091eb0b628679730aa41b67814219fdc2c963b72915833059c93e2ad4736cd371479011c78f113fadbbdca0cdd0e290fc7cb221781ff5847b1d4e47d7425f02e2549910dcb82b8748e161be7963fe845084ff6c4d68e90d1d157f337f5671d9a0f9ea193031e11470577390f55d3cdaa9d3c4cb0fef61d748a98632fa21c4cb50fba1f2b9a5b5649925eaaa62977147ce3be9702b507ef6552ec3f5a28b32424182d2ea5439595a0e4ee05eaff9a5288b84050e42bed567466e5d469787c3b8268038eb0b29f25481ed4741fb6a84815033de860ca598bc38dc78682b3d2bc30b354a3bf285b2019af7b0ffd3d702f8eb65ab555a200f32dbeaaa880cff4fec7b079d862f9ba1ada0fdf024240541b1ae2942a234b8f7382538830f30290e751fa7be9b1829001a9f3c6928f5e542494a437bf5a50077826471a6b5359a2fdb53cc20f3412bc4093e3723e6b42ef5a88ccf9f600d8cb26614c76a245975bd789747f10b45eb0d22e2f3478ff3280d0fd0198a41808db9e4e3422703289b4f196a876e9f2b3b280a6cda95ed7155994814d550cb6124ae9183b28c6699d67b5fc2d84785f63476b5b1c7bede70cb5a74bf5f819fc847e1b7280d795c1135c458105420159d6c6d00badf89757ff4ba22b58d15f26ca801234af38760447dd7482c881b4b191252a1ef2208b4849f3103246678c4dac2955fa9e30ea2ff3be913e3d2c6041e7a1050ac7966bef04a080fdfcbb6918a86cf7a4f3b4ca3c5242d19254c2dba18cad97b1addea8efefd3b77a5cb4d21da402d8f53b7b95ea51d7761d5cf0ef5330a7d2bed05ffc897c9a3ec7f90e30d7ab02c14a508dac05f2eb4f63a77cb01f676ffcd0a203eeb76736380420aff2a10c92b56fc112e2c03600b8e57702b41c091bd57a0bff2f4e41b2c4b961cb8d6bf20bf9317ab126d2fc0688b9cbde62d738cabe772f560f5da885adbd4c23484fedf3183db20fb3e24f2a4fb7e9968b1d1a96c520e9bae6ea94e107e2be52f3ff4ff43b5aa4102839744c00b1e678fdf98221c9a49359de9f7c5b5957405f846ab9818b7c0a327bb3fc6d182860750cd0e242ca3ae8a31beaca46464a7f8e108c2e3e156bef9c00e46c3f23e8008b6c1bb8ceb5167867d480e59a58d4d03d22a5fa1871247833605cc2ab046acfff74fa79c51c87714b79d35a80662c781246915323d4916878dfcc7d7a62ee40d2712a92c6ddd02952d0ec5a0d0531f8d2a0fbafdbf24f58d3f7f1474e87327f096174310d3ba93553a141145b945c1c365d052481421c94775388f13f67007c70ff9f27329fdca4b91c69c2568f54b3c2df3aa25e2c0beed19ba7b9800e213c5cd8a700bf2148722b0fe563202751508eae94f8b9e5fa435aed6f9f8677b059a845a6b1cf9a090302e73e9309cd4e07f22e0f446b3905cd5ac37c07315887dcb9bfe8b124dca7f8f81a8869a4b90d217a71914efeb54b117e642e470fc74b8c81e7e753fe49c36487f4002f0e6b7bba60b2379cca03644eef6c1b5d591d205684efb4cb24366445037caa50d2de4ad25c4d2024cebfbab85b7b6c91ecbfa459d8542d32582e9c28d468e36dfd775eaaaaeb19968a6bd184f48f222f2ba059f4d3732ca9478ca02d01c2e6c5ffc9e4e6512705770a037725cb3df2188b79f04d0c898dadf63f137b9100cf222f06610eac48aba2e87def6a50bf0f5412ba36d163e247aa9f2ecf0edd8803def1842fd12efde439b52ee35a54ec46e51b059f5304abb8b0cd33f1f972a82f216340d87be61337b2ab0115ba2ad5e4451bc2992d69c966da02e3685bddb76b01b4efa4ab2509acdcc9628fb7acda69b2b95ba3a4ac978c27141e9e06f769f90f4ef2859d808036db8f58eed38dc1684c30c051f3b75a3458666f97be2d8ee977b7b15e80dbeea83556a14196c0b7791868fa3ebfde2c3063ee08a85dd44645b2d7363f326a64826c48c41e3828b8d52390e678ea17c6a3e84ba0e438597474bd8700709717796e441a6c05d48e5e8592c96a99e45a4ca0ca939275c29e9e98737eb8f103939dddb18288a88b5b5e7d49841e473480d7da7180b8a6413a3c191d5a43b209715f91239dee87a205cecf516623043933a32ff2755f6436fc9501a1797822d5b00acf3af2eac8684cfb996e8963bc497b863b6a5187a5ced793973bd470765c0da46cc5070ed139f78570ec10d62c0183cc096cfd12d4bbc6913d89da0aac31534190450d0f62f8f366088086fe4b2de227320675985cf0bbcb5471197ec74421c79e9f926b3cf181a9951bd03e8d183fc39fcd11fe9a39b148201dd1761bb831707b2e183a1a26c2028d547923c3c11a51b781b60c28a52c28e8e48f0ca0d99c4e626debafeed3a574d2cedaa756f586cb45937a7eb1095138af5770133cf5317b706f8a4e4ad03d0a2f85332211c957c1d035df1eb07cf43fcc7ac1e3c9f11f996d64dc513d9ad05c6b45bdb438867d9e08d9af3e1c8965ec93cf1b4a0a5660381a39f6ec842f74eeae8c1a6ac52e5f3eb7c67a056659681c1dc974ea726991262924e741f2f68ee6e7a9f60b42d93e544f0bf4d61caec2fa6462703fa85bfe6805bf9be16d28a70c77598f795eb0dd0bf15e78fe09d5a122886bc05f7a32411ad9dd078b5286c5a0117034b3ac310d88a2a182fac619a9edab4a0a74e9b221eb9f692fa1b546131afada79741bc850bd978f4db740118fbc12dc46ffc04441512d47daa4dfb566957418a4e1ff5833d1a7c8dc826e1c618eeb8980382732e32f009c35bc1571c0ca511852aed31a2261df5f7832ac1e1782bc06bc73557b2ed92d19fafd57d935ca635c603acee0b7c382b905c18a960f4519f3452e4b4f00ebe32245b513aae8ea7e5c39b42e65a20103aecb6baf23ce0d622d440b6d58cb3cef394e2291c2b8e566a2e8bc1ff2406c98aadd8e832c33a80441eda815b438d077edfa7b79227d914cca857578dbfe2e5a7a1eff1869bea8aef1d1b14f0fbbac46e349406656d03b9012ce7da8f5b87c842b65ad5a2a195ddbe5e0aa0fb9d57a4da9af5334be9f1ad9bc2037766c7f2a579d7b045c7cd851a4d5e425a66f09e103a49fafb03378973c99db912da36b7457a3df36949b81bb068e976c25211fd27039331974efc6f7a9bbc70d5067f583fd129ad0f5c6b9e1e7228f6e67048b9d90f89992596e21a5d7362a80346fcde65be32523a283011daef26801136b2f1a306d69f494300be114f49a9c23d21a457f5ea1f6be64e39742ee7075aa60e112708dfd163cec2dfd92964f56d5c41a9b72ce57ff9f860184602786b1ae3e8caed175fc1a2954899fedc1f6252f925240a9272c1605df0e1061671590cbd91419675167a32f8c576c35c85c96dfaf4d7273c0e9af9ace72ee0405fd40e63a1ce2a16c6c57a3e8110106d1f122844d0d25854180cc02f6b9037c4afcc99275d584e9f37ee82c048850aa334e42d6837bfa407ba3a88551560002fcf855c46ebe45515e2e32bd5a3b922b3a42439d33a9c274f334fa331edd7241b430b1c0725294ec2cb3501609e1b4bb6197aa36b8c2222dddb0d9a4e82b34811e36ebc476c0fa2d358705d80919763653d3685a473cd7e20df0d710f6bef76b942dc2ce07011be1b41ab6677f2e34af949d4390ccc2c171e8c0a935546fea044e09a5d2039e47b56ccbaed9d45064e1c061549266010e67d63687b13899a39232ef41742f7d3563eedc3fc1edca8d6d9a1c44f66dda17c833bc16c6fd99ba9979d4c9efabeb3dabc2e27a7153b3d891ecc21c3327a7b48d7efaef84d6901543f37a06d6bc1e851280bdf9ef7f8805ce02bf75a491a32fff08f29652ebac36417ce59e519130c1de89bc09fe568de613d179a14b7deb4370b70c885cd7b716780be551fc72adf66c244769b8d238b62e62eba71e3f9daa32683110ccef5a8589a0863e1a409ac6c7cc8d600d1c8067cd5db0638f30ea179d0c6c1ca05ac41f05cdbff9897a1aad11162764c7d6ed68b233a27e29c48aff2d7c840f7c216016573e0205481b6a52b90b7b191857f946212ecf3d149fe9f92bda8f6e32dbf2fe564ac275c0c280327cd0cacbb7bc1aae972dcf12148f75fd9304e49ba3a5850c7cde0fc6a4d7804ba5c549f902f4fb2c50e9d0a98e09475e0b03c1820073d814ff179e705abfd57829899823430d767dd63919aa9829fdc7ad3e96c2d8fd90e96de3938b4eb9ab0b8166ab2223aa57e2ff9d12c54d9f04a381c73956d7704491ec101260db675f8dafdd0eaf716ed9bee86a2e699f0a983337ecf1496071d5b5002a2b7d1cf3c4879db0515e14553f05b9d8e25dc2953bda426a7512b2631d8364c6b374d24d753c76cc3e2a77dcecef5a47105c2c323c8fa046105a82a4492f1ce3e463f07c59772be1cc9b185dd61c78eee939be0b3e", 0x1000}], 0x1, &(0x7f0000eda000-0x134)=[@sndrcv={0x2c, 0x84, 0x1, {0x3, 0x1, 0x8205, 0x7, 0x54, 0x1, 0x9, 0x80000001, r2}}, @init={0x14, 0x84, 0x0, {0xf0aa, 0x7f, 0xca1, 0x6}}, @sndrcv={0x2c, 0x84, 0x1, {0x40, 0x3b6, 0x1, 0x2, 0x2, 0x0, 0xe742, 0xfffffffffffffffa, r3}}, @init={0x14, 0x84, 0x0, {0x8, 0xb5de, 0xfffffffffffffffd, 0x7}}, @sndrcv={0x2c, 0x84, 0x1, {0x8, 0xbb42, 0x4, 0x80, 0x0, 0x8001, 0x7, 0x8, r4}}, @init={0x14, 0x84, 0x0, {0x0, 0xfff, 0x80000000, 0xfff}}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x400, 0xb, 0x0, 0x5, 0x9, 0x6, 0x1000, r5}}], 0x134, 0x4000080}, {&(0x7f0000fc9000-0x1c)=@in6={0xa, 0x3, 0x9, @loopback={0x0, 0x1}, 0x4ab1}, 0x1c, &(0x7f0000fc8000+0xf21)=[{&(0x7f0000fc9000-0x9a)="2521fd35af07dc9350cd617974763987377f661ce9b4db2c7df50bb797e7b327e6431e829f48ed1c1f87055efb4676a4cc11a1fc7f5a57ca0d0a2f23843de94ab7bede58d3e4874b4bee89bacaa42a3bb36a4da1a38b1e9463c4d2f296d8e19c554be3add13640663f4365504b40c30232c509dbeddbcf2aa93818670d6094a531103b01705ba2bc86a7f66714c53c31bb06edca789c389f5cef", 0x9a}, {&(0x7f0000fc8000)="dad07c5458050f1f8b888df63ada630361c6475cb02bc69d076d516fd2664af189c15413fbdefb4a9d483396bb1b41ba9fd2d5954498611f5dddde76f997e9bce2ce81ca61c21d5749de4a78dbad562fb6c3bd31c772a159b7b494298cb9cfb7b5f4ed3dbafbcf0e251ef3a5c8a6c6a120", 0x71}], 0x2, &(0x7f0000aef000-0x84)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x9, 0x200, 0x8508, 0x0, 0xd0e, 0xfffffffffffffff7, 0x2, r6}}, @sndinfo={0x1c, 0x84, 0x2, {0x0, 0x8200, 0x10000, 0x5, r7}}, @sndinfo={0x1c, 0x84, 0x2, {0x80000000, 0x8000, 0x310d, 0x9, r8}}], 0x84, 0x40084}, {&(0x7f0000fc9000-0x1c)=@in6={0xa, 0x1, 0xd097, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x910}, 0x1c, &(0x7f0000fc8000)=[{&(0x7f0000626000-0x1000)="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", 0x1000}], 0x1, 0x0, 0x0, 0x40000}, {&(0x7f0000b16000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x1}, 0x1c, &(0x7f0000fc9000-0x18)=[{&(0x7f0000fc8000)="7c59e57f226df8fd0ebbde2f543f4ac998eeeef905f9b69a0e521d9e1eb97b67f358a112c3284cb04c4c999be2f617822cd14b7604f4b26c3c6756fa4dd30fbcf58b033bc3811728924f9bcd53d0dac2ce953802453f732b2ca9d796ecc722023691f6044f86a1c94c23ce38cd09564b1200ed", 0x73}, {&(0x7f0000fc8000)="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", 0xfd}, {&(0x7f0000fc8000)="08397d27265f27d645e705fae31381eaaeb6e45b39b78fb0f80f254e86273869e6c31b19d42115e450c2f9932ad12eaee2d2fee09beec3cd4c540850011f266c6167920ed33e60d40155589e9dfcc36ba383aba51fcf5f5f0b765aa418936ed80db640a0ed651184e5424c34b61f3b3a8d5b77ebe2b4f9fe11f5f418cf843e5fc138a33de65fd12096f00147f010c22316bf525098efce0122e1ca26ce5d60e9a8b29da1c3996e8e858a642ca4fa2e4f41f4696639e3f2", 0xb7}], 0x3, &(0x7f0000a53000-0x84)=[@init={0x14, 0x84, 0x0, {0x7f, 0xe4a, 0x9, 0x9}}, @init={0x14, 0x84, 0x0, {0xfffffffffffffff9, 0xc0, 0x6, 0x1}}, @sndinfo={0x1c, 0x84, 0x2, {0x7fffffff, 0x2, 0x0, 0x6, r9}}], 0x84, 0x0}, {&(0x7f0000f84000)=@in6={0xa, 0x3, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f0000d8b000-0x8)=[{&(0x7f0000738000-0x1000)="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", 0x1000}], 0x1, &(0x7f0000938000-0x160)=[@init={0x14, 0x84, 0x0, {0x8, 0x4, 0x1, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x1, 0x5, 0x138e2615, 0x800, 0x4, 0xf35, 0x100, r10}}, @sndinfo={0x1c, 0x84, 0x2, {0xfffffffffffffffe, 0x2, 0x5, 0x6, r11}}, @init={0x14, 0x84, 0x0, {0xa5, 0xe23, 0x100000000, 0x6}}, @sndinfo={0x1c, 0x84, 0x2, {0x7, 0x2, 0x8, 0xf63, r12}}, @init={0x14, 0x84, 0x0, {0x9, 0x8, 0x4f53, 0x7ff}}, @sndinfo={0x1c, 0x84, 0x2, {0x227, 0x2, 0x1, 0x8715, r13}}, @sndinfo={0x1c, 0x84, 0x2, {0x8, 0x4, 0x2, 0x1, r14}}], 0x160, 0x10}, {&(0x7f00003ab000)=@in6={0xa, 0x2, 0xe75a, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x400}, 0x1c, &(0x7f0000270000)=[{&(0x7f0000465000-0x6f)="00cafc72f59dd3b55125117f1a66c5c1a3931afaf1d5a79eea6292ada22a0a6099ca454f0567fa7a57ee30f5df576b52b62937f1a5007f81cea33b3d12a3faaf8421ae87fbcf1317ab571b8f32375719bda5f0b2e26f2d930da39a61092bb84eec28baa9e1d3c5599db418212ca852", 0x6f}], 0x1, &(0x7f0000fc8000)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0xc, 0x1, 0xf31, r15}}, @sndinfo={0x1c, 0x84, 0x2, {0x9, 0x20c, 0x3, 0x3, r16}}], 0x58, 0x8040}, {&(0x7f0000d40000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000d46000-0x10)=[{&(0x7f00001e2000-0xf5)="46506b13567602a4ef30f9c38c7e41fab2d506b0439beb4099475a4d0ddc420000f75c37620cd4e7bb0ab90e256b34fc2497e4914f28bc398e0ea356e16f8770506b7cb3dd12a73ae9258259b04c54ee8364ae718dd7bba86f938ee8d23668a741aedcf0dd0995d433082ad73c8fcbedc5ce2ebeb7b17017693b6552a30738f873869883be1b6c3887b01eb5669f73a0cc62095e3d19577e97e874de7b9f77dfdbd0db6c4719ccc91c977af0161a2acd9bad351206b198601c10bc1f45b558271358ec19e7ca373c091e35b9cf1a457ee315330930e29b02491db7c1b267fe0df22f2d1031c6a5e3e3dab9c2f0bcc78c8f9cce015a", 0xf5}, {&(0x7f00007f5000-0x82)="38b413856be285df6a78c99021ba28f09f6e3f4f43ff5b44382764e180b2f8b26b62d91a1c3931713658c60a60f31ccf94b10273a635be881f05ecc6b0e0003cf3f856172df90106e45b4c9ab2d662c4f47cf3eea1d7162c1f46f70d991091c46cbb43f9f7188dc4473cd326c10f6a0ee5d6032b47ffac00931915fb3ad4b38af87a", 0x82}], 0x2, &(0x7f0000fc9000-0x2c)=[@sndinfo={0x1c, 0x84, 0x2, {0x1e, 0x2, 0xd5f, 0x9, r17}}], 0x2c, 0x10}], 0x7, 0x0) r18 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r18, &(0x7f0000a29000)={&(0x7f000099e000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r18, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:15 executing program 3: syz_open_dev$usbmon(&(0x7f00003a8000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000423000)='/selinux/member\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000f67000-0x4)=0x80000004) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000a82000-0x40)=[{r0, 0x0, 0x0}], 0x1, 0xffffffff) ioctl$TCXONC(r1, 0x540a, 0x0) [ 451.546124] binder: 26689:26701 got transaction with invalid offsets ptr [ 451.546158] binder: 26689:26701 transaction failed 29201/-14, size 0-4096 line 2918 [ 451.578370] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 451.587311] binder_alloc: 26689: binder_alloc_buf, no vma [ 451.587334] binder: 26689:26706 transaction failed 29189/-3, size 0-4096 line 2890 [ 451.587598] binder: 26699:26704 got new transaction with bad transaction stack, transaction 3285 has target 26699:0 [ 451.587609] binder: 26699:26704 transaction failed 29201/-71, size 0-0 line 2802 [ 451.595719] binder_alloc: 26693: binder_alloc_buf, no vma [ 451.595740] binder: 26693:26707 transaction failed 29189/-3, size 0-0 line 2890 [ 451.599632] binder_alloc: 26693: binder_alloc_buf, no vma [ 451.599651] binder: 26693:26707 transaction failed 29189/-3, size 0-0 line 2890 [ 451.602193] binder: release 26699:26704 transaction 3285 out, still active [ 451.602199] binder: undelivered TRANSACTION_COMPLETE [ 451.602212] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.602250] binder: send failed reply for transaction 3285, target dead [ 451.622663] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.645686] binder: BINDER_SET_CONTEXT_MGR already set [ 451.645709] binder: 26693:26720 ioctl 40046207 0 returned -16 [ 451.651907] binder_alloc: 26693: binder_alloc_buf, no vma [ 451.651935] binder: 26693:26707 transaction failed 29189/-3, size 0-0 line 2890 [ 451.652285] binder: 26693:26715 BC_FREE_BUFFER uffffffffffffffff no match [ 451.656089] binder: 26716:26721 got transaction with invalid offsets ptr [ 451.656117] binder: 26716:26721 transaction failed 29201/-14, size 0-4096 line 2918 [ 451.659309] binder_alloc: 26693: binder_alloc_buf, no vma [ 451.659329] binder: 26693:26707 transaction failed 29189/-3, size 0-0 line 2890 [ 451.665087] binder: 26714:26718 got new transaction with bad transaction stack, transaction 3294 has target 26714:0 2017/12/27 08:42:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006f3000-0x9)='/dev/rtc\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000065000+0x503)={{0x6, 0x80}, 'port1\x00', 0x10, 0x400, 0x7fffffff, 0x3, 0x2, 0x3f, 0x5f2a1661, 0x0, 0x4, 0x57, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffff9) r1 = syz_open_dev$sg(&(0x7f00008cf000)='/dev/sg#\x00', 0x10000, 0x28000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000839000-0x5c)={0x9, 0x1, {0x3, 0x0, 0x8000, 0x0, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$getownex(r0, 0x10, &(0x7f0000978000-0x8)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00006b3000)={0x0, 0x0}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000e34000)='/selinux/validatetrans\x00', 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000613000)=""/255, &(0x7f0000dd7000-0x4)=0xff) writev(r0, &(0x7f00001d2000)=[{&(0x7f00002d7000-0x2a)="290000001e003109330000008b0e0000020000000000ff068000f9ff0c000800010000000053f4ff20c7", 0x2a}], 0x1) 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000c68000-0x1b)={0x100000000, 0x8, 0x8, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0x0}, &(0x7f0000000000)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x100000000}, 0x8) sync() 2017/12/27 08:42:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000510000-0xa)='/dev/cuse\x00', 0x145002, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00004c2000)={0x800, 0x2, 'client0\x00', 0xffffffff80000000, "22d07f7cee4ab570", "91f91fc71f89e8c060c390bfb610c97de9e5137446c1514f0683fa8ae6eb5fe0", 0x7, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000c33000-0x1000)=""/4096, &(0x7f000078c000-0x4)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000fc9000-0x4)=0x0, &(0x7f0000636000-0x4)=0x4) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000fca000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 2017/12/27 08:42:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) read(r0, &(0x7f0000ce7000)=""/30, 0x1e) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) mremap(&(0x7f0000c52000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000086b000/0x4000)=nil) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000261000-0x8)={0x1f, 0xe9f}) read(r2, &(0x7f000006b000)=""/24, 0x18) write$evdev(r2, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000b47000)=0x0) 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x0, 0x0, &(0x7f000000f000-0xcf)=""}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x0, 0x0, &(0x7f000000f000-0xcf)=""}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 5: mlockall(0xfffffffffffffffd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000f18000)=@assoc_id=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000082c000)=@assoc_value={r1, 0xd}, 0x8) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = getpgrp(0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000fc8000)=r2) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000fc9000)='\x00', 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000626000-0x10)={r3, 0x28, &(0x7f0000b84000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00001fa000-0x8)=0x0, &(0x7f0000632000-0x4)=0x8) 2017/12/27 08:42:15 executing program 3: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ff0000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000080c000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fef000)=0xe8) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000fef000)="1623b63a52e5d42437f68a5c2c85f62bab39524c45981562908271c35477778791f612c93360e407cdfaebb06b538aa95193bb2fad6b6187473e7c19cc7e1f9042dd0ed7ba85d9", 0x47, 0x4040, &(0x7f0000ff0000-0x14)={0x11, 0xf5, r1, 0x1, 0xfffffffffffffffc, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x1, 0x1, 0x5, 0xb, 0x4, 0x0, 0x0}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000011f000)={r2, &(0x7f0000fef000-0x47)="", &(0x7f0000675000)=""/101}, 0x18) [ 451.665100] binder: 26714:26718 transaction failed 29201/-71, size 0-0 line 2802 [ 451.669570] binder: BINDER_SET_CONTEXT_MGR already set [ 451.669578] binder: 26716:26726 ioctl 40046207 0 returned -16 [ 451.673982] binder: release 26714:26718 transaction 3294 out, still active [ 451.673987] binder: undelivered TRANSACTION_COMPLETE [ 451.673996] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.674118] binder: send failed reply for transaction 3294, target dead [ 451.678780] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.904339] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.915101] binder: undelivered TRANSACTION_ERROR: 29189 [ 451.928358] binder: BINDER_SET_CONTEXT_MGR already set [ 451.928367] binder: 26743:26746 ioctl 40046207 0 returned -16 [ 451.928664] binder: 26746 RLIMIT_NICE not set [ 451.935012] binder: 26739:26749 got new transaction with bad transaction stack, transaction 3297 has target 26739:0 [ 451.935080] binder: 26739:26749 transaction failed 29201/-71, size 0-0 line 2802 [ 451.982264] binder: BINDER_SET_CONTEXT_MGR already set [ 451.982274] binder: 26757:26760 ioctl 40046207 0 returned -16 [ 451.982842] binder_alloc: 26739: binder_alloc_buf, no vma [ 451.982866] binder: 26757:26760 transaction failed 29189/-3, size 0-0 line 2890 [ 452.002494] binder_alloc: 26693: binder_alloc_buf, no vma [ 452.002523] binder: 26743:26754 transaction failed 29189/-3, size 0-0 line 2890 [ 452.008234] binder_alloc: 26693: binder_alloc_buf, no vma [ 452.008261] binder: 26743:26754 transaction failed 29189/-3, size 0-0 line 2890 [ 452.029776] binder: BINDER_SET_CONTEXT_MGR already set [ 452.029808] binder: 26743:26763 ioctl 40046207 0 returned -16 [ 452.039493] binder: 26754 RLIMIT_NICE not set [ 452.045632] binder: BINDER_SET_CONTEXT_MGR already set [ 452.045641] binder: 26771:26772 ioctl 40046207 0 returned -16 [ 452.047912] binder_alloc: 26739: binder_alloc_buf, no vma [ 452.047938] binder: 26771:26772 transaction failed 29189/-3, size 0-0 line 2890 [ 452.058841] binder_alloc: 26693: binder_alloc_buf, no vma [ 452.058863] binder: 26743:26763 transaction failed 29189/-3, size 0-0 line 2890 [ 452.068786] binder_alloc: 26693: binder_alloc_buf, no vma [ 452.068812] binder: 26743:26774 transaction failed 29189/-3, size 0-0 line 2890 [ 452.186307] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.191824] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.197910] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.203716] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.209205] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.214736] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.220261] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000276000-0x8)={0x0, 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00009f8000)='/dev/rfkill\x00', 0x800, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000991000-0xc)={r3, r0, 0xfff}) 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f000026e000)={0x4, [0x6, 0x0, 0x80000000, 0xfffffffffffffffd]}, &(0x7f0000f0b000)=0xc) getsockopt(r0, 0x20000114, 0x2711, &(0x7f0000e30000-0x5f0)=""/439, &(0x7f000033c000-0x4)=0x1b7) 2017/12/27 08:42:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) getpeername$unix(r0, &(0x7f0000c4f000)=@abs={0x0, 0x0, 0x0}, &(0x7f00006a8000-0x4)=0x8) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000215000-0xc)={@multicast2=0x0, @rand_addr=0x0, 0x0}, &(0x7f0000994000-0x4)=0xc) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000483000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000caf000)=0xe8) r4 = add_key(&(0x7f0000344000-0xa)='encrypted\x00', &(0x7f00007e1000+0xe35)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00003fd000+0x75d)="", 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r3, r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00007d2000+0x1c8)=0x20000524a) write$evdev(0xffffffffffffffff, &(0x7f0000058000-0x60)=[], 0x0) recvfrom$inet6(r2, &(0x7f0000987000)=""/43, 0x2b, 0x0, &(0x7f0000f32000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f00004ba000-0x8)={@loopback=0x7f000001, @multicast2=0xe0000002}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x2fd}) fdatasync(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) write$tun(r3, &(0x7f0000ef0000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0x30, 0x84, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "bfe240", 0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [], ""}}}}}, 0x62) 2017/12/27 08:42:15 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$ipx(0xffffffffffffffff, 0x0, &(0x7f0000fc9000-0x4)=0x0, 0x800) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000fd000+0xb7c)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x0, 0x0, &(0x7f000000f000-0xcf)=""}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 452.225809] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.225877] binder: release 26739:26749 transaction 3297 out, still active [ 452.225881] binder: undelivered TRANSACTION_COMPLETE [ 452.225887] binder: undelivered TRANSACTION_ERROR: 29201 [ 452.225903] binder: send failed reply for transaction 3297, target dead 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x0, 0x0, &(0x7f000000f000-0xcf)=""}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 452.309057] binder: 26800 RLIMIT_NICE not set 2017/12/27 08:42:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x807, 0xfc63) getsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000031000)=0x0, &(0x7f0000feb000)=0x4) [ 452.315662] binder: 26798:26803 got new transaction with bad transaction stack, transaction 3307 has target 26798:0 [ 452.315673] binder: 26798:26803 transaction failed 29201/-71, size 0-0 line 2802 [ 452.322363] binder: release 26798:26803 transaction 3307 out, still active [ 452.322368] binder: undelivered TRANSACTION_COMPLETE [ 452.322376] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/27 08:42:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 452.322395] binder: send failed reply for transaction 3307, target dead [ 452.332424] binder: 26805:26806 got new transaction with bad transaction stack, transaction 3310 has target 26805:0 [ 452.332435] binder: 26805:26806 transaction failed 29201/-71, size 0-0 line 2802 [ 452.344828] binder: release 26805:26806 transaction 3310 out, still active [ 452.344834] binder: undelivered TRANSACTION_COMPLETE [ 452.344843] binder: undelivered TRANSACTION_ERROR: 29201 [ 452.344863] binder: send failed reply for transaction 3310, target dead [ 452.350561] binder: 26814 RLIMIT_NICE not set [ 452.356391] binder: 26794:26812 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 452.406723] binder_alloc: 26809: binder_alloc_buf, no vma [ 452.406748] binder: 26809:26818 transaction failed 29189/-3, size 0-0 line 2890 [ 452.411922] binder: BINDER_SET_CONTEXT_MGR already set [ 452.411930] binder: 26794:26824 ioctl 40046207 0 returned -16 [ 452.413082] binder: 26812 RLIMIT_NICE not set [ 452.416760] binder_alloc: 26794: binder_alloc_buf, no vma [ 452.416784] binder: 26794:26824 transaction failed 29189/-3, size 0-0 line 2890 [ 452.435427] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.444256] binder: 26794:26826 BC_FREE_BUFFER u000000002000c000 no match [ 452.450576] binder_alloc: 26794: binder_alloc_buf, no vma [ 452.450602] binder: 26794:26826 transaction failed 29189/-3, size 0-0 line 2890 [ 452.549615] binder: 26800 RLIMIT_NICE not set [ 452.559820] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.565639] binder: release 26794:26812 transaction 3314 out, still active [ 452.572704] binder: undelivered TRANSACTION_COMPLETE [ 452.578537] binder: release 26794:26800 transaction 3312 in, still active [ 452.585535] binder: send failed reply for transaction 3312 to 26794:26812 2017/12/27 08:42:16 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000cc1000-0xfe)=""/254, 0xfe}, {&(0x7f0000bef000-0x33)=""/51, 0x33}, {&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f000079b000)=""/127, 0x7f}], 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000000+0xa93)="", 0x0) 2017/12/27 08:42:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x80a, 0xffff, &(0x7f0000f86000)={0x0, 0x0}) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000484000-0xe7)="39be355b0a4369d34296312eabf596b7e157a516514fd3a8ea588ae4c9e9bc614bd308ccf4c9c94d9f801cc36dedfa46ed12a01b09507202586952bb06f9fd45d5dc19f206d96334134f233109d89a7ad59b81910c8c8c8311819980b6fc0b5fd5f18fb73c20b41c9fe41a4aebed14556d66ced4918d279ec941cc4fd0e86b853f69f6cab82e356ac5cd62168a25685b3db3e984db4667e345ba6253e8688517232645fd04f1763cd648a9b55ad11e8e9d00a8d5f14a1a2901a6f40f440b2f8f8162d7daf3b99a175c8b49bda2eac064cf22c694dcdeb010685b21233cc6b89987fbc18ce6da76", 0xe7) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00008c9000)=0x7, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f000006b000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00003b3000)='/dev/rfkill\x00', 0x12080, 0x0) 2017/12/27 08:42:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:16 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000b6b000)='x', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000002000-0x8)='keyring\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004000-0x14)={0x0, r0, 0x1, 0x1, 0x0}, 0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000005000-0x8)={r0, r0}) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000002000)="65132c57e8bc9613463aa7c3033b9bbb0d6ab0ee3435b1dc80ac919be216d8045420ffbb657507641f0a346779963cae46d95aed89356cd439671ea9f703c16181334f21a96937cdf0327c2f5c06dc6df67514c66ad754c05f588ee741b7cec33df1b021909e8c67111f4435010daa5329210bfe3a7edd1d5b7c9934703d9adbd04109ed5afa1e27c1c2c5af6750db6fb2af46599ee7290b9414e72e", 0x9c, 0xfffffffffffffffe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000002000)='keyring\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000005000-0xc)={r3, 0xa4, &(0x7f0000003000)=[@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x101, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffbff}, @in6={0xa, 0x1, 0x7fff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3f}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x20, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000000000)=0xc) keyctl$set_timeout(0xf, r2, 0x8a) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000976000-0x1000)="", 0x0, 0xfffffffffffffffd) 2017/12/27 08:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r0 = open(&(0x7f0000903000-0x8)='./file0\x00', 0x2, 0xc0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000c0f000-0x4)=0x4, 0x4) r1 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a9c000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00009cf000)={0xf000, 0x102000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000fca000)={0x20000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) fcntl$getownex(r2, 0x10, &(0x7f0000562000-0x8)={0x0, 0x0}) ioctl$TIOCSPGRP(r4, 0x540f, &(0x7f00001e4000)=r5) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00001eb000)={0x0, 0x6, 0x2, 0x4, 0x1483, 0x7ff}, &(0x7f000037d000-0x4)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000da9000-0xc)={r6, 0x5, 0x0}, &(0x7f00000ab000-0x4)=0xc) 2017/12/27 08:42:16 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fc8000)={0x0, 0x0}, 0x800) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000fc9000-0x1c)={0x6b656b78, 0x0, 0xffff, 0x0, 0x1f, 0x0, 0x9, 0x401, 0x1000, 0xfc9, 0x101, 0x100000001, 0x0, 0xbc, 0x8, 0x1f, 0x6, 0x76c, 0x8}) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 452.592496] binder: undelivered TRANSACTION_COMPLETE [ 452.597609] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.603076] binder: send failed reply for transaction 3314, target dead [ 452.609914] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000713000-0x8)='./file0\x00', &(0x7f0000fb0000-0x19)=@known='system.posix_acl_default\x00', &(0x7f000054b000-0x14)="02000000010009000000000000003fffce000000", 0x14, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000451000)='/selinux/create\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d18000-0x90)=[@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x80, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x991c}, @in6={0xa, 0x1, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff}, @in6={0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0x0}], 0x90) [ 452.654328] binder: 26837 RLIMIT_NICE not set [ 452.663803] binder: 26839 RLIMIT_NICE not set [ 452.681704] binder_alloc: 26830: binder_alloc_buf, no vma 2017/12/27 08:42:16 executing program 3: mmap(&(0x7f0000000000/0xefd000)=nil, 0xefd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000efc000)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0xedbc, 0x0, 0x4, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000491000)='syseO\x00', 0x366, 0x80, &(0x7f000000a000)=""/128, 0x0, 0x0}, 0x30) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f000033f000)='/dev/hwrng\x00', 0x0, 0x0) mmap(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x3) accept4(r0, &(0x7f0000efd000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00009c2000)=0x14, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000d52000-0xc)={&(0x7f0000600000-0x8)='./file0\x00', 0x0}, 0xc) 2017/12/27 08:42:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000975000-0xe)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000d27000)=""/65, &(0x7f0000e2f000)=0x41) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000ba4000)={"62c88c7f4a0d49e2e6d3e69683cc1dee", {0x4, 0xe8, 0xffffffffffffffff, "5f74066a69cd", 0x1, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) sendmsg$key(r0, &(0x7f000066a000)={0x0, 0x0, &(0x7f00006dd000)={&(0x7f0000803000-0x118)={0x2, 0xa, 0x92, 0x9, 0x23, 0x0, 0x3, 0x3, [@sadb_ident={0x2, 0xb, 0x5, 0x0, 0x4c33}, @sadb_spirange={0x2, 0x10, 0x1, 0x9, 0x0}, @sadb_address={0x3, 0x7, 0x81, 0x5, 0x0, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f}}, @sadb_x_sec_ctx={0x12, 0x18, 0x40, 0x1, 0x83, "d22b32f19a2f7c9a1f1e259cb345446fc2fcfe33734ceebae00b7bc2fb0839f433654125827d4640719353e06d98643bd37db90a60ce457127640afc51a9ac7a54dc52cb900722a4dc1b0932e6a9173d55a7be7a0e6aed463b94999d0e0172893bbeedf13e78d15c622867b567ea37b31f03ca43de6fff502cb15ac05244b5d208fdf6"}, @sadb_x_nat_t_port={0x1, 0x16, 0x0, 0x0}]}, 0x118}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 452.704906] binder: 26830:26850 transaction failed 29189/-3, size 0-0 line 2890 [ 452.717893] binder_alloc: 26830: binder_alloc_buf, no vma [ 452.717920] binder: 26830:26858 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:16 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) r1 = socket(0x10, 0xe82ba62c7b2e943a, 0x101) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = getpgrp(0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r2, 0xffffffffffffffff, &(0x7f0000fc8000)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = dup(r0) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f0000fc9000-0x1c)=@in6={0xa, 0x1, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, 0x1c, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x80000}, 0x8000) sendto$inet6(r3, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000ebc000-0x12)={@generic="d967d4d383b686e45d0ddf0c768a5d59", 0xd818}) r1 = socket(0x2, 0xffffffffffffffff, 0x81) sendmsg$unix(r1, &(0x7f00007d3000)={&(0x7f00008af000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f000019f000-0x20)=[], 0x0, &(0x7f00001f1000-0x18)=[], 0x0, 0x0}, 0x0) 2017/12/27 08:42:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000397000)='/dev/hwrng\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000bae000)={0x0, 0x0, 0x0}, 0xc) getresuid(&(0x7f0000a03000)=0x0, &(0x7f00005cf000-0x4)=0x0, &(0x7f0000bf4000)=0x0) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000d1000)={r1, r2, r3}, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x10000000010, 0x2, 0x0) getsockname$inet6(r4, &(0x7f0000f07000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000306000)=0x1c) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 452.719419] binder: 26839 RLIMIT_NICE not set [ 452.765777] binder: BINDER_SET_CONTEXT_MGR already set [ 452.765793] binder: 26836:26839 ioctl 40046207 0 returned -16 2017/12/27 08:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000ccd000-0x9)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000275000)={{{@in6=@loopback={0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x4)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000144000-0x10)={r3, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x5c, 0x0, &(0x7f0000fd6000-0x5c)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x70, 0x40, &(0x7f00008c2000)=[@ptr={0x70742a85, 0x1, &(0x7f000093e000)=0x0, 0x1, 0x4, 0x25}, @fda={0x66646185, 0x1, 0x3, 0x6}, @ptr={0x70742a85, 0x1, &(0x7f00009fc000-0x1)=0x0, 0x1, 0x4, 0x3e}], &(0x7f000047d000-0x40)=[0x0, 0x30, 0x38, 0x48, 0x40, 0x38, 0x38, 0x0]}}, @enter_looper={0x630c}, @release={0x40046306, 0x4}, @register_looper={0x630b}], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) sigaltstack(&(0x7f0000293000/0x4000)=nil, &(0x7f0000a4a000-0x4)=0x0) [ 452.776330] binder_alloc: 26836: binder_alloc_buf, no vma [ 452.776399] binder: 26836:26852 transaction failed 29189/-3, size 0-0 line 2890 [ 452.791647] binder_alloc: 26836: binder_alloc_buf, no vma [ 452.791675] binder: 26836:26839 transaction failed 29189/-3, size 0-0 line 2890 [ 452.824353] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.824436] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.824494] binder: release 26836:26839 transaction 3322 in, still active [ 452.824501] binder: send failed reply for transaction 3322 to 26836:26852 [ 452.824548] binder: undelivered TRANSACTION_COMPLETE [ 452.824557] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.824577] binder: send failed reply for transaction 3323 to 26836:26839 [ 452.824918] binder: undelivered TRANSACTION_COMPLETE [ 452.824925] binder: undelivered TRANSACTION_ERROR: 29189 [ 452.913995] binder: 26878:26889 got transaction to invalid handle [ 452.914012] binder: 26878:26889 transaction failed 29201/-22, size 112-64 line 2775 [ 452.919546] binder: 26878:26889 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 452.945590] binder: BINDER_SET_CONTEXT_MGR already set [ 452.945600] binder: 26878:26891 ioctl 40046207 0 returned -16 [ 452.956896] binder: 26878:26892 got transaction to invalid handle [ 452.956922] binder: 26878:26892 transaction failed 29201/-22, size 112-64 line 2775 [ 452.963097] binder_alloc: 26878: binder_alloc_buf, no vma [ 452.963121] binder: 26878:26892 transaction failed 29189/-3, size 0-0 line 2890 [ 452.968669] binder: 26878:26891 BC_FREE_BUFFER u000000002000c000 no match [ 452.968739] binder_alloc: 26878: binder_alloc_buf, no vma [ 452.968762] binder: 26878:26892 transaction failed 29189/-3, size 0-0 line 2890 [ 453.053295] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.058914] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.066166] binder: release 26878:26889 transaction 3329 out, still active [ 453.073378] binder: undelivered TRANSACTION_COMPLETE [ 453.078552] binder: release 26878:26889 transaction 3328 out, still active [ 453.085825] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:16 executing program 3: mmap(&(0x7f0000000000/0xfb7000)=nil, 0xfb7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000706000-0xc)={0x10, 0x0, 0x0, 0x8}, 0xc) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000fb8000-0x9)='/dev/sg#\x00', 0x80000001, 0x80000) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00007bd000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000fb8000-0x4)=0x8) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000837000)={r2, 0x94}, &(0x7f0000fb8000-0x4)=0x8) mmap(&(0x7f0000fb8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000fb9000-0x2)=0x3, 0x2) 2017/12/27 08:42:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000456000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000051f000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000cb6000-0x4)=0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) setxattr(&(0x7f00009a1000-0x8)='./file0\x00', &(0x7f000058b000-0x18)=@known='system.posix_acl_access\x00', &(0x7f0000021000)='/selinux/load\x00', 0xe, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f00000db000-0xd8)="d23ef6f8b7a9428790769f87f527cea94195bf891d52291686b2e6bb40bee9335f0f125446da2e87643a8c4578f9dc72df9d870dc3cfb56a81d60e0a89aaa5485e6963c631ed4cdd0c13e0d35f12f177814ed5d571f018a8e10701ad7c5053be72625d84716276346913bb21ec0719b0fcbdcd781ee3a33c1bdd293c4681328347b09524ef9086e19758b68a103c0e1c6d2bf1f15afa07b689b188278626ffe59631d6c22655837630f36f174209979ebbe57a76c51c1b416d98fa393c580ffdbfef2a08cecaaff059c44a96e6a23e816ac577657b9bf6e5", 0xd8) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mkdirat(r0, &(0x7f000071a000-0x8)='./file0\x00', 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f00005d3000-0x84)=""/132) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000a96000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ed6000)=0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000420000)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x10d, 0x10, &(0x7f000029a000-0xc)=@sack_info={r1, 0x0, 0x0}, 0xc) 2017/12/27 08:42:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000316000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000ecc000)="41b3942e157b9127caa438245d34dcb45da05a0a6e746d90bebc8f1a3154676391e1b4030790c5b0007a22dce34b82eab163fa914a6c47f9e4519b", 0x3b) r1 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000b1d000-0x70)=""/112) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:16 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) r2 = dup2(r0, r1) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r2, &(0x7f0000fc8000)="6a1831224222dfc5b1d56127a6626d383d792cdb1eade281647556eea2f90ca5eb01a5cb71f28aa2", 0x28, 0x0, &(0x7f000049d000)={0x3, {"e910c6f8af1684"}, 0xe94e}, 0x10) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) [ 453.090954] binder: send failed reply for transaction 3328, target dead [ 453.097712] binder: send failed reply for transaction 3329, target dead [ 453.104539] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.110054] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:16 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000333000-0xc)={0x4, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000691000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000625000)=0x14, 0x0) mbind(&(0x7f0000751000/0x3000)=nil, 0x3000, 0x0, &(0x7f000033e000)=0x0, 0x1, 0x2) mprotect(&(0x7f000049c000/0x800000)=nil, 0x800000, 0x0) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:16 executing program 2: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x8000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/220, &(0x7f0000001000)=0xdc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000ee5000+0x2a3)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d4d000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000cd9000-0x30)={0x0, 0x0, &(0x7f0000708000)=[], 0x0, 0x0, &(0x7f0000fc9000-0x7)=""}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000c3f000-0x40)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000b39000-0x10)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00005eb000-0x4)=0x10, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000b2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000116000)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000)=0x0, &(0x7f0000001000)=0x4) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00002a4000)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00008fc000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00001ab000)={0x6, 0x4, 0x0, 0xce18, 0x0, 0x0, 0x0}, 0x1c) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e41000-0x12)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000c61000)="46f57014c400213752626236692e4f42530d5684cab5d1acee22448f453b0d43965b7f4ce55b5cad4e87c660d7c6df498198f8355e2fd10b35b64084fddc4d7945b18075141f2e6dd5e4d8906a77a59bb7ba5a97b7713982f12248ea2f40f52dcef7a6619d19603b6a2752fe45c4569d24c4716d83660680a13d4e29bec80b0b102f7892a666a049518aadf160b979d28ffe878cc227350e69e17dd7e0a7ef5c485eea93e5daf2b5ee3a8b486c6420c8242db68d9e82127abbf1ea5ef11205676d40b0758d1a7c") ioctl$TCGETS(r1, 0x5401, &(0x7f00006a7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f000087d000-0xd2)=""/210) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000646000)={0x0, 0x1}, &(0x7f0000675000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00003f9000)={r2, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0xbbc4, 0x1, 0x9, 0x8}, 0xa0) ioctl$TIOCEXCL(r1, 0x540c) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000383000)=0x57, 0x4) [ 453.156850] binder: 26903 RLIMIT_NICE not set [ 453.167493] binder: 26905 RLIMIT_NICE not set [ 453.179645] binder_alloc: 26899: binder_alloc_buf, no vma [ 453.188163] binder: 26899:26912 transaction failed 29189/-3, size 0-0 line 2890 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 453.206157] binder_alloc: 26899: binder_alloc_buf, no vma [ 453.206185] binder: 26899:26922 transaction failed 29189/-3, size 0-0 line 2890 [ 453.208891] binder: 26905 RLIMIT_NICE not set 2017/12/27 08:42:16 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000396000-0xb9)=""/185, 0xb9, 0x100, 0x0, 0x0) bind$inet6(r0, &(0x7f0000a28000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f000039b000-0x108)={0x0, @in6={{0xa, 0x1, 0x6, @loopback={0x0, 0x1}, 0xaa0e}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x20, 0x8, 0x8, 0x9, 0xffffffff80000000, 0x4, 0x1f, 0x5c03, 0x9, 0x10000, 0x8, 0x401, 0x6, 0x4, 0x1]}, &(0x7f0000fc9000-0x4)=0x108) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000fca000)=0x5707, 0x4) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000fc9000)=""/210, &(0x7f0000fc9000)=0xd2) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000fc8000)={0x0, 0x74, "d1c96cdd1038e4d6425e7a1457667eae88b5a52ee853fbddc27babc655b691b7ef02fda5f95f3155b0491d20398a40e47783626d337617d096ec962dac821cd83069b120c87e87085f4716625e38c12bef488532a23f08082e628e6e886d99c9cfe37928e90574e68715c3c1dd8760964c1df8a3"}, &(0x7f0000fc8000)=0x7c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000fc8000)={0x0, 0x65f}, &(0x7f00002e6000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000942000-0x10)={0x2, 0x8000, 0x0, 0x4, 0x0}, &(0x7f0000b61000-0x4)=0x10) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000651000)=[{&(0x7f0000fc8000)=@in6={0xa, 0x3, 0x80000000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c, &(0x7f0000fc8000)=[{&(0x7f000089b000)="f1438d3694cd77d35e9a20d99930ebf1907d7554af803510a3c3492886620f117333049d8b82c6751e71264faea55a25b30c1a53f588361c9f829693b69926ff12f404b048e7505e1de9881294229069b23d6e1ce619c9d740d00dc827ea234587cd13b0942df173f16641ad1e7086d2452f16aa9db43fdfe752b7f0c34c022077fbae565c7919aa6b62c436a8d536c17e34e916", 0x94}, {&(0x7f0000e6f000-0xbb)="835706cab0ecc052d1e0d8246414a11d305488ab43b48664c7c1bc1e50bb35a9b0a575a9e3ff48b97a8c11cdef8724baa1973569ea984c2d4032ddbfd87b3e79dcc82075cb78fa515884c90710c21ba4246b4edc2e274a114762854a8a5c5840f5155cc2a6f6a1118c2035989683ea37f5f1d2eedd0c6363f26b7669ba9f9f83c6383e3880984a83d49b14ec5ed05ef834f9c4796ddad9606aaf7955b688dfecfcaf7be57d93e32d90e41abc13bef6558a4a127d05ffc5ddc97785", 0xbb}, {&(0x7f00002fb000+0x561)="65e2bfad98dfdfdc7dee6b0d899bde", 0xf}, {&(0x7f000092b000-0x40)="d007ab7acba0967b020c04e030648983e109ddc7b527831996a6b028c6a8b196669331f746a58ebe2b290b2b73c0f9a5c7e682ae357bf5c8052dd959258145a9", 0x40}, {&(0x7f0000fc9000-0xd1)="9968d310f8ccdd5717bcc94f2e01c235bb877b879104271fec6ce966a595f55a9f56dde4ba142f9c6dae55e7944bf815f46a54fb7503f730ee503ffb7ed6adfcc3c06f965dd87f8ba8b01d548ee5b68e466807eec4734780bae66bc6df1fef85905f737e8db9fb7febee29b010fb0eff4aa15fc107ed471868a2d59226a20697800e8fd239c74645ab936931fee35672ee604e343ece0ffc635aead3bd771ff606e75a49f691429af1096bff0b53e122c1c7ece8ff13ab9e285c55302c6fa01d2c5e27665a3c9dadd5c1446d922d4040be", 0xd1}, {&(0x7f0000fc9000-0xaa)="3b5618969e35ff65fdd2c605b0295c494fc5bba69b16dc1947a4c378473dbd2dbbdd723714e4cc9c770cbbc5d5ce54c37d6a0913bca706c30c1bc2ffaa802e6953b09c47d374ece341a21c0d3e6c4ade064897e71a3fc31faea0c5011b148c8f4bf11aa2976c75b74760d177c25ac626f0b783c0311720e2ea4e19f415f741a18d06f07071d973dea0eb37f60e7c97a8728f3a34737d94cfa6134031f6a8e8775148ad2c200770e8764c", 0xaa}, {&(0x7f00000ae000-0x37)="d3664169c1279e9a3665213ba579ddaf68ef9156f2f6ef7b8940aeb3e475aaf6e5c5b10eef7b1f6c54fa0a2efbd82d37d39ea6fde374e1", 0x37}, {&(0x7f0000f91000)="002b217fabf522fdf8691c8b3ffe156058ebe0c817760e3f70bec349b6202dbbb71d37383d1e83a87ab8f11324f4275150c2a7624915a3841d20812a7c7470d2de29fd6ac59abd4fb40350d92512eafa99ae5cf1250aaad91a6721d263a296c50baf615fcddc347e51b03ba20ac4bbb3b3ee951087b8dffe7b4c3609c43d5ef12b263f004f4496e2", 0x88}, {&(0x7f0000788000)="", 0x0}], 0x9, &(0x7f0000fc8000)=[@init={0x14, 0x84, 0x0, {0x2, 0x2, 0x7, 0x10001}}, @sndrcv={0x2c, 0x84, 0x1, {0xffffffffffff8000, 0x100000000, 0x200, 0xf677, 0x2, 0x0, 0x4be4, 0x1, r2}}, @sndrcv={0x2c, 0x84, 0x1, {0x8c8, 0x9, 0x2, 0xaa4, 0x8001, 0x1, 0x1, 0xe27, r3}}, @init={0x14, 0x84, 0x0, {0x9, 0x200, 0x5, 0x2}}, @init={0x14, 0x84, 0x0, {0x55e, 0x100, 0x8, 0x38a8}}, @init={0x14, 0x84, 0x0, {0x8, 0x6, 0x1080000000000000, 0x7}}, @sndinfo={0x1c, 0x84, 0x2, {0x10001, 0x8000, 0xfffffffffffffffd, 0x0, r4}}, @sndrcv={0x2c, 0x84, 0x1, {0x3f0b, 0x80, 0x8008, 0x3b, 0x4, 0x40, 0xffffffffffffd04d, 0x1, r5}}, @init={0x14, 0x84, 0x0, {0x5, 0x5, 0x101, 0x10001}}, @init={0x14, 0x84, 0x0, {0x6, 0x5, 0x8, 0x9}}], 0x1b8, 0x8044}], 0x1, 0x880) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mice(&(0x7f0000fc8000)='/dev/input/mice\x00', 0x0, 0x92241) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000c36000)=0x6, 0x2) r7 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r7, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r7, &(0x7f0000b0d000-0x92)="b1", 0x1, 0xc000, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000086b000-0x8)={0x0, 0x0}, 0x800) getsockname(0xffffffffffffffff, &(0x7f0000ba2000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f00004a8000)=0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000f3c000-0x10)={0x11d006, 0x10000, 0x0}) recvfrom$packet(r0, &(0x7f000078c000-0x7a)=""/122, 0x7a, 0x2001, &(0x7f00009a4000)={0x11, 0x1, r1, 0x1, 0xc, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00001af000)={0x0, 0x6, 0x0}, 0x4) io_setup(0x9, &(0x7f0000b99000-0x4)=0x0) io_getevents(r3, 0x6, 0x3, &(0x7f00004e7000-0x60)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f000021f000-0x8)={0x0, 0x0}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f000025e000-0x10)={0x0, &(0x7f0000209000-0x8)=[]}, 0x8) [ 453.231741] binder: BINDER_SET_CONTEXT_MGR already set [ 453.231751] binder: 26902:26919 ioctl 40046207 0 returned -16 [ 453.232909] binder: 26905 RLIMIT_NICE not set [ 453.245240] binder_alloc: 26902: binder_alloc_buf, no vma [ 453.245267] binder: 26902:26929 transaction failed 29189/-3, size 0-0 line 2890 [ 453.247872] binder: 26902:26919 BC_FREE_BUFFER u000000002000c000 no match [ 453.282661] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.282775] binder: release 26902:26905 transaction 3337 in, still active [ 453.282783] binder: send failed reply for transaction 3337 to 26902:26919 [ 453.282802] binder: undelivered TRANSACTION_COMPLETE [ 453.282810] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.282829] binder: send failed reply for transaction 3338 to 26902:26905 [ 453.282967] binder: undelivered TRANSACTION_COMPLETE [ 453.282975] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.391605] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.398578] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000dc2000-0xa)='/dev/vcs#\x00', 0x7, 0x2800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000793000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000244000)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000dd7000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r1}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) syz_emit_ethernet(0x6e, &(0x7f0000deb000-0x26f8)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @random="da7375ff3aa8", [], {{0x86dd, @ipv6={0x0, 0x6, "03f087", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "905007", 0x0, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [], "a74a25ef89c8f986"}}}}}}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000d06000-0x16)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f000052c000)=0x1000) 2017/12/27 08:42:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000042c000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00009f7000-0x51)=""/81) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000098a000)={0x4, 0x0, &(0x7f0000441000-0x4)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00008e4000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00004f6000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:16 executing program 3: r0 = socket$inet6(0xa, 0x80005, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x84, 0x12, &(0x7f0000001000-0x89)="60d64b49cbaf26e229405c84604abb38b6cd0a791e1eeb191ceba76711ebe911863cc848f122880841d56824612900335bc21e392f9806b1375c320046dc6697ca9981256a77c1c649da87daa9c3ea2e78596f48dda004983f0bbe25c296ef90de9fc12aa5cbe47220ecb295d6c29bd6784d16468cfd1b4ee8df7b02c4c0eb16efc849ec2db93d5535", 0x89) 2017/12/27 08:42:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:16 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a45323, &(0x7f00003cf000)={{0x9, 0x8}, 'port1\x00', 0x1, 0x0, 0x2, 0xebd, 0x20, 0xae, 0x1f, 0x0, 0x1, 0x1da, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000fc9000-0x8)='./file0\x00', 0x20000, 0xc0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000060000-0xe)=""/14) 2017/12/27 08:42:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x7, &(0x7f0000e84000-0x68)={0x20, 0x3f, 0x0, 0x2de, 0x1, 0x100000001, 0x101, 0x7, 0xffff, 0x9, 0x853, 0x5, 0x400, 0xffffffffffffff6f, 0x6, 0x3, 0x3, 0xb4, 0x8, 0x6, 0x2, 0x8001, 0x3, 0x9, 0x200, 0x1f}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000999000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat(r0, &(0x7f00001dc000)='./file0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000af9000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$packet(r0, &(0x7f00006b9000-0x14)={0x11, 0x8, r1, 0x1, 0xd29, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00002e0000)='/dev/rfkill\x00', 0x109002, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000a9c000)={0x3, &(0x7f0000f08000-0x3c)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}]}) 2017/12/27 08:42:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000722000-0xb)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00005a9000)='/dev/vcs#\x00', 0x6, 0x301000) r2 = creat(&(0x7f0000a48000)='./file0\x00', 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000906000-0x20)={r1, 0xff, 0x101, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r3, &(0x7f000006b000)=""/24, 0x18) write$evdev(r3, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:16 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000)="6cc4a4ae0f5c8f0811a600906fcd9080ddcaf87b3b9668d6ce3766ee2a9d14c220385a1ed70a5de52e53216e0b7c3edac27880594d60c96091e36390fb25684dbaaa3b375fb436b3b73d998a43e0a5860340743143521c7069873ba177066040c98d02d02e2528387bdaa5c21236212f00f6bb30c508058d471dadad96452a74c598bc4e94", 0x85, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x0) syz_emit_ethernet(0x12, &(0x7f0000e7b000-0x12)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x88ca, @x25={0x0, 0x0, 0x0, "b0"}}}}, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000ca3000-0x8)={0x0, 0x0}) [ 453.488091] binder: 26952 RLIMIT_NICE not set [ 453.495289] binder: 26956 RLIMIT_NICE not set 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000020b000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00007ed000)={0x5, 0x5a, &(0x7f0000893000)="457e418df3a66876c4e1f133e3fd208312234a359fbfe482058f7fb89cc4a90a57e63c165e1e9495cdbb452bf71332d50d3899e6d11979ce0d4b49883f7d4ff1f342878b656bec064b7cc156804534c9236369274f3dadb0da97"}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000067d000)=@generic="6d890a761077a165e8f4fc9ee9d97e7f", 0x10) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000caf000)={0x6, 0x830, 0x4, 0x8a9, 0x2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 453.530364] binder_alloc: 26949: binder_alloc_buf, no vma [ 453.537284] binder: 26949:26965 transaction failed 29189/-3, size 0-0 line 2890 [ 453.538403] binder: 26956 RLIMIT_NICE not set [ 453.557235] binder_alloc: 26949: binder_alloc_buf, no vma 2017/12/27 08:42:17 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d1c000-0x15)='/proc/self/net/pfkey\x00', 0x6281, 0x0) fcntl$setsig(r0, 0xa, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000001000)=0x3068) timerfd_settime(r0, 0x1, &(0x7f0000001000-0x10)={{0x0, 0x0}, {0x0, 0x0}}, &(0x7f0000e2c000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) syncfs(r0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x6, [{{0x2, 0x2, @rand_addr=0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x3c8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00009a2000-0x47)="", 0x0, 0x0, &(0x7f0000000000)={0x77359400, 0x0}) syz_open_dev$usbmon(&(0x7f0000001000-0x9)='/dev/usbmon#\x00', 0x401, 0x501041) 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000a05000)={{{@in=@loopback=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b98000)=0xe8) r2 = add_key(&(0x7f00009cb000-0xc)='id_resolver\x00', &(0x7f0000961000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000ac1000-0x1c)="26668e3b33fa123b7ccc58b9268d7654c3693b861014a3eccd75c1eb", 0x1c, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000b5f000-0x8)=0x0) 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x7fffc, 0x10) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f000038b000-0x1c)={&(0x7f0000fc8000)=@in6={0xa, 0x1, 0x100, @loopback={0x0, 0x1}, 0x76}, 0x1c, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x7ffe) sendto$inet6(r1, &(0x7f0000b0d000-0x92)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) [ 453.557262] binder: 26949:26973 transaction failed 29189/-3, size 0-0 line 2890 [ 453.558258] binder: BINDER_SET_CONTEXT_MGR already set [ 453.558268] binder: 26947:26966 ioctl 40046207 0 returned -16 2017/12/27 08:42:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8983, &(0x7f0000006000)={@generic="1b520310b564c42354e2d0b8a14e1ad7", @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000006000)={0x0, @common="6c6f000000000000000200"}}}) [ 453.559946] binder: 26956 RLIMIT_NICE not set [ 453.562473] binder_alloc: 26947: binder_alloc_buf, no vma [ 453.562495] binder: 26947:26966 transaction failed 29189/-3, size 0-0 line 2890 [ 453.590651] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.590774] binder: release 26947:26956 transaction 3343 in, still active [ 453.590782] binder: send failed reply for transaction 3343 to 26947:26966 [ 453.590799] binder: undelivered TRANSACTION_COMPLETE [ 453.590806] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.590826] binder: send failed reply for transaction 3344 to 26947:26956 [ 453.590961] binder: undelivered TRANSACTION_COMPLETE [ 453.590968] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.621584] binder: 26984 RLIMIT_NICE not set [ 453.653148] binder: 26984 RLIMIT_NICE not set [ 453.661006] binder: BINDER_SET_CONTEXT_MGR already set [ 453.661036] binder: 26981:26984 ioctl 40046207 0 returned -16 [ 453.669196] binder: BINDER_SET_CONTEXT_MGR already set [ 453.669206] binder: 26981:26992 ioctl 40046207 0 returned -16 [ 453.670390] binder: 26984 RLIMIT_NICE not set [ 453.673620] binder_alloc: 26981: binder_alloc_buf, no vma [ 453.673648] binder: 26981:26992 transaction failed 29189/-3, size 0-0 line 2890 [ 453.675538] binder: 26981:26998 BC_FREE_BUFFER u000000002000c000 no match [ 453.676822] binder_alloc: 26981: binder_alloc_buf, no vma [ 453.676894] binder: 26981:26992 transaction failed 29189/-3, size 0-0 line 2890 [ 453.677371] binder: BINDER_SET_CONTEXT_MGR already set [ 453.677379] binder: 26981:26998 ioctl 40046207 0 returned -16 [ 453.695198] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.695284] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.695345] binder: release 26981:26984 transaction 3348 in, still active [ 453.695352] binder: send failed reply for transaction 3348 to 26981:26992 [ 453.695370] binder: undelivered TRANSACTION_COMPLETE [ 453.695377] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.695397] binder: send failed reply for transaction 3349 to 26981:26984 2017/12/27 08:42:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00003be000-0x4)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000e59000)={@syzn={0x0, 0x0, 0x0, 0x0, 0x0}, @ifru_addrs=@nl={0x0, 0x0, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000384000)=0x0, 0x0, 0x0) 2017/12/27 08:42:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000db6000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f000015d000)={0x4, 0xa, 0x6, 0xfffffffffffffffd, "85bd60deb1cd7148eb334ad1f8886d707b74ee196ce608c16621f9e46d4f0c96"}) r2 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) r4 = dup2(r0, r2) ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f0000d78000-0xc)={{0xffffffffffffff48, 0x8, 0x2, 0xffffffff00000000, 0x100, 0x100}, 0x6}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:17 executing program 7: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000c06000-0x11)='/selinux/relabel\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000b2000)={0xffffffffffff7fff, "e2b432f48f76"}) r1 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r1, &(0x7f0000fc8000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000df6000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = socket$inet6(0xa, 0x800000000005, 0xfffffffffffffffb) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000fc8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000fc8000)="b1", 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/27 08:42:17 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000011a000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00008bf000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000492000)={0x0, 0x0, 0x6, 0x277}, &(0x7f00005b9000)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00004c7000-0x8c)={r2, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00008b8000-0x4)=0x8c) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000990000)='/selinux/user\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000c43000)={&(0x7f0000a43000-0x1c)=[0x1000, 0x7fffffff, 0x3, 0x20, 0x800, 0x80, 0xcc6], 0x7, 0x5, 0x2, 0x800, 0x8, 0x99, {0xc978, 0x2, 0x5, 0x3, 0x4, 0x5, 0x1ff, 0x1, 0x9, 0x8001, 0x8, 0xea, 0x2fe, 0x288, "eed0ae9ddfbe0ba7b19319d89761ef7dc866c93f14e0848e1fa4e81a91fc2aa8"}}) 2017/12/27 08:42:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000606000)='/selinux/access\x00', 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000781000-0xe)='/selinux/user\x00', 0x2, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000b1b000)={0x0, 0x0}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000dea000)={0x20, 0x5}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000bf9000-0x8)={0x0, 0x0}) r3 = dup(r2) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000ddf000-0xc)={0x15, 0xb6, &(0x7f00006fa000)="0e0d44dcfa7138e481476d4653825da02d54c05b76f4fa79c5555ea8bee631af4e06d66325c8e8534167d73855fd9e632689c8aa82b58b456efbd9a8f4645ef0ab673c2a372cd0f82458b6e79738454718ada2eba815dc27997442ffb4a6531f8118e71f49b481a5bfa7bf24238ddbdee31fddd319004714552e4f88992982fd15e6e5c7c9b3e4b3663d7d4d8afcf5087384f4845030167f297b66177da04fa835e863ebdafb819cf465e04304d99d7349b9de974948"}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000072000)='/selinux/checkreqprot\x00', 0x220000, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000510000-0x4)=0x2, &(0x7f00009ba000-0x4)=0x4) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:17 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000207000)='/dev/rtc\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@common='ip6gre0\x00', @ifru_flags=0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x0, 0x0, &(0x7f0000045000-0x10)={0x0, &(0x7f0000000000)=[]}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) lsetxattr(&(0x7f000029f000-0x8)='./file0\x00', &(0x7f0000dbf000)=@random={'btrfs.\x00', '\x00'}, &(0x7f000048d000+0xcfa)='+\x00', 0x2, 0x0) r3 = epoll_create(0x4000000010011) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000582000)={&(0x7f0000988000-0x8)='./file0\x00', r0}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000337000-0xc)={0x0, 0x0}) signalfd4(r0, &(0x7f0000004000)={0x0}, 0x8, 0x0) dup3(r1, r3, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x2, 0x0, &(0x7f000000b000-0x4)="d8c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 453.698256] binder: undelivered TRANSACTION_COMPLETE [ 453.698263] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.891871] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.897369] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.943846] binder: 27009 RLIMIT_NICE not set [ 453.952593] binder: 27017 RLIMIT_NICE not set 2017/12/27 08:42:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f00008b0000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000822000-0x8)={r0, 0x0}, &(0x7f000035b000)={0x0, 0x0}) 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000599000)=0x0, 0x80800) bind$inet(r1, &(0x7f000064f000)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) pipe(&(0x7f00000da000-0x8)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) r3 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 2017/12/27 08:42:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00003aa000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0xd8, 0x0, &(0x7f0000607000-0xd8)=[@decrefs={0x40046307, 0x4}, @acquire={0x40046305, 0x4}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f000020c000-0x18)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000a43000)=[0x48, 0x60, 0x28]}}, @dead_binder_done={0x40086310, 0x2}, @free_buffer={0x40086303, r2}, @register_looper={0x630b}, @acquire_done={0x40106309, r2, 0x0}, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f00001f5000)=[@flat={0x77622a85, 0x1, r2, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000cbc000-0x8)=[0x0]}, 0x1}}, @decrefs={0x40046307, 0x2}], 0x162, 0x0, &(0x7f0000661000-0x162)="8575932b7a2b9289211d4afc29a6e30263a90e1ed89b1ed6b182b3148bbddd6a7fefaf8453e4c8d6b940a7cccba4a7c08837eca9f751aa6d16e1ff542a9a01ad9c94bee4b00b3475f7bb3f5ae7f607369726adba7a497aa6e12fdcaec7bc808a3346b6427a396d5aa27533413848033ea75357d212303fc6b1e2e2800f8cce5b5dcd181fd3d2206252a74516eb417e70fb078cfc2fb791b9ccbd5835a7f974cdf9bb73ab372e17f96a6e2081dba62a12102c5854aefd0d5533286bcc5a4e497a0a476b53a8e748eca77f6182933a44d092182e42a0c742255d50838136a04edae1a1b2bdbef558e55c576f4facb83784bab48b0fbca1f537c1467b7fd9de04845d6d17828c6859da80cbb3087cef4fbe1f82f6404903e542f89624f34fb5560aba1a8158f0f136fc089fc11c9c6111f42426cc66d4ddbec2ac501fc7a87167b665612016bd32f5f6063f9747a304d049b1d757b484e2a340bef6854617be37d824c3"}) fcntl$setpipe(r1, 0x407, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) pipe2(&(0x7f0000e40000)={0x0, 0x0}, 0x800) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000c5e000-0x4)=0x0, 0x4) r4 = mmap$binder(&(0x7f00003d5000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000d01000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000c81000-0x4)=0x0) [ 453.954331] binder: 27014:27015 ERROR: BC_REGISTER_LOOPER called without request [ 453.954340] binder: 27015 RLIMIT_NICE not set 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f000054e000)=@in={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00009c2000-0x4)=0x10, 0x80800) sendto$unix(r0, &(0x7f0000a57000-0x18)="04f1f6c075e6bf74701d11d434c462245d8c59e0d99d4b7f", 0x18, 0xc041, &(0x7f0000bb5000)=@file={0x1, './file0\x00'}, 0xa) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000019c000)={0x8, 0x0, &(0x7f0000232000-0xc)=[@increfs={0x40046304, 0x0}], 0x0, 0x0, &(0x7f0000a85000)=""}) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00004a3000-0x11)='/selinux/relabel\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80585414, &(0x7f0000ad1000-0x1000)=""/4096) 2017/12/27 08:42:17 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)='/dev/usbmon#\x00', 0x401, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002000-0x8c)={0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=0x8c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000)={r1, @in6={{0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000003c000)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x20) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_readv(r3, &(0x7f0000002000-0x28)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000000)=""/218, 0xda}, {&(0x7f0000001000-0xa8)=""/168, 0xa8}], 0x5, &(0x7f0000001000)=[{&(0x7f0000001000)=""/117, 0x75}, {&(0x7f0000001000)=""/62, 0x3e}, {&(0x7f0000002000-0xad)=""/173, 0xad}, {&(0x7f0000001000)=""/246, 0xf6}, {&(0x7f0000001000)=""/37, 0x25}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000001000)=""/116, 0x74}], 0x7, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000bc5000-0xc)={@loopback=0x0, @multicast1=0x0, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, r2) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r4, 0x2275, &(0x7f0000a7a000-0x11)="b9965c96") fcntl$setstatus(r4, 0x4, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f000022b000)=""/96) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f00000b6000)={{0x10001, 0x2, 0x6, 0xffffffff, 0x400000000, 0x100000001}, 0x1ff}) io_setup(0xfffffffffffffff7, &(0x7f0000373000)=0x0) io_cancel(r5, &(0x7f0000faa000-0x40)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000378000-0x1c)="da0a8b0339a90b7de4b78803ed8746d3ba0c5bbf0e7545f17ba631b6", 0x1c, 0x0, 0x0, 0x0, r4}, &(0x7f0000203000)={0x0, 0x0, 0x0, 0x0}) [ 453.954353] binder: 27014:27015 ioctl c0306201 20008fd0 returned -11 [ 453.982085] binder: BINDER_SET_CONTEXT_MGR already set [ 453.982095] binder: 27014:27020 ioctl 40046207 0 returned -16 [ 453.983517] binder_alloc: 27014: binder_alloc_buf, no vma [ 453.983544] binder: 27014:27020 transaction failed 29189/-3, size 0-0 line 2890 [ 453.983580] binder: 27014:27015 ERROR: BC_REGISTER_LOOPER called without request [ 453.983589] binder: 27015 RLIMIT_NICE not set [ 453.983910] binder_alloc: 27007: binder_alloc_buf, no vma [ 453.983933] binder: 27007:27022 transaction failed 29189/-3, size 0-0 line 2890 [ 453.990124] binder: 27004:27024 transaction failed 29189/-22, size 0-0 line 2775 [ 453.992593] binder: 27004:27017 ioctl 400443c9 20d77ff4 returned -22 [ 453.994119] binder: 27004:27017 BC_FREE_BUFFER u000000002000c000 no match [ 453.994280] binder: 27004:27017 transaction failed 29189/-22, size 0-0 line 2775 [ 453.997807] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.003869] binder: 27017 RLIMIT_NICE not set [ 454.005560] binder: 27004:27024 transaction failed 29189/-22, size 0-0 line 2775 [ 454.011919] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.012147] binder: release 27014:27015 transaction 3354 out, still active [ 454.012151] binder: undelivered TRANSACTION_COMPLETE [ 454.012214] binder: send failed reply for transaction 3354, target dead [ 454.018275] binder: 27004:27017 ioctl 400443c9 20d77ff4 returned -22 [ 454.018333] binder: 27004:27024 BC_FREE_BUFFER u000000002000c000 no match [ 454.028994] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.029296] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.069629] binder: 27034:27038 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.069645] binder: 27034:27038 Acquire 1 refcount change on invalid ref 4 ret -22 [ 454.069654] binder: 27034:27038 got reply transaction with no transaction stack [ 454.069663] binder: 27034:27038 transaction failed 29201/-71, size 24-24 line 2690 [ 454.112617] binder: 27034:27049 BC_FREE_BUFFER u00000000203d5000 matched unreturned buffer [ 454.140233] binder: 27034:27049 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.140243] binder: 27034:27049 Acquire 1 refcount change on invalid ref 4 ret -22 [ 454.140251] binder: 27034:27049 got reply transaction with no transaction stack [ 454.140260] binder: 27034:27049 transaction failed 29201/-71, size 24-24 line 2690 [ 454.144529] binder: BINDER_SET_CONTEXT_MGR already set [ 454.144539] binder: 27034:27053 ioctl 40046207 0 returned -16 [ 454.164703] binder_alloc: 27034: binder_alloc_buf, no vma [ 454.164729] binder: 27034:27053 transaction failed 29189/-3, size 0-0 line 2890 [ 454.164777] binder: 27034:27054 BC_FREE_BUFFER u00000000203d5000 no match [ 454.165601] binder: 27042:27051 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 454.172224] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.172399] binder: release 27034:27049 transaction 3364 out, still active [ 454.172403] binder: undelivered TRANSACTION_COMPLETE [ 454.172421] binder: send failed reply for transaction 3364, target dead [ 454.172432] binder: send failed reply for transaction 3365 to 27034:27049 2017/12/27 08:42:17 executing program 5: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000a4c000)='/selinux/context\x00', 0x2, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000ec2000)={0x4, 0x8, 0x8}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/ptmx\x00', 0x20000000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000b35000)='keyring\x00', &(0x7f0000472000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000f53000)='encrypted\x00', &(0x7f00005f8000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000036c000)="", 0x0, r1) 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000181000-0x12)='/dev/input/event#\x00', 0x6, 0x412000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x9, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00009c3000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r1, &(0x7f000006b000)=""/24, 0x18) write$evdev(r1, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) read(r0, &(0x7f00008f2000-0x42)=""/66, 0x42) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000ffc000-0x20)=[{0x2, 0x5191299c}, {0x6, 0x10000}, {0x8, 0x670}, {0x3, 0x3}], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000bdc000/0x3000)=nil) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000621000-0xa8)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mbind(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000de8000)=0x0, 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f000066c000-0x4)={0xfff, 0x7fff, 0x100}) 2017/12/27 08:42:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000238000-0x12)='/dev/input/event#\x00', 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000869000-0x9)='/dev/vcs\x00', 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000721000-0xd9)=""/217) 2017/12/27 08:42:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000707000)='\x00', 0x1, &(0x7f0000047000)='*eth1\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000aba000-0xa)='/dev/ptmx\x00', 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000aa6000)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000f86000-0x4)=0x0, &(0x7f000070f000)=0x4) getsockname$packet(r1, &(0x7f0000468000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000e2e000)=0x14) connect$packet(r1, &(0x7f00007da000-0x14)={0x11, 0xfd, r2, 0x1, 0xa, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) ioctl$TCSETA(r0, 0x5402, &(0x7f000089b000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaca, 0x9b0, 0x0, 0x0}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000734000-0x4)={0x100000001, 0x2, 0x40}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000a65000-0x4)=0x3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000ba2000-0x40)={{0x3, 0x0, 0x5, 0x1, 0x7}, 0x62b5, 0x100000000, 0xfffffffffffffff7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f000099b000-0x73)={0x0, 0x6b, "cf3ab1f6b90c100d1e90c7f4091bf69568d642c4043549f677531bb9690306ac14a6b8464c2be22fe8dc47e6a032d688c0ce5e4e87b8744d951e7cd9150cd82bdf7fbb35440a489632256d098509167009cb172dad7e206f781a4288b6a095a0dcb706b42ca195265237ca"}, &(0x7f00002c7000)=0x73) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00003dd000-0x8c)={r3, @in6={{0xa, 0x2, 0x10001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000160000)=0x8c) ioctl$TCGETA(r0, 0x5405, &(0x7f00009f6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000fbd000-0x4)=0x2, 0x4) ioctl$KDADDIO(r1, 0x4b34, 0xfff) socket$nfc_llcp(0x27, 0x3, 0x1) 2017/12/27 08:42:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f0000154000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = syz_open_dev$mice(&(0x7f0000947000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000304000)={0xcbf, 0x400, 0x6, 0x4, 0x0}) [ 454.173891] binder: undelivered TRANSACTION_COMPLETE [ 454.173899] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.432978] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) fcntl$setsig(r0, 0xa, 0x14) 2017/12/27 08:42:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7ffffffe}, 0x8, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000609000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) tkill(r1, 0x3) pipe(&(0x7f0000fcf000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000ee7000-0x58)={0x0, 0x4, 0x3, 0x8001, 0x5d4, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 2017/12/27 08:42:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:18 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="7df087780c06dc76794d20f7f4cd41f339983b7ec3e31315e9aa7e3dbc1ca48657c525ee1508940a4b6ff32a5554fc4501d08f5817fa401080acd018c11c08c6c52ae6918d6d2bf116e0e48e396cf1f5e9b381643c44dfa0323495dfec7c7c28b039439597ad6432fcc4832cfff7cb4b3e376ecfe1b8e335514d78e1bd622bab9ff2b91ab2395aed10787bc9ce8da45dc1a34f6c5e25bcf3f8b0ff9d4e31888549771abffa90df4d20791aae16677cf77dd845e33d4ea0321c8079ce1a6b739651e8737e1596266aad365039f542c4a0142e2ccfb28209a24b5d102d19d88bd3b241567ded8adfa26b99e3392c9e") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000f64000)={r0, 0x2, 0x7ff, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000a53000-0x8)={0x6, &(0x7f0000111000-0x378)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1800000000) prlimit64(0x0, 0x7, &(0x7f0000d41000)={0x0, 0x0}, &(0x7f0000eec000-0x10)={0x0, 0x0}) timer_create(0x2, &(0x7f00006fe000)={0x0, 0x13, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000bea000)=0x0) timer_getoverrun(r2) [ 454.489580] binder: 27067 RLIMIT_NICE not set [ 454.501837] binder: 27073 RLIMIT_NICE not set 2017/12/27 08:42:18 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)=""/198, &(0x7f0000000000)=0xc6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000)='/dev/qat_adf_ctl\x00', 0x102, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003000-0x10)='/selinux/create\x00', 0x2, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000001000-0x97)=""/151, 0x97) 2017/12/27 08:42:18 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000566000)=""/75) [ 454.530575] binder: 27073 RLIMIT_NICE not set 2017/12/27 08:42:18 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00008f2000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000001000-0xed)=""/237) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000c20000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000acb000-0x4)=r1) 2017/12/27 08:42:18 executing program 7: socket(0x25, 0x0, 0x0) [ 454.558688] binder_alloc: 27064: binder_alloc_buf, no vma [ 454.560194] binder: BINDER_SET_CONTEXT_MGR already set [ 454.560205] binder: 27069:27081 ioctl 40046207 0 returned -16 [ 454.561649] binder: 27073 RLIMIT_NICE not set [ 454.564317] binder_alloc: 27069: binder_alloc_buf, no vma [ 454.564345] binder: 27069:27081 transaction failed 29189/-3, size 0-0 line 2890 [ 454.577989] binder: 27069:27093 BC_FREE_BUFFER u0000000020154000 no match [ 454.579994] binder_alloc: 27069: binder_alloc_buf, no vma [ 454.580057] binder: 27069:27081 transaction failed 29189/-3, size 0-0 line 2890 [ 454.604194] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.604281] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.612392] binder: release 27069:27073 transaction 3371 out, still active [ 454.612399] binder: undelivered TRANSACTION_COMPLETE [ 454.612434] binder: release 27069:27073 transaction 3370 in, still active [ 454.612441] binder: send failed reply for transaction 3370 to 27069:27081 [ 454.612459] binder: undelivered TRANSACTION_COMPLETE [ 454.612464] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.612480] binder: send failed reply for transaction 3371, target dead [ 454.728165] binder: 27064:27078 transaction failed 29189/-3, size 0-0 line 2890 [ 454.728175] binder_alloc: 27064: binder_alloc_buf, no vma [ 454.728198] binder: 27064:27086 transaction failed 29189/-3, size 0-0 line 2890 [ 454.752181] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.757731] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000d15000)={0x0, 0x8}) r1 = syz_open_dev$binder(&(0x7f0000a02000-0xd)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000919000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) truncate(&(0x7f0000fe9000)='./file0\x00', 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f000070d000)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000eeb000)=0x0, &(0x7f0000bf3000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init1(0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d22000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000094000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) syz_open_procfs(0x0, &(0x7f0000c65000)='net/netstat\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000566000)='/selinux/enforce\x00', 0x200000, 0x0) r2 = add_key(&(0x7f0000937000-0xa)='encrypted\x00', &(0x7f0000349000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000750000)="111563fe65759013785446257303cf8ed36746df4d1167d13e9d5619ca365fa35375f75d4a1fb6cf37f77b5d18b7dbeff1d3416dc1ecdfec5442c8637706fa15d0772031c5df64786549637cf95b3dd35d0716d476191e0612dc1a734598685c2f7fcd2cf5d9a70abf6ffae686c681713547210848e9afbecc34be763e3134652497225b386161606cd40a4d9ca3005a40c2e53057a773d3ec1f33a7c977db50988768bcfccf6390febdfc73858d22a08158582571915858919239e810dad57f3eecc7aef662dd2daa2303e052881918db7e8a6891eda7b02cc9d6e59c8c22501183096086d74f3b0dd1db3934e888", 0xef, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) 2017/12/27 08:42:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000fc2000-0x8)={0x4000019980330, 0x0}, &(0x7f0000e26000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c54000)={0x0, 0x0, 0x0}, &(0x7f0000a16000-0x4)=0xc) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = fcntl$dupfd(r2, 0x406, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f000055f000)={0x0, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xba, 0x9, 0xffffffff00000000, 0x72, 0x2}, &(0x7f00004dc000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00006e5000)={r5, 0x9a, "6c9052faf1fdabbcebd6b7d600f500128354bf0ea249858121a3e622763dc67a3a438200c0ce2d9cfb0ddcfd59c16e18ae2005e6c3a9064f014e5d4d28771115e0a4a90fb6d1e738052adb6c12c956ab17063388d8e7746e2e5461ef8439870d271324ad261c0db25d1eac3267ac8e84c5a44015e6a5abaa0a2525f15d1a3b63b50f00251bc13bda6290bd0c8cf0a2ef43cce586698e51869f78"}, &(0x7f0000eef000-0x4)=0xa2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xfff) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000acd000-0x8)={0x0, 0x0}) get_robust_list(r6, &(0x7f0000fe8000)=&(0x7f0000ccb000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000cb5000)=0x18) 2017/12/27 08:42:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:18 executing program 1: mmap(&(0x7f0000000000/0xafd000)=nil, 0xafd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00002cb000)='/dev/cuse\x00', 0x2000, 0x0) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) setrlimit(0x0, &(0x7f00009ea000-0x8)={0x100000000400, 0x101}) mmap(&(0x7f0000aff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000030000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000aff000)=0xe8) mmap(&(0x7f0000aff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000b00000-0x18)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, r2}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000af000)={0x7b, 0x0, [0x100000000, 0x4, 0x7, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8940, &(0x7f0000afd000)=@generic={0x2, 0xb9, 0x10000000000}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000afe000-0xe8)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000436000-0x4)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000736000-0x10)={r4, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000afc000-0x43)={0x1, 0x0, [{0x9e, 0x0, 0x0}]}) syz_extract_tcp_res(&(0x7f00006e2000)={0x0, 0x0}, 0x2580, 0x7) 2017/12/27 08:42:18 executing program 7: prctl$intptr(0x8, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0xfffffffffffffffc, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$ipx(0xffffffffffffff9c, &(0x7f0000d11000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x10, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$ipx(0xffffffffffffff9c, &(0x7f0000669000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x10, 0x80000) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000963000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df6000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000a0a000)=0x1c, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)={0x0, 0x0}) r7 = accept4$ipx(0xffffffffffffff9c, &(0x7f000094f000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000a0c000-0x3)=0x10, 0x80000) r8 = socket$inet6(0xa, 0x80000, 0x3f) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000b83000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000a7e000-0x4)=0x14, 0x80800) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f000004b000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000279000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x47d5, 0x2000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000-0x4)=0xffffffff, 0x4) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000624000)={0x0, 0x0}) r16 = accept4$ipx(0xffffffffffffffff, &(0x7f0000f9d000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000d15000)=0x10, 0x800) r17 = socket$inet_udp(0x2, 0x2, 0x0) r18 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000032000-0x10)='/dev/sequencer2\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r19 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000000000)=0x14, 0x800) r20 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000537000)='/selinux/context\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000001000-0x1c)={0xc, 0x8000, 0x6, 0x6, 0x0, 0x0, 0x3f}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x6, 0x6, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f00002ce000)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00007ad000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000baa000-0x4)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000648000)=0x0) r30 = getuid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000596000)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000994000)='/dev/autofs\x00', 0x880, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r33 = accept4$inet6(0xffffffffffffffff, &(0x7f000053d000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000001000-0x4)=0x1c, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r34 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x18200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001000-0x4)=0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00003c4000)={0x0, 0x0, 0x0}, 0xc) r37 = getgid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f000039a000-0x10)=[{&(0x7f0000001000-0x74)="ba4f034b5c82dec870d94902bc7c66a2c38afcc37ffa4478a508c4937855543ad3aabefa0dc51a3cb26738496a3eab6cbeccd6c2555a2cf72a2dde3f23ee965a866ad34832425365b3ae4abfbf28a1522548ee68ea310b0363ec4a9f5490b66fb6658914d0067c1b7234a298bee7b0595f224bf4", 0x74}, {&(0x7f0000ffb000)="129135e3ae11f15a4664309e8a9288a8972ebd5928c1de0d282a6368dc62aec67cf7c97e6a81b83e483726b52803fb85e21d891d11b682c6820141db788a2882ee8aacac404845e9c411eebeb519db2ff2f0b9535e14faf20c434ae6de57e9d144ccf7822ee3a1a5d792f2f5ba070fe6662454d3af6e7e0448675dbc8e46e9aaf3429fae993a5c2168b0fe46f95bcd58028e4a387f8450164f76558326bb5f9cff4b", 0xa2}], 0x2, &(0x7f0000001000-0xf4)=[@rights={0x30, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7, r8, r9]}, @rights={0x34, 0x1, 0x1, [r10, r11, r12, r13, r14, r15, r16, r17, r18, r19]}, @rights={0x18, 0x1, 0x1, [r20, r21, r22]}, @cred={0x18, 0x1, 0x2, r23, r24, r25}, @cred={0x18, 0x1, 0x2, r26, r27, r28}, @cred={0x18, 0x1, 0x2, r29, r30, r31}, @rights={0x18, 0x1, 0x1, [r32, r33, r34]}, @cred={0x18, 0x1, 0x2, r35, r36, r37}], 0xf4, 0x80}, 0x11) 2017/12/27 08:42:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 454.819586] binder: 27107:27112 ioctl 4010aeab 20d15000 returned -22 [ 454.839763] binder: 27115 RLIMIT_NICE not set 2017/12/27 08:42:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000a21000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) openat$sequencer(0xffffffffffffff9c, &(0x7f0000e1f000-0xf)='/dev/sequencer\x00', 0x2, 0x0) 2017/12/27 08:42:18 executing program 5: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000b74000)=0x0) r1 = gettid() r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000d91000)='smaps\x00') sendfile(r0, r3, &(0x7f0000bc8000)=0x0, 0x40003) 2017/12/27 08:42:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 6 (fault-call:5 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 454.851622] encrypted_key: master key parameter '1ÅßdxeIc|ù[=Ó]ÔvÜsE˜h\/Í,õÙ§ [ 454.851622] ¿oúæ†Æq5G!H鯾Ì4¾v>14e$—"[8aa`lÔ [ 454.851622] Mœ£' is invalid 2017/12/27 08:42:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001000)={0x1, 0x78, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x87, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) clone(0x100, &(0x7f00002bc000)="", &(0x7f0000942000-0x4)=0x0, &(0x7f0000101000-0x4)=0x0, &(0x7f0000a89000-0xbf)="115b76ffffffff2c3b1ceabbe230364dc89890409476bc3af2708276cce7e268904d06d0b4fff90ddfb2f9ea472cd32ad180f4e1298e9f77b90157b366bf26c5aade6d09c3dee64129948d7429d47f294940b9102799d9d9a01c29858f8101d3f57d4084eb43050962500db86e8c5392fe27f586787a9b611fb941a0decedef0933387410b8d57fcd2b6480251830840c0dbc3364c9ce7830038fd9af8bd59af579c92240916083eae00d26f949b869a624c0db632bba3354cab1acc39aedd") r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00007cc000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000849000-0x30)={&(0x7f000033c000)=[0x0, 0x0], &(0x7f00007f7000-0x1c)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000058c000-0xc)=[0x0, 0x0, 0x0], &(0x7f0000567000-0x14)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f89000)='/dev/hwrng\x00', 0xc0080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000d5000-0x4c)={0x7, 0x40, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000943000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000056000/0x4000)=nil) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x400, 0xffffffffffffffff, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ed000-0x8)=0x0, 0x2, 0x3) lstat(&(0x7f000066c000-0x8)='./file0\x00', &(0x7f00004db000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000030000-0x10)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000201000-0xa0)={0x0, @in6={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x401}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x0, 0x0, 0x488, 0x4}, &(0x7f000083d000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00009df000)=@assoc_value={r1, 0x6}, &(0x7f0000db7000)=0x8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000bb6000)='/selinux/validatetrans\x00', 0x1, 0x0) [ 454.868828] binder: 27123 RLIMIT_NICE not set [ 454.873463] encrypted_key: master key parameter '1ÅßdxeIc|ù[=Ó]ÔvÜsE˜h\/Í,õÙ§ [ 454.873463] ¿oúæ†Æq5G!H鯾Ì4¾v>14e$—"[8aa`lÔ [ 454.873463] Mœ£' is invalid [ 454.891901] binder: 27115 RLIMIT_NICE not set [ 454.910584] binder: release 27113:27115 transaction 3378 in, still active [ 454.910594] binder: send failed reply for transaction 3378 to 27113:27127 [ 454.910617] binder: undelivered TRANSACTION_COMPLETE [ 454.910627] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.927187] binder: 27123 RLIMIT_NICE not set [ 454.952371] binder: 27107:27135 ioctl 4010aeab 20d15000 returned -22 [ 454.952593] binder: 27145 RLIMIT_NICE not set [ 454.958441] binder: BINDER_SET_CONTEXT_MGR already set [ 454.958452] binder: 27107:27123 ioctl 40046207 0 returned -16 [ 454.990072] binder: 27107:27141 BC_FREE_BUFFER u000000002000c000 no match [ 454.990235] binder_alloc: 27107: binder_alloc_buf, no vma [ 454.990262] binder: 27107:27135 transaction failed 29189/-3, size 0-0 line 2890 [ 454.992147] FAULT_INJECTION: forcing a failure. [ 454.992147] name failslab, interval 1, probability 0, space 0, times 0 [ 454.992160] CPU: 0 PID: 27147 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 454.992169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.992175] Call Trace: [ 454.992196] dump_stack+0x194/0x257 [ 454.992231] ? arch_local_irq_restore+0x53/0x53 [ 454.992309] should_fail+0x8c0/0xa40 [ 454.992346] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.992385] ? __f_unlock_pos+0x19/0x20 [ 454.992410] ? lock_downgrade+0x980/0x980 [ 454.992433] ? map_files_get_link+0x3a0/0x3a0 [ 454.992442] ? __lock_is_held+0xb6/0x140 [ 454.992483] ? find_held_lock+0x35/0x1d0 [ 454.992615] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 454.992647] ? rcu_note_context_switch+0x710/0x710 [ 454.992711] should_failslab+0xec/0x120 [ 454.992737] __kmalloc_track_caller+0x5f/0x760 [ 454.992775] ? strncpy_from_user+0x430/0x430 [ 454.992790] ? strndup_user+0x62/0xb0 [ 454.992837] memdup_user+0x2c/0x90 [ 454.992865] strndup_user+0x62/0xb0 [ 454.992897] copy_mount_string+0x24/0x40 [ 454.992916] compat_SyS_mount+0x2d/0x1070 [ 454.992953] ? show_fd_locks+0x2c0/0x2c0 [ 454.992978] do_fast_syscall_32+0x3ee/0xf9d [ 454.993040] ? do_int80_syscall_32+0x9d0/0x9d0 [ 454.993116] ? syscall_return_slowpath+0x2ad/0x550 [ 454.993138] ? prepare_exit_to_usermode+0x340/0x340 [ 454.993164] ? sysret32_from_system_call+0x5/0x3b [ 454.993210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.993260] entry_SYSENTER_compat+0x54/0x63 [ 454.993271] RIP: 0023:0xf7fadc79 [ 454.993278] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 454.993292] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 454.993299] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 454.993305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.993312] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 454.993319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.015283] binder: 27145 RLIMIT_NICE not set [ 455.032354] binder: release 27142:27145 transaction 3383 in, still active [ 455.032363] binder: send failed reply for transaction 3383 to 27142:27158 [ 455.032382] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) lseek(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00004d2000-0xc)={0x0, 0x0, &(0x7f000057e000)=[]}, &(0x7f000069a000-0x4)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000389000-0xc)={r3, 0x80, &(0x7f0000a48000)=[@in6={0xa, 0x2, 0x3aa, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401}, @in6={0xa, 0x0, 0x10001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7fffffff}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x800}, @in6={0xa, 0x2, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}]}, &(0x7f0000c7a000)=0xc) 2017/12/27 08:42:18 executing program 3: prctl$void(0xf) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000d17000)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002000)=[0x8, 0x1]) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000003000-0x20)={@generic="a8eadc82bd841b067e1e10c541b83f39", @ifru_flags=0x1000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002000)={0x0, 0x0, ""}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000003000-0x8)={r2, 0x0}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003000-0x20)={r0, &(0x7f0000000000)="efd43ffbfc8d8f8e2d096466930ff6ade8ea5764412399a30edd4abb4db3afd1d5f664d74ca6fc7d519accdc41e4a9cc5c9f6d81908d91feaa2fb4dd78662f483d6ec562905701f01d99aa1d426232835198b4aeed1ecf7319418a6280d76445f3736c5c7a65da229c009fba2fbd82f1d9a8c6d877ed4dcd3e8d1854cac040e89c6e0f0fa9ee6fa5ab293a528e580cdb6d494aca21", &(0x7f0000000000)="a79c8b192b24f3b7b97176cb453d4c28d785ff1b7d0315ac71425b66a58b807d8dd77bfeca2545989cedc0265774f4b7ea3e3db78b25d22fc588a0ef7afeedac70d9ed4c088c8ac3afe33a3680470d973b0d1f8fb7c8c5746699924417b42d90d8e687ec8e68bbb089f64e60cccdf6648c8bebd90a28a69c3ed68d5949b606a042ea0810a2c5c79521f0813fad3663f9b9f451efd58c97464325b9393c2b36045fc1df01ef0bc5da0efc8c2ec2f4", 0x3}, 0x20) 2017/12/27 08:42:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000926000)=""/4, &(0x7f0000000000)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000057000)='net/ip6_tables_targets\x00') r2 = getpgrp(0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000a13000-0x20)=[{&(0x7f0000b9e000-0x1e)=""/30, 0x1e}, {&(0x7f00006ad000-0x52)=""/82, 0x52}, {&(0x7f0000616000-0x1d)=""/29, 0x1d}, {&(0x7f0000e1f000-0xfe)=""/254, 0xfe}], 0x4, &(0x7f00004e1000)=[{&(0x7f00000db000-0x1000)=""/4096, 0x1000}, {&(0x7f0000e6b000-0x7f)=""/127, 0x7f}], 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000a4f000-0x400)={""/1024}) 2017/12/27 08:42:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000dbb000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendto$llc(r1, &(0x7f00009a1000-0xd5)="de18af2217f1084dfeb5106d16e59b8a518b302079bca16d99687d9c63225e1ee28b099a860605c8e7518081a5ce6e33c7dceabb64b0f2ebb6942959dc90ff8901d22826af4698b46d652d19bc5f0c8deeb54dd080208f6a0658c8cbc1384ca6b8830671c2c2dd2e524975321c6af3faba59306146e05e4d57f9ba099f48480688e1e2d7c39c6319e08704d6f18d0c81c4607fdbe712f83ef24bca329c46fa16320a4106a0e103d7af289c5fe333530c76305eb113ebfe7ebba71c8ab9c38d8f707bebd3adb74f4ee6c54c0bbc0e299360a096e08d", 0xd5, 0x810, &(0x7f0000862000)={0x1a, 0x9, 0x20, 0x8, 0x1, 0x5, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:18 executing program 6 (fault-call:5 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x100000001, &(0x7f0000486000)=0x0) r2 = creat(&(0x7f00006b5000)='./file0\x00', 0x30) io_cancel(r1, &(0x7f0000ac5000)={0x0, 0x0, 0x0, 0x0, 0x63, r0, &(0x7f0000d25000)="2fe914750a1c07833de717111cce427ee6ab5912d1eeb3b8569ef7f649ee414bf4c80ee8879d28265b7626277210d23878f50c610bb5a3722cc1d012543e8ed22fa1a5ae7e90b1f4a65a120642ca39da90685d2e8c70d0b411b53d172301de5a8d718df91dca67e8a037bc1a47c98c99d8bc683ae0eda506419921555ae1000179fde1b9e0241b066f3b4211c1c4a4276fcbc14c845ecb44ac1c8d8f5bd487d2713ab223b5641d0b98da5ffc28", 0xad, 0x100000001, 0x0, 0x0, r2}, &(0x7f00000b9000-0x20)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000a41000)=0x80, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000010000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000449000)=@buf={0x40, &(0x7f0000e62000)="eb1db6966d70c93549ca7f5b41e405e7a6f7cbd8bc475d56157e9e63c2460c62594f6651777b8d33dbacd8c822995b33546e8a93d780f41448f4fffd9df26d3d"}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000e19000-0x4)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffefffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) readv(r0, &(0x7f0000a73000)=[{&(0x7f000024a000)=""/105, 0x69}, {&(0x7f0000790000)=""/171, 0xab}, {&(0x7f0000bdd000)=""/234, 0xea}, {&(0x7f0000752000)=""/22, 0x16}, {&(0x7f0000150000-0xbd)=""/189, 0xbd}, {&(0x7f0000ed1000-0xe3)=""/227, 0xe3}, {&(0x7f00006bc000-0x1000)=""/4096, 0x1000}, {&(0x7f00005c6000)=""/137, 0x89}], 0x8) [ 455.032390] binder: undelivered TRANSACTION_ERROR: 29189 [ 455.316528] binder: undelivered TRANSACTION_ERROR: 29189 [ 455.323220] binder: release 27107:27123 transaction 3380 out, still active [ 455.330318] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000010000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000449000)=@buf={0x40, &(0x7f0000e62000)="eb1db6966d70c93549ca7f5b41e405e7a6f7cbd8bc475d56157e9e63c2460c62594f6651777b8d33dbacd8c822995b33546e8a93d780f41448f4fffd9df26d3d"}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000e19000-0x4)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffefffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) readv(r0, &(0x7f0000a73000)=[{&(0x7f000024a000)=""/105, 0x69}, {&(0x7f0000790000)=""/171, 0xab}, {&(0x7f0000bdd000)=""/234, 0xea}, {&(0x7f0000752000)=""/22, 0x16}, {&(0x7f0000150000-0xbd)=""/189, 0xbd}, {&(0x7f0000ed1000-0xe3)=""/227, 0xe3}, {&(0x7f00006bc000-0x1000)=""/4096, 0x1000}, {&(0x7f00005c6000)=""/137, 0x89}], 0x8) 2017/12/27 08:42:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f000070f000)="260000002200472b05e07d000000000000036d4010011f00c000ad00000000000047003500a0", 0x26) syz_open_dev$vcsa(&(0x7f0000fda000-0xb)='/dev/vcsa#\x00', 0x5, 0x8000000000000200) readv(r0, &(0x7f0000e72000)=[{&(0x7f0000bed000-0x6c)=""/108, 0x6c}], 0x1) 2017/12/27 08:42:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000, 0x6, 0x2) write(r0, &(0x7f0000088000-0xaf)="240000002d001f5314f9f4f4110000000913010000000100000021000000000000000000", 0x24) sendto(r0, &(0x7f0000cf2000)="f8c88447fef07b6c7c0821956e652f0f6ffae098ef20eb64a93344c933ce7fc3cbb931a8c52f346b813d772d67fe577c5ed2d4e04404fd3c799d20dd87cb3f7914857df7d53563e10a5e4bb88e501f83257a3b256fcf50dc8b9013ad9b35e11557bc4978fdf877a8a67d784f24575171371e66d9d64206a1bfa27fd43d01cc708b1fd0aa21e053cb728d92b94c2c3e406e6d1f1ca746753ec75dd12e9604b6c46543cc1129672b1e0f3c5990acc2dc3d3e7fe6f177bd98e1f51ab22c50dca72e2261ea14a4ee5c6947795155c85156cc452723e7d03bdbb5f5253dc4ba04e8db719c204b8553eea784f9526c178202f2", 0xf0, 0x80, &(0x7f00004ff000-0x6)=@hci={0x1f, 0x5, 0x0}, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00002a7000-0x4)=0x7fff, &(0x7f000032c000-0x4)=0x4) 2017/12/27 08:42:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000da3000)='/dev/usbmon#\x00', 0x4, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000ba000-0x60)=[{{&(0x7f0000a5b000)=@l2={0x1f, 0x3, {0x2, 0x7, 0x2, 0x101, 0xc93, 0x0}, 0xffffffffffffff81, 0x0}, 0xe, &(0x7f000068a000)=[{&(0x7f0000a09000-0x69)="e302a94d6dfe004be4f434a51603a3442f796249956d4ce56b7c538f9939e0b8785cbf65a50502014826b964a5d6a9d9ed7f31566f5f201e4b2f3a6cc39db824a18205063fef7bb33fcf857fdee32f182fa1ff23c788193efabde13038f60e9aca2e523287bba3f2fc", 0x69}, {&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f00002a8000-0x7b)="4b46b1d55bc2015a07335c7abbc53384a2f1db2a765c8fa6e390518d48c9fe24bf7e356b40c45bf4fbb419014dab3adf271e16dd57ea76c47ff92d316d3e9c1cf4aab5298aea3c4ecdbce0a878204adc42752e06cf4c7161d4e9d559ba3dd342e294fc8540b81bfc0c439f3010bb628dda717bc9388c256d93a791", 0x7b}, {&(0x7f0000d87000-0x83)="d0bc4d49827297061449baac7ab8bc28850c33bfe443f6ab88308aa692714709ef5360d42787aaae7fcf8982a743cfb62b030972b685652b1defcfd6bdad2e4573ce6f4312bfd0594615a61a07c96547519da8e0a3b7d1e081357ad64b4f09b88385face5e51fec8f65ced008ac6ef3dc174227b9c1402e38eab48baaedbe26ca0fc34", 0x83}, {&(0x7f0000001000-0x1e)="7b25e9e86c919dcb569b4fca09e4eeecf71368f1835452d53b9415f8f221", 0x1e}, {&(0x7f0000eb2000)="3cd6e203ca47a160452870e29f4de4eadd86bbe21f719adabd9aa00afbdbf7654a53806a570d4e1b1f55b99f3543c615c89cb58ea041e39fe759989b60a8b74764e97c3d2600038b3a71e801d97da0daa4c655f5eb015d081253bbfd8c552b7d9a0ebcf3c9cb08098838ba1e082bb8adaddbf76b450ec3864f073614d857496eac5f27284b6433e6375a52939cd7e79662", 0x91}, {&(0x7f00008cd000-0x3b)="5e0a7d26151ae025f2482fa8bca0b47f89133d08a075fd38721cce9ca027f98fc0aef7d3e6d8b96ae9d6bfb0f421b9f8a7ad87513cabc7d1c02566", 0x3b}, {&(0x7f0000000000)="", 0x0}, {&(0x7f0000b79000-0x71)="d952b92d1860909cb3309eed522341d79070b4e5b21b51a2040782a3b969a083babeba2e2cc51088a9b0e5d42605c0c9f2c4ca0fe71b8594b8694aea5c089728cab7a6e2f8b5ffb3fc5296ee33dffa286168398008f3c69ec61b2c68111c795decfbafff8c484c3ea669cab8402f8e3d29", 0x71}, {&(0x7f0000001000-0x89)="a9fa739241c7e72f6d9c1adaca4c1484ee730bc959477ed7d2b42abdc26a19b70367a9f356f346d70677feb0a4d8f78a1d6d9a4cde0ff8b0db1fea31118741ee41bb24d1a5eb0234669532cce7a2f8ef5611c7d074ea30eab9bdac970f760f782b8c5d02c90c86d40eb4bfb7e4edd58ac525342c4ea4f1ee7e6f0844117b4707bae47419cccf353100", 0x89}], 0xa, &(0x7f0000001000-0x2ac)=[{0xf8, 0x10f, 0x28, "c68fd50f819fe2ff11f39a1da617ceed7c8099f3a1b06346713a8105f039907a7bcec80b2fabb432780488c04eb1ca99ad0ac3562d8cc687710b7bb775ff6090d4986c53f887f43a0f8f3b47dc8e22697484636a1db77c321a016849e40e18f0109d9e14e2fedfb03251313718e2802d57288c744115f387ef57120deaffc4a7d2d0670de5a5a317e21ee2ce8f22230dbd99215a74f70e7648ff763bbbc5c66c74ad18bdaf7decc569904c3cc8a2787671bd2c68bc275ce05deb353f13d3a68b694ee4421324d8863debe84512d814aa85cc6cf458660b524540f316e0776591c8cdf60b34f8b39dab2703"}, {0x14, 0x119, 0x2, "49a700042988"}, {0x90, 0x118, 0x6, "00bc5618b3d4aed03bb5bb69bf9382308a8f0bb32007b169985619339d8a1ca89282615e5b1957133b70d90f502b70f08204d6593b84b4af50920ed731dc0300c71a25a017b6e2e4cd70a318c120704c9cf2e6d9187ce620acfcc2413dba17886bedc071e5d39ebb2703133add0098474ffab625e570fc43f60128ca9bb3ece0f6"}, {0x94, 0xb64249fbaf90c462, 0x580, "ccbaa4d3d882110a804a07102a16d35c603d86dc092bf0a5ec71eaba520fb8b354818867be1b53a6b9392aba23be001ab89ffbfdef440fca875019dd20bb1058c1f00b6c6c575e10a01203d5422e61883316e7af5952294bb8f1c784505d1be63a90571207ab4e8747ed88d8d9f3ac1d2a54d7ee9303388f1df7697905e0a63a1a48d1304148"}, {0x1c, 0x10f, 0x0, "8d8c581739f5166528503a06092750"}, {0x60, 0x13f, 0x7ff, "649cd0a58e6c85702aa1e6764067d584f8d450d339cd1172acef008ede50f680cd3cd5e6eb0b1704c6c3caafbdbe540a291b5007e21f54a3ab60948eb6acc9a476faaee99de9f9bc91a7ccc178a676420d8286b3"}], 0x2ac, 0x4}, 0x8}, {{&(0x7f0000603000-0x8)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000cf9000-0x38)=[{&(0x7f0000034000-0x26)="9f9b37c67ef4030f242c58efd18002ab62ac57c7367f6817f16c85ddd21cabe87be78c8ffab5ee85de9c21d87250de85f28c7766a696ae834e7540de2f3427e3ffc883e3a70ef625a151a08673b78df1c50a34a4e90e44d7703c9bc31090004f4ab0d885e67c34cef0ee6ece30cb0f056e2e8b7c2d6daab77e", 0x79}, {&(0x7f0000442000)="45a4b267f497aa5c7ae82d45a0b5cccfd61e5b75d5726fb1784cef8d6f313f30c688eb9d0c9cd5ce163121028c889d5949e9d6414fec04a7e79e4d276858c0226181800fd8eff5ee9d75af5ae0f7683ad967e68d8a7aab2039338f148570e5b9269c4ba84c53e96e5299494ea07ffd9e7ba63d5d32239d6ac6eb673f3ce0d57e3c5fb0ccab1bb18acf33f94d1f1a6834b623a3b33e65e8e3c2e780f3e4bae0acfaf3a6c1eda44e87edb07bdefae6469b67c7834e2627e9", 0xb7}, {&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f0000da5000-0x54)="228a2e6b25c09e83f64ae255b1c4bf46730d251da57e79932294db5d9641bc53723d8831c149610d403d8f188407f5664af46eb20a10ea2c0faa8089856bf437d9460a059c4e60d51006a7c63eef80d5594825f6", 0x54}, {&(0x7f0000cb8000)="40e3d670dd733481439f9c2a280cd6084c7af69aa29792aef54a9db20c173f2f5f4cfe385f987f5e32512cda462c", 0x2e}, {&(0x7f0000001000-0xb1)="1382318e3f193236c7fc848c35611897ceb4708256c7ba264f1b80a14d98d76d70d7f89952d90d980362aae050d1ea439dc7d56e3e1c937749ce0411f9b33c5449a446b623e8776423d43c3bcb12740c10578c029f90ddb1e6fadf4999739a778cf514f0e047e8b828d4f1da6b29c996ef5a68a2064ba2211d90594a090e95ccf8285e4762f855ad34f49d26915c74390b043f9b1bd26ee75e03501fb515ce57578e0908b5d715adc02c5abbe12675d2c8", 0xb1}, {&(0x7f00003bd000)="aa52db7b5284a4268850888b3090dc7da623d1eff85f73a47a83254e52d7972390c11364b2e8ecebcebe6f669ed93b7af6139369cc678281dd46d9df2e8b4e221d", 0x41}], 0x7, &(0x7f0000001000-0x129c)=[{0x108, 0x0, 0x4, "8db0e83571cfd976ca1849755cea5c6ff912c8c5f5e2344dbf3910686ad5f6a356ac9c7a973a616cffa90d640be2ac4a81588a4c1fe7c7739481bf37655c44bf913b5efda41c27e1de41a915e2cd910ca782ac770c04ed8e730853d46222c64b83708cadeac75e8c3365dac021a0fe5a6c40b63cca830334699077fd4b4c1d81f6746f9d3a1238a66bebb3a2bf3fcad35159dd1e4339b58c6612fc38d30e970868383c93529419a72bb16aba54f3188ad308fbde165fc213b4202d177140cc30ac053884c20df57addadbabe48a366c154e64241c9563e426bc260fdb4c80f3ba68647c44982107bc3d9db626c3b3f75a0aa09f79a05e53b3f"}, {0x100, 0x11d, 0x100, "48ab4ddd9fa8976ba1d7cf9eb68ffbb0be594c24616e6bbb688d550f4008a9cc5312c1f3ba540706ff1eaf2cb5e8f48ed40304915703aea894b961c187e9991d1f270b13dff18892378aecdddfb18c552faa126c80c24718958d9033b80e90a4d2a1fef55f1b8e8872e2cc25bd248458373684ccb7b3ceb9a461044d9088260e20ca0ad8cf9391c395eb85086d23d98e5bdced220f9b1923629e108d25f0934f4a0c1968b18c1684f591e7b2d1af2ec9210fbc1c91b2a30c1bec7cae7325a7ac4e1d7b572778ba925d5d89f60f471a8f051ed92410b213f6d85a5e7b779fb60261438207dd326b9c26128bc63c5c92a0da9e84"}, {0x100c, 0x0, 0x1, "8b2f6d6dcd0671c86e64a35308aaa6c3171976e97cd3dcddb91d4eba3c91cf2e115b097fd50dac23bb84fe2dcecc3f3efb2cd7673cbab09a2f344a1b9a69ea17af37c63a67b4328fdf792017bbf801ced0f5c650332380a9a6ae44ff8cc43ad412508065ccfac25be2ddaca4888f9f58f9aef1c4f291da0f5ecaf1842bc98f689f555ee6c437e09230c3957b0425b98e99b070ee82b44bc90f35f0d5822626e406113f0070391e9638f169aa300a21bc0431f480debe156d3c14afddd078027360bc778d55547496ddb252a166882c33ea3ea8abe1b8adf35573c5d81454d1f9944a59523571098cc7d0f2ddca29b43c99bad96b8fc8557e3fb14102a48f4bc85a8ef0ac480550ef86e2a690a5cf74cb3ba18f2f8182279ee0dfa57083b5b0de48d9266c645981969b02c0b57c9177126fdbb248c141d00c20704d0d687453860245aee7e200938bfc9b708a903b13f40e4a3dac76a6de5588e0a64f6afb6bf4bd69e90ffc800120513e19e5d65c63f1630e003fbf181e23ca4e981531de9ee061a27b44d6b385946366d0f0a3daf5445193e333eac8c83895df6c2a3565e6407832cd90168dc82bba98c7275f6e03059592676fab82a69e587f0aff38c13edacb95d6c721ddb47589cb9c21c09c9ebf98e514afc3da212c4aac6cf6026bd5bdbc104dc975eb907d86e7365ac39a5c3f1c6ed9b52f22931927e0f3547cdab7d92c2d0a2478a930070b563536948c411d78885812bb0522e1a129efc27c217ee7f0e34edd4cfdda4f179a7202ce0dacc02662682c8a3d7e9149aef89810db0ceeb126de148b4448ad3e8c0c7420f43b8fe295e5898667cb213f75b66cf660979e237bb80bb3e76e4cba2c33aff910bf820e345365e2d85dba3da0f95676a58a744d6d8dd64d6c3cd9a7c97b66e2701c990d390ab8fe874eb4c9ae816b5a8ef2a57c17ce4ae71c58a8b1b6f627223734b7363e8200b497366fd9fe9854ec9a43165516f833696dde897c0523928ed8193888bc5ac859fcec123f7a4fc7ea4f053d14f6cbd9e6a46d52efe027701cbcfa6e6d2cffcf7ec1b5a0b276bcb981e97e63515b6f49ee4db9cb0a918b245f9e97bc0b20ade8e28e176c1bba3306af9600a1d9ef15ad672f9cff93f4cb564aa9556826998e2f96faf030c2dc728757a006400a80b59e9d94c945623b8cc2c2c417a6a88a916ddce0c2885e808eb1036cbc951ed3412e8fd6565204e5055b3c6a2bd340b2ab3a8edb864e2c5f9db764aaef075c35a0b7bf646ff8bdfe5576e8eeb7fa50ffb54f171d785c4af5d7e4db35f61fdebc21ecb892124a503a3811a66d8200efb9c444f0c672e088580661238d2bf1201f4d7e80b5b788adf3e46eb04f8ca6245656b84c8790a9d7141b55702cb97bda0400317cde915078106bf3a2e09456d1f829b5a1aedc02315b0a5cd603fd72a13abc155c47ec6f397a9e1c2885ef14f6b8cb1acb95ec114b1590c4e59d786251e2e7cfc59603a037b7dbf3a24d569886ee9ed988885be6ab00ebcec2206611797362031b26777717f8373621b4df22afe335e4c131aef1265690099d7a9e43d3b3af0a170ce8cede94b6233d4489341e76e6fc34b1b7f77cf4a8827dba511bb68e90f837682a9de99e626cc5116a156ac5612bf53df6b8a7b5976651f5dc69212e1341935fcbb7e95669f8d816c4d9b4c445a75384b452c007a72e723e0ca67ca8c4782c5e132c0dbc08ff72e20f392673853057de70f528a7495b143bc4d914b22da32488613873537afdc58dc6c6b5e5bcffb8ca935afef97bc5829486106ea04211d2fa578eb928832c930aba33b0243b71ac93b6c66ed1ce8ab66b9c452befec3487aa1e68176fa71f9dffd5011eabaa40cbb1a8431b877fc642a88b6b8e52c7847df5da4ac7d371078abc8fd43d7842e1c5d0c72aeed4b1b920a017317e1e2c24317afdb983b27af0a73436aa63819b91982e790388119a65b93de6622333244d2cd0b14bec474af22bd22378b444be26f32899ec795c25b90ccb5274961f63fec0be8258f434785a2b689b85f4b29cef2256e7293777086c6495ace2adf6f3d47eaad6b837c563e3999d114c5828e25253b2ad3f8cab746daa61e96c6fc62b4494c6d72df47e1d3249cc3614d8ca0244c19de5ac2d4a385632bcaca482d6d27492cb15e495370b2233049576c933e532d744dbdfe6bf89a6babffcdb53fea3bb26641b64ba53407fd94312c19c81a738bc1854f67c32c4184b567ab0061fdc271f5c022153867b22a7d7fe5d63b808693359f80ca6d130470b882e300efa8d9f28b24001a48cf0da3e0fb50de94938f8b91e8c49ce14765f8d2096878c4b5060279ccfb1bb63053db310d56d50c20dacd687b75c4cd7160c1392e49ceb1748da4d6aa0b1e5b192476decee0158cb0425306eb0a9ae853d15d4caab6f38a3bdb4fb0a24c5beee9a46b1edc9ca5993f2278635a252ace047e09eebb9c7dbe9201abb7e4f96deee17397e14775331d0f220818a7f7ee28be46e2725355743eb0b95a48c55ce029743116df7966169c87d26f8461dd5eb3c667d603fab121e8eab1191eb71e89ceebffc89c9f9224ed82ffa999659430c04ae55bb9e1c2673c925ccc01e51c74af7308aa5111c3095c21f94f1b2b7011acf4bfdb72de76dfda5c9da638ae7b13429fec451c5bbdf54496b3a32df79afd37317a745db54e0fcd67ebfa3d886a4b87533135e6322b533378c1b12d0dfea393b2a48e53e7c64bf18478ba2b0d27e30bddfa1c8a26622142ef80eab14958e85976ab2e8841d6d1f84f035a02d27345b2875e5490a740ff0d33456e3750eacd7585454839850edfe7de11ef837818e9af7d373b3c1636e0c9a0f1443556ac9f304a72305d0880d7395cfb2df04e274b25be50fd6c2aa290ae0da2dec8bb68c460b03a7a619da43575d9cfcd0cffe559a4f20ff1b718c043a00e1fec33f2bfd93105b695d723668e97a1dc3c070c44ec22936f721f2b3f4f0750ee66aa6ca7f12824e624652b69f066837b15f06974c3926f17f024ca4b1a0e2d8a11f3e6ace71bed0b8834da00fdef705929e4e43330213f2f1ea579cf061a40e3bd8f7cf03d67c8d7e69d91428d40f5eab7715f13370b45dd21fe49cdf1cc7817be59bbc784f6004ea29f7d2751da2ce21c0eb16391b7571a9c19d9207b7577da9542d76f548d1880306e092015b40345cf2b226c910dd9608655905a1af0b2ab7a6af93cd65b103e605985e4f8555745c7fe3064f7b854b1510f4d2e0d977bbff2190ae90f9f070bad98231e3cdc794d6381151747be151b5956fe333d74a8522327222ab35e22fbfead43968ed5b1b9c7d13d509ecab4ada7dd5c66738db9a9f4e40efa7daa6985d1d5749f6e0fc0bb272bf74cd165594bb5adcb32067848e2ff77ddc83899fa352bead5ec2404bf4698d912707bd30ba59827d70efe80df29f29f8924f37b068ae8f067e10b98671cf5929be19fb06063390860aaaebf4a4505e2f160c03bcb214ff07519985e6a2e405cd4df1a24e2455afe5d627bf89dc0100399be9ac321cb684167d8fdd36172182dbd12e6b7be5e6672995c539e75b472dd29d5f043b257b46e1bec4b9f697cd68792ec48a4452cc886cba737d7e631f7114728ce7e537339a2e61f165c9ad5b2c48c409b96fd5b9c44e9221b6011e774b46be29cdcf36d54de65de1b1b8697d59b300bca20856e3804e424502fc6f5ef2e7ddc80e93ce50ab06e33afc088e7aa430b4a202c0b66e20c88054d7bb29f83e294cbad81afc3ad434200b7d04805efff6d277d2aa9fbec34bb299c3214ab8a8b88eba17199a18ccb8e6596905d0b210ed4654796da889a042fb6e86c86ddb7523a9d09c49694d854726101222a50456f57c4f32f53bb561a4b9f17c5d88c123709bbeb07306a8a350f4b41fc51b7b4f436d9dfc9f23070e2006df33ec71f01851dea8abf8fa4fc07b516ad59892d35c1e060e13620d455fe2c1db8c3b717c6825f27e248e2f7cc35be1d7154b9f240b874d8d02588ef9d12c351949e3730188a33e0cdb4173dc9a5650ed62eb5e102a7210cf0663d79b2f52880ceddc700f2ded81666ea6ee5b7bdf9dc79b7759ee42f937584e5aa9df447de6bcb1b707af0a52c1ae92727a90f151ab4e1c6c926209909ec79c2acf92aab868f8560226b2d121a2075902698a92fdb49ff5dfbec7cc7ec27b6562f317ed931f1f3504a41ff3ff9420fb11cbc5e1ea39db6a917ae09aeaf1bf263104c32a39678d95a0529d81337905efd647fa63bf66f93d70c715524a7759ef6bcd8826133fdcc211644473e193a44d654eb20d8c31c065a4bbca1ad76bd9afb22c8ad5ca253c5e7ae8f003732b0acac6760d4cb17c46c12e207749b51694cc48e4df619a82a160f24d9f5da670fac01f0f130f4ebb134f6104f5dd5ad2a988c028da05301c89d4be328be3c7d1150a2cdf1e7ded17410384a9d8885bb10cabc17377c836521a46fe97ca03b5851e3e868e430da66f4c855e1334f7cf5b7a1d682c3ede837362503ae3dda8c7b96b97d2ff1c78089919b0bf808066d1de440fafe5ead8d542b79c643db0afa947d00e34b29f1ed0cd1c27c37e494fa7a296e1b280eb8e613e10969489b809e6a5c9da226bd8f84b45e59115ff519354aa4baf8f950b4615592a1b872870cde1058f72898399410c6ca9e293c47431ba350d12f6efeef508fbb788d37f31eec3a808231800b1d2fbdb375f047e3fe67fc25dff067bd7b106a2f8a449f043e8e574c608d2f1872f564fa2667c6d9ce3cb446d9ae3261d34162dee00c1511d47bb027ea2820fe855579bf12166918faaead6e57718713e013ec8a47d750012fd7ad9d69ada3d36d2aa0e6766e522a35151438777cd7f5f6f42c0b82ff9609cd735dc37bb9145c6952e70d54dae4b0e4fb896c0cf6f6e2e6f001487f620cfad6ee7374cebfe0b61c9769dde2ff55380a9e702952bb713f71c048d7ed42e72899b115535085b42713d39b05b7c28f69349a7ad41f3a9b5169060439be8b8c8d072355b034d191a2708fab44e09d94ff5ef905d6bf266a1712c612ba1ad87b2b774c6db311eddbbd0d92ee4664803b31a1bdf83ce3927dc2aea3a8970d8b1a100725f84b2344700df9718ffe0696c5f438d603e6331d55b179a6f3311b3cac0e17d776f92d2e99634aa65d79393bc8b6cf4b395b131ce0de4b37b93f96b09579502d6f4a0abee26bef07e848ad29ded4ac7130fa51f7eb99fd1554b6e5ab385804ac24c03a686e08fad2a56101a33ef3df6aadf64f7e46b4af6b1b84594803a2fd621cea1edae8eeb1c8742180c9ff8580820f3e30e5e75d4971b91e3dcc6bf57352f06411bb9fb209d8c5113dde8636959f78b739d349a21f5b09b009560069f5a03134513f3c62e1e2a7af35b68392ea2517a6bb33303f2fd4bb250b3478afe9f37616b9fa506bf42f97d52652cd0015e165cbce39fc84932183f7bfad2bcbd00c0a95df1a500d476301f1a86d70235551caa3441c95347f4f1421a6892dd2d2592f0b1ecb56f9c23071815a4783ff29cb3848288c1d88b3da51c606613ed7a2f9cbcb8ca3180dfe08fb3f3feea483e14c534f4a727c5d7c4937729d4c3e0d62f3cda18771006e8f520f7b2ebc850694b8e2fe7e6cca314a5db1956d16c5136f9f82881e606ccc1a191a3d9ab250fe519ac0645b95eed9029e52bc08e0db2f5d3e1f68ebd4b95477ea583f7c9ff6911a878b67d0e9b186a635e45800c3e843a9f352e4704e2fb2f506686e9"}, {0x30, 0x11d, 0x9, "362f33b270142b15a816da9e656abf94cc699a29e14607c733e6a1cd8c23b39c22"}, {0x58, 0x116, 0x101, "651825110583e273bba3f1650565ae019d07a6bb9134b9cb08d34ea8756bb01ff84d5cf15b41a93f4cf3b787ccbd82fde2178e279bfd4fa9c69c5630b3b878e5a35f4491b1b9210b65631a"}], 0x129c, 0x20004000}, 0x8000}, {{0x0, 0x0, &(0x7f0000e2e000-0x8)=[{&(0x7f0000c98000)="9d9977683ca8065df0c473e19533066e376d9f0ceed328a1572831ab7cacaacee1bb2001d07d014e797c6ead125dd845ea8fa95950f3eb803d358b0fe203bb11bb0e4db233e01ddd0eae6ffe5d7c577a09e387150d76ea669dca14ddab4f7fb3d4f47c5d03ee2ac695ba6e5fb4fb7c7ae57f99262b702df2e108ab1a69e91045772692b092426d3dbd724cbe100d831dc80abdacc4df932ce7fa7d06a7055efd62ece3e9451fd43aaf15e2563be4410f639e27e99ab24706b61f", 0xba}], 0x1, &(0x7f0000001000-0x131c)=[{0x34, 0x115, 0x9, "700d7d4ac6e61cd32b504feea7f3faf2937db626041fee9d881d4e69957ba20ef26d588fc91534"}, {0x3c, 0x13b, 0xff, "c902115c9be07bd29b39848563a7d540d648ceb9318feffb4e33dedb7373612c00271e8cc25d6f4ba8703ed623"}, {0x4c, 0xff, 0x49, "f396ddd5c000d707e2a648748bd0d3cc0ff0288af92b41cfd7ef03f4d9f9b7e17086d744c13e5386b6e4fcfe26135fe086947cffa6fbb8cb4203db632aa7"}, {0x38, 0x11d, 0x5, "f831ce8485e2574079ce2af27e6b4c0f7fd39622e932dbccc20357ffbf987af7592712d16bf1470511170675"}, {0xfc, 0x119, 0x3, "94bf1fe14492e52ccc95e2976d3c0991ea8b00e9b1cc5ca797b105040d6e1fc15286b59324644c8793bf1db888d1d440f95ab19cc8d1ab1250254012380ece23e5a9d96a43157a4cee532d11a63cb540f89d263cdbcba018035771b08b664158d40b1c41f1f6411b1522ea31a48e7fd293fb401eaefe0a361ae9f96c9b5236da2c546f57be67099ded555ac25ffffb41efed0931ba4d9c281ae73bed360f7ccc2ae4e6df694e573f9de057a8a5e4676d78c8ac8af455f0ead24eb5b709b840f8ab50ca99876205ace02bf57c4d105c249ca34b1d051d67517318796f031094c55bfb8b8a393f309f2c2c5de14492e7"}, {0xf0, 0x119, 0x8, "bfc5dce6489d9685c5ebfbf1766ddfaf241ff206534bea113a0460ddb8119cf987c3a01857727bfbd1780f447deeea04efc2765a2d2fced5a47e9de110106627eb05b206d77c4658571489abbaf131255fef281b64090827b83c096bfe14fe365ae3318946d1ea895d2eb5cee030e7d9312d5f388db2655156e3270eca6c6c641092249e8012504921443e9c9c925468528ee83d61294784e3396cf32f4cc47b1923bbfc063361c71bd234ccaa370996b9d626ba95e0730025bc28370889ce8cdba5db84bfdae0d9f4adb112e1b347419a5d27478e64b44a974b00c40bc855e869e9"}, {0x30, 0x0, 0x1b13, "47e4895f2c9a8ef09ccb62793c340a99e40ece681bd6a8ceabaaf3f13785fbb950"}, {0x100c, 0x10b, 0xffffffff, "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"}], 0x131c, 0x40000}, 0x6}], 0x3, 0x90) openat$rtc(0xffffffffffffff9c, &(0x7f0000051000+0x94d)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000724000)={0x0, 0xffffffffffffffff, 0x0}) move_pages(0x0, 0x1, &(0x7f0000b59000)=[&(0x7f0000728000/0x2000)=nil], 0x0, &(0x7f0000c31000-0x24)=[], 0x0) [ 455.354620] FAULT_INJECTION: forcing a failure. [ 455.354620] name failslab, interval 1, probability 0, space 0, times 0 [ 455.354634] CPU: 0 PID: 27181 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 455.354641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.354646] Call Trace: 2017/12/27 08:42:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000010000)=[], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:18 executing program 6 (fault-call:5 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000523000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f00000a0000)={0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffc, 0x9, 0x80000000}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 455.354666] dump_stack+0x194/0x257 [ 455.354702] ? arch_local_irq_restore+0x53/0x53 [ 455.354789] should_fail+0x8c0/0xa40 [ 455.354830] ? fault_create_debugfs_attr+0x1f0/0x1f0 2017/12/27 08:42:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000010000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000449000)=@buf={0x40, &(0x7f0000e62000)="eb1db6966d70c93549ca7f5b41e405e7a6f7cbd8bc475d56157e9e63c2460c62594f6651777b8d33dbacd8c822995b33546e8a93d780f41448f4fffd9df26d3d"}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000e19000-0x4)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffefffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) readv(r0, &(0x7f0000a73000)=[{&(0x7f000024a000)=""/105, 0x69}, {&(0x7f0000790000)=""/171, 0xab}, {&(0x7f0000bdd000)=""/234, 0xea}, {&(0x7f0000752000)=""/22, 0x16}, {&(0x7f0000150000-0xbd)=""/189, 0xbd}, {&(0x7f0000ed1000-0xe3)=""/227, 0xe3}, {&(0x7f00006bc000-0x1000)=""/4096, 0x1000}, {&(0x7f00005c6000)=""/137, 0x89}], 0x8) 2017/12/27 08:42:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000428000)={0x0, 0x0}) readahead(r0, 0x9, 0xff) pipe(&(0x7f000079b000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000b5a000-0x8)={0x0, 0xffff}, &(0x7f0000b6e000)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000ba4000-0x14)={r2, 0x100000000, 0xfffffffffffff4e1, 0x800, 0x6, 0xfffffffffffffffa}, &(0x7f0000a52000-0x4)=0x14) syz_emit_ethernet(0x2a, &(0x7f0000a3c000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff, {[]}}, @udp={0x0, 0x0, 0x8, 0x0, ""}}}}}, 0x0) [ 455.354851] ? kasan_kmalloc+0xad/0xe0 [ 455.354866] ? memdup_user+0x2c/0x90 [ 455.354879] ? copy_mount_string+0x24/0x40 [ 455.354895] ? do_fast_syscall_32+0x3ee/0xf9d [ 455.354928] ? map_files_get_link+0x3a0/0x3a0 [ 455.354974] ? find_held_lock+0x35/0x1d0 [ 455.355120] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 455.355152] ? rcu_note_context_switch+0x710/0x710 [ 455.355171] ? __check_object_size+0x25d/0x4f0 [ 455.355223] should_failslab+0xec/0x120 [ 455.355247] __kmalloc_track_caller+0x5f/0x760 [ 455.355285] ? strncpy_from_user+0x430/0x430 [ 455.355298] ? strndup_user+0x62/0xb0 [ 455.355312] ? _copy_from_user+0x99/0x110 [ 455.355349] memdup_user+0x2c/0x90 [ 455.355377] strndup_user+0x62/0xb0 [ 455.355410] copy_mount_string+0x24/0x40 [ 455.355429] compat_SyS_mount+0x49/0x1070 [ 455.355466] ? show_fd_locks+0x2c0/0x2c0 [ 455.355489] do_fast_syscall_32+0x3ee/0xf9d [ 455.355545] ? do_int80_syscall_32+0x9d0/0x9d0 [ 455.355609] ? syscall_return_slowpath+0x2ad/0x550 [ 455.355628] ? prepare_exit_to_usermode+0x340/0x340 [ 455.355653] ? sysret32_from_system_call+0x5/0x3b [ 455.355699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.355756] entry_SYSENTER_compat+0x54/0x63 [ 455.355766] RIP: 0023:0xf7fadc79 [ 455.355773] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 455.355786] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 455.355793] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 455.355800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.355807] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.355814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.366172] binder: 27182 RLIMIT_NICE not set [ 455.370363] binder: BINDER_SET_CONTEXT_MGR already set [ 455.370374] binder: 27174:27179 ioctl 40046207 0 returned -16 [ 455.371852] binder: 27179 RLIMIT_NICE not set [ 455.418136] binder_alloc: 27107: binder_alloc_buf, no vma [ 455.418165] binder: 27174:27188 transaction failed 29189/-3, size 0-0 line 2890 [ 455.420641] binder_alloc: 27107: binder_alloc_buf, no vma [ 455.420667] binder: 27174:27188 transaction failed 29189/-3, size 0-0 line 2890 [ 455.424824] binder: 27182 RLIMIT_NICE not set [ 455.469293] binder: BINDER_SET_CONTEXT_MGR already set [ 455.469304] binder: 27174:27188 ioctl 40046207 0 returned -16 [ 455.471604] binder: BINDER_SET_CONTEXT_MGR already set [ 455.471614] binder: 27199:27202 ioctl 40046207 0 returned -16 [ 455.471773] binder: 27202 RLIMIT_NICE not set [ 455.499880] binder_alloc: 27107: binder_alloc_buf, no vma [ 455.499906] binder: 27174:27214 transaction failed 29189/-3, size 0-0 line 2890 [ 455.501170] binder: 27174:27198 BC_FREE_BUFFER u000000002000c000 no match [ 455.501239] binder_alloc: 27107: binder_alloc_buf, no vma [ 455.501261] binder: 27174:27214 transaction failed 29189/-3, size 0-0 line 2890 [ 455.520638] FAULT_INJECTION: forcing a failure. [ 455.520638] name failslab, interval 1, probability 0, space 0, times 0 [ 455.520649] CPU: 1 PID: 27206 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 455.520655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.520658] Call Trace: [ 455.520676] dump_stack+0x194/0x257 [ 455.520695] ? arch_local_irq_restore+0x53/0x53 [ 455.520706] ? perf_trace_lock_acquire+0xe3/0x980 [ 455.520738] should_fail+0x8c0/0xa40 [ 455.520758] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.520767] ? copy_mount_string+0x24/0x40 [ 455.520778] ? do_fast_syscall_32+0x3ee/0xf9d [ 455.520788] ? entry_SYSENTER_compat+0x54/0x63 [ 455.520807] ? map_files_get_link+0x3a0/0x3a0 [ 455.520847] ? find_held_lock+0x35/0x1d0 [ 455.520917] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 455.520931] ? __check_object_size+0x25d/0x4f0 [ 455.520943] ? rcu_note_context_switch+0x710/0x710 [ 455.520977] should_failslab+0xec/0x120 [ 455.520992] kmem_cache_alloc_trace+0x4b/0x750 [ 455.521007] ? kasan_check_write+0x14/0x20 [ 455.521016] ? _copy_from_user+0x99/0x110 [ 455.521044] copy_mount_options+0x5f/0x2e0 [ 455.521069] compat_SyS_mount+0x65/0x1070 [ 455.521088] ? show_fd_locks+0x2c0/0x2c0 [ 455.521102] do_fast_syscall_32+0x3ee/0xf9d [ 455.521130] ? do_int80_syscall_32+0x9d0/0x9d0 [ 455.521162] ? syscall_return_slowpath+0x2ad/0x550 [ 455.521175] ? prepare_exit_to_usermode+0x340/0x340 [ 455.521189] ? sysret32_from_system_call+0x5/0x3b [ 455.521211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.521237] entry_SYSENTER_compat+0x54/0x63 [ 455.521244] RIP: 0023:0xf7fadc79 [ 455.521249] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 455.521259] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 455.521264] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 455.521270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.521275] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.521279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.525841] binder_alloc: 27172: binder_alloc_buf, no vma [ 455.525871] binder: 27199:27215 transaction failed 29189/-3, size 0-0 line 2890 [ 456.010535] binder: release 27107:27123 transaction 3379 in, still active [ 456.017544] binder: send failed reply for transaction 3379 to 27107:27135 [ 456.024521] binder: undelivered TRANSACTION_COMPLETE [ 456.029655] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.035123] binder: send failed reply for transaction 3380, target dead 2017/12/27 08:42:19 executing program 7: mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0xffffffff) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000399000-0x4)=0x0, &(0x7f0000b6e000-0x4)=0x4) r1 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000fdc000-0x8)='./file0\x00', &(0x7f0000888000-0x8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de1000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) fcntl$setsig(r1, 0xa, 0xe) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000b74000)=@assoc_value={0x0, 0x0}, &(0x7f000059a000)=0x8) mmap(&(0x7f0000fe3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000fe3000)={r2, @in6={{0xa, 0x2, 0x100000001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x9}, 0x98) creat(&(0x7f0000fdf000-0x8)='./file1\x00', 0x0) 2017/12/27 08:42:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000e4000-0x10)='/selinux/create\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000056000-0x10)={0x0, 0x10001, 0x2, 0x97fa}, &(0x7f0000bd7000)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00006c0000)={0x2, 0x0, 0x4, 0x1, r2}, &(0x7f0000a61000)=0x10) listen(r0, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000d50000)='/dev/sequencer\x00', 0x101102, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000456000-0x98)={0xffffffffffff19f8, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x98) 2017/12/27 08:42:19 executing program 1: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000552000)='/selinux/user\x00', 0x2, 0x0) finit_module(r0, &(0x7f00002cd000-0xe)='/selinux/user\x00', 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f000042d000-0x29)=""/41) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f00008e1000)='/dev/net/tun\x00', 0x0, 0x20002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_addrs=@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000b63000)={0x0, 0x0, []}) 2017/12/27 08:42:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000832000)='/selinux/create\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000aa3000)=@req3={0xb7, 0x7, 0x200, 0x1, 0x55d6, 0x6, 0x7ff}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000010000)=[], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:19 executing program 6 (fault-call:5 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000493000-0xd)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) socketpair(0x4, 0x806, 0x80000001, &(0x7f0000326000-0x8)={0x0, 0x0}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000d8a000-0x4)=0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, r2, 0x2}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000070d000)=0x0) rt_sigqueueinfo(r0, 0x14, &(0x7f00004c2000)={0x4, 0xe8, 0x3, 0x7f}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) r3 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000300000)={{0x0, 0x100000000000101}, 0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 456.042386] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.047899] binder: release 27172:27182 transaction 3387 in, still active [ 456.054836] binder: send failed reply for transaction 3387 to 27172:27189 [ 456.061773] binder: undelivered TRANSACTION_COMPLETE [ 456.067933] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.073480] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.078957] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.084613] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.090093] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x9) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000b5f000)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000160000)="", 0x0, 0x4000840, &(0x7f0000d74000-0x10)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = memfd_create(&(0x7f000058d000-0x1)='\x00', 0x1) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000d41000-0x80)={[0x1, 0xf000, 0x0, 0x14000], 0xe2, 0x41, 0x1ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/27 08:42:19 executing program 6 (fault-call:5 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x400) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) r1 = syz_open_dev$mouse(&(0x7f0000c71000-0x12)='/dev/input/mouse#\x00', 0xffffffffffff8001, 0x400102) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00006a6000-0x4)=0x7ff) fcntl$notify(r1, 0x402, 0x14) 2017/12/27 08:42:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000000000002, 0x1, 0x0) select(0x40, &(0x7f0000885000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00009fe000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000095c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fda000-0x8)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000455000-0x10)={r1, r2}, 0x8) [ 456.129751] binder: 27238 RLIMIT_NICE not set [ 456.133834] FAULT_INJECTION: forcing a failure. [ 456.133834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 2017/12/27 08:42:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000010000)=[], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000641000)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00009c3000-0x20)={0x10002, 0x0, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000d6000)='/dev/rtc\x00', 0x80000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000602000-0x2b)={0x27, "8a2f6a5075f2a61f738163df37f0a0c3c3cddfa8934a92032f2d870e04ae7127c4eae99897a7f9"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000951000)={0x10002, 0x2, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil}) writev(r0, &(0x7f0000782000)=[{&(0x7f000090f000)="54d726a8c6b3348f9c71a3ecfbfe1866b4027079fc0d96649a66780be4e8d374839d512d914a6159fe1117513b488c72fd3cf8a29dbbb8befaa09ac856445fedc48a9d776bc4710f35a01af7290688e249c95086ee71", 0x56}, {&(0x7f0000b2b000-0xcc)="ff62b9681b570218be1a233ba933e37578170fe12590e7e2c9131566de16903c69069db99c60c4d20af6d816e9fb525f8c362dadf4ebb8cbb30e61ea15610e93de933879229a430bfca0e989dfab4d0185813f033eba04f4bb73aaac4a3765788fdd28f4451303d2503752f3ff631356957db48d9ad0d9894d3c7b753444a2a2f649116a9b924e1c408ad3bd49c12be166bbbe2e36ae1713c59271e2b3a2bac3c328087b0451db8a3fdabbc86b1bdeba3543186522dc54f2a3acdc60a5d2f7d849787b7ca63d30003b9e42a6", 0xcc}, {&(0x7f0000717000)="d9a0beb3c154dd53637927e19e00914f28f4fd4cea89002e287f67a135d71b0f63db9afae319553f3039d7a8c8e532ac579761c9d1b6dfeeaa2181b669f299cd591ef5a743db23e6c0bf7a7fc03cbe2f1daf230f98f8858fdbaa88ce98cfe99f69967391b1b3a7968d1e5a0eb58b9cb76d320db6cab9babed33bf912ed3c56d3", 0x80}, {&(0x7f0000158000-0x1000)="61984975dd725896d583399c6c848e75215c386769d8457dd1723a9d3efdca6a4ad8912ae86d12484d07f1d7d269249f3d1edbb26f023795a3dcc63cf7d02e28bfbd8cfbb9a8baeeab304d5fce15e707593a2043f49a3e13c8789f2c911c57c9af983e66b17f484b804c27dd49847d6c0e7c3f38592ad0dbf31d7585f576f8be7aeb5c7af4c26ac9a6a5528c4d65432047e952bdbc68c95dab725eacdd446e5fa05111e0d2e656923ba3585aba3072208be00973c0d5494cb4e030c5bd4c63394ab2ed850fbce72f74d681a1cda192f8716d6d4819bd8c96127707bb90ad60073b9541489aa4286961262efe565bfd2e281e6c079c54fb29adb4a3404f7cd70651a82cb794558bdfed9f0f3cec1cab30b37cbc851e1055cd0eec921bc2fc6b713f35719f46806882e6d810f4399fc19c7440b0a813e4bf72d484359fcbbd21ef534b7fc6c8d110cb7436153f5f92143a2560a616db65f5bc732c70509e8919dbc2cce5cd8d2cffb6a3a5a09372a4202919e6ea316614939fe0fe00b478195d07b94bf8b56c9ecc73d23c2ee02188c514fe05bf19c3b5ee4c30616381c3fc7c56e5d95b35705f228c21d37ad9b12f20f99e7a0cd94bedc411c87ebcbe7d968464c437bc691993cd22962c5cad6bfb7c6474e9f593b9601674fef4b0215f8162e7d5c4d0e670fb5c8d2862a0fbb9dc97e90769bec0b03bd9ff84708a0999513f1783684fa6de451de05b590b3aa1184d8de540534e384bbf7d78bbf82d3193608753993c7bff9ed1928c3e09423fd19563f6cf111c271518386c8541a767cb5075440bcecf0221994a0e8cf168ac8188daa9121fbac0dbbf4d214708dae9768776d36fd5848933fbca3fadc8dcd42cfe3b38fb344fa6d3a9d129dd42df903c0f6a01aa11d39e785de1a6d2d5d31e9db89b2594fe68b7a433704f987926b150b184d18b0079c17ea4997d7dc13196ab03d691051d4fd0ae72ea05c0000bf608f8cf92dde1bd599338455def5c0542fa0293e104701693e96ec13f0bb2522363b9f74fd163e956242abd195181fd86a2a1a9d128818c4f395907ff870f7e40273c383a184a90a707ce14a3dccb443a0b71cbf78ddb0f7b2892d1c08c1ec98605529740d3c6620a207a3354f95cc6cfc48cd1f5c1e256388b35e40a93fa99ef9fd9d1f93717abc1507e795e9a84970265f97994b1136b24fe4a46ffb1cc40e48488da83d6c9b4104bbaadec3184f4f794a73af28ff4f494de000ab6d2c88bd9409e3e70a99a7acf0f5590a939d17c7e52d984abb25324b75eeb3265dc71a1913f8c0be6a55bc639c870a8a765d7d8b8c58ad7e478a2dcdeb73a18c5edcd5fbaaf86c6a276d3ab7bcf651690a55472b0173212b67c0e47d2ed3219435ea4d51fa002bbdedab9ddb4605c40fe6decd3dae878b7fc0fea269f44705a1e7dd244fa03f986832c5ef2eb71c67bda7961c0ad6021dbb346f2957e6c1896935f9a49dbbe703603b4f7f4a2494a28fd1d398ac40369c78035667fc321947928041bbb4732ac6295c5a7525294185e46ab8eb3758789e03bb7f8c7e79a5003eae8a41de8417c7de1e357f2b141dea6a00aec6e5931126e1ad62401ffcfc93268e55fb588571cfbd32e0af49266718d48bf14075c6fa4940d82c6c290e847c115ebe03948cfc71d8f7a82554651a8f9be56451e23191a361d065f1ba1f81592f0af40c04f403b5d46bafc2b0fd98179c58ecaa28cb9ebbfc1d6c67a7e24a18ff3d385e5afc08134bdc74fadc02fced9eb1931c272d73b2750dc427081e8d0acd877949d238b6d4a43fd88aca543ddeed8dfaf69effdda8a8ca07c2ea05e5ccb3bdb8558c9a630b3b894044b28b7b17686f065dd44de51513b73ca8ade110a8934b06f5dee7dfbb998e31fbca3eddeaecbaa02a25ee9dc7d8b1752f68cab9b18e55629cedbb1c0c4f985489fceb5aff3dfb62dde295a0c740bbdf2d31a44129f32bfd47373acc95241e1382e217a031e2cc4ac2e7a152911bcb6854380c74b7b20425904a735409dcc242d87130e62a55b9a82e39f41495bcfa2e5a6539197a7ab8b9729a2abf49d0ce6ba70675ba502c374a33755f67a2dec3bae910a10e4384c8e19a4e32af75c685c519589d3b54bc9c550033788442de610ec070bab6133b55dbac302fee321ccaca37b39f2907712b0504c62ad6252c3e6d96663df5ca3dba63f6a1976c47c01604cf7fe0675ec71904d366ffbb8e630c7dcd7385bd1f5d42ac5847d469a302bf4507feb3b5208f7218349456735f7c8830abf001448fd2b9eeffda6577060aaea093e68522676914617d72ffd8c730beb1ac60be74c43537a00099c99910f2802b2951c646d10bc6c499876dc744988a760fc50b6f42c23487ff4612677bfd76309d7d899269127aef6cf8c30167b55c4ec152263114d8effb86b251bbf2a3f269497e7323738b297f9f15bb41a0e7431e8ba40318e0de822292c8f72f14e5cf62f40f87b9d2cf86095761387bf05de2f1fe17ed094ca36aaff98d3ffa6d4a868663258b4a5208afa7bdddc1c3501282cc845744e84802752719f8c9e0aa90cbf12e940e5592132a648cc2304358553c7daca1ca09668c0f675fdf6f12f76ad80749c060734bd0e06ed385cb86eeb0d6e65d267bbe82a808bbea7d5b3b179f5512faf02de0220dcda07dffa80e2fc002618aa9dc41d6251179fe07d5fb045070f37437ebc5dd233b85744e7eeebcc83f28c91a726eea1c02cc9381671960d2da76404e92e64bfd625eadedd3da303d6295a958374b10be8507dd1804cf40f009d64bacbd156f104bcdde1c5318fcae832f9afdbfad26af7870a6c9e24075bf0ac600a34444fbad19451a341b884ad04e239b00843f7bd6f51653dac54248c290bb632f0e176f065b98d9eda1c5b76778d0fbac3f05c50ab22241d89d1ba42e8e29d30a0195147f4ca8ac79607ccf6e4ba501cf9251da5b04b4a2bf71b609ee2a55d639dd1ec5f2e10faad863b1e168699878048683bea1ac8c9ef373fda3b97b0e99ec4f833fbdbd0d821553705745fcfb8938f5f82ddc61c452156bffde35d4d1d17b112b18ff29f4e0edc3645e10ce4e6709f4fb231fdf93dd58a811e17c1d37278cdf92ee6c344750f9f4b695e9038666518322b905ec62291354d9d4dede067c3e7a9ea4352ff27adce0dbffffb1b646fa11715a96b04c57a7a5641b8cc9ac81514480a8ed6411f8149126e8f0350a9b0c0297072025188b2c9b8775b110dba12492ed51e6c6520f16ec2cf79511521d895022e05f01d24b2ba9a469a9c0c25f7ecfb280fe8a4147fd2a3e02e73d09cde612f27396a1ef7193a875529ed14fb48989751150646c25db2b7203ecd0187db34329c22092da9cdad2d0fc67fedcce034ed88c6e595a6a60c6c41026860f65eed48785a4d4d6f65c060e0123472b8f978e881b4830fe968258c4551aa37173ab8477a7185689c44ff0cacf3618180ed77d30cc038ea32998df96c2c8526a5da33b624ae7181ec4ac351c45fb0c0e869431a53086b65a51d11174a9e74068b0587050c3c5af1e0a50c7f53c70f335fe22cffea4962c348ad696523c5aa592c6f3b03eacbbba07935f3df209c37675493de25e94798ed2f66ef6dbb4e856ca33d86fa3abd6fea36a13d62d2d017b5d0ecaaebf433c2cdfeeae44a652fcd96bb00f1be652096f211b2a4d9ffd0dbd3dbd122b0e9f9cebbc238d1be355a0b27c4038b9055c1666b836eb1d7434a4a843378bdaa2301dc97cc83e908a386548ea78fd1903e34e80ab32f77c6ae29e5059097783f906d25d714066c8c57c5cc848fb21e958e31ffce3be084862a27f6079bb50ba4a6a982801523801e22338de901c956b3be268801da69d9683404dd6fc56ad267b1ff7f4aa34182c8c5242e685377c9c6f81925b086fbdd0ffba7eb921d3c173994ffdba900bcdb52605fabf6a3fe31de30e8439f98d32e887ce4981dd2f9686ae9ad1030b018815c3eb0d49ecc6dc50ab5470dbb7e65b48dbba92eed2f8ae7713d8cbc969705affc62cdec7b257204bf95603787487941260232c995abcf49fc4d3c61b6745bc51269022084839bfb9222ec4b566d8bf149194767c6390d3260aec127875cf130815194606c5cc97aecb0131f0049861e30a33f927a85948afaa026d9fc8a86d357f421fa82e3f1c69f78fb8b1df14e8ec2b644d9c8cd274970aa9477c22bee97a5c5f8297de3cfe8a8c7b0d72b4dc3508fe5a1205ac936b6de79a4bc2fa7e6d51a6b9c65d3cdb3b24ac2ff4cefaf63a263dbfa96e661cc604a7a7c290e18ac872260a6df02ccd68392ab1a6878eeffc88746c2e02be31bd23e9f68d3753826cc9bb4020b3ef706af8c195b2ffc7b736946bbee71bc081087181220adb3d8907dfe2b2fafb9f2b790f4ad987e9c3ca48402c372014b5e5271ee09f7237f34b1de64ebad8cf604e7d233c808dcdaeb673be5afa06a751762c0e4dabad97abc5df9ad979fb30b03c0076c1e1dac5d299a540352684a315807b56f1f72e11eeb2ed1835f70d64e7a7752f01a3619eaaf2e5fd227d0f4d55305a1af9946b64d55c30dc31cc16c9dcb59b89e311100fa30ddc5dbef107d5df5a1790ba9a347a3af36cbf3163a30c8e99bc6f51361ae6f5e1fad834450a1f56a45f243b8e8d761f51ceff928a87f26987f61ee7b7a4a64ef9d32b24956ae7ab8d77a2a3b2d9a7e9b6e1eebbad4abe2f439ce9064276aadde128f01a09171d1a8c96d618c99a5d23efe3c2f6ae957c534d1d6803238d034aeb69f78a617c1cdf609f024f389417e5917f7e5626e68a4498f31a2d74c96bc5363395b4884ca5eef6d52bce1d8398df36dc47a96833f37e2dc6c762be87558e071eab456c68ce395eb3145f9dab44463d996b7d03fe46fa35cc74acf56f929972c55d3b52905811ec473a02c7bec8e467541c9d5485478714e98c49ce49d24d9460d270b8488a6aafeba666058995cec605f1670507cda26708d291fc9a49129cd666f33a9b4b65c7495671cec5e38f63276a2a53fd285e630e56b3e4405c8b083dea53e01704c4ee1ef0c83f23c76528742f8ab73d49149a07f41da1259e741ebfd038cdb2e7518ab18473421561294b32dfa9d05643f845b143060d9885435e061172a01d0b891941b50fd5c46e9e036d8ff1e85198da3799b9b3f5b01307e219e3ea7439a4cc01bced00baac1cfe320ffed5d54c2c2649ff96b1710d5b5005db38069084047476af57f96d89b4ee85d6f16e405807e9a26dfdede7877f0e9e7db5a29d18a42c1154bd041f3d62edb76904081411f0a69f1f83ba90956d8f5815bf0693fbd6bda3233737e755f5a82d2f4a4c6bf8f8b66b26ad8840cb6c2f64063b17fba81d4e1dbdfac9b00e78fc0fb51c6df09f72f2daf65af9d35d60e6756059e729a15268b88e07fb2f5915b8cbd47fa67aa9f3ba60680211d83ed6c531862320828d0c932c3ac29e521b5091e0cdf143dbda31810dfa12ba9e391b5314137724b3ffacf84779fcc18373b7e7124da8abfa9286837f28396cb47c0358613e82255cd00d2651da3d6c9d9d99d9e9c0d591252258f868fac32f77558a0e272219f7fcf256b8bd1008604bce213b33c8d1e6ac0cd74181eeb28b7660d4a0487d6162da5d276878b4bd36820f6d008e0cc3ec99276d4d2f3b7221dd8af2a9215d1d9c54b9f0f77bbadd914e3964946b9fbf174a877a04846a85e5bf4cd3fcb6d874a6b52a2247797f864b33950199b8df834f0632a2431a826ae03952a7ebc15ce07efe5", 0x1000}, {&(0x7f0000e3f000-0x92)="2b8ac41c83a81fdae6c6128775234c7c644f1a6ba199e5527eef504a39616de07ab7e0dacdb32fd2828403f63ac0edcbf38ab3dfd7857c12bdf173ff8da546bd17081c87e8a7e3ddb11ec4e1ff6ae2de101e00eb014fca188c2ff6764a27ff068907be13bcc90b9495295e4972e55f7ee922c11b899ca0993541c73d3b9fd7e1544e87ec540f6dbfa5e40ea9c7a00260608d", 0x92}], 0x5) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc00c6419, &(0x7f0000cd6000-0xc)={0x5, &(0x7f0000666000)=""/110, &(0x7f0000f2e000)=[{0xb6, 0x33, 0x8, &(0x7f0000ddb000-0x33)=""/51}, {0x101, 0x2b, 0x2, &(0x7f0000718000)=""/43}, {0x8d6, 0x95, 0x8, &(0x7f0000c1e000)=""/149}, {0x7, 0x8a, 0x5, &(0x7f0000ae5000-0x8a)=""/138}, {0x6, 0x12, 0x7, &(0x7f0000b58000-0x12)=""/18}]}) io_setup(0x81, &(0x7f000072b000-0x4)=0x0) io_submit(r3, 0x2, &(0x7f00009b7000-0x8)=[&(0x7f000094a000-0x40)={0x0, 0x0, 0x0, 0xb, 0x400, r0, &(0x7f0000b31000-0x4c)="564f480feff507ebdcf99b8163b99edf99891aa431edb9a897cbf2c3aa9c3d953eab110d7bb6fda439f1ed3079d61a3164ae8c0459e4d2196c88cbda1a73da284b5b1cb520a0aff254e4f3ee", 0x4c, 0x1000, 0x0, 0x4df66795364cb686, r2}, &(0x7f0000beb000)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f000079e000-0xfb)="14bd65f3910d1e0f45a09f2be02768b0dd57d85ad71ddccb81c5e504b92e8c81b9fe9fb39320666d1b989b0b823dce9f146048a3b0518dcb3a304533d60169ffdbc29c19999494faf0640907ee12ff0031c6a7f366c69dd3bb38257f8a066c3182ff52f399d6aef72c80cdfc4cd43417a325c62909ddf6667da54441473d7451b110226258c89629def7d3fb321acdb5b1b47d5078dff19f96405203571bc6261b9be81e66b0b4c5f0dd32cba9739ad00d3291447a346207f3bfc0037609c4e0a9fdb432f34ef508ed2b3e4a156413665512b7288a8df8c86f1ef659d688a92f3b41a7cb1441fe847f6fb70b9a2cfcc82c1c8a4dbb73b75c4ee5ed", 0xfb, 0x8, 0x0, 0x1, r2}]) 2017/12/27 08:42:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000929000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f00008cf000-0x18)=[{r0, 0x0, 0x0}], 0x1, 0x435e) r1 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000b44000)=[@in6={0xa, 0x2, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10000}, @in6={0xa, 0x2, 0x3ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x40}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xdc4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb1cf}, @in6={0xa, 0x1, 0xffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}], 0xb0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clock_gettime(0x0, &(0x7f0000109000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00009e0000)={0x0, 0x0}) wait4(0x0, 0x0, 0x8, &(0x7f0000a81000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000984000)='./file0\x00', &(0x7f0000dbc000-0x10)={{r2, r3}, {0x77359400, 0x0}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00003cc000)={0x7f, 0x2, 0x3, 0x3}, 0x5) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000711000)=""}) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00007db000)='/selinux/context\x00', 0x2, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r4, 0x89e0, &(0x7f000000a000)=0x2f14) fcntl$getown(r0, 0x9) r5 = open(&(0x7f00005b4000)='./file0\x00', 0x10000, 0x4) name_to_handle_at(r5, &(0x7f0000769000)='./file0\x00', &(0x7f0000efb000)={0xcc, 0x88, "c81edcbd43ca79d81ed4d0b06edefcdcd24f78ed528615211593771f826784e7c79999257d753d40714637902e20ccb8d6d937ac24b9ffb045e769499dfb116fd70fbb382ad1b37da6620ca9b0820dcf550b28cbaf503aa90fa3eccb0abf33990a09fcdedc75d82cadd976dea11e3e562f03c9a9f4c4b3c587199ece90ce2243a0335c7678b47f7ea320afa9e1b045ae981141ddf25b84f596542d69575e839023bacfbf377ae9ed26f542baf2884a89d7b6b81faf88e1453391720ad2574bd08417e8c3"}, &(0x7f0000f02000)=0x0, 0x1000) getpeername$llc(0xffffffffffffffff, &(0x7f0000fab000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00001fc000-0x4)=0x10) [ 456.133846] CPU: 1 PID: 27235 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 2017/12/27 08:42:19 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$cont(0x7, r0, 0x2, 0x442d) r1 = open(&(0x7f000067c000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000001000-0xbb)=""/187) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f000002b000)={0x0, 0x7, 0x7006, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000142000)={&(0x7f0000264000/0x6000)=nil, 0xc84, 0x2, 0x1, &(0x7f0000329000/0x1000)=nil, 0x3ff}) [ 456.133852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.133858] Call Trace: [ 456.133876] dump_stack+0x194/0x257 [ 456.133906] ? arch_local_irq_restore+0x53/0x53 [ 456.133976] should_fail+0x8c0/0xa40 [ 456.134013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.134036] ? perf_trace_run_bpf_submit+0x206/0x330 [ 456.134049] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 456.134060] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 456.134092] ? perf_tp_event+0xae0/0xae0 [ 456.134158] ? memset+0x31/0x40 [ 456.134198] ? perf_trace_lock+0x4d6/0x900 [ 456.134256] ? trace_event_raw_event_lock+0x340/0x340 [ 456.134276] ? perf_trace_lock+0x900/0x900 [ 456.134299] ? should_fail+0x23b/0xa40 [ 456.134356] __alloc_pages_nodemask+0x338/0xd80 [ 456.134379] ? map_files_get_link+0x3a0/0x3a0 [ 456.134412] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 456.134453] ? find_held_lock+0x35/0x1d0 [ 456.134620] ? __check_object_size+0x25d/0x4f0 [ 456.134643] ? rcu_note_context_switch+0x710/0x710 [ 456.134684] cache_grow_begin+0x72/0x3f0 [ 456.134731] kmem_cache_alloc_trace+0x3f0/0x750 [ 456.134749] ? kasan_check_write+0x14/0x20 [ 456.134807] copy_mount_options+0x5f/0x2e0 [ 456.134852] compat_SyS_mount+0x65/0x1070 [ 456.134888] ? show_fd_locks+0x2c0/0x2c0 [ 456.134911] do_fast_syscall_32+0x3ee/0xf9d [ 456.134958] ? do_int80_syscall_32+0x9d0/0x9d0 [ 456.134983] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 456.135020] ? syscall_return_slowpath+0x2ad/0x550 [ 456.135059] ? sysret32_from_system_call+0x5/0x3b [ 456.135098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.135144] entry_SYSENTER_compat+0x54/0x63 [ 456.135154] RIP: 0023:0xf7fadc79 [ 456.135160] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 456.135172] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 456.135179] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 456.135185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.135190] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.135196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.140707] binder: 27237 RLIMIT_NICE not set [ 456.176179] binder: 27237 RLIMIT_NICE not set [ 456.198764] FAULT_INJECTION: forcing a failure. [ 456.198764] name failslab, interval 1, probability 0, space 0, times 0 [ 456.198779] CPU: 0 PID: 27252 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 456.198788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.198794] Call Trace: [ 456.198818] dump_stack+0x194/0x257 [ 456.198853] ? arch_local_irq_restore+0x53/0x53 [ 456.198932] should_fail+0x8c0/0xa40 [ 456.198968] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.199093] ? find_held_lock+0x35/0x1d0 [ 456.199227] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 456.199237] ? depot_save_stack+0x12c/0x490 [ 456.199265] ? rcu_note_context_switch+0x710/0x710 [ 456.199330] should_failslab+0xec/0x120 [ 456.199352] kmem_cache_alloc+0x47/0x760 [ 456.199391] ? find_held_lock+0x35/0x1d0 [ 456.199428] getname_flags+0xcb/0x580 [ 456.199475] user_path_at_empty+0x2d/0x50 [ 456.199511] do_mount+0x15f/0x2bb0 [ 456.199570] ? copy_mount_string+0x40/0x40 [ 456.199588] ? rcu_pm_notify+0xc0/0xc0 [ 456.199654] ? copy_mount_options+0x5f/0x2e0 [ 456.199671] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.199690] ? kmem_cache_alloc_trace+0x456/0x750 [ 456.199706] ? kasan_check_write+0x14/0x20 [ 456.199772] ? copy_mount_options+0x1f4/0x2e0 [ 456.199817] compat_SyS_mount+0xd0/0x1070 [ 456.199851] ? show_fd_locks+0x2c0/0x2c0 [ 456.199876] do_fast_syscall_32+0x3ee/0xf9d [ 456.199929] ? do_int80_syscall_32+0x9d0/0x9d0 [ 456.200002] ? syscall_return_slowpath+0x2ad/0x550 [ 456.200020] ? prepare_exit_to_usermode+0x340/0x340 [ 456.200047] ? sysret32_from_system_call+0x5/0x3b [ 456.200095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.200148] entry_SYSENTER_compat+0x54/0x63 [ 456.200161] RIP: 0023:0xf7fadc79 [ 456.200169] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 456.200182] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 456.200188] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 456.200193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.200200] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.200207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.208754] binder: release 27231:27237 transaction 3393 in, still active [ 456.208764] binder: send failed reply for transaction 3393 to 27231:27246 [ 456.208784] binder: undelivered TRANSACTION_COMPLETE [ 456.208792] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.211959] binder: BINDER_SET_CONTEXT_MGR already set [ 456.211970] binder: 27233:27256 ioctl 40046207 0 returned -16 [ 456.215883] binder: 27233:27256 BC_FREE_BUFFER u000000002000c000 no match [ 456.252958] binder: BINDER_SET_CONTEXT_MGR already set [ 456.252968] binder: 27233:27256 ioctl 40046207 0 returned -16 [ 456.256716] binder: 27245 RLIMIT_NICE not set [ 456.272623] binder: 27266 RLIMIT_NICE not set [ 456.273614] binder: BINDER_SET_CONTEXT_MGR already set [ 456.273636] binder: 27233:27273 ioctl 40046207 0 returned -16 [ 456.276558] binder_alloc: 27233: binder_alloc_buf, no vma [ 456.276587] binder: 27233:27273 transaction failed 29189/-3, size 0-0 line 2890 [ 456.277243] binder: 27233:27269 BC_FREE_BUFFER u000000002000c000 no match [ 456.316905] binder: 27266 RLIMIT_NICE not set [ 456.333098] binder: release 27261:27266 transaction 3398 in, still active [ 456.333106] binder: send failed reply for transaction 3398 to 27261:27278 [ 456.333124] binder: undelivered TRANSACTION_COMPLETE [ 456.333130] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.369228] binder: BINDER_SET_CONTEXT_MGR already set [ 456.369237] binder: 27268:27277 ioctl 40046207 0 returned -16 [ 456.412843] binder_alloc: 27268: binder_alloc_buf, no vma [ 456.412869] binder: 27268:27283 transaction failed 29189/-3, size 0-0 line 2890 [ 456.434920] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.435063] binder: release 27268:27277 transaction 3399 out, still active 2017/12/27 08:42:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000881000)=""/103) 2017/12/27 08:42:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$usbmon(&(0x7f0000575000)='/dev/usbmon#\x00', 0x4, 0x20c00) epoll_create1(0x80000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f000043f000-0x4)=0x0, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000962000-0x1c)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095e000-0x8)={0x1, [0x0]}, &(0x7f0000c84000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095d000-0x2)={r2, 0x0}, &(0x7f000095c000)=0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00009e0000-0x4)=0xfb1, 0x4) 2017/12/27 08:42:20 executing program 6 (fault-call:5 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:20 executing program 7: r0 = open(&(0x7f00008f3000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x3, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x9, 0x1}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000680000-0x8)={r2, 0x3}, &(0x7f0000001000-0x4)=0x8) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x80000001, 0x7fffffff}) setsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000020000-0x75)="713b30fb178a99e6336d3ab03ee66c793f47f94dd8530cd4eac188fd91e576d14ff01236df", 0x25) 2017/12/27 08:42:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:20 executing program 3: mmap(&(0x7f0000000000/0xeee000)=nil, 0xeee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000365000-0x4)=0xff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000046a000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000)="", 0x0, 0x0, &(0x7f0000eea000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000eee000)={0x0, 0x40, &(0x7f00007c7000)=[@in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000eef000-0x4)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000e4f000)={r1, 0xb73d}, &(0x7f00007bc000)=0x8) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000eef000)='/selinux/create\x00', 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000990000-0x3)='&', 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f00009fe000-0x51)=""/81, 0x51, 0x0}, 0x40002106) 2017/12/27 08:42:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004000-0x24)={@common='sit0\x00', &(0x7f0000007000-0xc4)=@ethtool_drvinfo={0x3, "02bf3321ad42d0d1b15770532800a980ba959d89067b0fefee24ca388b9c4615", "a6641ee56c8670e18db2ee664c5010cf0abf1ade29d2ce93d853efe561b9fa32", "ae4e400d62e249a756fb1a1b23f8df657d3b9857f0b936c515a4f31e62605749", "0c2a2dcdd4ac8649bb5d5481b64f1c10da8049a73924664ada64a6900fd8c9a5", "53875bdccaf943e4fe5093c7b91c4fe7ea0e8c246707fc370466db06ecaea35e", "0ccaa9cbb025ce5af9144e3c", 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000491000-0xe)='/selinux/user\x00', 0x2, 0x0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000452000-0x1f)="fe2774ade16685ee571eff4fc7a79fba6b96acd402f45ffdaa5e35e9a6488f", 0x1f) r2 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) syncfs(r0) r4 = add_key(&(0x7f00004f8000-0xc)='cifs.spnego\x00', &(0x7f00003e4000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000026b000-0xde)="4de58d1f40ba72236016983d004c47d2831e34f0cc46e243d5fb927997d5746c0e11a14946d8eaca75013cda1a2e4e52a2d4b118cc1e504c227e87c1c4eb9bc5e1e0368aacab781e6526bc9e611cab8ec705a6283998d96bfb21311c3750daf151f92bdacf2e5ee047ba849ae38c4cb7c1d08affb2bfc511ee5f32eeedd524e578fe6523c9ece06eecefcccb1f6c8fc2f173de0db292d02dd0bb6fbdf06710225d0c0f1965a9b5b3b0966f1f5b5373b85f3487feee2945d5a99ee5d3cec0b35539a6adbcf7461096e1065f5ebbbc8a92872405d45c111859614ba2f42733", 0xde, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f0000d19000+0xcbe)=""/124, 0x7c) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r6 = getpgid(0x0) prctl$setptracer(0x59616d61, r6) 2017/12/27 08:42:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) syncfs(r0) [ 456.435067] binder: undelivered TRANSACTION_COMPLETE [ 456.435087] binder: send failed reply for transaction 3399, target dead [ 456.867845] binder: 27238 RLIMIT_NICE not set [ 456.876871] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.882515] binder: release 27233:27238 transaction 3394 in, still active [ 456.889479] binder: send failed reply for transaction 3394 to 27233:27256 2017/12/27 08:42:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c55000)='/dev/net/tun\x00', 0x0, 0x100000a) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x2000000011, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f00001a4000-0xc)={0x0, 0x0, 0x0}}}) setns(r1, 0xc000000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x20301}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00002ef000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r3, &(0x7f0000c85000)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) socket$packet(0x11, 0x8080000000000a, 0x300) write$tun(r2, &(0x7f00005c6000-0x5d0)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "356d06", 0x10, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "af295e", 0x0, "9b907f"}, ""}}}}, 0x42) 2017/12/27 08:42:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) syncfs(r0) 2017/12/27 08:42:20 executing program 6 (fault-call:5 fault-nth:6): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 456.913204] binder: 27297 RLIMIT_NICE not set [ 456.914213] FAULT_INJECTION: forcing a failure. [ 456.914213] name failslab, interval 1, probability 0, space 0, times 0 2017/12/27 08:42:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000071c000-0x8)=[{&(0x7f0000d1b000)="1a0000001100174701bbf9ccc30500e66100f8ff0100000007ff", 0x1a}], 0x1) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d11000-0x4)=0x0, &(0x7f0000c32000)=0x4) 2017/12/27 08:42:20 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000e8000-0x5)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000001000-0xb4)="a8243c27072245b2a5685eccdc89dcab47401104c60198adbc931302d7390d2a19a7c675d5c0b18e1b9594084d0df80042211f0bc3429a59e5133551bba87037a2df555704d7d004c4aead1234b48b5de2020b502838af0e58b59229f60cc477e2ca689d78a6c3295518ab4013abc2e35c33ea2fc413a5a6f7fad6db25ddc6852735a11707d3d00d39ec47df65dca6dd6bf155da46f8418a66c70216c6d65097117d9708794585cd31888874ebb0da2300caca2a", 0xb4, 0xfffffffffffffff9) r1 = add_key(&(0x7f00005a7000-0x6)='rxrpc\x00', &(0x7f0000900000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) syncfs(r0) 2017/12/27 08:42:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) readv(r0, &(0x7f0000a7e000-0x8)=[{&(0x7f0000d9c000-0x7c)=""/124, 0x7c}], 0x1) r1 = syz_open_dev$usbmon(&(0x7f000095e000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000011000-0x8)=0x3f) fcntl$setown(r3, 0x8, r2) read$eventfd(r1, &(0x7f0000fcb000-0x8)=0x0, 0x8) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000028000-0x8)=[{r4, 0x0, 0x0}], 0x1, 0x8000) dup3(r3, r4, 0x0) tkill(r2, 0x16) bind$inet(r0, &(0x7f00008a6000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000b25000-0x1)="", 0x0, 0x0, &(0x7f0000dfd000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 456.914225] CPU: 0 PID: 27300 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 456.914232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.914237] Call Trace: 2017/12/27 08:42:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000432000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000c4f000-0xe)='net/devVsnmp6\x00') clock_gettime(0x0, &(0x7f00006e4000-0x8)={0x0, 0x0}) setitimer(0x2, &(0x7f0000797000)={{r2, r3/1000+30000}, {0x0, 0x0}}, &(0x7f00008d4000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x0, &(0x7f0000c92000-0x8)={0x0, 0x0}) setitimer(0x2, &(0x7f0000356000)={{r4, r5/1000+30000}, {0x77359400, 0x0}}, &(0x7f00002c8000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) utimensat(r1, &(0x7f0000a07000-0x8)='./file0\x00', &(0x7f0000756000)={{r6, 0x7530}, {0x0, 0x0}}, 0x100) 2017/12/27 08:42:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) syncfs(r0) [ 456.914256] dump_stack+0x194/0x257 [ 456.914286] ? arch_local_irq_restore+0x53/0x53 [ 456.914355] should_fail+0x8c0/0xa40 [ 456.914389] ? fault_create_debugfs_attr+0x1f0/0x1f0 2017/12/27 08:42:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) syncfs(r0) 2017/12/27 08:42:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) tee(r0, r0, 0xe5, 0xfffffffffffffffe) getsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000121000)=0x0, &(0x7f0000727000)=0x4) r1 = dup2(r0, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000c13000)={0x20, {{0xa, 0x2, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00002f0000)=0xfffffffffffffffc, 0x4) 2017/12/27 08:42:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000ad2000-0x63)=""/99) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) [ 456.914415] ? trace_event_raw_event_lock+0x340/0x340 [ 456.914434] ? perf_trace_lock+0x900/0x900 [ 456.914454] ? check_noncircular+0x20/0x20 [ 456.914501] ? find_held_lock+0x35/0x1d0 [ 456.914624] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 456.914653] ? rcu_note_context_switch+0x710/0x710 [ 456.914666] ? lock_downgrade+0x980/0x980 [ 456.914716] should_failslab+0xec/0x120 [ 456.914738] kmem_cache_alloc+0x47/0x760 [ 456.914807] alloc_vfsmnt+0xe0/0x9c0 [ 456.914831] ? mnt_free_id.isra.21+0x50/0x50 [ 456.914857] ? avc_has_extended_perms+0x12c0/0x12c0 [ 456.914889] ? avc_has_perm+0x43e/0x680 [ 456.914931] ? avc_has_perm_noaudit+0x520/0x520 [ 456.914984] ? find_held_lock+0x35/0x1d0 [ 456.915045] ? __get_fs_type+0x8a/0xc0 [ 456.915066] ? lock_downgrade+0x980/0x980 [ 456.915086] ? module_unload_free+0x5b0/0x5b0 [ 456.915106] ? lock_release+0xa40/0xa40 [ 456.915116] ? _cond_resched+0x14/0x30 [ 456.915154] ? selinux_mount+0x2bb/0x4e0 [ 456.915191] vfs_kern_mount.part.26+0x84/0x4a0 [ 456.915219] ? may_umount+0xa0/0xa0 [ 456.915232] ? _raw_read_unlock+0x22/0x30 [ 456.915249] ? __get_fs_type+0x8a/0xc0 [ 456.915298] do_mount+0xea4/0x2bb0 [ 456.915352] ? copy_mount_string+0x40/0x40 [ 456.915369] ? rcu_pm_notify+0xc0/0xc0 [ 456.915432] ? copy_mount_options+0x5f/0x2e0 [ 456.915446] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.915463] ? kmem_cache_alloc_trace+0x456/0x750 [ 456.915479] ? kasan_check_write+0x14/0x20 [ 456.915491] ? _copy_from_user+0x99/0x110 [ 456.915545] ? copy_mount_options+0x1f4/0x2e0 [ 456.915587] compat_SyS_mount+0xd0/0x1070 [ 456.915621] ? show_fd_locks+0x2c0/0x2c0 [ 456.915643] do_fast_syscall_32+0x3ee/0xf9d [ 456.915695] ? do_int80_syscall_32+0x9d0/0x9d0 [ 456.915756] ? syscall_return_slowpath+0x2ad/0x550 [ 456.915773] ? prepare_exit_to_usermode+0x340/0x340 [ 456.915795] ? sysret32_from_system_call+0x5/0x3b [ 456.915838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.915889] entry_SYSENTER_compat+0x54/0x63 [ 456.915899] RIP: 0023:0xf7fadc79 [ 456.915905] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 456.915917] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 456.915928] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 456.915934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.915940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.915946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.918695] binder: 27301 RLIMIT_NICE not set [ 456.946502] binder: 27301 RLIMIT_NICE not set [ 456.946689] binder: undelivered TRANSACTION_COMPLETE [ 456.946697] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.969866] binder: release 27290:27301 transaction 3403 in, still active [ 456.969876] binder: send failed reply for transaction 3403 to 27290:27306 [ 456.969895] binder: undelivered TRANSACTION_COMPLETE [ 456.969902] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.977980] device syz7 entered promiscuous mode [ 456.987332] binder: 27292:27307 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 456.989174] binder: 27316 RLIMIT_NICE not set [ 457.025929] FAULT_INJECTION: forcing a failure. [ 457.025929] name failslab, interval 1, probability 0, space 0, times 0 [ 457.025948] CPU: 1 PID: 27317 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 457.025957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.025963] Call Trace: [ 457.025984] dump_stack+0x194/0x257 [ 457.026020] ? arch_local_irq_restore+0x53/0x53 [ 457.026093] should_fail+0x8c0/0xa40 [ 457.026119] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.026169] ? trace_event_raw_event_lock+0x340/0x340 [ 457.026186] ? _find_next_bit+0xee/0x120 [ 457.026194] ? perf_trace_lock+0x900/0x900 [ 457.026230] ? find_held_lock+0x35/0x1d0 [ 457.026350] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.026380] ? rcu_note_context_switch+0x710/0x710 [ 457.026448] should_failslab+0xec/0x120 [ 457.026474] __kmalloc_track_caller+0x5f/0x760 [ 457.026516] ? do_raw_spin_trylock+0x190/0x190 [ 457.026526] ? kstrdup_const+0x39/0x50 [ 457.026567] kstrdup+0x39/0x70 [ 457.026592] kstrdup_const+0x39/0x50 [ 457.026612] alloc_vfsmnt+0x1a5/0x9c0 [ 457.026637] ? mnt_free_id.isra.21+0x50/0x50 [ 457.026664] ? avc_has_extended_perms+0x12c0/0x12c0 [ 457.026697] ? avc_has_perm+0x43e/0x680 [ 457.026735] ? avc_has_perm_noaudit+0x520/0x520 [ 457.026791] ? find_held_lock+0x35/0x1d0 [ 457.026846] ? __get_fs_type+0x8a/0xc0 [ 457.026867] ? lock_downgrade+0x980/0x980 [ 457.026885] ? module_unload_free+0x5b0/0x5b0 [ 457.026906] ? lock_release+0xa40/0xa40 [ 457.026915] ? _cond_resched+0x14/0x30 [ 457.026954] ? selinux_mount+0x2bb/0x4e0 [ 457.026992] vfs_kern_mount.part.26+0x84/0x4a0 [ 457.027020] ? may_umount+0xa0/0xa0 [ 457.027033] ? _raw_read_unlock+0x22/0x30 [ 457.027050] ? __get_fs_type+0x8a/0xc0 [ 457.027100] do_mount+0xea4/0x2bb0 [ 457.027154] ? copy_mount_string+0x40/0x40 [ 457.027171] ? rcu_pm_notify+0xc0/0xc0 [ 457.027233] ? copy_mount_options+0x5f/0x2e0 [ 457.027247] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.027265] ? kmem_cache_alloc_trace+0x456/0x750 [ 457.027342] ? copy_mount_options+0x1f4/0x2e0 [ 457.027384] compat_SyS_mount+0xd0/0x1070 [ 457.027421] ? show_fd_locks+0x2c0/0x2c0 [ 457.027444] do_fast_syscall_32+0x3ee/0xf9d [ 457.027497] ? do_int80_syscall_32+0x9d0/0x9d0 [ 457.027557] ? syscall_return_slowpath+0x2ad/0x550 [ 457.027575] ? prepare_exit_to_usermode+0x340/0x340 [ 457.027597] ? sysret32_from_system_call+0x5/0x3b [ 457.027639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.027690] entry_SYSENTER_compat+0x54/0x63 [ 457.027699] RIP: 0023:0xf7fadc79 [ 457.027705] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 457.027718] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 457.027724] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 457.027730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.027737] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.027743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.033532] binder: BINDER_SET_CONTEXT_MGR already set [ 457.033543] binder: 27292:27307 ioctl 40046207 0 returned -16 [ 457.037653] binder: 27316 RLIMIT_NICE not set [ 457.041684] binder_alloc: 27292: binder_alloc_buf, no vma [ 457.041710] binder: 27292:27325 transaction failed 29189/-3, size 0-0 line 2890 [ 457.044610] binder: 27292:27307 BC_FREE_BUFFER u000000002000c000 no match [ 457.044679] binder_alloc: 27292: binder_alloc_buf, no vma [ 457.044704] binder: 27292:27325 transaction failed 29189/-3, size 0-0 line 2890 [ 457.076560] binder: release 27311:27316 transaction 3407 in, still active [ 457.076571] binder: send failed reply for transaction 3407 to 27311:27328 [ 457.076593] binder: undelivered TRANSACTION_COMPLETE [ 457.076602] binder: undelivered TRANSACTION_ERROR: 29189 [ 457.110924] binder: 27343 RLIMIT_NICE not set [ 457.134109] binder: 27343 RLIMIT_NICE not set [ 457.145512] binder: release 27339:27343 transaction 3411 in, still active 2017/12/27 08:42:21 executing program 6 (fault-call:5 fault-nth:7): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)="") r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000e53000-0xb)='/dev/hwrng\x00', 0x80080, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f000030e000)={@broadcast=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000777000)=0xc) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) umount2(&(0x7f00008e9000-0x8)='./file0\x00', 0x4) 2017/12/27 08:42:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005000-0x14)=[], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000582000-0x8)={0x19980330, 0x0}, &(0x7f00005cd000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000158000)={0x19980330, 0x0}, &(0x7f0000287000)={0x0, 0x0, 0x6, 0x0, 0x20000000, 0x0}) 2017/12/27 08:42:21 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/enforce\x00', 0x200, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001000)={@common='rose0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x0, 0x401, 0x1, 0x10001, 0x10, 0x20, 0x80, 0xc81e, r1, r2}, {0x9, 0xa4, 0x1f, 0xc2, 0x5, 0x77, 0x7eab, 0x5673}, {0x8, 0x5, 0x4, 0xfffffffffffffff8}, 0x9, 0x6, 0xc2, 0x1, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfff, 0xfff}, 0xd, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6, 0x0, 0x3, 0x5, 0x6, 0x0, 0x7}}, 0xe8) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000076000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f000070f000-0x67)=""/103) sigaltstack(&(0x7f00001b2000/0x3000)=nil, &(0x7f0000e78000)=0x0) 2017/12/27 08:42:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\t', 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fd, @tick=0x0, {0x0, 0x0}, {0x10, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00001eb000)=0x10001) 2017/12/27 08:42:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000bcb000)='/selinux/member\x00', 0x2, 0x0) 2017/12/27 08:42:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) [ 457.145521] binder: send failed reply for transaction 3411 to 27339:27350 [ 457.145537] binder: undelivered TRANSACTION_COMPLETE [ 457.145545] binder: undelivered TRANSACTION_ERROR: 29189 [ 457.797563] binder: 27297 RLIMIT_NICE not set [ 457.806873] binder: undelivered TRANSACTION_ERROR: 29189 [ 457.812679] binder: release 27292:27307 transaction 3405 out, still active [ 457.819742] binder: undelivered TRANSACTION_COMPLETE [ 457.848938] binder: release 27292:27297 transaction 3404 in, still active [ 457.854271] binder: 27366 RLIMIT_NICE not set [ 457.857090] FAULT_INJECTION: forcing a failure. [ 457.857090] name failslab, interval 1, probability 0, space 0, times 0 [ 457.857102] CPU: 1 PID: 27367 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 457.857110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.857114] Call Trace: [ 457.857135] dump_stack+0x194/0x257 [ 457.857168] ? arch_local_irq_restore+0x53/0x53 [ 457.857240] should_fail+0x8c0/0xa40 [ 457.857276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.857320] ? perf_trace_lock+0x4d6/0x900 [ 457.857394] ? find_held_lock+0x35/0x1d0 [ 457.857527] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.857561] ? rcu_note_context_switch+0x710/0x710 [ 457.857583] ? find_held_lock+0x35/0x1d0 [ 457.857633] should_failslab+0xec/0x120 [ 457.857655] kmem_cache_alloc_trace+0x4b/0x750 [ 457.857668] ? lock_downgrade+0x980/0x980 [ 457.857701] ? lock_release+0xa40/0xa40 [ 457.857739] kernfs_mount_ns+0xb5/0x8b0 [ 457.857773] ? kernfs_super_ns+0x70/0x70 [ 457.857842] sysfs_mount+0xc2/0x1c0 [ 457.857862] ? sysfs_kill_sb+0x40/0x40 [ 457.857905] ? security_sb_copy_data+0x81/0xb0 [ 457.857938] mount_fs+0x66/0x2d0 [ 457.857978] vfs_kern_mount.part.26+0xc6/0x4a0 [ 457.858007] ? may_umount+0xa0/0xa0 [ 457.858020] ? _raw_read_unlock+0x22/0x30 [ 457.858038] ? __get_fs_type+0x8a/0xc0 [ 457.858088] do_mount+0xea4/0x2bb0 [ 457.858143] ? copy_mount_string+0x40/0x40 2017/12/27 08:42:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:21 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000003000-0xb)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00005fc000-0x23)=""/234, 0xea}], 0x1) sync_file_range(r0, 0x3ff, 0x3, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x7}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000002000)={0x0, r1, 0x10002, 0x1}) 2017/12/27 08:42:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:21 executing program 6 (fault-call:5 fault-nth:8): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005000-0x14)=[], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:21 executing program 6 (fault-call:5 fault-nth:9): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:21 executing program 5: r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005000-0x14)=[], 0x0, 0x0, &(0x7f0000002000)=""}) [ 457.858159] ? rcu_pm_notify+0xc0/0xc0 [ 457.858221] ? copy_mount_options+0x5f/0x2e0 [ 457.858235] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.858253] ? kmem_cache_alloc_trace+0x456/0x750 [ 457.858269] ? kasan_check_write+0x14/0x20 [ 457.858282] ? _copy_from_user+0x99/0x110 [ 457.858336] ? copy_mount_options+0x1f4/0x2e0 [ 457.858381] compat_SyS_mount+0xd0/0x1070 [ 457.858415] ? show_fd_locks+0x2c0/0x2c0 [ 457.858439] do_fast_syscall_32+0x3ee/0xf9d [ 457.858490] ? do_int80_syscall_32+0x9d0/0x9d0 [ 457.858549] ? syscall_return_slowpath+0x2ad/0x550 [ 457.858567] ? prepare_exit_to_usermode+0x340/0x340 [ 457.858589] ? sysret32_from_system_call+0x5/0x3b [ 457.858631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.858683] entry_SYSENTER_compat+0x54/0x63 [ 457.858693] RIP: 0023:0xf7fadc79 [ 457.858699] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 457.858711] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 457.858717] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 457.858723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.858729] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.858735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.883202] binder: 27366 RLIMIT_NICE not set [ 457.914083] binder: 27359:27378 transaction failed 29189/-22, size 0-0 line 2775 [ 457.925459] FAULT_INJECTION: forcing a failure. [ 457.925459] name failslab, interval 1, probability 0, space 0, times 0 [ 457.925472] CPU: 1 PID: 27383 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 457.925479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.925484] Call Trace: [ 457.925503] dump_stack+0x194/0x257 [ 457.925534] ? arch_local_irq_restore+0x53/0x53 [ 457.925604] should_fail+0x8c0/0xa40 [ 457.925639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.925744] ? find_held_lock+0x35/0x1d0 [ 457.925866] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.925876] ? sget_userns+0x27d/0xe20 [ 457.925901] ? rcu_note_context_switch+0x710/0x710 [ 457.925959] should_failslab+0xec/0x120 [ 457.925982] kmem_cache_alloc_trace+0x4b/0x750 [ 457.925990] ? sysfs_mount+0xc2/0x1c0 [ 457.925998] ? mount_fs+0x66/0x2d0 [ 457.926011] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 457.926019] ? do_mount+0xea4/0x2bb0 [ 457.926027] ? compat_SyS_mount+0xd0/0x1070 [ 457.926037] ? do_fast_syscall_32+0x3ee/0xf9d [ 457.926086] sget_userns+0x2a3/0xe20 [ 457.926096] ? kernfs_sop_show_path+0x190/0x190 [ 457.926137] ? kernfs_sop_show_options+0x180/0x180 [ 457.926163] ? destroy_unused_super.part.6+0xd0/0xd0 [ 457.926232] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.926253] ? rcu_pm_notify+0xc0/0xc0 [ 457.926317] ? kernfs_mount_ns+0xb5/0x8b0 [ 457.926331] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.926352] ? kmem_cache_alloc_trace+0x456/0x750 [ 457.926365] ? lock_downgrade+0x980/0x980 [ 457.926433] kernfs_mount_ns+0x13d/0x8b0 [ 457.926467] ? kernfs_super_ns+0x70/0x70 [ 457.926537] sysfs_mount+0xc2/0x1c0 [ 457.926557] ? sysfs_kill_sb+0x40/0x40 [ 457.926600] ? security_sb_copy_data+0x81/0xb0 [ 457.926634] mount_fs+0x66/0x2d0 [ 457.926672] vfs_kern_mount.part.26+0xc6/0x4a0 [ 457.926700] ? may_umount+0xa0/0xa0 [ 457.926715] ? _raw_read_unlock+0x22/0x30 [ 457.926732] ? __get_fs_type+0x8a/0xc0 [ 457.926782] do_mount+0xea4/0x2bb0 [ 457.926836] ? copy_mount_string+0x40/0x40 [ 457.926852] ? rcu_pm_notify+0xc0/0xc0 [ 457.926913] ? copy_mount_options+0x5f/0x2e0 [ 457.926926] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.926943] ? kmem_cache_alloc_trace+0x456/0x750 [ 457.926960] ? kasan_check_write+0x14/0x20 [ 457.926972] ? _copy_from_user+0x99/0x110 [ 457.927025] ? copy_mount_options+0x1f4/0x2e0 [ 457.927067] compat_SyS_mount+0xd0/0x1070 [ 457.927099] ? show_fd_locks+0x2c0/0x2c0 [ 457.927121] do_fast_syscall_32+0x3ee/0xf9d [ 457.927171] ? do_int80_syscall_32+0x9d0/0x9d0 [ 457.927197] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 457.927236] ? syscall_return_slowpath+0x2ad/0x550 [ 457.927272] ? sysret32_from_system_call+0x5/0x3b [ 457.927313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.927366] entry_SYSENTER_compat+0x54/0x63 [ 457.927375] RIP: 0023:0xf7fadc79 [ 457.927381] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 457.927394] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 457.927400] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 457.927406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.927412] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.927418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.936271] binder: BINDER_SET_CONTEXT_MGR already set [ 457.939117] binder: 27381:27384 ioctl 40046207 0 returned -16 [ 457.939270] binder: 27384 RLIMIT_NICE not set [ 457.946289] binder: 27378 RLIMIT_NICE not set [ 457.949759] binder: 27378 RLIMIT_NICE not set [ 457.971006] binder_alloc: 27356: binder_alloc_buf, no vma [ 457.971057] binder: 27381:27390 transaction failed 29189/-3, size 0-0 line 2890 [ 457.981422] FAULT_INJECTION: forcing a failure. [ 457.981422] name failslab, interval 1, probability 0, space 0, times 0 [ 457.981443] CPU: 1 PID: 27394 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 457.981450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.981455] Call Trace: [ 457.981473] dump_stack+0x194/0x257 [ 457.981503] ? arch_local_irq_restore+0x53/0x53 [ 457.981574] should_fail+0x8c0/0xa40 [ 457.981609] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.981634] ? __save_stack_trace+0x7e/0xd0 [ 457.981688] ? perf_trace_lock+0x900/0x900 [ 457.981720] ? find_held_lock+0x35/0x1d0 [ 457.981765] ? __lock_is_held+0xb6/0x140 [ 457.981847] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.981877] ? rcu_note_context_switch+0x710/0x710 [ 457.981893] ? lock_acquire+0x1d5/0x580 [ 457.981940] should_failslab+0xec/0x120 [ 457.981962] kmem_cache_alloc_trace+0x4b/0x750 [ 457.981999] ? rcu_note_context_switch+0x710/0x710 [ 457.982045] selinux_sb_alloc_security+0x93/0x2e0 [ 457.982066] ? selinux_inode_alloc_security+0x390/0x390 [ 457.982082] ? down_write_nested+0x8b/0x120 [ 457.982091] ? sget_userns+0x3a1/0xe20 [ 457.982108] ? _down_write_nest_lock+0x120/0x120 [ 457.982149] security_sb_alloc+0x6d/0xa0 [ 457.982178] sget_userns+0x3a9/0xe20 [ 457.982188] ? kernfs_sop_show_path+0x190/0x190 [ 457.982232] ? kernfs_sop_show_options+0x180/0x180 [ 457.982258] ? destroy_unused_super.part.6+0xd0/0xd0 [ 457.982330] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 457.982354] ? rcu_pm_notify+0xc0/0xc0 [ 457.982427] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.982445] ? kmem_cache_alloc_trace+0x456/0x750 [ 457.982457] ? lock_downgrade+0x980/0x980 [ 457.982524] kernfs_mount_ns+0x13d/0x8b0 [ 457.982559] ? kernfs_super_ns+0x70/0x70 [ 457.982630] sysfs_mount+0xc2/0x1c0 [ 457.982650] ? sysfs_kill_sb+0x40/0x40 [ 457.982694] ? security_sb_copy_data+0x81/0xb0 [ 457.982727] mount_fs+0x66/0x2d0 [ 457.982764] vfs_kern_mount.part.26+0xc6/0x4a0 [ 457.982794] ? may_umount+0xa0/0xa0 [ 457.982806] ? _raw_read_unlock+0x22/0x30 [ 457.982825] ? __get_fs_type+0x8a/0xc0 [ 457.982876] do_mount+0xea4/0x2bb0 [ 457.982929] ? copy_mount_string+0x40/0x40 [ 457.982946] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 457.982968] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.983019] ? retint_kernel+0x10/0x10 [ 457.983073] ? copy_mount_options+0x18b/0x2e0 [ 457.983098] ? copy_mount_options+0x144/0x2e0 [ 457.983118] ? copy_mount_options+0x1f4/0x2e0 [ 457.983160] compat_SyS_mount+0xd0/0x1070 [ 457.983192] ? show_fd_locks+0x2c0/0x2c0 [ 457.983215] do_fast_syscall_32+0x3ee/0xf9d [ 457.983265] ? do_int80_syscall_32+0x9d0/0x9d0 [ 457.983291] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 457.983330] ? syscall_return_slowpath+0x2ad/0x550 [ 457.983367] ? sysret32_from_system_call+0x5/0x3b [ 457.983409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.983461] entry_SYSENTER_compat+0x54/0x63 [ 457.983470] RIP: 0023:0xf7fadc79 [ 457.983477] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 457.983490] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 457.983497] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 457.983503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.983512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.983518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.005714] binder: BINDER_SET_CONTEXT_MGR already set [ 458.005723] binder: 27395:27396 ioctl 40046207 0 returned -16 [ 458.006303] binder: 27396 RLIMIT_NICE not set [ 458.047052] binder_alloc: 27356: binder_alloc_buf, no vma [ 458.047078] binder: 27395:27400 transaction failed 29189/-3, size 0-0 line 2890 [ 458.837923] binder: send failed reply for transaction 3404 to 27292:27307 [ 458.837949] binder: undelivered TRANSACTION_COMPLETE [ 458.837957] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.837984] binder: send failed reply for transaction 3405, target dead [ 458.845203] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.849995] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.850079] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.850103] binder: release 27359:27378 transaction 3417 out, still active [ 458.850107] binder: undelivered TRANSACTION_COMPLETE [ 458.850132] binder: release 27359:27378 transaction 3416 in, still active [ 458.850139] binder: send failed reply for transaction 3416 to 27359:27385 [ 458.850155] binder: undelivered TRANSACTION_COMPLETE [ 458.850162] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.850184] binder: send failed reply for transaction 3417, target dead [ 458.851765] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.851816] binder: release 27356:27366 transaction 3413 in, still active [ 458.851823] binder: send failed reply for transaction 3413 to 27356:27375 [ 458.851839] binder: undelivered TRANSACTION_COMPLETE 2017/12/27 08:42:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000784000-0xad)="2f73016c696e75782f72656c6162656c00059410910e386109911868522407d63d62a57fd87f1c35ab7c32260f2ea2ac36c04f035aec4140f005ad865f50b644dd3b9046a2d3856c48d887a3ee367e062ece4dbff2e55cbecd55f12464e241871ef6c6e0011bb97b572605ed9490090502416bef76aa60bbe7b4e265a4b5a82578fbdb53c94f05ecf8cc9f2165252d427ad3e62aa70009e23e6f24c6535ecafe8aa06d402ab9a54e6f9e5d21f9", 0x1) lseek(r0, 0xfffffffffffffffc, 0x4) unlinkat(r0, &(0x7f00001df000-0x8)='./file0\x00', 0x200) 2017/12/27 08:42:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) r3 = syz_open_dev$mice(&(0x7f0000d13000)='/dev/input/mice\x00', 0x0, 0x482300) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000102000-0x4)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003dc000-0x6)='wchan\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f000080c000)={0x0, 0x7fffffff, 0x0}, &(0x7f0000a19000)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000b89000-0xb8)={r1, 0xb0, "c086f3c5ef7c42c7baacdbb73d1c5561ddd6e788e33380cfee9d478b4737dcca5c0c3737eb51c068bb6ffbc10c9c53348fed038b06392e70184c18c6a0235178f13610235d23e28a486bdaf1062045d86f8c2bc05cc6d9f0735b9d1c216dc483f78650b489c9cdacfee73c7f5a8b2fff4fa143fac3ccc94f1df13ff6e2012c84f6b9933f52b4b5f86c612cb69988c2bfcfde95cfd17f47b97c3481fc924ffba1d84d687855d1393bba542b3cf1c17332"}, &(0x7f0000478000-0x4)=0xb8) sendfile(r0, r0, &(0x7f000096b000-0x8)=0x0, 0x7c) 2017/12/27 08:42:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000db7000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5417, &(0x7f0000ae5000)=0x7ed3) r1 = syz_open_dev$evdev(&(0x7f000017f000)='/dev/input/event#\x00', 0x0, 0x70800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000903000-0xa)='/dev/cuse\x00', 0x240000, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000bae000-0x1)=0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f000070f000-0x67)=""/103) 2017/12/27 08:42:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa, 0x0, 0x0}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000066e000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x0, 0x0}) r2 = syz_open_dev$sndtimer(&(0x7f0000f86000-0xf)='/dev/snd/timer\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0, 0x0}) readv(r2, &(0x7f000042c000-0x8)=[{&(0x7f0000664000+0x14c)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)={0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) 2017/12/27 08:42:22 executing program 6 (fault-call:5 fault-nth:10): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") 2017/12/27 08:42:22 executing program 4 (fault-call:9 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:22 executing program 5: r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) [ 458.851845] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/27 08:42:22 executing program 5: r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4)=0x0, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f000057f000-0x2)=0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000813000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000834000-0x4)=0x4f1, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00009bb000)={0x0, @in6={{0xa, 0x2, 0x80, @loopback={0x0, 0x1}, 0xcb7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0xff, 0x8, 0x99347d5, 0x3, 0xfff, 0x8000, 0x7, 0x20, 0x2, 0x43e, 0x8000, 0x1, 0x0, 0x5]}, &(0x7f0000844000)=0x108) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f000071d000-0x8)=@assoc_value={r2, 0x415}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000b4b000-0xa0)={0x0, @in6={{0xa, 0x0, 0x100000001, @loopback={0x0, 0x1}, 0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x4, 0xc, 0x8, 0x10000}, &(0x7f00006d9000)=0xa0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000a5e000-0x8)=0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f000000b000-0x8)=@assoc_value={r3, 0x0}, &(0x7f0000ed8000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000eed000)=0x0, &(0x7f00004e4000)=0x4) 2017/12/27 08:42:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:22 executing program 4 (fault-call:9 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 458.979830] binder: 27407 RLIMIT_NICE not set [ 458.984823] binder: 27410 RLIMIT_NICE not set [ 458.992642] FAULT_INJECTION: forcing a failure. [ 458.992642] name failslab, interval 1, probability 0, space 0, times 0 [ 458.992675] CPU: 1 PID: 27413 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 2017/12/27 08:42:22 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000054000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe9000)=nil, 0xfe9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x2, 0x2, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, &(0x7f0000fe9000)=0x0, 0x0) 2017/12/27 08:42:22 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000fb6000)='/proc/self/net/pfkey\x00', 0x8600, 0x0) signalfd4(r0, &(0x7f0000869000)={0x4bdd}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000508000)='/dev/input/event#\x00', 0x40, 0x12080) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00001ce000-0x67)=""/103) 2017/12/27 08:42:22 executing program 6 (fault-call:5 fault-nth:11): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 458.992682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.992687] Call Trace: [ 458.992708] dump_stack+0x194/0x257 [ 458.992745] ? arch_local_irq_restore+0x53/0x53 [ 458.992829] should_fail+0x8c0/0xa40 [ 458.992866] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.992955] ? __lock_is_held+0xb6/0x140 [ 458.992993] ? find_held_lock+0x35/0x1d0 [ 458.993043] ? __lock_is_held+0xb6/0x140 [ 458.993138] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 458.993158] ? rcu_note_context_switch+0x710/0x710 [ 458.993177] ? rcu_note_context_switch+0x710/0x710 [ 458.993244] should_failslab+0xec/0x120 [ 458.993272] __kmalloc+0x63/0x760 [ 458.993306] ? lockdep_init_map+0x9/0x10 [ 458.993321] ? debug_mutex_init+0x2d/0x60 [ 458.993334] ? __list_lru_init+0xcf/0x750 [ 458.993380] __list_lru_init+0xcf/0x750 [ 458.993429] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 458.993458] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 458.993485] ? __lockdep_init_map+0xe4/0x650 [ 458.993519] ? lockdep_init_map+0x9/0x10 [ 458.993558] sget_userns+0x695/0xe20 [ 458.993569] ? kernfs_sop_show_path+0x190/0x190 [ 458.993617] ? kernfs_sop_show_options+0x180/0x180 [ 458.993646] ? destroy_unused_super.part.6+0xd0/0xd0 [ 458.993725] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 458.993747] ? rcu_pm_notify+0xc0/0xc0 [ 458.993829] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.993848] ? kmem_cache_alloc_trace+0x456/0x750 [ 458.993863] ? lock_downgrade+0x980/0x980 [ 458.993936] kernfs_mount_ns+0x13d/0x8b0 [ 458.993974] ? kernfs_super_ns+0x70/0x70 [ 458.994054] sysfs_mount+0xc2/0x1c0 [ 458.994077] ? sysfs_kill_sb+0x40/0x40 [ 458.994128] ? security_sb_copy_data+0x81/0xb0 [ 458.994166] mount_fs+0x66/0x2d0 [ 458.994210] vfs_kern_mount.part.26+0xc6/0x4a0 [ 458.994243] ? may_umount+0xa0/0xa0 [ 458.994259] ? _raw_read_unlock+0x22/0x30 [ 458.994283] ? __get_fs_type+0x8a/0xc0 [ 458.994336] do_mount+0xea4/0x2bb0 [ 458.994395] ? copy_mount_string+0x40/0x40 [ 458.994414] ? rcu_pm_notify+0xc0/0xc0 [ 458.994481] ? copy_mount_options+0x5f/0x2e0 [ 458.994496] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.994514] ? kmem_cache_alloc_trace+0x456/0x750 [ 458.994531] ? kasan_check_write+0x14/0x20 [ 458.994545] ? _copy_from_user+0x99/0x110 [ 458.994600] ? copy_mount_options+0x1f4/0x2e0 [ 458.994634] compat_SyS_mount+0xd0/0x1070 [ 458.994664] ? show_fd_locks+0x2c0/0x2c0 [ 458.994686] do_fast_syscall_32+0x3ee/0xf9d [ 458.994737] ? do_int80_syscall_32+0x9d0/0x9d0 [ 458.994762] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 458.994800] ? syscall_return_slowpath+0x2ad/0x550 [ 458.994834] ? sysret32_from_system_call+0x5/0x3b [ 458.994876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.994927] entry_SYSENTER_compat+0x54/0x63 [ 458.994937] RIP: 0023:0xf7fadc79 [ 458.994943] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 458.994955] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 458.994961] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 458.994967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.994973] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 458.994979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.039110] binder: 27410 RLIMIT_NICE not set [ 459.041463] binder: 27401:27419 BC_FREE_BUFFER u000000002000c000 matched unreturned buffer [ 459.042283] FAULT_INJECTION: forcing a failure. [ 459.042283] name failslab, interval 1, probability 0, space 0, times 0 [ 459.042294] CPU: 0 PID: 27410 Comm: syz-executor4 Not tainted 4.15.0-rc5+ #148 [ 459.042298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.042301] Call Trace: [ 459.042316] dump_stack+0x194/0x257 [ 459.042336] ? arch_local_irq_restore+0x53/0x53 [ 459.042371] should_fail+0x8c0/0xa40 [ 459.042390] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.042408] ? check_noncircular+0x20/0x20 [ 459.042450] ? find_held_lock+0x35/0x1d0 [ 459.042513] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.042521] ? lock_downgrade+0x980/0x980 [ 459.042538] ? rcu_note_context_switch+0x710/0x710 [ 459.042571] should_failslab+0xec/0x120 [ 459.042591] kmem_cache_alloc_trace+0x4b/0x750 [ 459.042633] binder_transaction+0x13ee/0x8250 [ 459.042659] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.042669] ? check_noncircular+0x20/0x20 [ 459.042683] ? find_held_lock+0x35/0x1d0 [ 459.042731] ? binder_transaction_buffer_release+0xc50/0xc50 [ 459.042741] ? print_irqtrace_events+0x270/0x270 [ 459.042757] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.042807] ? __lock_acquire+0x664/0x3e00 [ 459.042830] ? __lock_acquire+0x664/0x3e00 [ 459.042867] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.042891] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.042912] ? lock_acquire+0x1d5/0x580 [ 459.042935] ? __lock_acquire+0x664/0x3e00 [ 459.042947] ? find_held_lock+0x35/0x1d0 [ 459.042969] ? perf_trace_lock+0xd6/0x900 [ 459.042979] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.043002] ? trace_event_raw_event_lock+0x340/0x340 [ 459.043015] ? perf_trace_lock+0x900/0x900 [ 459.043028] ? check_noncircular+0x20/0x20 [ 459.043039] ? perf_trace_lock+0x900/0x900 [ 459.043053] ? check_noncircular+0x20/0x20 [ 459.043066] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 459.043092] ? __unlock_page_memcg+0x72/0x100 [ 459.043105] ? unlock_page_memcg+0x2c/0x40 [ 459.043128] ? find_held_lock+0x35/0x1d0 [ 459.043156] ? __might_fault+0x110/0x1d0 [ 459.043170] ? lock_downgrade+0x980/0x980 [ 459.043189] ? lock_release+0xa40/0xa40 [ 459.043209] ? lock_release+0xa40/0xa40 [ 459.043232] ? __might_sleep+0x95/0x190 [ 459.043258] ? kasan_check_write+0x14/0x20 [ 459.043281] binder_thread_write+0xb50/0x3820 [ 459.043327] ? binder_transaction+0x8250/0x8250 [ 459.043335] ? __lock_acquire+0x664/0x3e00 [ 459.043348] ? print_irqtrace_events+0x270/0x270 [ 459.043361] ? wake_up_page_bit+0x530/0x530 [ 459.043387] ? perf_trace_lock+0xd6/0x900 [ 459.043397] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.043406] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.043426] ? trace_event_raw_event_lock+0x340/0x340 [ 459.043439] ? perf_trace_lock+0x900/0x900 [ 459.043453] ? check_noncircular+0x20/0x20 [ 459.043484] ? __lock_acquire+0x664/0x3e00 [ 459.043499] ? perf_trace_lock+0xd6/0x900 [ 459.043509] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.043516] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.043524] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.043552] ? find_held_lock+0x35/0x1d0 [ 459.043582] ? __might_fault+0x110/0x1d0 [ 459.043596] ? lock_downgrade+0x980/0x980 [ 459.043617] ? lock_release+0xa40/0xa40 [ 459.043683] ? kasan_check_write+0x14/0x20 [ 459.043709] binder_ioctl_write_read.isra.41+0x261/0xcb0 [ 459.043737] ? binder_thread_write+0x3820/0x3820 [ 459.043751] ? find_held_lock+0x35/0x1d0 [ 459.043786] ? _raw_spin_unlock+0x22/0x30 [ 459.043798] ? _binder_inner_proc_unlock+0x2c/0x50 [ 459.043812] ? binder_get_thread+0x320/0x870 [ 459.043833] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 459.043859] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.043893] ? __might_sleep+0x95/0x190 [ 459.043910] binder_ioctl+0xb72/0x1417 [ 459.043934] ? binder_ioctl_write_read.isra.41+0xcb0/0xcb0 [ 459.043953] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.043971] ? rcu_note_context_switch+0x710/0x710 [ 459.043993] ? __might_sleep+0x95/0x190 [ 459.044010] ? _cond_resched+0x14/0x30 [ 459.044034] ? selinux_file_ioctl+0x444/0x690 [ 459.044046] ? __fget_light+0x297/0x380 [ 459.044059] ? selinux_capable+0x40/0x40 [ 459.044091] ? __sb_end_write+0xa0/0xd0 [ 459.044122] ? security_file_ioctl+0x7d/0xb0 [ 459.044131] ? security_file_ioctl+0x89/0xb0 [ 459.044156] compat_SyS_ioctl+0x151/0x2a30 [ 459.044171] ? do_fast_syscall_32+0x156/0xf9d [ 459.044183] ? binder_ioctl_write_read.isra.41+0xcb0/0xcb0 [ 459.044199] ? do_ioctl+0x60/0x60 [ 459.044210] do_fast_syscall_32+0x3ee/0xf9d [ 459.044240] ? do_int80_syscall_32+0x9d0/0x9d0 [ 459.044272] ? syscall_return_slowpath+0x2ad/0x550 [ 459.044286] ? prepare_exit_to_usermode+0x340/0x340 [ 459.044300] ? sysret32_from_system_call+0x5/0x3b [ 459.044326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.044354] entry_SYSENTER_compat+0x54/0x63 [ 459.044362] RIP: 0023:0xf7f88c79 [ 459.044368] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 459.044377] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000c0306201 [ 459.044383] RDX: 0000000020007000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.044388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.044393] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.044397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.044517] binder: 27405:27410 transaction failed 29201/-12, size 0-0 line 2831 [ 459.054400] binder: release 27405:27410 transaction 3422 in, still active [ 459.054409] binder: send failed reply for transaction 3422 to 27405:27424 [ 459.054423] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.054435] binder: undelivered TRANSACTION_COMPLETE [ 459.054443] binder: undelivered TRANSACTION_ERROR: 29189 [ 459.068985] sctp: [Deprecated]: syz-executor1 (pid 27427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.068985] Use struct sctp_sack_info instead [ 459.076602] binder: BINDER_SET_CONTEXT_MGR already set [ 459.076612] binder: 27401:27431 ioctl 40046207 0 returned -16 [ 459.078101] binder: 27419 RLIMIT_NICE not set [ 459.081488] binder_alloc: 27401: binder_alloc_buf, no vma [ 459.081512] binder: 27401:27431 transaction failed 29189/-3, size 0-0 line 2890 [ 459.088638] binder: 27436 RLIMIT_NICE not set [ 459.089138] FAULT_INJECTION: forcing a failure. [ 459.089138] name failslab, interval 1, probability 0, space 0, times 0 [ 459.089149] CPU: 1 PID: 27435 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 459.089157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.089162] Call Trace: [ 459.089181] dump_stack+0x194/0x257 [ 459.089211] ? arch_local_irq_restore+0x53/0x53 [ 459.089286] should_fail+0x8c0/0xa40 [ 459.089318] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.089362] ? check_noncircular+0x20/0x20 [ 459.089378] ? lock_downgrade+0x980/0x980 [ 459.089390] ? do_fast_syscall_32+0x3ee/0xf9d [ 459.089413] ? __lock_is_held+0xb6/0x140 [ 459.089446] ? find_held_lock+0x35/0x1d0 [ 459.089491] ? __lock_is_held+0xb6/0x140 [ 459.089573] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.089591] ? rcu_note_context_switch+0x710/0x710 [ 459.089608] ? rcu_note_context_switch+0x710/0x710 [ 459.089670] should_failslab+0xec/0x120 [ 459.089692] __kmalloc+0x63/0x760 [ 459.089721] ? _find_next_bit+0xee/0x120 [ 459.089731] ? __kmalloc_node+0x19/0x70 [ 459.089752] ? __list_lru_init+0xcf/0x750 [ 459.089800] __list_lru_init+0xcf/0x750 [ 459.089846] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 459.089875] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 459.089939] ? lockdep_init_map+0x9/0x10 [ 459.089974] sget_userns+0x6b5/0xe20 [ 459.089985] ? kernfs_sop_show_path+0x190/0x190 [ 459.090029] ? kernfs_sop_show_options+0x180/0x180 [ 459.090057] ? destroy_unused_super.part.6+0xd0/0xd0 [ 459.090138] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.090162] ? rcu_pm_notify+0xc0/0xc0 [ 459.090231] ? rcu_read_lock_sched_held+0x108/0x120 [ 459.090250] ? kmem_cache_alloc_trace+0x456/0x750 [ 459.090294] ? lock_downgrade+0x980/0x980 [ 459.090355] kernfs_mount_ns+0x13d/0x8b0 [ 459.090387] ? kernfs_super_ns+0x70/0x70 [ 459.090451] sysfs_mount+0xc2/0x1c0 [ 459.090470] ? sysfs_kill_sb+0x40/0x40 [ 459.090513] ? security_sb_copy_data+0x81/0xb0 [ 459.090545] mount_fs+0x66/0x2d0 [ 459.090581] vfs_kern_mount.part.26+0xc6/0x4a0 [ 459.090608] ? may_umount+0xa0/0xa0 [ 459.090623] ? _raw_read_unlock+0x22/0x30 [ 459.090643] ? __get_fs_type+0x8a/0xc0 [ 459.090689] do_mount+0xea4/0x2bb0 [ 459.090739] ? copy_mount_string+0x40/0x40 [ 459.090755] ? rcu_pm_notify+0xc0/0xc0 [ 459.090813] ? copy_mount_options+0x5f/0x2e0 [ 459.090827] ? rcu_read_lock_sched_held+0x108/0x120 [ 459.090845] ? kmem_cache_alloc_trace+0x456/0x750 [ 459.090863] ? kasan_check_write+0x14/0x20 [ 459.090875] ? _copy_from_user+0x99/0x110 [ 459.090933] ? copy_mount_options+0x1f4/0x2e0 [ 459.090978] compat_SyS_mount+0xd0/0x1070 [ 459.091013] ? show_fd_locks+0x2c0/0x2c0 [ 459.091037] do_fast_syscall_32+0x3ee/0xf9d [ 459.091084] ? do_int80_syscall_32+0x9d0/0x9d0 [ 459.091109] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 459.091145] ? syscall_return_slowpath+0x2ad/0x550 [ 459.091178] ? sysret32_from_system_call+0x5/0x3b [ 459.091216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.091269] entry_SYSENTER_compat+0x54/0x63 [ 459.091280] RIP: 0023:0xf7fadc79 [ 459.091287] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 459.091298] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 459.091305] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 459.091311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.091317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.091322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.091626] binder: 27401:27440 BC_FREE_BUFFER u000000002000c000 no match [ 459.091916] sctp: [Deprecated]: syz-executor1 (pid 27427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.091916] Use struct sctp_sack_info instead [ 459.116355] binder: 27436 RLIMIT_NICE not set [ 459.118165] FAULT_INJECTION: forcing a failure. [ 459.118165] name failslab, interval 1, probability 0, space 0, times 0 [ 459.118175] CPU: 0 PID: 27436 Comm: syz-executor4 Not tainted 4.15.0-rc5+ #148 [ 459.118179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.118182] Call Trace: [ 459.118197] dump_stack+0x194/0x257 [ 459.118212] ? arch_local_irq_restore+0x53/0x53 [ 459.118222] ? __save_stack_trace+0x7e/0xd0 [ 459.118250] should_fail+0x8c0/0xa40 [ 459.118265] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.118276] ? kasan_kmalloc+0xad/0xe0 [ 459.118285] ? kmem_cache_alloc_trace+0x136/0x750 [ 459.118297] ? binder_transaction+0x13ee/0x8250 [ 459.118304] ? binder_thread_write+0xb50/0x3820 [ 459.118313] ? binder_ioctl_write_read.isra.41+0x261/0xcb0 [ 459.118320] ? binder_ioctl+0xb72/0x1417 [ 459.118330] ? compat_SyS_ioctl+0x151/0x2a30 [ 459.118340] ? entry_SYSENTER_compat+0x54/0x63 [ 459.118366] ? find_held_lock+0x35/0x1d0 [ 459.118417] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.118424] ? lock_downgrade+0x980/0x980 [ 459.118438] ? rcu_note_context_switch+0x710/0x710 [ 459.118463] should_failslab+0xec/0x120 [ 459.118475] kmem_cache_alloc_trace+0x4b/0x750 [ 459.118485] ? __lockdep_init_map+0xe4/0x650 [ 459.118511] binder_transaction+0x1460/0x8250 [ 459.118531] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.118539] ? check_noncircular+0x20/0x20 [ 459.118550] ? find_held_lock+0x35/0x1d0 [ 459.118592] ? binder_transaction_buffer_release+0xc50/0xc50 [ 459.118599] ? print_irqtrace_events+0x270/0x270 [ 459.118612] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.118647] ? __lock_acquire+0x664/0x3e00 [ 459.118664] ? __lock_acquire+0x664/0x3e00 [ 459.118693] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.118711] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.118727] ? lock_acquire+0x1d5/0x580 [ 459.118744] ? __lock_acquire+0x664/0x3e00 [ 459.118752] ? find_held_lock+0x35/0x1d0 [ 459.118770] ? lock_pin_lock+0x360/0x360 [ 459.118782] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.118807] ? perf_trace_lock+0x900/0x900 [ 459.118818] ? check_noncircular+0x20/0x20 [ 459.118828] ? perf_trace_lock+0x900/0x900 [ 459.118839] ? check_noncircular+0x20/0x20 [ 459.118850] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 459.118871] ? __unlock_page_memcg+0x72/0x100 [ 459.118880] ? unlock_page_memcg+0x2c/0x40 [ 459.118899] ? find_held_lock+0x35/0x1d0 [ 459.118923] ? __might_fault+0x110/0x1d0 [ 459.118934] ? lock_downgrade+0x980/0x980 [ 459.118949] ? lock_release+0xa40/0xa40 [ 459.118965] ? lock_release+0xa40/0xa40 [ 459.118985] ? __might_sleep+0x95/0x190 [ 459.119007] ? kasan_check_write+0x14/0x20 [ 459.119026] binder_thread_write+0xb50/0x3820 [ 459.119061] ? binder_transaction+0x8250/0x8250 [ 459.119070] ? __lock_acquire+0x664/0x3e00 [ 459.119081] ? print_irqtrace_events+0x270/0x270 [ 459.119093] ? wake_up_page_bit+0x530/0x530 [ 459.119118] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.119127] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.119139] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.119154] ? perf_trace_lock+0x900/0x900 [ 459.119165] ? check_noncircular+0x20/0x20 [ 459.119188] ? __lock_acquire+0x664/0x3e00 [ 459.119204] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.119212] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.119219] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 459.119229] ? perf_trace_lock_acquire+0xe3/0x980 [ 459.119246] ? find_held_lock+0x35/0x1d0 [ 459.119268] ? __might_fault+0x110/0x1d0 [ 459.119280] ? lock_downgrade+0x980/0x980 [ 459.119296] ? lock_release+0xa40/0xa40 [ 459.119344] ? kasan_check_write+0x14/0x20 [ 459.119364] binder_ioctl_write_read.isra.41+0x261/0xcb0 [ 459.119384] ? binder_thread_write+0x3820/0x3820 [ 459.119395] ? find_held_lock+0x35/0x1d0 [ 459.119415] ? _raw_spin_unlock+0x22/0x30 [ 459.119425] ? _binder_inner_proc_unlock+0x2c/0x50 [ 459.119437] ? binder_get_thread+0x320/0x870 [ 459.119453] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 459.119472] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.119500] ? __might_sleep+0x95/0x190 [ 459.119517] binder_ioctl+0xb72/0x1417 [ 459.119539] ? binder_ioctl_write_read.isra.41+0xcb0/0xcb0 [ 459.119558] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 459.119573] ? rcu_note_context_switch+0x710/0x710 [ 459.119592] ? __might_sleep+0x95/0x190 [ 459.119607] ? _cond_resched+0x14/0x30 [ 459.119626] ? selinux_file_ioctl+0x444/0x690 [ 459.119635] ? __fget_light+0x297/0x380 [ 459.119648] ? selinux_capable+0x40/0x40 [ 459.119674] ? __sb_end_write+0xa0/0xd0 [ 459.119698] ? security_file_ioctl+0x7d/0xb0 [ 459.119706] ? security_file_ioctl+0x89/0xb0 [ 459.119723] compat_SyS_ioctl+0x151/0x2a30 [ 459.119734] ? do_fast_syscall_32+0x156/0xf9d [ 459.119743] ? binder_ioctl_write_read.isra.41+0xcb0/0xcb0 [ 459.119755] ? do_ioctl+0x60/0x60 [ 459.119771] do_fast_syscall_32+0x3ee/0xf9d [ 459.119793] ? do_int80_syscall_32+0x9d0/0x9d0 [ 459.119818] ? syscall_return_slowpath+0x2ad/0x550 [ 459.119828] ? prepare_exit_to_usermode+0x340/0x340 [ 459.119840] ? sysret32_from_system_call+0x5/0x3b [ 459.119860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.119882] entry_SYSENTER_compat+0x54/0x63 [ 459.119889] RIP: 0023:0xf7f88c79 [ 459.119893] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 459.119901] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000c0306201 [ 459.119906] RDX: 0000000020007000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.119910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.119915] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.119919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.120029] binder: 27429:27436 transaction failed 29201/-12, size 0-0 line 2841 2017/12/27 08:42:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009d6000)='/dev/cuse\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4802) 2017/12/27 08:42:24 executing program 3: r0 = open(&(0x7f00000c1000-0x8)='./file0\x00', 0x2200, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x2, 0x8, 0x7e0de915, 0xfffffffffffffffb, 0x5, 0x401, 0x11, 0x0]}, &(0x7f0000bfe000-0x4)=0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$inet_opts(r1, 0x0, 0x800000000004, &(0x7f0000b5b000-0xd)="440d9dff005e00002302890000", 0xd) 2017/12/27 08:42:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000a, 0x3, 0xff) sendto$unix(r0, &(0x7f00007e0000)="5a1b75d05c05bf83cf4ce1c3dee505e7d415811d621c915207e21a6fda94b86e22b4964773be9440", 0x28, 0x0, &(0x7f0000c0a000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2017/12/27 08:42:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = dup3(r0, r0, 0x80000) r2 = getpgrp(0x0) sched_getattr(r2, &(0x7f0000388000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) r3 = getpid() rt_tgsigqueueinfo(r2, r3, 0x17, &(0x7f0000b53000-0x10)={0x3d, 0xff, 0x5, 0x6}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000695000-0x8)={0x0, 0x0}, &(0x7f0000e73000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00008d0000)={0x0, 0x8, 0xad03, 0x6, r4}, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00008dc000-0x8)=0x0, &(0x7f0000f6d000-0x4)=0x8) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000bf4000)=0x1, 0x4) 2017/12/27 08:42:24 executing program 4 (fault-call:9 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000390000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000010000-0x30)={0x0, 0x0, &(0x7f000000f000)=[], 0x1, 0x0, &(0x7f000000f000-0xcf)='b'}) r2 = creat(&(0x7f0000857000)='./file0\x00', 0x80) ioctl$TCSETS(r2, 0x5402, &(0x7f00003eb000)={0x4, 0xfa97, 0x1400000000, 0x5, 0x3, 0x1000, 0x75, 0x5, 0x0, 0x8, 0x20, 0x800}) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000012000-0x63)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000074f000-0x30)={0xc, 0x0, &(0x7f0000ae5000-0x80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000d39000-0x36)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/27 08:42:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000f1f000)='!@\x00', 0x1) sendmmsg(r0, &(0x7f0000a4c000)=[{{&(0x7f0000f89000)=@llc={0x1a, 0x19, 0x5, 0x0, 0x8, 0xdc59, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10, &(0x7f00007f6000)=[{&(0x7f0000ca9000)="392a658636c7406178ae6a212039681bf5fa71dffb5615c9cd68abf3d3467dcdfec56cc8f6d7da06eee20b663e9878f7bf247514ee6bf701f7381e2d13a47acfc4e2b7bf4bbf2da5a948b3fced2b508e2cef", 0x52}, {&(0x7f0000a7e000-0x99)="61bc9fdbc78820370e0fc83d23a18be167ab6b24ad530444af79f908a6bf83aaf4f8fa0eaf2ba166da1cf822202c5b44d11f98a5b9a209d8dca5c3fc29c3089c946f394643b8ab3930ca6cfede6a730c233680b4fba1d308ea512d81bbd18a6641850bf0bd2c04e55fc9d4ab4ecf187e6c24d9f18da4c1c230f2977191e3fab30b6781d7cce622e76abb6f188ee678a3a09503eb302ba64c5a", 0x99}, {&(0x7f0000b42000-0x1000)="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", 0x1000}, {&(0x7f0000c00000)="bfbe8ebecc1f5868ef6c4c0d0ea764a07bd72a65b167ba7f59cfcb8a2eb8d38f61003006e2461c93ade8dd3df21374e8685dfcf05034", 0x36}], 0x4, 0x0, 0x0, 0x4000000}, 0x7c}], 0x1, 0x804) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000aa1000)=[@in6={0xa, 0x3, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}], 0x1c) connect$netlink(r1, &(0x7f0000c5c000)={0x0, 0x0, 0x1ff, 0x5}, 0xc) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00007c0000)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000e71000-0x14)={{0x0, 0xffffffff, 0x401, 0x8000, 0x9, 0x1000}, 0x3f, 0x4, 0x6}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f000070f000-0x67)=""/103) prctl$setname(0xf, &(0x7f0000772000-0xd)='::%)-*&^em1)\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00002a6000)={0xe4, 0x0, &(0x7f00001fb000)=[@increfs={0x40046304, 0x0}, @release={0x40046306, 0x0}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x8, &(0x7f000010e000-0x28)=[@ptr={0x70742a85, 0x0, &(0x7f000036f000)=0x0, 0x1, 0x0, 0x1a}], &(0x7f0000f13000)=[0x38]}, 0x1}}, @transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x38, &(0x7f0000c35000-0x48)=[@ptr={0x70742a85, 0x0, &(0x7f0000df5000)=0x0, 0x1, 0x1, 0x11}, @fda={0x66646185, 0x1, 0x0, 0x1f}], &(0x7f0000aca000-0x38)=[0x30, 0x38, 0x78, 0x38, 0x0, 0x18, 0x18]}}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x28, 0x10, &(0x7f0000fcd000-0x28)=[@ptr={0x70742a85, 0x0, &(0x7f0000bc6000)=0x0, 0x1, 0x1, 0x26}], &(0x7f000012e000)=[0x30, 0x0]}}], 0xd0, 0x0, &(0x7f0000661000)="298607163c39c2448e3efa9c889a1005b8f97e9bded93f4cb2b80bac1117d9842d4ea7747c8f85f21025cc44d6fdd26b504fabb7a555eff262b43bdf810f771f19b747075b9d03880d4493f44e4e87db63e1be418985e053f30c44767f948b49a42b4919e9ad10cb673cebd15dec38b4a939fd4719d69d04dc21eb9fa28f337a6f001d03889a4ccaa000b3036d3712fa6dbdb988c960566d70fb3bb0f2b61deb4c57e0580252051b62f113c0fbcd863153a75e20c57980cc16547c46348ff0bedaa20172f0537767fc1f8c82786061ba"}) 2017/12/27 08:42:24 executing program 6 (fault-call:5 fault-nth:12): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000267000)='./control\x00', &(0x7f00007d1000)='sysfs\x00', 0x0, &(0x7f000032e000)="") [ 459.125875] binder: release 27429:27436 transaction 3428 in, still active [ 459.125882] binder: send failed reply for transaction 3428 to 27429:27444 [ 459.125894] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.125903] binder: undelivered TRANSACTION_COMPLETE [ 459.125909] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.950509] binder: 27407 RLIMIT_NICE not set [ 460.962422] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.971212] binder: release 27401:27419 transaction 3425 out, still active [ 460.978324] binder: undelivered TRANSACTION_COMPLETE [ 460.995741] binder: BINDER_SET_CONTEXT_MGR already set [ 460.995752] binder: 27451:27460 ioctl 40046207 0 returned -16 [ 460.995835] binder: 27460 RLIMIT_NICE not set [ 460.997050] binder: 27455 RLIMIT_NICE not set [ 461.002162] FAULT_INJECTION: forcing a failure. [ 461.002162] name failslab, interval 1, probability 0, space 0, times 0 [ 461.002176] CPU: 1 PID: 27458 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 461.002185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.002190] Call Trace: [ 461.002212] dump_stack+0x194/0x257 [ 461.002248] ? arch_local_irq_restore+0x53/0x53 [ 461.002329] should_fail+0x8c0/0xa40 [ 461.002363] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 461.002409] ? perf_trace_lock+0x4d6/0x900 [ 461.002484] ? find_held_lock+0x35/0x1d0 [ 461.002535] ? __lock_is_held+0xb6/0x140 [ 461.002633] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 461.002667] ? rcu_note_context_switch+0x710/0x710 [ 461.002686] ? find_held_lock+0x35/0x1d0 [ 461.002739] should_failslab+0xec/0x120 [ 461.002763] __kmalloc+0x63/0x760 [ 461.002777] ? lock_downgrade+0x980/0x980 [ 461.002801] ? _raw_spin_unlock+0x22/0x30 [ 461.002820] ? register_shrinker+0x10e/0x2d0 [ 461.002831] ? trace_event_raw_event_module_request+0x320/0x320 [ 461.002875] register_shrinker+0x10e/0x2d0 [ 461.002896] ? prepare_kswapd_sleep+0x1f0/0x1f0 [ 461.002921] ? memcpy+0x45/0x50 [ 461.002976] sget_userns+0xbc3/0xe20 [ 461.002987] ? kernfs_sop_show_path+0x190/0x190 [ 461.003037] ? kernfs_sop_show_options+0x180/0x180 [ 461.003067] ? destroy_unused_super.part.6+0xd0/0xd0 [ 461.003152] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 461.003177] ? rcu_pm_notify+0xc0/0xc0 [ 461.003261] ? rcu_read_lock_sched_held+0x108/0x120 [ 461.003280] ? kmem_cache_alloc_trace+0x456/0x750 [ 461.003295] ? lock_downgrade+0x980/0x980 [ 461.003372] kernfs_mount_ns+0x13d/0x8b0 [ 461.003410] ? kernfs_super_ns+0x70/0x70 [ 461.003484] sysfs_mount+0xc2/0x1c0 [ 461.003504] ? sysfs_kill_sb+0x40/0x40 [ 461.003553] ? security_sb_copy_data+0x81/0xb0 [ 461.003592] mount_fs+0x66/0x2d0 [ 461.003635] vfs_kern_mount.part.26+0xc6/0x4a0 [ 461.003667] ? may_umount+0xa0/0xa0 [ 461.003681] ? _raw_read_unlock+0x22/0x30 [ 461.003701] ? __get_fs_type+0x8a/0xc0 [ 461.003752] do_mount+0xea4/0x2bb0 [ 461.003814] ? copy_mount_string+0x40/0x40 [ 461.003834] ? rcu_pm_notify+0xc0/0xc0 [ 461.003907] ? copy_mount_options+0x5f/0x2e0 [ 461.003920] ? rcu_read_lock_sched_held+0x108/0x120 [ 461.003939] ? kmem_cache_alloc_trace+0x456/0x750 [ 461.003956] ? kasan_check_write+0x14/0x20 [ 461.003969] ? _copy_from_user+0x99/0x110 [ 461.004028] ? copy_mount_options+0x1f4/0x2e0 [ 461.004072] compat_SyS_mount+0xd0/0x1070 [ 461.004107] ? show_fd_locks+0x2c0/0x2c0 [ 461.004138] do_fast_syscall_32+0x3ee/0xf9d [ 461.004194] ? do_int80_syscall_32+0x9d0/0x9d0 [ 461.004222] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 461.004264] ? syscall_return_slowpath+0x2ad/0x550 [ 461.004305] ? sysret32_from_system_call+0x5/0x3b [ 461.004350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.004407] entry_SYSENTER_compat+0x54/0x63 [ 461.004418] RIP: 0023:0xf7fadc79 [ 461.004425] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 461.004438] RAX: ffffffffffffffda RBX: 000000002000a000 RCX: 0000000020267000 [ 461.004446] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 461.004452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.004459] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 461.004466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.005829] kasan: CONFIG_KASAN_INLINE enabled [ 461.005849] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 461.005861] general protection fault: 0000 [#1] SMP KASAN [ 461.005869] Dumping ftrace buffer: [ 461.005876] (ftrace buffer empty) [ 461.005881] Modules linked in: [ 461.005899] CPU: 1 PID: 27458 Comm: syz-executor6 Not tainted 4.15.0-rc5+ #148 [ 461.005905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.005920] RIP: 0010:__list_del_entry_valid+0x7e/0x150 [ 461.005926] RSP: 0018:ffff8801d11e7a88 EFLAGS: 00010246 [ 461.005937] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 461.005944] RDX: 0000000000000000 RSI: ffff8801d50daf58 RDI: ffff8801d50daf60 [ 461.005950] RBP: ffff8801d11e7aa0 R08: 1ffff1003a23ce85 R09: 0000000000000004 [ 461.005956] R10: ffff8801d11e78f0 R11: 0000000000000000 R12: 0000000000000000 [ 461.005963] R13: dffffc0000000000 R14: 1ffff1003a23cf75 R15: ffff8801d50daf58 [ 461.005971] FS: 0000000000000000(0000) GS:ffff8801db500000(0063) knlGS:00000000f77a9b40 [ 461.005979] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 461.005985] CR2: 00000000f7737db0 CR3: 00000001bf323005 CR4: 00000000001606e0 [ 461.005994] Call Trace: [ 461.006019] unregister_shrinker+0x79/0x300 [ 461.006046] ? perf_trace_mm_vmscan_writepage+0x790/0x790 [ 461.006054] ? down_write+0x87/0x120 [ 461.006064] ? deactivate_super+0x139/0x1b0 [ 461.006078] ? down_read+0x150/0x150 [ 461.006132] deactivate_locked_super+0x64/0xd0 [ 461.006152] deactivate_super+0x141/0x1b0 [ 461.006171] ? __sb_start_write+0x2a0/0x2a0 [ 461.006233] cleanup_mnt+0xb2/0x150 [ 461.006250] __cleanup_mnt+0x16/0x20 [ 461.006269] task_work_run+0x199/0x270 [ 461.006301] ? task_work_cancel+0x210/0x210 [ 461.006325] ? exit_to_usermode_loop+0x8c/0x310 [ 461.006371] exit_to_usermode_loop+0x296/0x310 [ 461.006398] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 461.006423] ? compat_SyS_mount+0xfa/0x1070 [ 461.006466] do_fast_syscall_32+0xbfd/0xf9d [ 461.006511] ? do_int80_syscall_32+0x9d0/0x9d0 [ 461.006535] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 461.006567] ? syscall_return_slowpath+0x2ad/0x550 [ 461.006599] ? sysret32_from_system_call+0x5/0x3b [ 461.006636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.006678] entry_SYSENTER_compat+0x54/0x63 [ 461.006686] RIP: 0023:0xf7fadc79 [ 461.006692] RSP: 002b:00000000f77a908c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 461.006704] RAX: ffffffffffffffff RBX: 000000002000a000 RCX: 0000000020267000 [ 461.006710] RDX: 00000000207d1000 RSI: 0000000000000000 RDI: 000000002032e000 [ 461.006715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.006721] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 461.006727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.006809] Code: 00 00 00 00 ad de 49 39 c4 74 66 48 b8 00 02 00 00 00 00 ad de 48 89 da 48 39 c3 74 65 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 75 7b 48 8b 13 48 39 f2 75 57 49 8d 7c 24 08 48 b8 [ 461.007078] RIP: __list_del_entry_valid+0x7e/0x150 RSP: ffff8801d11e7a88 [ 461.007158] ---[ end trace 327f23567e3a5d13 ]--- [ 461.007165] Kernel panic - not syncing: Fatal exception [ 461.007625] Dumping ftrace buffer: [ 461.007632] (ftrace buffer empty) [ 461.007636] Kernel Offset: disabled [ 461.659063] Rebooting in 86400 seconds..